Search the Community

Showing results for tags 'myway'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Malware Removal for Windows
    • Malware Removal for Mac
    • Malware Removal for Mobile
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3
    • Malwarebytes for Mac
    • Malwarebytes for Android
    • False Positives
    • Translator Lounge
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
  • General
    • General Chat
    • Forums Announcements & Feedback

Found 47 results

  1. What is DictionaryBoss? The Malwarebytes research team has determined that DictionaryBoss is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. DictionaryBoss is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by DictionaryBoss? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did DictionaryBoss get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove DictionaryBoss? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of DictionaryBoss? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the DictionaryBoss entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the DictionaryBoss hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/dictionaryboss/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile},default\Extensions\_v4Members_@www.dictionaryboss.com.xpi [2018-01-08] CHR Extension: (DictionaryBoss) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm [2018-01-08] C:\Users\{username}\AppData\Local\DictionaryBossTooltab DictionaryBoss Internet Explorer Homepage and New Tab (HKCU\...\DictionaryBossTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\DictionaryBossTooltab Adds the file TooltabExtension.dll"="8/2/2017 11:29 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0 Adds the file dynamicNewTab.html"="11/9/2017 12:33 PM, 932 bytes, A Adds the file manifest.json"="1/8/2018 8:43 AM, 2450 bytes, A Adds the file product.html"="11/9/2017 12:33 PM, 932 bytes, A Adds the file stubby.html"="11/9/2017 12:33 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\_metadata Adds the file computed_hashes.json"="1/8/2018 8:43 AM, 3620 bytes, A Adds the file verified_contents.json"="11/9/2017 12:33 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\config Adds the file config.json"="11/9/2017 12:33 PM, 1527 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons Adds the file icon128.png"="1/8/2018 8:43 AM, 12634 bytes, A Adds the file icon16.png"="11/9/2017 12:33 PM, 1763 bytes, A Adds the file icon19disabled.png"="11/9/2017 12:33 PM, 1711 bytes, A Adds the file icon19on.png"="1/8/2018 8:43 AM, 971 bytes, A Adds the file icon48.png"="1/8/2018 8:43 AM, 3614 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js Adds the file ajax.js"="11/9/2017 12:33 PM, 2250 bytes, A Adds the file background.js"="11/9/2017 12:33 PM, 19608 bytes, A Adds the file chrome.js"="11/9/2017 12:33 PM, 180 bytes, A Adds the file content_script.js"="11/9/2017 12:33 PM, 5917 bytes, A Adds the file dlp.js"="11/9/2017 12:33 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/9/2017 12:33 PM, 1836 bytes, A Adds the file extension_detect.js"="11/9/2017 12:33 PM, 4343 bytes, A Adds the file index.js"="11/9/2017 12:33 PM, 82 bytes, A Adds the file logger.js"="11/9/2017 12:33 PM, 575 bytes, A Adds the file pageUtils.js"="11/9/2017 12:33 PM, 2241 bytes, A Adds the file product.js"="11/9/2017 12:33 PM, 4434 bytes, A Adds the file storage.js"="11/9/2017 12:33 PM, 1675 bytes, A Adds the file TabManager.js"="11/9/2017 12:33 PM, 189 bytes, A Adds the file TemplateParser.js"="11/9/2017 12:33 PM, 3080 bytes, A Adds the file ul.js"="11/9/2017 12:33 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/9/2017 12:33 PM, 2521 bytes, A Adds the file urlUtils.js"="11/9/2017 12:33 PM, 5385 bytes, A Adds the file util.js"="11/9/2017 12:33 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/9/2017 12:33 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\libs Adds the file PartnerId.js"="11/9/2017 12:33 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm Adds the file 000003.log"="1/8/2018 8:43 AM, 4689 bytes, A Adds the file CURRENT"="1/8/2018 8:43 AM, 16 bytes, A Adds the file LOCK"="1/8/2018 8:43 AM, 0 bytes, A Adds the file LOG"="1/8/2018 8:44 AM, 412 bytes, A Adds the file LOG.old"="1/8/2018 8:43 AM, 185 bytes, A Adds the file MANIFEST-000001"="1/8/2018 8:43 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile},default\browser-extension-data\_v4Members_@www.dictionaryboss.com Adds the file storage.js"="1/8/2018 8:42 AM, 2312 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile},default\extensions Adds the file _v4Members_@www.dictionaryboss.com.xpi"="1/8/2018 8:41 AM, 57880 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\DictionaryBoss] "Start Page"="REG_SZ", "http://hp.myway.com/dictionaryboss/ttab02/index.html?n={n}&p2=^XQ^yyyyyy^TTAB02^nl&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F%3Fc%3D{ptb}%26ptb%3D" [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "epljggmdileomnkecfgpmcjodnikpdmm"="REG_SZ", "802A700678288DC11CA082CCEED8853DD8879094E88DE2AD305269174522C980" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/dictionaryboss/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\DictionaryBossTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "DictionaryBoss Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\DictionaryBossTooltab\TooltabExtension.dll" U uninstall:DictionaryBoss" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 1/8/18 Scan Time: 8:50 AM Log File: 8d5e5b1a-f448-11e7-85bd-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.3646 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 246355 Threats Detected: 60 Threats Quarantined: 60 Time Elapsed: 5 min, 12 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DictionaryBossTooltab\TooltabExtension.dll, Quarantined, [1408], [356944],1.0.3646 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DictionaryBossTooltab Uninstall Internet Explorer, Delete-on-Reboot, [1408], [356944],1.0.3646 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\DictionaryBoss, Delete-on-Reboot, [1408], [444113],1.0.3646 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\DictionaryBoss|START PAGE, Delete-on-Reboot, [1408], [444113],1.0.3646 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DictionaryBossTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [235], [352442],1.0.3646 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [235], [293497],1.0.3646 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DictionaryBossTooltab, Delete-on-Reboot, [1408], [356944],1.0.3646 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile},default\BROWSER-EXTENSION-DATA\_v4Members_@www.dictionaryboss.com, Delete-on-Reboot, [1408], [468075],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\_metadata, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\config, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\libs, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EPLJGGMDILEOMNKECFGPMCJODNIKPDMM\13.321.12.17724_0, Delete-on-Reboot, [1408], [456842],1.0.3646 File: 44 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DictionaryBossTooltab\TooltabExtension.dll, Delete-on-Reboot, [1408], [356944],1.0.3646 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile},default\EXTENSIONS\_v4Members_@www.dictionaryboss.com.xpi, Delete-on-Reboot, [1408], [457930],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile},default\browser-extension-data\_v4Members_@www.dictionaryboss.com\storage.js, Delete-on-Reboot, [1408], [468075],1.0.3646 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm\000003.log, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm\CURRENT, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm\LOCK, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm\LOG, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm\LOG.old, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\epljggmdileomnkecfgpmcjodnikpdmm\MANIFEST-000001, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EPLJGGMDILEOMNKECFGPMCJODNIKPDMM\13.321.12.17724_0\CONFIG\CONFIG.JSON, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons\icon128.png, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons\icon16.png, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons\icon19disabled.png, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons\icon19on.png, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\icons\icon48.png, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\ajax.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\background.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\chrome.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\content_script.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\dlp.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\dlpHelper.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\extension_detect.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\index.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\logger.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\pageUtils.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\product.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\storage.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\TabManager.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\TemplateParser.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\ul.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\urlFragmentActions.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\urlUtils.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\util.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\js\webtooltabAPI.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\libs\PartnerId.js, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\_metadata\computed_hashes.json, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\_metadata\verified_contents.json, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\dynamicNewTab.html, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\manifest.json, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\product.html, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\epljggmdileomnkecfgpmcjodnikpdmm\13.321.12.17724_0\stubby.html, Delete-on-Reboot, [1408], [456842],1.0.3646 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\DICTIONARYBOSS.{coid}.EXE, Delete-on-Reboot, [235], [365288],1.0.3646 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  2. What is YourTemplateFinder? The Malwarebytes research team has determined that YourTemplateFinder is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. YourTemplateFinder is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by YourTemplateFinder? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did YourTemplateFinder get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove YourTemplateFinder? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of YourTemplateFinder? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the YourTemplateFinder entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the YourTemplateFinder hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/yourtemplatefinder/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_brMembers_@free.yourtemplatefinder.com.xpi [2018-01-03] CHR Extension: (YourTemplateFinder ) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj [2018-01-03] C:\Users\{username}\AppData\Local\YourTemplateFinderTooltab YourTemplateFinder Internet Explorer Homepage and New Tab (HKCU\...\YourTemplateFinderTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0 Adds the file dynamicNewTab.html"="11/7/2017 1:41 PM, 932 bytes, A Adds the file manifest.json"="1/3/2018 12:52 PM, 2510 bytes, A Adds the file product.html"="11/7/2017 1:41 PM, 932 bytes, A Adds the file stubby.html"="11/7/2017 1:41 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\_metadata Adds the file computed_hashes.json"="1/3/2018 12:52 PM, 3620 bytes, A Adds the file verified_contents.json"="11/7/2017 1:41 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\config Adds the file config.json"="11/7/2017 1:41 PM, 1570 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons Adds the file icon128.png"="1/3/2018 12:52 PM, 16873 bytes, A Adds the file icon16.png"="11/7/2017 1:41 PM, 1525 bytes, A Adds the file icon19disabled.png"="11/7/2017 1:41 PM, 1662 bytes, A Adds the file icon19on.png"="1/3/2018 12:52 PM, 659 bytes, A Adds the file icon48.png"="1/3/2018 12:52 PM, 4505 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js Adds the file ajax.js"="11/7/2017 1:41 PM, 2250 bytes, A Adds the file background.js"="11/7/2017 1:41 PM, 19608 bytes, A Adds the file chrome.js"="11/7/2017 1:41 PM, 180 bytes, A Adds the file content_script.js"="11/7/2017 1:41 PM, 5917 bytes, A Adds the file dlp.js"="11/7/2017 1:41 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/7/2017 1:41 PM, 1836 bytes, A Adds the file extension_detect.js"="11/7/2017 1:41 PM, 4343 bytes, A Adds the file index.js"="11/7/2017 1:41 PM, 82 bytes, A Adds the file logger.js"="11/7/2017 1:41 PM, 575 bytes, A Adds the file pageUtils.js"="11/7/2017 1:41 PM, 2241 bytes, A Adds the file product.js"="11/7/2017 1:41 PM, 4434 bytes, A Adds the file storage.js"="11/7/2017 1:41 PM, 1675 bytes, A Adds the file TabManager.js"="11/7/2017 1:41 PM, 189 bytes, A Adds the file TemplateParser.js"="11/7/2017 1:41 PM, 3080 bytes, A Adds the file ul.js"="11/7/2017 1:41 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/7/2017 1:41 PM, 2521 bytes, A Adds the file urlUtils.js"="11/7/2017 1:41 PM, 5385 bytes, A Adds the file util.js"="11/7/2017 1:41 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/7/2017 1:41 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\libs Adds the file PartnerId.js"="11/7/2017 1:41 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj Adds the file 000003.log"="1/3/2018 12:52 PM, 5215 bytes, A Adds the file CURRENT"="1/3/2018 12:52 PM, 16 bytes, A Adds the file LOCK"="1/3/2018 12:52 PM, 0 bytes, A Adds the file LOG"="1/3/2018 12:52 PM, 185 bytes, A Adds the file MANIFEST-000001"="1/3/2018 12:52 PM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\YourTemplateFinderTooltab Adds the file TooltabExtension.dll"="8/4/2017 8:12 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_brMembers_@free.yourtemplatefinder.com Adds the file storage.js"="1/3/2018 12:49 PM, 2602 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _brMembers_@free.yourtemplatefinder.com.xpi"="1/3/2018 12:49 PM, 71681 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "jadhamcfimejpbemfkgoeijaimpciehj"="REG_SZ", "B61DA68C9B2E4EDD65F7C57024C4A6B888EA75857E09458A50792DB890ADC9FE" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/yourtemplatefinder/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\YourTemplateFinderTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "YourTemplateFinder Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\YourTemplateFinderTooltab\TooltabExtension.dll" U uninstall:YourTemplateFinder" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\YourTemplateFinder] "Start Page"="REG_SZ", "http://hp.myway.com/yourtemplatefinder/ttab02/index.html?n={n}&p2=^BNF^mni000^TTAB02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F%3Fc%3D{ptb}%26ptb%3D" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 1/3/18 Scan Time: 12:59 PM Log File: 9c5a339d-f07d-11e7-96c4-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.3614 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 245737 Threats Detected: 59 Threats Quarantined: 59 Time Elapsed: 2 min, 7 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\YourTemplateFinderTooltab\TooltabExtension.dll, Quarantined, [1409], [356944],1.0.3614 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\YourTemplateFinderTooltab Uninstall Internet Explorer, Quarantined, [1409], [356944],1.0.3614 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\YourTemplateFinder, Quarantined, [1409], [444113],1.0.3614 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\YourTemplateFinder|START PAGE, Quarantined, [1409], [444113],1.0.3614 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\YourTemplateFinderTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [236], [352442],1.0.3614 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [236], [293497],1.0.3614 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\YourTemplateFinderTooltab, Quarantined, [1409], [356944],1.0.3614 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_brMembers_@free.yourtemplatefinder.com, Quarantined, [1409], [468075],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\_metadata, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\config, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\libs, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JADHAMCFIMEJPBEMFKGOEIJAIMPCIEHJ, Quarantined, [1409], [456843],1.0.3614 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\YourTemplateFinderTooltab\TooltabExtension.dll, Quarantined, [1409], [356944],1.0.3614 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_brMembers_@free.yourtemplatefinder.com.xpi, Quarantined, [1409], [457930],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_brMembers_@free.yourtemplatefinder.com\storage.js, Quarantined, [1409], [468075],1.0.3614 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj\000003.log, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj\CURRENT, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj\LOCK, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj\LOG, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jadhamcfimejpbemfkgoeijaimpciehj\MANIFEST-000001, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JADHAMCFIMEJPBEMFKGOEIJAIMPCIEHJ\13.321.12.16597_0\MANIFEST.JSON, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\config\config.json, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons\icon128.png, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons\icon16.png, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons\icon19disabled.png, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons\icon19on.png, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\icons\icon48.png, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\ajax.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\background.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\chrome.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\content_script.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\dlp.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\dlpHelper.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\extension_detect.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\index.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\logger.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\pageUtils.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\product.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\storage.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\TabManager.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\TemplateParser.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\ul.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\urlFragmentActions.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\urlUtils.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\util.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\js\webtooltabAPI.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\libs\PartnerId.js, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\_metadata\computed_hashes.json, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\_metadata\verified_contents.json, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\dynamicNewTab.html, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\product.html, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jadhamcfimejpbemfkgoeijaimpciehj\13.321.12.16597_0\stubby.html, Quarantined, [1409], [456843],1.0.3614 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\YOURTEMPLATEFINDER.EXE, Quarantined, [236], [365288],1.0.3614 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  3. What is EverydayLookup? The Malwarebytes research team has determined that EverydayLookup is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. EverydayLookup is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by EverydayLookup? You may see these browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did EverydayLookup get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website after a redirect by an ad-rotator. How do I remove EverydayLookup? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of EverydayLookup? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the EverydayLookup entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the EverydayLookup hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/everydaylookup/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_d9Members_@www.everydaylookup.com.xpi [2017-12-27] CHR Extension: (EverydayLookup) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi [2017-12-27] C:\Users\{username}\AppData\Local\EverydayLookupTooltab EverydayLookup Internet Explorer Homepage and New Tab (HKCU\...\EverydayLookupTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\EverydayLookupTooltab Adds the file TooltabExtension.dll"="8/7/2017 4:57 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0 Adds the file dynamicNewTab.html"="11/10/2017 12:58 PM, 932 bytes, A Adds the file manifest.json"="12/27/2017 9:50 AM, 2438 bytes, A Adds the file product.html"="11/10/2017 12:58 PM, 932 bytes, A Adds the file stubby.html"="11/10/2017 12:58 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\_metadata Adds the file computed_hashes.json"="12/27/2017 9:50 AM, 3620 bytes, A Adds the file verified_contents.json"="11/10/2017 12:58 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\config Adds the file config.json"="11/10/2017 12:58 PM, 1532 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons Adds the file icon128.png"="12/27/2017 9:50 AM, 5638 bytes, A Adds the file icon16.png"="11/10/2017 12:58 PM, 2017 bytes, A Adds the file icon19disabled.png"="11/10/2017 12:58 PM, 1630 bytes, A Adds the file icon19on.png"="12/27/2017 9:50 AM, 678 bytes, A Adds the file icon48.png"="12/27/2017 9:50 AM, 2343 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js Adds the file ajax.js"="11/10/2017 12:58 PM, 2250 bytes, A Adds the file background.js"="11/10/2017 12:58 PM, 19608 bytes, A Adds the file chrome.js"="11/10/2017 12:58 PM, 180 bytes, A Adds the file content_script.js"="11/10/2017 12:58 PM, 5917 bytes, A Adds the file dlp.js"="11/10/2017 12:58 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/10/2017 12:58 PM, 1836 bytes, A Adds the file extension_detect.js"="11/10/2017 12:58 PM, 4343 bytes, A Adds the file index.js"="11/10/2017 12:58 PM, 82 bytes, A Adds the file logger.js"="11/10/2017 12:58 PM, 575 bytes, A Adds the file pageUtils.js"="11/10/2017 12:58 PM, 2241 bytes, A Adds the file product.js"="11/10/2017 12:58 PM, 4434 bytes, A Adds the file storage.js"="11/10/2017 12:58 PM, 1675 bytes, A Adds the file TabManager.js"="11/10/2017 12:58 PM, 189 bytes, A Adds the file TemplateParser.js"="11/10/2017 12:58 PM, 3080 bytes, A Adds the file ul.js"="11/10/2017 12:58 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/10/2017 12:58 PM, 2521 bytes, A Adds the file urlUtils.js"="11/10/2017 12:58 PM, 5385 bytes, A Adds the file util.js"="11/10/2017 12:58 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/10/2017 12:58 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\libs Adds the file PartnerId.js"="11/10/2017 12:58 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi Adds the file 000003.log"="12/27/2017 9:50 AM, 5031 bytes, A Adds the file CURRENT"="12/27/2017 9:50 AM, 16 bytes, A Adds the file LOCK"="12/27/2017 9:50 AM, 0 bytes, A Adds the file LOG"="12/27/2017 9:50 AM, 185 bytes, A Adds the file MANIFEST-000001"="12/27/2017 9:50 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_d9Members_@www.everydaylookup.com Adds the file storage.js"="12/27/2017 9:44 AM, 2454 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _d9Members_@www.everydaylookup.com.xpi"="12/27/2017 9:44 AM, 49673 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\EverydayLookup] "Start Page"="REG_SZ", "http://hp.myway.com/everydaylookup/ttab02/index.html?n={n}&p2=^BX1^mni000^TTAB02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F%3Fc%3D{ptb}%26ptb%3DTTAB02" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/everydaylookup/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\EverydayLookupTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "EverydayLookup Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\EverydayLookupTooltab\TooltabExtension.dll" U uninstall:EverydayLookup" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/27/17 Scan Time: 9:59 AM Log File: 31d6402c-eae4-11e7-9aaa-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.3566 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 245283 Threats Detected: 59 Threats Quarantined: 59 Time Elapsed: 1 min, 36 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\EverydayLookupTooltab\TooltabExtension.dll, Quarantined, [1393], [356944],1.0.3566 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EverydayLookupTooltab Uninstall Internet Explorer, Delete-on-Reboot, [1393], [356944],1.0.3566 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\EverydayLookup, Delete-on-Reboot, [1393], [444113],1.0.3566 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\EverydayLookup|START PAGE, Delete-on-Reboot, [1393], [444113],1.0.3566 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\EverydayLookupTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [236], [352442],1.0.3566 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [236], [293497],1.0.3566 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\EverydayLookupTooltab, Delete-on-Reboot, [1393], [356944],1.0.3566 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_d9Members_@www.everydaylookup.com, Delete-on-Reboot, [1393], [468075],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\_metadata, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\config, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\libs, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MLBJEANMODCOJNDBLBMGPKKAGJHKBNGI, Delete-on-Reboot, [1393], [467555],1.0.3566 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\EverydayLookupTooltab\TooltabExtension.dll, Delete-on-Reboot, [1393], [356944],1.0.3566 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_d9Members_@www.everydaylookup.com.xpi, Delete-on-Reboot, [1393], [457930],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_d9Members_@www.everydaylookup.com\storage.js, Delete-on-Reboot, [1393], [468075],1.0.3566 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi\000003.log, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi\CURRENT, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi\LOCK, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi\LOG, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mlbjeanmodcojndblbmgpkkagjhkbngi\MANIFEST-000001, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MLBJEANMODCOJNDBLBMGPKKAGJHKBNGI\13.321.12.20948_0\MANIFEST.JSON, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\config\config.json, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons\icon128.png, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons\icon16.png, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons\icon19disabled.png, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons\icon19on.png, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\icons\icon48.png, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\ajax.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\background.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\chrome.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\content_script.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\dlp.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\dlpHelper.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\extension_detect.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\index.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\logger.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\pageUtils.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\product.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\storage.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\TabManager.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\TemplateParser.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\ul.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\urlFragmentActions.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\urlUtils.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\util.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\js\webtooltabAPI.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\libs\PartnerId.js, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\_metadata\computed_hashes.json, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\_metadata\verified_contents.json, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\dynamicNewTab.html, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\product.html, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlbjeanmodcojndblbmgpkkagjhkbngi\13.321.12.20948_0\stubby.html, Delete-on-Reboot, [1393], [467555],1.0.3566 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\EVERYDAYLOOKUP.EXE, Delete-on-Reboot, [236], [365288],1.0.3566 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  4. What is RadioRage? The Malwarebytes research team has determined that RadioRage is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. RadioRage is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by RadioRage? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did RadioRage get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove RadioRage? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of RadioRage? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the RadioRage entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the RadioRage hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/radiorage/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_4jMembers_@www.radiorage.com.xpi [2017-12-20] CHR Extension: (RadioRage) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg [2017-12-20] C:\Users\{username}\AppData\Local\RadioRageTooltab RadioRage Internet Explorer Homepage and New Tab (HKCU\...\RadioRageTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0 Adds the file dynamicNewTab.html"="11/9/2017 4:52 PM, 932 bytes, A Adds the file manifest.json"="12/20/2017 9:47 AM, 2471 bytes, A Adds the file product.html"="11/9/2017 4:52 PM, 932 bytes, A Adds the file stubby.html"="11/9/2017 4:52 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata Adds the file computed_hashes.json"="12/20/2017 9:47 AM, 3620 bytes, A Adds the file verified_contents.json"="11/9/2017 4:52 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\config Adds the file config.json"="11/9/2017 4:52 PM, 1485 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons Adds the file icon128.png"="12/20/2017 9:47 AM, 9565 bytes, A Adds the file icon16.png"="11/9/2017 4:52 PM, 1626 bytes, A Adds the file icon19disabled.png"="11/9/2017 4:52 PM, 1412 bytes, A Adds the file icon19on.png"="12/20/2017 9:47 AM, 594 bytes, A Adds the file icon48.png"="12/20/2017 9:47 AM, 2352 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js Adds the file ajax.js"="11/9/2017 4:52 PM, 2250 bytes, A Adds the file background.js"="11/9/2017 4:52 PM, 19608 bytes, A Adds the file chrome.js"="11/9/2017 4:52 PM, 180 bytes, A Adds the file content_script.js"="11/9/2017 4:52 PM, 5917 bytes, A Adds the file dlp.js"="11/9/2017 4:52 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/9/2017 4:52 PM, 1836 bytes, A Adds the file extension_detect.js"="11/9/2017 4:52 PM, 4343 bytes, A Adds the file index.js"="11/9/2017 4:52 PM, 82 bytes, A Adds the file logger.js"="11/9/2017 4:52 PM, 575 bytes, A Adds the file pageUtils.js"="11/9/2017 4:52 PM, 2241 bytes, A Adds the file product.js"="11/9/2017 4:52 PM, 4434 bytes, A Adds the file storage.js"="11/9/2017 4:52 PM, 1675 bytes, A Adds the file TabManager.js"="11/9/2017 4:52 PM, 189 bytes, A Adds the file TemplateParser.js"="11/9/2017 4:52 PM, 3080 bytes, A Adds the file ul.js"="11/9/2017 4:52 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/9/2017 4:52 PM, 2521 bytes, A Adds the file urlUtils.js"="11/9/2017 4:52 PM, 5385 bytes, A Adds the file util.js"="11/9/2017 4:52 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/9/2017 4:52 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\libs Adds the file PartnerId.js"="11/9/2017 4:52 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg Adds the file 000003.log"="12/20/2017 9:47 AM, 4735 bytes, A Adds the file CURRENT"="12/20/2017 9:47 AM, 16 bytes, A Adds the file LOCK"="12/20/2017 9:47 AM, 0 bytes, A Adds the file LOG"="12/20/2017 9:49 AM, 412 bytes, A Adds the file LOG.old"="12/20/2017 9:47 AM, 184 bytes, A Adds the file MANIFEST-000001"="12/20/2017 9:47 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\RadioRageTooltab Adds the file TooltabExtension.dll"="8/4/2017 1:29 AM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_4jMembers_@www.radiorage.com Adds the file storage.js"="12/20/2017 9:49 AM, 2335 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _4jMembers_@www.radiorage.com.xpi"="12/20/2017 9:45 AM, 52842 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/radiorage/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\RadioRageTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "RadioRage Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\RadioRageTooltab\TooltabExtension.dll" U uninstall:RadioRage" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\RadioRage] "Start Page"="REG_SZ", "http://hp.myway.com/radiorage/ttab02/index.html?n={n}&p2=^ZX^mni000^TTAB02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYSCVNM%3Fc%3D{ptb}%26ptb%3D^ZX^mni000^TTAB02" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/20/17 Scan Time: 9:55 AM Log File: 974c251a-e563-11e7-9526-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3525 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 244625 Threats Detected: 60 Threats Quarantined: 60 Time Elapsed: 1 min, 29 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\RadioRageTooltab\TooltabExtension.dll, Quarantined, [1394], [356944],1.0.3525 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RadioRageTooltab Uninstall Internet Explorer, Quarantined, [1394], [356944],1.0.3525 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\RadioRage, Quarantined, [1394], [444113],1.0.3525 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\RadioRage|START PAGE, Quarantined, [1394], [444113],1.0.3525 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\RadioRageTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [237], [352442],1.0.3525 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [237], [293497],1.0.3525 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\RadioRageTooltab, Quarantined, [1394], [356944],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_4jMembers_@www.radiorage.com, Quarantined, [1394], [468075],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\config, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\libs, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JHHGLHEEFABMKONIKLJOBLMBDGLPDKPG, Quarantined, [1394], [467555],1.0.3525 File: 44 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\RadioRageTooltab\TooltabExtension.dll, Quarantined, [1394], [356944],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_4jMembers_@www.radiorage.com\storage.js, Quarantined, [1394], [468075],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_4jMembers_@www.radiorage.com.xpi, Quarantined, [1394], [457930],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\000003.log, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\CURRENT, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\LOCK, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\LOG, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\LOG.old, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jhhglheefabmkonikljoblmbdglpdkpg\MANIFEST-000001, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JHHGLHEEFABMKONIKLJOBLMBDGLPDKPG\13.321.12.18926_0\MANIFEST.JSON, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\config\config.json, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon128.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon16.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon19disabled.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon19on.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\icons\icon48.png, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\ajax.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\background.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\chrome.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\content_script.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\dlp.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\dlpHelper.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\extension_detect.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\index.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\logger.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\pageUtils.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\product.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\storage.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\TabManager.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\TemplateParser.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\ul.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\urlFragmentActions.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\urlUtils.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\util.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\js\webtooltabAPI.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\libs\PartnerId.js, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata\computed_hashes.json, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\_metadata\verified_contents.json, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\dynamicNewTab.html, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\product.html, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhhglheefabmkonikljoblmbdglpdkpg\13.321.12.18926_0\stubby.html, Quarantined, [1394], [467555],1.0.3525 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\RADIORAGE.EXE, Quarantined, [237], [365288],1.0.3525 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  5. What is ProductivityBoss? The Malwarebytes research team has determined that ProductivityBoss is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. ProductivityBoss is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by ProductivityBoss? You may see this browser extensions/add-ons: these warnings during install: You may see this icon in your browser menu-bars: and this new homepage in the affected browsers: How did ProductivityBoss get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove ProductivityBoss? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of ProductivityBoss? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the ProductivityBoss entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the ProductivityBoss hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/productivityboss/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_e5Members_@www.productivityboss.com.xpi [2017-12-12] CHR Extension: (ProductivityBoss) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld [2017-12-12] C:\Users\{username}\AppData\Local\ProductivityBossTooltab (Mindspark Interactive Network, Inc.) C:\Users\{username}\Desktop\ProductivityBoss.exe ProductivityBoss Internet Explorer Homepage and New Tab (HKCU\...\ProductivityBossTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0 Adds the file dynamicNewTab.html"="11/7/2017 1:36 PM, 932 bytes, A Adds the file manifest.json"="12/12/2017 11:05 AM, 2434 bytes, A Adds the file product.html"="11/7/2017 1:36 PM, 932 bytes, A Adds the file stubby.html"="11/7/2017 1:36 PM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\_metadata Adds the file computed_hashes.json"="12/12/2017 11:05 AM, 3620 bytes, A Adds the file verified_contents.json"="11/7/2017 1:36 PM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\config Adds the file config.json"="11/7/2017 1:36 PM, 1550 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons Adds the file icon128.png"="12/12/2017 11:05 AM, 10589 bytes, A Adds the file icon16.png"="11/7/2017 1:36 PM, 1443 bytes, A Adds the file icon19disabled.png"="11/7/2017 1:36 PM, 1519 bytes, A Adds the file icon19on.png"="12/12/2017 11:05 AM, 594 bytes, A Adds the file icon48.png"="12/12/2017 11:05 AM, 2687 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js Adds the file ajax.js"="11/7/2017 1:36 PM, 2250 bytes, A Adds the file background.js"="11/7/2017 1:36 PM, 19608 bytes, A Adds the file chrome.js"="11/7/2017 1:36 PM, 180 bytes, A Adds the file content_script.js"="11/7/2017 1:36 PM, 5917 bytes, A Adds the file dlp.js"="11/7/2017 1:36 PM, 5690 bytes, A Adds the file dlpHelper.js"="11/7/2017 1:36 PM, 1836 bytes, A Adds the file extension_detect.js"="11/7/2017 1:36 PM, 4343 bytes, A Adds the file index.js"="11/7/2017 1:36 PM, 82 bytes, A Adds the file logger.js"="11/7/2017 1:36 PM, 575 bytes, A Adds the file pageUtils.js"="11/7/2017 1:36 PM, 2241 bytes, A Adds the file product.js"="11/7/2017 1:36 PM, 4434 bytes, A Adds the file storage.js"="11/7/2017 1:36 PM, 1675 bytes, A Adds the file TabManager.js"="11/7/2017 1:36 PM, 189 bytes, A Adds the file TemplateParser.js"="11/7/2017 1:36 PM, 3080 bytes, A Adds the file ul.js"="11/7/2017 1:36 PM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/7/2017 1:36 PM, 2521 bytes, A Adds the file urlUtils.js"="11/7/2017 1:36 PM, 5385 bytes, A Adds the file util.js"="11/7/2017 1:36 PM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/7/2017 1:36 PM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\libs Adds the file PartnerId.js"="11/7/2017 1:36 PM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld Adds the file 000003.log"="12/12/2017 11:05 AM, 4651 bytes, A Adds the file CURRENT"="12/12/2017 11:05 AM, 16 bytes, A Adds the file LOCK"="12/12/2017 11:05 AM, 0 bytes, A Adds the file LOG"="12/12/2017 11:07 AM, 412 bytes, A Adds the file LOG.old"="12/12/2017 11:05 AM, 185 bytes, A Adds the file MANIFEST-000001"="12/12/2017 11:05 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\ProductivityBossTooltab Adds the file TooltabExtension.dll"="8/4/2017 12:35 AM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_e5Members_@www.productivityboss.com Adds the file storage.js"="12/12/2017 11:08 AM, 2293 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _e5Members_@www.productivityboss.com.xpi"="12/12/2017 11:03 AM, 53969 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "cangheohokmjkfnfeikedbhjcocnogld"="REG_SZ", "B6189FD63A077EC6C1242B6DB795D9A380FE4EF80943F84F4F7833ED4941F83E" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/productivityboss/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\ProductivityBossTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "ProductivityBoss Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\ProductivityBossTooltab\TooltabExtension.dll" U uninstall:ProductivityBoss" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\ProductivityBoss] "Start Page"="REG_SZ", "http://hp.myway.com/productivityboss/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F{ptb}%26ptb%3D" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/12/17 Scan Time: 11:17 AM Log File: 9da40ab6-df25-11e7-ae87-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3471 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 243795 Threats Detected: 60 Threats Quarantined: 60 Time Elapsed: 2 min, 51 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\ProductivityBossTooltab\TooltabExtension.dll, Quarantined, [1376], [356944],1.0.3471 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ProductivityBossTooltab Uninstall Internet Explorer, Quarantined, [1376], [356944],1.0.3471 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\ProductivityBoss, Quarantined, [1376], [444113],1.0.3471 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ProductivityBossTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [228], [352442],1.0.3471 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\ProductivityBoss|START PAGE, Quarantined, [1376], [444113],1.0.3471 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [228], [293497],1.0.3471 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\ProductivityBossTooltab, Quarantined, [1376], [356944],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\_metadata, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\config, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\libs, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\EXTENSIONS\cangheohokmjkfnfeikedbhjcocnogld, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_e5Members_@www.productivityboss.com, Quarantined, [1376], [468075],1.0.3471 File: 44 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\ProductivityBossTooltab\TooltabExtension.dll, Quarantined, [1376], [356944],1.0.3471 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_e5Members_@www.productivityboss.com.xpi, Quarantined, [1376], [457930],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\config\config.json, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons\icon128.png, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons\icon16.png, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons\icon19disabled.png, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons\icon19on.png, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\icons\icon48.png, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\ajax.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\background.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\chrome.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\content_script.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\dlp.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\dlpHelper.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\extension_detect.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\index.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\logger.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\pageUtils.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\product.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\storage.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\TabManager.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\TemplateParser.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\ul.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\urlFragmentActions.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\urlUtils.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\util.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\js\webtooltabAPI.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\libs\PartnerId.js, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\_metadata\computed_hashes.json, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\_metadata\verified_contents.json, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\dynamicNewTab.html, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\manifest.json, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\product.html, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cangheohokmjkfnfeikedbhjcocnogld\13.321.12.16567_0\stubby.html, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld\000003.log, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld\CURRENT, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld\LOCK, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld\LOG, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld\LOG.old, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.ChromesSearch.ChrPRST, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cangheohokmjkfnfeikedbhjcocnogld\MANIFEST-000001, Quarantined, [2674], [465508],1.0.3471 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_e5Members_@www.productivityboss.com\storage.js, Quarantined, [1376], [468075],1.0.3471 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\PRODUCTIVITYBOSS.EXE, Quarantined, [228], [365288],1.0.3471 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  6. What is fromDOCtoPDF? The Malwarebytes research team has determined that fromDOCtoPDF is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. fromDOCtoPDF is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by fromDOCtoPDF? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did fromDOCtoPDF get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove fromDOCtoPDF? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of fromDOCtoPDF? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the fromDOCtoPDF entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the fromDOCtoPDF hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/fromdoctopdf/ttab02ie/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_65Members_@download.fromdoctopdf.com.xpi [2017-12-06] CHR Extension: (FromDocToPDF) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie [2017-12-06] C:\Users\{username}\AppData\Local\FromDocToPDFTooltab FromDocToPDF Internet Explorer Homepage and New Tab (HKCU\...\FromDocToPDFTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant cahnges made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\FromDocToPDFTooltab Adds the file TooltabExtension.dll"="9/13/2017 8:43 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0 Adds the file dynamicNewTab.html"="11/7/2017 10:34 AM, 932 bytes, A Adds the file manifest.json"="12/6/2017 9:31 AM, 2498 bytes, A Adds the file product.html"="11/7/2017 10:34 AM, 932 bytes, A Adds the file stubby.html"="11/7/2017 10:34 AM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata Adds the file computed_hashes.json"="12/6/2017 9:31 AM, 3620 bytes, A Adds the file verified_contents.json"="11/7/2017 10:34 AM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\config Adds the file config.json"="11/7/2017 10:34 AM, 1517 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons Adds the file icon128.png"="12/6/2017 9:31 AM, 10808 bytes, A Adds the file icon16.png"="11/7/2017 10:34 AM, 1587 bytes, A Adds the file icon19disabled.png"="11/7/2017 10:34 AM, 1512 bytes, A Adds the file icon19on.png"="12/6/2017 9:31 AM, 702 bytes, A Adds the file icon48.png"="12/6/2017 9:31 AM, 3585 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js Adds the file ajax.js"="11/7/2017 10:34 AM, 2250 bytes, A Adds the file background.js"="11/7/2017 10:34 AM, 19608 bytes, A Adds the file chrome.js"="11/7/2017 10:34 AM, 180 bytes, A Adds the file content_script.js"="11/7/2017 10:34 AM, 5917 bytes, A Adds the file dlp.js"="11/7/2017 10:34 AM, 5690 bytes, A Adds the file dlpHelper.js"="11/7/2017 10:34 AM, 1836 bytes, A Adds the file extension_detect.js"="11/7/2017 10:34 AM, 4343 bytes, A Adds the file index.js"="11/7/2017 10:34 AM, 82 bytes, A Adds the file logger.js"="11/7/2017 10:34 AM, 575 bytes, A Adds the file pageUtils.js"="11/7/2017 10:34 AM, 2241 bytes, A Adds the file product.js"="11/7/2017 10:34 AM, 4434 bytes, A Adds the file storage.js"="11/7/2017 10:34 AM, 1675 bytes, A Adds the file TabManager.js"="11/7/2017 10:34 AM, 189 bytes, A Adds the file TemplateParser.js"="11/7/2017 10:34 AM, 3080 bytes, A Adds the file ul.js"="11/7/2017 10:34 AM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/7/2017 10:34 AM, 2521 bytes, A Adds the file urlUtils.js"="11/7/2017 10:34 AM, 5385 bytes, A Adds the file util.js"="11/7/2017 10:34 AM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/7/2017 10:34 AM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\libs Adds the file PartnerId.js"="11/7/2017 10:34 AM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie Adds the file 000003.log"="12/6/2017 9:31 AM, 5071 bytes, A Adds the file CURRENT"="12/6/2017 9:31 AM, 16 bytes, A Adds the file LOCK"="12/6/2017 9:31 AM, 0 bytes, A Adds the file LOG"="12/6/2017 9:32 AM, 412 bytes, A Adds the file LOG.old"="12/6/2017 9:31 AM, 185 bytes, A Adds the file MANIFEST-000001"="12/6/2017 9:31 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_65Members_@download.fromdoctopdf.com Adds the file storage.js"="12/6/2017 9:32 AM, 2501 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _65Members_@download.fromdoctopdf.com.xpi"="12/6/2017 9:28 AM, 55285 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\FromDocToPDF] "Start Page"="REG_SZ", "http://hp.myway.com/fromdoctopdf/ttab02ie/index.html?n={n}&p2=^Y6^mni000^ttab02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2F%3D{ptb}%26ptb%3Dttab02" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/fromdoctopdf/ttab02ie/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDFTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "FromDocToPDF Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\FromDocToPDFTooltab\TooltabExtension.dll" U uninstall:FromDocToPDF" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/6/17 Scan Time: 9:42 AM Log File: 62debd36-da61-11e7-ae87-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3421 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 243087 Threats Detected: 56 Threats Quarantined: 56 Time Elapsed: 1 min, 56 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FromDocToPDFTooltab\TooltabExtension.dll, Quarantined, [777], [356944],1.0.3421 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FromDocToPDFTooltab Uninstall Internet Explorer, Quarantined, [777], [356944],1.0.3421 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FromDocToPDFTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [225], [352442],1.0.3421 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [225], [293497],1.0.3421 Data Stream: 0 (No malicious items detected) Folder: 9 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FromDocToPDFTooltab, Quarantined, [777], [356944],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\config, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\libs, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KBFHENINKDONANKPFFGBMKILNLKMPDIE\13.321.12.16049_0, Quarantined, [777], [456842],1.0.3421 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FromDocToPDFTooltab\TooltabExtension.dll, Quarantined, [777], [356944],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_65Members_@download.fromdoctopdf.com.xpi, Quarantined, [777], [457930],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\000003.log, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\CURRENT, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\LOCK, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\LOG, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\LOG.old, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\MANIFEST-000001, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KBFHENINKDONANKPFFGBMKILNLKMPDIE\13.321.12.16049_0\CONFIG\CONFIG.JSON, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon128.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon16.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon19disabled.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon19on.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon48.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\ajax.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\background.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\chrome.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\content_script.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\dlp.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\dlpHelper.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\extension_detect.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\index.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\logger.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\pageUtils.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\product.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\storage.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\TabManager.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\TemplateParser.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\ul.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\urlFragmentActions.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\urlUtils.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\util.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\webtooltabAPI.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\libs\PartnerId.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata\computed_hashes.json, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata\verified_contents.json, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\dynamicNewTab.html, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\manifest.json, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\product.html, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\stubby.html, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\FROMDOCTOPDF.EXE, Quarantined, [225], [365288],1.0.3421 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  7. What is InternetSpeedTracker? The Malwarebytes research team has determined that InternetSpeedTracker is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. InternetSpeedTracker is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by InternetSpeedTracker? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did InternetSpeedTracker get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website after a redirect by an ad-rotator. How do I remove InternetSpeedTracker? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of InternetSpeedTracker? If you are using Chrome and an older version of Malwarebytes, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the InternetSpeedTracker entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the InternetSpeedTracker hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/internetspeedtracker/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_9tMembers_@free.internetspeedtracker.com.xpi [2017-11-29] CHR Extension: (InternetSpeedTracker) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc [2017-11-29] C:\Users\{username}\AppData\Local\Internet Speed TrackerTooltab Internet Speed Tracker Internet Explorer Homepage and New Tab (HKCU\...\Internet Speed TrackerTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0 Adds the file dynamicNewTab.html"="11/7/2017 10:40 AM, 932 bytes, A Adds the file manifest.json"="11/29/2017 8:54 AM, 2536 bytes, A Adds the file product.html"="11/7/2017 10:40 AM, 932 bytes, A Adds the file stubby.html"="11/7/2017 10:40 AM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata Adds the file computed_hashes.json"="11/29/2017 8:54 AM, 3620 bytes, A Adds the file verified_contents.json"="11/7/2017 10:40 AM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\config Adds the file config.json"="11/7/2017 10:40 AM, 1587 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons Adds the file icon128.png"="11/29/2017 8:54 AM, 4963 bytes, A Adds the file icon16.png"="11/7/2017 10:40 AM, 559 bytes, A Adds the file icon19disabled.png"="11/7/2017 10:40 AM, 631 bytes, A Adds the file icon19on.png"="11/29/2017 8:54 AM, 630 bytes, A Adds the file icon48.png"="11/29/2017 8:54 AM, 1597 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js Adds the file ajax.js"="11/7/2017 10:40 AM, 2250 bytes, A Adds the file background.js"="11/7/2017 10:40 AM, 19608 bytes, A Adds the file chrome.js"="11/7/2017 10:40 AM, 180 bytes, A Adds the file content_script.js"="11/7/2017 10:40 AM, 5917 bytes, A Adds the file dlp.js"="11/7/2017 10:40 AM, 5690 bytes, A Adds the file dlpHelper.js"="11/7/2017 10:40 AM, 1836 bytes, A Adds the file extension_detect.js"="11/7/2017 10:40 AM, 4343 bytes, A Adds the file index.js"="11/7/2017 10:40 AM, 82 bytes, A Adds the file logger.js"="11/7/2017 10:40 AM, 575 bytes, A Adds the file pageUtils.js"="11/7/2017 10:40 AM, 2241 bytes, A Adds the file product.js"="11/7/2017 10:40 AM, 4434 bytes, A Adds the file storage.js"="11/7/2017 10:40 AM, 1675 bytes, A Adds the file TabManager.js"="11/7/2017 10:40 AM, 189 bytes, A Adds the file TemplateParser.js"="11/7/2017 10:40 AM, 3080 bytes, A Adds the file ul.js"="11/7/2017 10:40 AM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/7/2017 10:40 AM, 2521 bytes, A Adds the file urlUtils.js"="11/7/2017 10:40 AM, 5385 bytes, A Adds the file util.js"="11/7/2017 10:40 AM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/7/2017 10:40 AM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\libs Adds the file PartnerId.js"="11/7/2017 10:40 AM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc Adds the file 000003.log"="11/29/2017 8:54 AM, 4961 bytes, A Adds the file CURRENT"="11/29/2017 8:54 AM, 16 bytes, A Adds the file LOCK"="11/29/2017 8:54 AM, 0 bytes, A Adds the file LOG"="11/29/2017 8:54 AM, 185 bytes, A Adds the file MANIFEST-000001"="11/29/2017 8:54 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Internet Speed TrackerTooltab Adds the file TooltabExtension.dll"="8/4/2017 7:01 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_9tMembers_@free.internetspeedtracker.com Adds the file storage.js"="11/29/2017 8:53 AM, 2472 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _9tMembers_@free.internetspeedtracker.com.xpi"="11/29/2017 8:52 AM, 44694 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "kohoehgoafblafjinhplmhcbphgaaobc"="REG_SZ", "5D62E9F71822E9740CD6B4F38D59B820BC7706AA534FFE42BEFA29FFEB4015AA" [HKEY_CURRENT_USER\Software\Internet Speed Tracker] "Start Page"="REG_SZ", "http://hp.myway.com/internetspeedtracker/ttab02/index.html?n={n}&p2=^BBQ^mni000^TTAB02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F66QYSWY%3Fc%3D{ptb}%26ptb%3D^BBQ^mni000^TTAB02" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/internetspeedtracker/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Speed TrackerTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "Internet Speed Tracker Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\Internet Speed TrackerTooltab\TooltabExtension.dll" U uninstall:Internet Speed Tracker" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/29/17 Scan Time: 9:06 AM Log File: 2978c292-d4dc-11e7-ae87-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3371 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 335568 Threats Detected: 59 Threats Quarantined: 59 Time Elapsed: 4 min, 31 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\Internet Speed TrackerTooltab\TooltabExtension.dll, Quarantined, [851], [356944],1.0.3371 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Internet Speed TrackerTooltab Uninstall Internet Explorer, Quarantined, [851], [356944],1.0.3371 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\Internet Speed Tracker, Quarantined, [851], [444113],1.0.3371 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Internet Speed TrackerTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3371 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\Internet Speed Tracker|START PAGE, Quarantined, [851], [444113],1.0.3371 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3371 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\Internet Speed TrackerTooltab, Quarantined, [851], [356944],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_9tMembers_@free.internetspeedtracker.com, Quarantined, [851], [457935],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\config, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\libs, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KOHOEHGOAFBLAFJINHPLMHCBPHGAAOBC, Quarantined, [851], [456843],1.0.3371 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\Internet Speed TrackerTooltab\TooltabExtension.dll, Quarantined, [851], [356944],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_9tMembers_@free.internetspeedtracker.com.xpi, Quarantined, [851], [457930],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_9tMembers_@free.internetspeedtracker.com\storage.js, Quarantined, [851], [457935],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\000003.log, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\CURRENT, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\LOCK, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\LOG, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\MANIFEST-000001, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KOHOEHGOAFBLAFJINHPLMHCBPHGAAOBC\13.321.12.16092_0\MANIFEST.JSON, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\config\config.json, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon128.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon16.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon19disabled.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon19on.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon48.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\ajax.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\background.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\chrome.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\content_script.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\dlp.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\dlpHelper.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\extension_detect.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\index.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\logger.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\pageUtils.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\product.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\storage.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\TabManager.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\TemplateParser.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\ul.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\urlFragmentActions.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\urlUtils.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\util.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\webtooltabAPI.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\libs\PartnerId.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata\computed_hashes.json, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata\verified_contents.json, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\dynamicNewTab.html, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\product.html, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\stubby.html, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\INTERNETSPEEDTRACKER.EXE, Quarantined, [260], [365288],1.0.3371 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  8. What is BringMeSports? The Malwarebytes research team has determined that BringMeSports is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. BringMeSports is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by BringMeSports? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did BringMeSports get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove BringMeSports? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of BringMeSports? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the BringMeSports entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the BringMeSports hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/bringmesports/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_1cMembers_@www.bringmesports.com.xpi [2017-11-21] FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2017-11-21] [not signed] CHR Extension: (BringMeSports) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp [2017-11-21] C:\Users\{username}\AppData\Local\BringMeSportsTooltab BringMeSports Internet Explorer Homepage and New Tab (HKCU\...\BringMeSportsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/21/17 Scan Time: 9:19 AM Log File: c16a7300-ce94-11e7-9d77-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3309 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 334440 Threats Detected: 59 Threats Quarantined: 58 Time Elapsed: 1 min, 52 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\BringMeSportsTooltab\TooltabExtension.dll, Quarantined, [849], [356944],1.0.3309 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BringMeSportsTooltab Uninstall Internet Explorer, Quarantined, [849], [356944],1.0.3309 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\BringMeSports, Quarantined, [849], [444113],1.0.3309 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\BringMeSports|START PAGE, Quarantined, [849], [444113],1.0.3309 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BringMeSportsTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3309 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3309 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\BringMeSportsTooltab, Delete-on-Reboot, [849], [356944],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_1cMembers_@www.bringmesports.com, Quarantined, [849], [457934],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\_metadata, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\config, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\libs, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PLLNAAHMNJFAAOOLILCDEEPHJDDOBCFP\13.321.12.17428_0, Quarantined, [849], [456842],1.0.3309 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\BringMeSportsTooltab\TooltabExtension.dll, Delete-on-Reboot, [849], [356944],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_1cMembers_@www.bringmesports.com.xpi, Quarantined, [849], [457930],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_1cMembers_@www.bringmesports.com\storage.js, Quarantined, [849], [457934],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\000003.log, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\CURRENT, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\LOCK, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\LOG, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\MANIFEST-000001, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PLLNAAHMNJFAAOOLILCDEEPHJDDOBCFP\13.321.12.17428_0\CONFIG\CONFIG.JSON, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon128.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon16.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon19disabled.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon19on.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon48.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\ajax.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\background.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\chrome.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\content_script.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\dlp.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\dlpHelper.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\extension_detect.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\index.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\logger.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\pageUtils.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\product.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\storage.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\TabManager.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\TemplateParser.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\ul.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\urlFragmentActions.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\urlUtils.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\util.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\webtooltabAPI.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\libs\PartnerId.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\_metadata\computed_hashes.json, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\_metadata\verified_contents.json, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\dynamicNewTab.html, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\manifest.json, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\product.html, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\stubby.html, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\BRINGMESPORTS.EXE, Quarantined, [260], [365288],1.0.3309 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  9. What is MyEasyLotto? The Malwarebytes research team has determined that MyEasyLotto is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. MyEasyLotto is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by MyEasyLotto? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did MyEasyLotto get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website after being redirected by an ad-rotator. How do I remove MyEasyLotto? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of MyEasyLotto? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the MyEasyLotto entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the MyEasyLotto hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/myeasylotto/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: moz-extension://0ab636e7-6ece-4957-acbf-d9583497da3b/dynamicHomePage.html FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_pnMembers_@free.myeasylotto.com.xpi [2017-11-14] CHR Extension: (MyEasyLotto) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc [2017-11-14] C:\Users\{username}\AppData\Local\MyEasyLottoTooltab MyEasyLotto Internet Explorer Homepage and New Tab (HKCU\...\MyEasyLottoTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/14/17 Scan Time: 1:49 PM Log File: 387019b1-c93a-11e7-8cbe-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3253 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 333615 Threats Detected: 56 Threats Quarantined: 55 Time Elapsed: 2 min, 6 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyEasyLottoTooltab\TooltabExtension.dll, Quarantined, [850], [356944],1.0.3253 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyEasyLottoTooltab Uninstall Internet Explorer, Quarantined, [850], [356944],1.0.3253 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MyEasyLotto, Quarantined, [850], [444113],1.0.3253 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MyEasyLotto|START PAGE, Quarantined, [850], [444113],1.0.3253 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyEasyLottoTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [262], [352442],1.0.3253 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [262], [293497],1.0.3253 Data Stream: 0 (No malicious items detected) Folder: 9 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyEasyLottoTooltab, Delete-on-Reboot, [850], [356944],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\_metadata, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\config, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\libs, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FEEIDICOCFOBOMAABEPNAMKFBEPCDHJC, Quarantined, [850], [456843],1.0.3253 File: 41 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyEasyLottoTooltab\TooltabExtension.dll, Delete-on-Reboot, [850], [356944],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_pnMembers_@free.myeasylotto.com.xpi, Quarantined, [850], [457845],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\000003.log, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\CURRENT, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\LOCK, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\LOG, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\MANIFEST-000001, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FEEIDICOCFOBOMAABEPNAMKFBEPCDHJC\13.321.12.18566_0\MANIFEST.JSON, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\config\config.json, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon128.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon16.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon19disabled.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon19on.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon48.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\ajax.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\background.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\chrome.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\content_script.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\dlp.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\dlpHelper.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\extension_detect.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\index.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\logger.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\pageUtils.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\product.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\storage.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\TabManager.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\TemplateParser.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\ul.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\urlFragmentActions.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\urlUtils.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\util.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\webtooltabAPI.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\libs\PartnerId.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\_metadata\computed_hashes.json, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\_metadata\verified_contents.json, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\dynamicNewTab.html, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\product.html, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\stubby.html, Quarantined, [850], [456843],1.0.3253 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  10. What is DirectionsOnline? The Malwarebytes research team has determined that DirectionsOnline is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. DirectionsOnline is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by DirectionsOnline? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did DirectionsOnline get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove DirectionsOnline? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of DirectionsOnline? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the DirectionsOnline entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the DirectionsOnline hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/directionsonline/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/directionsonline/ttab02/index.html?coId={coid2}&subId&ln=en&n={n2}&ptb={ptb2}&st&p2={p22}&si FF Extension: DirectionsOnline - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_ijMembers_@www.freedirectionsonline.com [2017-11-08] CHR Extension: (DirectionsOnline) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl [2017-11-08] C:\Users\{username}\AppData\Local\FreeDirectionsOnlineTooltab FreeDirectionsOnline Internet Explorer Homepage and New Tab (HKCU\...\FreeDirectionsOnlineTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/8/17 Scan Time: 9:34 AM Log File: b07b5b53-c45f-11e7-a2e4-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3203 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 332951 Threats Detected: 396 Threats Quarantined: 395 Time Elapsed: 1 min, 59 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FreeDirectionsOnlineTooltab\TooltabExtension.dll, Quarantined, [850], [356944],1.0.3203 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FreeDirectionsOnlineTooltab Uninstall Internet Explorer, Quarantined, [850], [356944],1.0.3203 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FreeDirectionsOnline, Quarantined, [850], [444113],1.0.3203 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FreeDirectionsOnlineTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [262], [352442],1.0.3203 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FreeDirectionsOnline|START PAGE, Quarantined, [850], [444113],1.0.3203 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [262], [293497],1.0.3203 Data Stream: 0 (No malicious items detected) Folder: 91 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\FreeDirectionsOnline_ij, Quarantined, [262], [240302],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FreeDirectionsOnlineTooltab, Delete-on-Reboot, [850], [356944],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\abstractbutton\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\thirdparty\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\uninstall\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\weather\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\generic\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\alert\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\link\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\abstractbutton, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\rss\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\images, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\radioWrapper, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\thirdparty, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\foreground, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\uninstall, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\generic, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\weather, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\alert, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\link, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\rss, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\adapter, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\_metadata, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HAPCFBGKDLNCMKELGHBNGCEHDHFDOPDL, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_IJMEMBERS_@WWW.FREEDIRECTIONSONLINE.COM, Quarantined, [850], [443664],1.0.3203 File: 299 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\FreeDirectionsOnline_ij\{ptb2}.sqlite, Quarantined, [262], [240302],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FreeDirectionsOnlineTooltab\TooltabExtension.dll, Delete-on-Reboot, [850], [356944],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [356946],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\000003.log, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\CURRENT, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\LOCK, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\LOG, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\MANIFEST-000001, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HAPCFBGKDLNCMKELGHBNGCEHDHFDOPDL\12.702.11.34330_0\MANIFEST.JSON, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\adapter\adapterUtil.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\adapter\widget-adapter.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\alert\background\alertButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\background\FlareWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons\Thumbs.db, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\generic\background\GenericWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\link\background\linkButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\background\menuButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\css\menuframe.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\html\menuframe.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\images\right_arrow.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\images\right_arrow_white.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\menuframe.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\query-string.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\README.txt, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\rss\background\RssWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\weather\background\weatherButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\bs.30.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\common.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\dynamic.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\enableDetect.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\eventListening.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\global.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\list-interaction.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\messageEventListener.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\navRedirector.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\paramReplacer.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\PartnerId.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\set.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\common.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\set.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\invalid.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\jquery.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\qunit.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\qunit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\resource.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\resource.xml, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widget-context-1.0.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\background\ApiBasedWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\background\widget-api-impl.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\widgetWindow.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\widgetWindow.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\background\updateSearch.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\css\movieReviews.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\html\movieReviews.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\js\movieReviews.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\background\RadioWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\css\toolbar-item.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\foreground\button.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\background\searchBox.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestions.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestions.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestions.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestionsInit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\css\supertab.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\html\supertab.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\newtabfork.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\reporting.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\srchsugg.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\supertab.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\__utm.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\_metadata\computed_hashes.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\_metadata\verified_contents.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\arrowSprite.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon128.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon16.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon19disabled.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon19on.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon48.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150452.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150465.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150496.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150513.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152148.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152149.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152153.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152167.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152546.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\down_arrow.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\magnifying_glass.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\RadioPlayerSprite.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\search_button.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\tvf_icon_guide.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\tvf_logo.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\wrench.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\newTabInitialize.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\chromeStorage.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\chromeUtils.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\companionSWUtils.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\exeManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\exeManagerNMD.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\exePackageManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\focusManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\globalBlacklistManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\messaging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\mutation_summary-min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\mutation_summary.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\nativeMessagingDispatcher.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\newTabInfo.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\options.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\readLocalStorage.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\recentlyClosedTabs.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\reservespacefortoolbar.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\reservespaceifenabled.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\scriptInjector.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\searchContext.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\settingsOverrides.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\toolbarCookieParser.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\toolbarPreinit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\URILoaderContentScript.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\webTooltabAPI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\Widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\widgetContentScriptInjectee.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\widgetFactory.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\widgetWindowManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs\jquery-1.9.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\cache.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\ce.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\debug.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\ss.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\activePing.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\buttonLogger.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\competitorDnsList.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\console.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\FFPreferencesPersister.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\httpTransport.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\HttpURL.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\internationalSearch.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\LocalStoragePersister.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\MindsparkGlobal.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\MindsparkGlobalNotes.txt, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\rsvp-latest.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\searchSuggestLocale.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\testHttpTransport.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\unifiedLogger.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\unifiedLogging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\universalConsole.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\utils.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent2.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\bg.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\buildVars, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\buildVars.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\companionSW.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\config.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\contentScript.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\contentScript.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\debug.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\debug.jade, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spentJ.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spentK.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spentK.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\startup.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\stub.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\stubby.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\superFrame.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbar.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbar.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbarUI.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbarUI.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbarUI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\url.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\urlFragmentActions.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\webtooltab.cs.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\extension_toolbar_api.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\initWidgetWindow.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\newTabContentScript.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\options.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent2.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_IJMEMBERS_@WWW.FREEDIRECTIONSONLINE.COM\INSTALL.RDF, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome\ffxtbr.jar, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF\manifest.mf, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF\mozilla.rsa, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF\mozilla.sf, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\bootstrap.js, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome.manifest, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome.manifest.restartless, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\FREEDIRECTIONSONLINE..EXE, Quarantined, [262], [365288],1.0.3203 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  11. What is FormFetcherPro? The Malwarebytes research team has determined that FormFetcherPro is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. FormFetcherPro is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by FormFetcherPro? You may see this browser extensions/add-ons: these warnings during install: and notice some changed settings: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did FormFetcherPro get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove FormFetcherPro? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of FormFetcherPro? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the FormFetcherPro entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the FormFetcherPro hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/formfetcherpro/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/formfetcherpro/ttab02/index.html?coId={coid2}&subId&ln=en&n={n1}&ptb={ptb2}&st&p2={p22}&si FF Extension: FormFetcherPro - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_hyMembers_@free.formfetcherpro.com [2017-11-02] CHR Extension: (FormFetcherPro) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc [2017-11-02] C:\Users\{username}\AppData\Local\FormFetcherProTooltab FormFetcherPro Internet Explorer Homepage and New Tab (HKCU\...\FormFetcherProTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/2/17 Scan Time: 11:15 AM Log File: d2cbfd55-bfb6-11e7-b723-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3156 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 332380 Threats Detected: 400 Threats Quarantined: 399 Time Elapsed: 2 min, 13 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FormFetcherProTooltab\TooltabExtension.dll, Quarantined, [850], [356944],1.0.3156 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FormFetcherProTooltab Uninstall Internet Explorer, Quarantined, [850], [356944],1.0.3156 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FormFetcherPro, Quarantined, [850], [444113],1.0.3156 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FormFetcherProTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [262], [352442],1.0.3156 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FormFetcherPro|START PAGE, Quarantined, [850], [444113],1.0.3156 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [262], [293497],1.0.3156 Data Stream: 0 (No malicious items detected) Folder: 90 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FormFetcherProTooltab, Delete-on-Reboot, [850], [356944],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\abstractbutton\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\thirdparty\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\uninstall\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\weather\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\generic\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\alert\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\link\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\abstractbutton, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\rss\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\images, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\radioWrapper, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\thirdparty, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\foreground, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\uninstall, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\generic, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\weather, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\alert, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\link, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\rss, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\adapter, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\_metadata, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JCOHBBECONNBKNAEAODOHNJCELEMNLFC, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_HYMEMBERS_@FREE.FORMFETCHERPRO.COM, Quarantined, [850], [443664],1.0.3156 File: 304 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FormFetcherProTooltab\TooltabExtension.dll, Delete-on-Reboot, [850], [356944],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [356946],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\000003.log, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\CURRENT, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\LOCK, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\LOG, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\MANIFEST-000001, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JCOHBBECONNBKNAEAODOHNJCELEMNLFC\12.702.12.2078_0\MANIFEST.JSON, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\adapter\adapterUtil.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\adapter\widget-adapter.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\alert\background\alertButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\background\FlareWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons\Thumbs.db, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\generic\background\GenericWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\link\background\linkButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\background\menuButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\css\menuframe.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\html\menuframe.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\images\right_arrow.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\images\right_arrow_white.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\menuframe.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\query-string.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\README.txt, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\rss\background\RssWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\weather\background\weatherButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\bs.30.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\common.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\dynamic.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\enableDetect.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\eventListening.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\global.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\list-interaction.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\messageEventListener.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\navRedirector.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\paramReplacer.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\PartnerId.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\set.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\common.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\set.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\invalid.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\jquery.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\qunit.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\qunit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\resource.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\resource.xml, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widget-context-1.0.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\background\ApiBasedWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\background\widget-api-impl.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\widgetWindow.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\widgetWindow.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\background\updateSearch.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\css\movieReviews.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\html\movieReviews.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\js\movieReviews.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\background\RadioWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\css\toolbar-item.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\foreground\button.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\background\searchBox.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestions.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestions.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestions.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestionsInit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\css\supertab.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\html\supertab.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\newtabfork.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\reporting.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\srchsugg.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\supertab.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\__utm.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\_metadata\computed_hashes.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\_metadata\verified_contents.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\arrowSprite.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon128.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon16.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon19disabled.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon19on.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon48.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230585972.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586007.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586022.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586023.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586024.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586025.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586026.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586027.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586028.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586029.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586030.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586031.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586032.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586062.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586079.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\down_arrow.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\magnifying_glass.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\RadioPlayerSprite.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\search_button.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\tvf_icon_guide.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\tvf_logo.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\wrench.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\newTabInitialize.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\chromeStorage.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\chromeUtils.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\companionSWUtils.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\exeManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\exeManagerNMD.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\exePackageManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\focusManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\globalBlacklistManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\messaging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\mutation_summary-min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\mutation_summary.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\nativeMessagingDispatcher.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\newTabInfo.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\options.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\readLocalStorage.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\recentlyClosedTabs.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\reservespacefortoolbar.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\reservespaceifenabled.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\scriptInjector.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\searchContext.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\settingsOverrides.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\toolbarCookieParser.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\toolbarPreinit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\URILoaderContentScript.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\webTooltabAPI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\Widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\widgetContentScriptInjectee.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\widgetFactory.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\widgetWindowManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs\jquery-1.9.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\cache.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\ce.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\debug.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\ss.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\activePing.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\buttonLogger.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\competitorDnsList.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\console.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\FFPreferencesPersister.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\httpTransport.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\HttpURL.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\internationalSearch.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\LocalStoragePersister.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\MindsparkGlobal.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\MindsparkGlobalNotes.txt, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\rsvp-latest.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\searchSuggestLocale.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\testHttpTransport.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\unifiedLogger.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\unifiedLogging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\universalConsole.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\utils.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent2.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\bg.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\buildVars, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\buildVars.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\companionSW.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\config.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\contentScript.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\contentScript.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\debug.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\debug.jade, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spentJ.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spentK.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spentK.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\startup.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\stub.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\stubby.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\superFrame.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbar.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbar.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbarUI.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbarUI.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbarUI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\url.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\urlFragmentActions.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\webtooltab.cs.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\extension_toolbar_api.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\initWidgetWindow.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\newTabContentScript.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\options.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent2.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_HYMEMBERS_@FREE.FORMFETCHERPRO.COM\INSTALL.RDF, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome\ffxtbr.jar, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF\manifest.mf, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF\mozilla.rsa, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF\mozilla.sf, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\bootstrap.js, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome.manifest, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome.manifest.restartless, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\FORMFETCHERPRO..EXE, Quarantined, [262], [365288],1.0.3156 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  12. What is AtoZManuals? The Malwarebytes research team has determined that AtoZManuals is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. AtoZManuals is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by AtoZManuals? You may see this browser extensions/add-ons: and these changed Internet Explorer settings: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did AtoZManuals get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site after an ad-rotator redirect. How do I remove AtoZManuals? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of AtoZManuals? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the AtoZManuals entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the AtoZManuals hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/atozmanuals/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/atozmanuals/ttab02/index.html?coId={coid2}&subId={si1}&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si={si1} FF Extension: AtoZManuals - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\_hgMembers_@free.atozmanuals.com [2017-10-24] CHR Extension: (AtoZManuals ) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak [2017-10-24] C:\Users\{username}\AppData\Local\AtoZManualsTooltab AtoZManuals Internet Explorer Homepage and New Tab (HKCU\...\AtoZManualsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/24/17 Scan Time: 10:34 AM Log File: 32bed1a1-b896-11e7-be02-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3081 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 331320 Threats Detected: 109 Threats Quarantined: 108 Time Elapsed: 1 min, 48 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\AtoZManualsTooltab\TooltabExtension.dll, Quarantined, [846], [356944],1.0.3081 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AtoZManualsTooltab Uninstall Internet Explorer, Quarantined, [846], [356944],1.0.3081 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\AtoZManuals, Quarantined, [846], [444113],1.0.3081 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AtoZManualsTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3081 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\AtoZManuals|START PAGE, Quarantined, [846], [444113],1.0.3081 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3081 Data Stream: 0 (No malicious items detected) Folder: 13 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\AtoZManuals_hg, Quarantined, [260], [240302],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\AtoZManualsTooltab, Delete-on-Reboot, [846], [356944],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_HGMEMBERS_@FREE.ATOZMANUALS.COM, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\_metadata, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\config, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\libs, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAFKEPGIKKBAGGOICIKKKDLKNJMNOCAK\13.300.12.6679_0, Quarantined, [846], [449576],1.0.3081 File: 90 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\AtoZManuals_hg\4275E541-3272-4C3D-BEBC-E5C5CFC680B3.sqlite, Quarantined, [260], [240302],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\AtoZManualsTooltab\TooltabExtension.dll, Delete-on-Reboot, [846], [356944],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_HGMEMBERS_@FREE.ATOZMANUALS.COM\INSTALL.RDF, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome\ffxtbr.jar, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF\manifest.mf, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF\mozilla.rsa, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF\mozilla.sf, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\bootstrap.js, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome.manifest, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome.manifest.restartless, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [356946],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\000003.log, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\CURRENT, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\LOCK, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\LOG, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\LOG.old, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\MANIFEST-000001, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAFKEPGIKKBAGGOICIKKKDLKNJMNOCAK\13.300.12.6679_0\LIBS\PARTNERID.JS, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\config\config.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon128.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon16.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon19disabled.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon19on.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon48.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\ajax.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\background.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\chrome.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\content_script.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\dlp.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\dlpHelper.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\dynamicNewTab.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\extension_detect.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\index.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\logger.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\pageUtils.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\storage.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\TabManager.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\TemplateParser.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\ul.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\urlFragmentActions.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\urlUtils.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\util.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\webtooltabAPI.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\_metadata\computed_hashes.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\_metadata\verified_contents.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\dynamicNewTab.html, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\manifest.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\ATOZMANUALS.EXE, Quarantined, [260], [365288],1.0.3081 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  13. What is InboxAce? The Malwarebytes research team has determined that InboxAce is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. InboxAce is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by InboxAce? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did InboxAce get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site after an ad-rotator redirect. How do I remove InboxAce? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of InboxAce? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the InboxAce entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the InboxAce hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/inboxace/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/inboxace/ttab02/index.html?coId={coid2}&subId={si1}&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si={si1} FF Extension: InboxAce - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\Extensions\_1gMembers_@www.inboxace.com [2017-10-18] CHR Extension: (InboxAce) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid [2017-10-18] C:\Users\{username}\AppData\Local\InboxAceTooltab InboxAce Internet Explorer Homepage and New Tab (HKCU\...\InboxAceTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/18/17 Scan Time: 9:05 AM Log File: c6a083d3-b3d2-11e7-833e-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3037 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 330266 Threats Detected: 401 Threats Quarantined: 400 Time Elapsed: 2 min, 0 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\InboxAceTooltab\TooltabExtension.dll, Quarantined, [846], [356944],1.0.3037 Registry Key: 4 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InboxAceTooltab Uninstall Internet Explorer, Quarantined, [846], [356944],1.0.3037 PUP.Optional.MyWay.Generic, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\DOMSTORAGE\inboxace.dl.myway.com, Quarantined, [9044], [444109],1.0.3037 PUP.Optional.ASK.Generic, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\DOMSTORAGE\inboxace.dl.tb.ask.com, Quarantined, [1376], [444105],1.0.3037 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\InboxAce, Quarantined, [846], [444113],1.0.3037 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InboxAceTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3037 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\InboxAce|START PAGE, Quarantined, [846], [444113],1.0.3037 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3037 Data Stream: 0 (No malicious items detected) Folder: 91 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\InboxAce_1g, Quarantined, [260], [240302],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\InboxAceTooltab, Delete-on-Reboot, [846], [356944],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\abstractbutton\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\thirdparty\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\uninstall\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\weather\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\generic\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\alert\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\link\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\abstractbutton, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\rss\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\images, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\radioWrapper, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\thirdparty, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\foreground, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\uninstall, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\generic, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\weather, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\alert, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\link, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\rss, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\adapter, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\_metadata, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKFCMEOEPJHCLGLAFBPPMEIDJJOLCGID, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\EXTENSIONS\_1GMEMBERS_@WWW.INBOXACE.COM, Quarantined, [846], [443664],1.0.3037 File: 302 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\InboxAce_1g\{ptb2}.sqlite, Quarantined, [260], [240302],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\InboxAceTooltab\TooltabExtension.dll, Delete-on-Reboot, [846], [356944],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [356946],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\000003.log, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\CURRENT, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\LOCK, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\LOG, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\MANIFEST-000001, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKFCMEOEPJHCLGLAFBPPMEIDJJOLCGID\12.703.12.2371_0\MANIFEST.JSON, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\adapter\adapterUtil.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\adapter\widget-adapter.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\alert\background\alertButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\background\FlareWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons\Thumbs.db, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\generic\background\GenericWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\link\background\linkButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\background\menuButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\css\menuframe.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\html\menuframe.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\images\right_arrow.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\images\right_arrow_white.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\menuframe.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\query-string.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\README.txt, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\rss\background\RssWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\weather\background\weatherButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\bs.30.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\common.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\dynamic.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\enableDetect.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\eventListening.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\global.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\list-interaction.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\messageEventListener.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\navRedirector.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\paramReplacer.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\PartnerId.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\set.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\underscore-1.5.2.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\unifiedLogging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\common.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\set.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\invalid.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\jquery.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\qunit.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\qunit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\resource.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\resource.xml, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widget-context-1.0.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\background\ApiBasedWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\background\widget-api-impl.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\widgetWindow.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\widgetWindow.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\background\updateSearch.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\css\movieReviews.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\html\movieReviews.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\js\movieReviews.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\background\RadioWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\css\toolbar-item.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\foreground\button.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\background\searchBox.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestions.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestions.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestions.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestionsInit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\css\supertab.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\html\supertab.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\newtabfork.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\reporting.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\srchsugg.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\supertab.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\unifiedLogging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\__utm.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\_metadata\computed_hashes.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\_metadata\verified_contents.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\arrowSprite.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon128.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon16.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon19disabled.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon19on.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon48.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755070.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755074.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755078.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755079.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755080.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755082.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755083.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755084.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755096.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\224383952.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\227590534.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\down_arrow.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\magnifying_glass.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\RadioPlayerSprite.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\search_button.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\tvf_icon_guide.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\tvf_logo.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\wrench.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\newTabInitialize.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\chromeStorage.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\chromeUtils.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\companionSWUtils.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\exeManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\exeManagerNMD.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\exePackageManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\focusManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\globalBlacklistManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\messaging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\mutation_summary-min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\mutation_summary.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\nativeMessagingDispatcher.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\newTabInfo.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\options.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\readLocalStorage.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\recentlyClosedTabs.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\reservespacefortoolbar.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\reservespaceifenabled.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\scriptInjector.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\searchContext.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\settingsOverrides.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\toolbarCookieParser.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\toolbarPreinit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\URILoaderContentScript.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\webTooltabAPI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\Widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\widgetContentScriptInjectee.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\widgetFactory.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\widgetWindowManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs\jquery-1.9.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs\underscore-1.5.2.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\cache.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\ce.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\debug.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\ss.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\activePing.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\buttonLogger.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\competitorDnsList.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\console.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\FFPreferencesPersister.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\httpTransport.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\HttpURL.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\internationalSearch.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\LocalStoragePersister.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\MindsparkGlobal.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\MindsparkGlobalNotes.txt, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\rsvp-latest.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\searchSuggestLocale.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\testHttpTransport.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\unifiedLogger.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\unifiedLogging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\universalConsole.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\utils.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent2.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\bg.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\buildVars, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\buildVars.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\companionSW.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\config.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\contentScript.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\contentScript.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\debug.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\debug.jade, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spentJ.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spentK.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spentK.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\startup.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\stub.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\stubby.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\superFrame.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbar.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbar.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbarUI.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbarUI.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbarUI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\url.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\urlFragmentActions.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\webtooltab.cs.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\extension_toolbar_api.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\initWidgetWindow.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\newTabContentScript.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\options.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent2.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\EXTENSIONS\_1GMEMBERS_@WWW.INBOXACE.COM\INSTALL.RDF, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome\ffxtbr.jar, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF\manifest.mf, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF\mozilla.rsa, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF\mozilla.sf, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\bootstrap.js, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome.manifest, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome.manifest.restartless, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\INBOXACE.{coid1}.EXE, Quarantined, [260], [365288],1.0.3037 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  14. What is GetFormsOnline? The Malwarebytes research team has determined that GetFormsOnline is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. GetFormsOnline is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by GetFormsOnline? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did GetFormsOnline get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove GetFormsOnline? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of GetFormsOnline? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the GetFormsOnline entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the GetFormsOnline hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/getformsonline/S22907/index.html?n=C05D9F5&p2=%5EBX2%5Expu150%5ES22914%5Enl&ptb=5D1BF817-2DC0-4C43-BCF8-112D52A74C82&si=1088453&coid=d0562ac05d044860aad0c75867bf7bcf FF Homepage: hxxp://hp.myway.com/getformsonline/S22907/index.html?coId=a3f6276cc45d47ef950e892927293263&subId&ln=en&n=783a8341&ptb=B6F49412-F555-4EDC-94DE-47C4ECA0E293&st&p2=%5EBX2%5Efoxyyy%5ES22911%5Enl&si FF Extension: GetFormsOnline - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\_dbMembers_@free.getformsonline.com [2017-10-06] CHR Extension: (GetFormsOnline) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl [2017-10-06] C:\Users\{username}\AppData\Local\GetFormsOnlineTooltab GetFormsOnline Internet Explorer Homepage and New Tab (HKCU\...\GetFormsOnlineTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/6/17 Scan Time: 9:55 AM Log File: c4ae16cc-aa6b-11e7-b751-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2960 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 323100 Threats Detected: 389 Threats Quarantined: 389 Time Elapsed: 1 min, 57 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFormsOnlineTooltab\TooltabExtension.dll, Quarantined, [838], [356944],1.0.2960 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFormsOnlineTooltab Uninstall Internet Explorer, Delete-on-Reboot, [838], [356944],1.0.2960 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFormsOnlineTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2960 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2960 Data Stream: 0 (No malicious items detected) Folder: 89 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFormsOnlineTooltab, Delete-on-Reboot, [838], [356944],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KLEGPJOABNDJFNAKOIGGFNFODDEJHGCL, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_DBMEMBERS_@FREE.GETFORMSONLINE.COM, Delete-on-Reboot, [259], [302304],1.0.2960 File: 296 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFormsOnlineTooltab\TooltabExtension.dll, Delete-on-Reboot, [838], [356944],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KLEGPJOABNDJFNAKOIGGFNFODDEJHGCL\12.703.11.56376_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099316.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099329.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099351.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099352.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099353.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099354.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099355.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099356.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099357.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099358.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099359.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099389.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099406.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224143527.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224143528.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_DBMEMBERS_@FREE.GETFORMSONLINE.COM\INSTALL.RDF, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome\ffxtbr.jar, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF\manifest.mf, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF\mozilla.rsa, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF\mozilla.sf, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\bootstrap.js, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome.manifest, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome.manifest.restartless, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\GETFORMSONLINE.D0562AC05D044860AAD0C75867BF7BCF.EXE, Delete-on-Reboot, [259], [365288],1.0.2960 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  15. What is DigiSmirkz? The Malwarebytes research team has determined that DigiSmirkz is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. DigiSmirkz is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by DigiSmirkz? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did DigiSmirkz get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove DigiSmirkz? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of DigiSmirkz? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the DigiSmirkz entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the DigiSmirkz hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/digismirkz/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/digismirkz/ttab02/index.html?coId={coid2}&subId&ln=en&n={n1}&ptb={ptb2}&st&p2={p22}&si FF Extension: DigiSmirkz - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_i7Members_@free.digismirkz.com [2017-09-28] CHR Extension: (DigiSmirkz) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof [2017-09-28] C:\Users\{username}\AppData\Local\DigiSmirkzTooltab DigiSmirkz Internet Explorer Homepage and New Tab (HKCU\...\DigiSmirkzTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 9/28/17 Scan Time: 10:49 AM Log File: fc49955e-a429-11e7-b751-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2903 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 321655 Threats Detected: 406 Threats Quarantined: 406 Time Elapsed: 1 min, 58 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DigiSmirkzTooltab\TooltabExtension.dll, Quarantined, [838], [356944],1.0.2903 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DigiSmirkzTooltab Uninstall Internet Explorer, Delete-on-Reboot, [838], [356944],1.0.2903 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DigiSmirkzTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2903 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2903 Data Stream: 0 (No malicious items detected) Folder: 89 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DigiSmirkzTooltab, Delete-on-Reboot, [838], [356944],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FHIBENOOMGNPPDHBJAEPHEPHKDDNOKOF, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_I7MEMBERS_@FREE.DIGISMIRKZ.COM, Delete-on-Reboot, [259], [302304],1.0.2903 File: 313 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DigiSmirkzTooltab\TooltabExtension.dll, Delete-on-Reboot, [838], [356944],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FHIBENOOMGNPPDHBJAEPHEPHKDDNOKOF\12.702.11.34209_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766924.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230700203.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230700267.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230700284.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230746606.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766915.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766916.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766917.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766918.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766919.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766920.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766921.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766922.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766923.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766925.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766926.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766927.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766928.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766929.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766930.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766931.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766933.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766934.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766935.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766936.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766937.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766938.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766939.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766940.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766941.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766942.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [356946],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_I7MEMBERS_@FREE.DIGISMIRKZ.COM\INSTALL.RDF, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome\ffxtbr.jar, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF\manifest.mf, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF\mozilla.rsa, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF\mozilla.sf, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\bootstrap.js, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome.manifest, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome.manifest.restartless, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\DIGISMIRKZ.{coid1}.EXE, Delete-on-Reboot, [259], [365288],1.0.2903 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  16. I had Win 8 with Spyware Blaster, Win Defender and MalewareBytes3.2.2.(free version). All seemed fine. Then I purchased the full version of MWB's. Right off, neither of my browsers would open. After some checking, I found that if I deactivated the full MWB's then browsers would open. I deleted MWB's and reinstalled it. Same thing. So a friend helped me and we found an add-on in my Pale Moon browser. I can't find the exact name of it, but it had "myway" in it. We removed that add-on from Pale Moon and thought we solved the problem. It didn't Some subsequent checking also found what looks like 2 malwares called: A variant of Win/32/Systweak .L potentially unwanted (and I guess) a variant of Win32/Systweak N a potentially unwanted application. I think(but mot sure) that those were taken care of. For what I know, my system should be free of malware. So I'm out of ideas. Nothing I did solved the problem. I'm using Pale Moon and Internet Explorer. Here is the file I think you want. mb-check-results.zip. TY in advance
  17. What is GetFreeGifs? The Malwarebytes research team has determined that GetFreeGifs is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. GetFreeGifs is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by GetFreeGifs? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did GetFreeGifs get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove GetFreeGifs? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of GetFreeGifs? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the GetFreeGifs entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the GetFreeGifs hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/getfreegifs/S22699/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_oyMembers_@free.getfreegifs.com.xpi [2017-09-20] CHR Extension: (GetFreeGifs) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep [2017-09-20] C:\Users\{username}\AppData\Local\GetFreeGifsTooltab GetFreeGifs Internet Explorer Homepage and New Tab (HKCU\...\GetFreeGifsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\GetFreeGifsTooltab Adds the file TooltabExtension.dll"="8/7/2017 6:31 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0 Adds the file bg.html"="7/10/2017 2:53 PM, 6119 bytes, A Adds the file buildVars"="7/10/2017 2:53 PM, 8 bytes, A Adds the file buildVars.js"="7/10/2017 2:53 PM, 2582 bytes, A Adds the file companionSW.js"="7/10/2017 2:53 PM, 15026 bytes, A Adds the file config.js"="7/10/2017 2:53 PM, 6203 bytes, A Adds the file contentScript.css"="7/10/2017 2:53 PM, 1362 bytes, A Adds the file contentScript.js"="7/10/2017 2:53 PM, 32297 bytes, A Adds the file debug.html"="7/10/2017 2:53 PM, 299 bytes, A Adds the file debug.jade"="7/10/2017 2:53 PM, 291 bytes, A Adds the file extension_toolbar_api.js"="7/10/2017 2:53 PM, 3146 bytes, A Adds the file initWidgetWindow.js"="7/10/2017 2:53 PM, 768 bytes, A Adds the file manifest.json"="9/20/2017 9:09 AM, 4065 bytes, A Adds the file newTabContentScript.js"="7/10/2017 2:53 PM, 1289 bytes, A Adds the file options.html"="7/10/2017 2:53 PM, 1910 bytes, A Adds the file spent.css"="7/10/2017 2:53 PM, 29420 bytes, A Adds the file spent.html"="7/10/2017 2:53 PM, 4990 bytes, A Adds the file spent.js"="7/10/2017 2:53 PM, 3767 bytes, A Adds the file spent2.css"="7/10/2017 2:53 PM, 29440 bytes, A Adds the file spent2.html"="7/10/2017 2:53 PM, 4988 bytes, A Adds the file spentJ.js"="7/10/2017 2:53 PM, 2892 bytes, A Adds the file spentK.html"="7/10/2017 2:53 PM, 3054 bytes, A Adds the file spentK.js"="7/10/2017 2:53 PM, 875 bytes, A Adds the file startup.js"="7/10/2017 2:53 PM, 4380 bytes, A Adds the file stub.html"="7/10/2017 2:53 PM, 371 bytes, A Adds the file stubby.html"="7/10/2017 2:53 PM, 2665 bytes, A Adds the file superFrame.js"="7/10/2017 2:53 PM, 724 bytes, A Adds the file toolbar.html"="7/10/2017 2:53 PM, 5293 bytes, A Adds the file toolbar.js"="7/10/2017 2:53 PM, 43162 bytes, A Adds the file toolbarUI.css"="7/10/2017 2:53 PM, 4331 bytes, A Adds the file toolbarUI.html"="7/10/2017 2:53 PM, 922 bytes, A Adds the file toolbarUI.js"="7/10/2017 2:53 PM, 28138 bytes, A Adds the file url.js"="7/10/2017 2:53 PM, 13245 bytes, A Adds the file urlFragmentActions.js"="7/10/2017 2:53 PM, 1944 bytes, A Adds the file webtooltab.cs.js"="7/10/2017 2:53 PM, 1694 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata Adds the file computed_hashes.json"="9/20/2017 9:09 AM, 48579 bytes, A Adds the file verified_contents.json"="7/10/2017 2:53 PM, 33279 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter Adds the file adapterUtil.js"="7/10/2017 2:53 PM, 4533 bytes, A Adds the file widget-adapter.js"="7/10/2017 2:53 PM, 7647 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js Adds the file bs.30.js"="7/10/2017 2:53 PM, 1888 bytes, A Adds the file common.js"="7/10/2017 2:53 PM, 23233 bytes, A Adds the file dynamic.js"="7/10/2017 2:53 PM, 2169 bytes, A Adds the file enableDetect.js"="7/10/2017 2:53 PM, 1443 bytes, A Adds the file eventListening.js"="7/10/2017 2:53 PM, 567 bytes, A Adds the file global.js"="7/10/2017 2:53 PM, 4687 bytes, A Adds the file jquery-1.7.1.min.js"="7/10/2017 2:53 PM, 93868 bytes, A Adds the file list-interaction.js"="7/10/2017 2:53 PM, 5032 bytes, A Adds the file messageEventListener.js"="7/10/2017 2:53 PM, 983 bytes, A Adds the file navRedirector.js"="7/10/2017 2:53 PM, 1350 bytes, A Adds the file paramReplacer.js"="7/10/2017 2:53 PM, 5169 bytes, A Adds the file PartnerId.js"="7/10/2017 2:53 PM, 21973 bytes, A Adds the file set.js"="7/10/2017 2:53 PM, 531 bytes, A Adds the file underscore-1.3.1.min.js"="7/10/2017 2:53 PM, 12248 bytes, A Adds the file underscore-1.5.2.min.js"="7/10/2017 2:53 PM, 14431 bytes, A Adds the file unifiedLogging.js"="7/10/2017 2:53 PM, 1224 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background Adds the file ApiBasedWidget.js"="7/10/2017 2:53 PM, 15051 bytes, A Adds the file widget-api-impl.js"="7/10/2017 2:53 PM, 25378 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window Adds the file hiddenWidgetWindow.html"="7/10/2017 2:53 PM, 542 bytes, A Adds the file hiddenWidgetWindow.js"="7/10/2017 2:53 PM, 1253 bytes, A Adds the file hiddenWidgetWindowInit.js"="7/10/2017 2:53 PM, 343 bytes, A Adds the file widgetWindow.html"="7/10/2017 2:53 PM, 780 bytes, A Adds the file widgetWindow.js"="7/10/2017 2:53 PM, 1431 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background Adds the file updateSearch.js"="7/10/2017 2:53 PM, 11273 bytes, A Adds the file updateSearchPromptBg.js"="7/10/2017 2:53 PM, 27728 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground Adds the file 07_buttons2.png"="7/10/2017 2:53 PM, 4928 bytes, A Adds the file 08_buttons2.png"="7/10/2017 2:53 PM, 6597 bytes, A Adds the file defaultSearchModal.html"="7/10/2017 2:53 PM, 6483 bytes, A Adds the file defaultSearchModalInjector.css"="7/10/2017 2:53 PM, 505 bytes, A Adds the file defaultSearchModalInjector.js"="7/10/2017 2:53 PM, 3031 bytes, A Adds the file tvf_btn_ok.png"="7/10/2017 2:53 PM, 2373 bytes, A Adds the file tvf_btn_ok2.png"="7/10/2017 2:53 PM, 3057 bytes, A Adds the file tvf_restart_alert_icon.png"="7/10/2017 2:53 PM, 1281 bytes, A Adds the file tvf_restart_icon.png"="7/10/2017 2:53 PM, 1670 bytes, A Adds the file updateSearchPromptFg.js"="7/10/2017 2:53 PM, 12292 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kcdnokmjmlnenmcehbaofkjmebadocep Adds the file 000003.log"="9/20/2017 9:09 AM, 1213 bytes, A Adds the file CURRENT"="9/20/2017 9:09 AM, 16 bytes, A Adds the file LOCK"="9/20/2017 9:09 AM, 0 bytes, A Adds the file LOG"="9/20/2017 9:09 AM, 185 bytes, A Adds the file MANIFEST-000001"="9/20/2017 9:09 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kcdnokmjmlnenmcehbaofkjmebadocep Adds the file 000003.log"="9/20/2017 9:09 AM, 398 bytes, A Adds the file CURRENT"="9/20/2017 9:09 AM, 16 bytes, A Adds the file LOCK"="9/20/2017 9:09 AM, 0 bytes, A Adds the file LOG"="9/20/2017 9:09 AM, 184 bytes, A Adds the file MANIFEST-000001"="9/20/2017 9:09 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_oyMembers_@free.getfreegifs.com Adds the file storage.js"="9/20/2017 9:07 AM, 2108 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _oyMembers_@free.getfreegifs.com.xpi"="9/20/2017 9:07 AM, 28451 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\GetFreeGifs] "Start Page"="REG_SZ", "http://hp.myway.com/getfreegifs/S22699/index.html?n={n1}&p2=^CSU^glgyyy^S22699^nl&ptb={ptb1}&coid={coid1}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYSCVNM%3Fc%3D{ptb1}%26ptb%3D^CSU^glgyyy^S22699^nl" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/getfreegifs/S22699/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\GetFreeGifsTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "GetFreeGifs Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\GetFreeGifsTooltab\TooltabExtension.dll" U uninstall:GetFreeGifs" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 9/20/17 Scan Time: 9:23 AM Log File: 9d591779-9dd4-11e7-a853-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2847 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 320319 Threats Detected: 328 Threats Quarantined: 328 Time Elapsed: 1 min, 50 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFreeGifsTooltab\TooltabExtension.dll, Quarantined, [836], [356944],1.0.2847 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFreeGifsTooltab Uninstall Internet Explorer, Delete-on-Reboot, [259], [352442],1.0.2847 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFreeGifsTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2847 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2847 Data Stream: 0 (No malicious items detected) Folder: 86 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFreeGifsTooltab, Delete-on-Reboot, [836], [356944],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KCDNOKMJMLNENMCEHBAOFKJMEBADOCEP, Delete-on-Reboot, [259], [301932],1.0.2847 File: 238 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFreeGifsTooltab\TooltabExtension.dll, Delete-on-Reboot, [836], [356944],1.0.2847 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KCDNOKMJMLNENMCEHBAOFKJMEBADOCEP\12.702.11.45161_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953198.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953210.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953211.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953262.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953279.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\GETFREEGIFS.{coid1}.EXE, Delete-on-Reboot, [259], [365288],1.0.2847 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  18. What is WorldOfNotes? The Malwarebytes research team has determined that WorldOfNotes is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. WorldOfNotes is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by WorldOfNotes? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did WorldOfNotes get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove WorldOfNotes? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of WorldOfNotes? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the WorldOfNotes entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the WorldOfNotes hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/worldofnotes/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\_lbMembers_@free.worldofnotes.com.xpi [2017-08-29] CHR Extension: (worldofnotes) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc [2017-08-29] C:\Users\{username}\AppData\Local\World of NotesTooltab World of Notes Internet Explorer Homepage and New Tab (HKCU\...\World of NotesTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 8/29/17 Scan Time: 11:44 AM Log File: 9e05a157-8c9e-11e7-a9dc-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.186 Update Package Version: 1.0.2680 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 317213 Threats Detected: 334 Threats Quarantined: 334 Time Elapsed: 1 min, 37 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\World of NotesTooltab\TooltabExtension.dll, Quarantined, [829], [356944],1.0.2680 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\World of NotesTooltab Uninstall Internet Explorer, Delete-on-Reboot, [829], [356944],1.0.2680 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\World of NotesTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2680 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2680 Data Stream: 0 (No malicious items detected) Folder: 86 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\World of NotesTooltab, Delete-on-Reboot, [829], [356944],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MHKNMLPENOHEHEEOPONMDEFINACPMAGC, Delete-on-Reboot, [259], [301932],1.0.2680 File: 244 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_ext.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_ext.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.myway.com_0.localstorage, Delete-on-Reboot, [259], [240305],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.myway.com_0.localstorage-journal, Delete-on-Reboot, [259], [240305],1.0.2680 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\World of NotesTooltab\TooltabExtension.dll, Delete-on-Reboot, [829], [356944],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MHKNMLPENOHEHEEOPONMDEFINACPMAGC\12.702.11.38290_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133145.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133157.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133158.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133209.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133226.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\WORLDOFNOTES.EXE, Delete-on-Reboot, [259], [365288],1.0.2680 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  19. What is VideoDownloadConverter? The Malwarebytes research team has determined that VideoDownloadConverter is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. VideoDownloadConverter is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by VideoDownloadConverter? You may see this browser extension: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did VideoDownloadConverter get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site brought up by adware. How do I remove VideoDownloadConverter? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of VideoDownloadConverter? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the VideoDownloadConverter entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the VideoDownloadConverter hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/videodownloadconverter/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/videodownloadconverter/ttab02/index.html?coId={coid2}&subId={si1}&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si={si1} FF Extension: VideoDownloadConverter - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_4zMembers_@www.videodownloadconverter.com [2017-07-27] VideoDownloadConverter Internet Explorer Homepage and New Tab (HKCU\...\VideoDownloadConverterTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\VideoDownloadConverterTooltab Adds the file TooltabExtension.dll"="10/19/2016 7:30 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com Adds the file bootstrap.js"="7/27/2017 9:10 AM, 24987 bytes, A Adds the file chrome.manifest"="7/27/2017 9:10 AM, 135 bytes, A Adds the file chrome.manifest.restartless"="7/27/2017 9:10 AM, 135 bytes, A Adds the file install.rdf"="7/27/2017 9:10 AM, 1428 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome Adds the file ffxtbr.jar"="7/27/2017 9:10 AM, 346808 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF Adds the file manifest.mf"="7/27/2017 9:10 AM, 680 bytes, A Adds the file mozilla.rsa"="7/27/2017 9:10 AM, 4200 bytes, A Adds the file mozilla.sf"="7/27/2017 9:10 AM, 121 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\VideoDownloadConverter_4z Adds the file {ptb2}.sqlite"="7/27/2017 9:10 AM, 98304 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/videodownloadconverter/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverterTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "VideoDownloadConverter Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\VideoDownloadConverterTooltab\TooltabExtension.dll" U uninstall:VideoDownloadConverter" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\VideoDownloadConverter] "Start Page"="REG_SZ", "http://hp.myway.com/videodownloadconverter/ttab02/index.html?n={n1}&p2=^HJ^xpu632^TTAB02^nl&ptb={ptb1}&si={si1}&coid={coid1}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FDNMWMSZ%3Fc%3D{ptb1}" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/27/17 Scan Time: 9:25 AM Log File: mbamVideoDownloadConvert.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2447 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 319477 Threats Detected: 66 Threats Quarantined: 66 Time Elapsed: 1 min, 34 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\VIDEODOWNLOADCONVERTERTOOLTAB\TOOLTABEXTENSION.DLL, Quarantined, [251], [301125],1.0.2447 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VideoDownloadConverterTooltab Uninstall Internet Explorer, Delete-on-Reboot, [251], [301125],1.0.2447 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VideoDownloadConverterTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [251], [352442],1.0.2447 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [251], [293497],1.0.2447 Data Stream: 0 (No malicious items detected) Folder: 5 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\VideoDownloadConverterTooltab, Delete-on-Reboot, [814], [356944],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\VideoDownloadConverter_4z, Delete-on-Reboot, [251], [240302],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_4ZMEMBERS_@WWW.VIDEODOWNLOADCONVERTER.COM, Delete-on-Reboot, [251], [302304],1.0.2447 File: 57 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\VIDEODOWNLOADCONVERTERTOOLTAB\TOOLTABEXTENSION.DLL, Delete-on-Reboot, [251], [301125],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [356946],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\VIDEODOWNLOADCONVERT.{coid1}.EXE, Delete-on-Reboot, [251], [365288],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\VideoDownloadConverter_4z\{ptb2}.sqlite, Delete-on-Reboot, [251], [240302],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.myway.com_0.localstorage, Delete-on-Reboot, [251], [240305],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.myway.com_0.localstorage-journal, Delete-on-Reboot, [251], [240305],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_4ZMEMBERS_@WWW.VIDEODOWNLOADCONVERTER.COM\INSTALL.RDF, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome\ffxtbr.jar, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF\manifest.mf, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF\mozilla.rsa, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF\mozilla.sf, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\bootstrap.js, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome.manifest, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome.manifest.restartless, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [251], [240306],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [251], [240306],1.0.2447 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  20. What is MergeDocsOnline? The Malwarebytes research team has determined that MergeDocsOnline is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchs