Search the Community

Showing results for tags 'pup.optional.mindspark'.



More search options

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Malware Removal for Windows
    • Malware Removal for Mac
    • Malware Removal for Mobile
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes 3
    • Malwarebytes for Mac
    • Malwarebytes for Android
    • False Positives
    • Translator Lounge
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
  • General
    • General Chat
    • Forums Announcements & Feedback

Found 43 results

  1. What is fromDOCtoPDF? The Malwarebytes research team has determined that fromDOCtoPDF is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. fromDOCtoPDF is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by fromDOCtoPDF? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did fromDOCtoPDF get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove fromDOCtoPDF? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of fromDOCtoPDF? If you are using an older version of Malwarebytes, you may have to remove the Chrome extension manually under Tools > More Tools > Extensions. Click on the bin behind the fromDOCtoPDF entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the fromDOCtoPDF hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/fromdoctopdf/ttab02ie/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_65Members_@download.fromdoctopdf.com.xpi [2017-12-06] CHR Extension: (FromDocToPDF) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie [2017-12-06] C:\Users\{username}\AppData\Local\FromDocToPDFTooltab FromDocToPDF Internet Explorer Homepage and New Tab (HKCU\...\FromDocToPDFTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant cahnges made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\FromDocToPDFTooltab Adds the file TooltabExtension.dll"="9/13/2017 8:43 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0 Adds the file dynamicNewTab.html"="11/7/2017 10:34 AM, 932 bytes, A Adds the file manifest.json"="12/6/2017 9:31 AM, 2498 bytes, A Adds the file product.html"="11/7/2017 10:34 AM, 932 bytes, A Adds the file stubby.html"="11/7/2017 10:34 AM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata Adds the file computed_hashes.json"="12/6/2017 9:31 AM, 3620 bytes, A Adds the file verified_contents.json"="11/7/2017 10:34 AM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\config Adds the file config.json"="11/7/2017 10:34 AM, 1517 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons Adds the file icon128.png"="12/6/2017 9:31 AM, 10808 bytes, A Adds the file icon16.png"="11/7/2017 10:34 AM, 1587 bytes, A Adds the file icon19disabled.png"="11/7/2017 10:34 AM, 1512 bytes, A Adds the file icon19on.png"="12/6/2017 9:31 AM, 702 bytes, A Adds the file icon48.png"="12/6/2017 9:31 AM, 3585 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js Adds the file ajax.js"="11/7/2017 10:34 AM, 2250 bytes, A Adds the file background.js"="11/7/2017 10:34 AM, 19608 bytes, A Adds the file chrome.js"="11/7/2017 10:34 AM, 180 bytes, A Adds the file content_script.js"="11/7/2017 10:34 AM, 5917 bytes, A Adds the file dlp.js"="11/7/2017 10:34 AM, 5690 bytes, A Adds the file dlpHelper.js"="11/7/2017 10:34 AM, 1836 bytes, A Adds the file extension_detect.js"="11/7/2017 10:34 AM, 4343 bytes, A Adds the file index.js"="11/7/2017 10:34 AM, 82 bytes, A Adds the file logger.js"="11/7/2017 10:34 AM, 575 bytes, A Adds the file pageUtils.js"="11/7/2017 10:34 AM, 2241 bytes, A Adds the file product.js"="11/7/2017 10:34 AM, 4434 bytes, A Adds the file storage.js"="11/7/2017 10:34 AM, 1675 bytes, A Adds the file TabManager.js"="11/7/2017 10:34 AM, 189 bytes, A Adds the file TemplateParser.js"="11/7/2017 10:34 AM, 3080 bytes, A Adds the file ul.js"="11/7/2017 10:34 AM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/7/2017 10:34 AM, 2521 bytes, A Adds the file urlUtils.js"="11/7/2017 10:34 AM, 5385 bytes, A Adds the file util.js"="11/7/2017 10:34 AM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/7/2017 10:34 AM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\libs Adds the file PartnerId.js"="11/7/2017 10:34 AM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie Adds the file 000003.log"="12/6/2017 9:31 AM, 5071 bytes, A Adds the file CURRENT"="12/6/2017 9:31 AM, 16 bytes, A Adds the file LOCK"="12/6/2017 9:31 AM, 0 bytes, A Adds the file LOG"="12/6/2017 9:32 AM, 412 bytes, A Adds the file LOG.old"="12/6/2017 9:31 AM, 185 bytes, A Adds the file MANIFEST-000001"="12/6/2017 9:31 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_65Members_@download.fromdoctopdf.com Adds the file storage.js"="12/6/2017 9:32 AM, 2501 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _65Members_@download.fromdoctopdf.com.xpi"="12/6/2017 9:28 AM, 55285 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\FromDocToPDF] "Start Page"="REG_SZ", "http://hp.myway.com/fromdoctopdf/ttab02ie/index.html?n={n}&p2=^Y6^mni000^ttab02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2F%3D{ptb}%26ptb%3Dttab02" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/fromdoctopdf/ttab02ie/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDFTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "FromDocToPDF Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\FromDocToPDFTooltab\TooltabExtension.dll" U uninstall:FromDocToPDF" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 12/6/17 Scan Time: 9:42 AM Log File: 62debd36-da61-11e7-ae87-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3421 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 243087 Threats Detected: 56 Threats Quarantined: 56 Time Elapsed: 1 min, 56 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FromDocToPDFTooltab\TooltabExtension.dll, Quarantined, [777], [356944],1.0.3421 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FromDocToPDFTooltab Uninstall Internet Explorer, Quarantined, [777], [356944],1.0.3421 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FromDocToPDFTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [225], [352442],1.0.3421 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [225], [293497],1.0.3421 Data Stream: 0 (No malicious items detected) Folder: 9 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FromDocToPDFTooltab, Quarantined, [777], [356944],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\config, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\libs, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KBFHENINKDONANKPFFGBMKILNLKMPDIE\13.321.12.16049_0, Quarantined, [777], [456842],1.0.3421 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FromDocToPDFTooltab\TooltabExtension.dll, Quarantined, [777], [356944],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_65Members_@download.fromdoctopdf.com.xpi, Quarantined, [777], [457930],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\000003.log, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\CURRENT, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\LOCK, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\LOG, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\LOG.old, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kbfheninkdonankpffgbmkilnlkmpdie\MANIFEST-000001, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KBFHENINKDONANKPFFGBMKILNLKMPDIE\13.321.12.16049_0\CONFIG\CONFIG.JSON, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon128.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon16.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon19disabled.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon19on.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\icons\icon48.png, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\ajax.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\background.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\chrome.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\content_script.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\dlp.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\dlpHelper.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\extension_detect.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\index.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\logger.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\pageUtils.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\product.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\storage.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\TabManager.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\TemplateParser.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\ul.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\urlFragmentActions.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\urlUtils.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\util.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\js\webtooltabAPI.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\libs\PartnerId.js, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata\computed_hashes.json, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\_metadata\verified_contents.json, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\dynamicNewTab.html, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\manifest.json, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\product.html, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfheninkdonankpffgbmkilnlkmpdie\13.321.12.16049_0\stubby.html, Quarantined, [777], [456842],1.0.3421 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\FROMDOCTOPDF.EXE, Quarantined, [225], [365288],1.0.3421 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  2. What is InternetSpeedTracker? The Malwarebytes research team has determined that InternetSpeedTracker is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. InternetSpeedTracker is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by InternetSpeedTracker? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did InternetSpeedTracker get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website after a redirect by an ad-rotator. How do I remove InternetSpeedTracker? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of InternetSpeedTracker? If you are using Chrome and an older version of Malwarebytes, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the InternetSpeedTracker entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the InternetSpeedTracker hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/internetspeedtracker/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_9tMembers_@free.internetspeedtracker.com.xpi [2017-11-29] CHR Extension: (InternetSpeedTracker) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc [2017-11-29] C:\Users\{username}\AppData\Local\Internet Speed TrackerTooltab Internet Speed Tracker Internet Explorer Homepage and New Tab (HKCU\...\Internet Speed TrackerTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0 Adds the file dynamicNewTab.html"="11/7/2017 10:40 AM, 932 bytes, A Adds the file manifest.json"="11/29/2017 8:54 AM, 2536 bytes, A Adds the file product.html"="11/7/2017 10:40 AM, 932 bytes, A Adds the file stubby.html"="11/7/2017 10:40 AM, 932 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata Adds the file computed_hashes.json"="11/29/2017 8:54 AM, 3620 bytes, A Adds the file verified_contents.json"="11/7/2017 10:40 AM, 4621 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\config Adds the file config.json"="11/7/2017 10:40 AM, 1587 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons Adds the file icon128.png"="11/29/2017 8:54 AM, 4963 bytes, A Adds the file icon16.png"="11/7/2017 10:40 AM, 559 bytes, A Adds the file icon19disabled.png"="11/7/2017 10:40 AM, 631 bytes, A Adds the file icon19on.png"="11/29/2017 8:54 AM, 630 bytes, A Adds the file icon48.png"="11/29/2017 8:54 AM, 1597 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js Adds the file ajax.js"="11/7/2017 10:40 AM, 2250 bytes, A Adds the file background.js"="11/7/2017 10:40 AM, 19608 bytes, A Adds the file chrome.js"="11/7/2017 10:40 AM, 180 bytes, A Adds the file content_script.js"="11/7/2017 10:40 AM, 5917 bytes, A Adds the file dlp.js"="11/7/2017 10:40 AM, 5690 bytes, A Adds the file dlpHelper.js"="11/7/2017 10:40 AM, 1836 bytes, A Adds the file extension_detect.js"="11/7/2017 10:40 AM, 4343 bytes, A Adds the file index.js"="11/7/2017 10:40 AM, 82 bytes, A Adds the file logger.js"="11/7/2017 10:40 AM, 575 bytes, A Adds the file pageUtils.js"="11/7/2017 10:40 AM, 2241 bytes, A Adds the file product.js"="11/7/2017 10:40 AM, 4434 bytes, A Adds the file storage.js"="11/7/2017 10:40 AM, 1675 bytes, A Adds the file TabManager.js"="11/7/2017 10:40 AM, 189 bytes, A Adds the file TemplateParser.js"="11/7/2017 10:40 AM, 3080 bytes, A Adds the file ul.js"="11/7/2017 10:40 AM, 3824 bytes, A Adds the file urlFragmentActions.js"="11/7/2017 10:40 AM, 2521 bytes, A Adds the file urlUtils.js"="11/7/2017 10:40 AM, 5385 bytes, A Adds the file util.js"="11/7/2017 10:40 AM, 3840 bytes, A Adds the file webtooltabAPI.js"="11/7/2017 10:40 AM, 8357 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\libs Adds the file PartnerId.js"="11/7/2017 10:40 AM, 22130 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc Adds the file 000003.log"="11/29/2017 8:54 AM, 4961 bytes, A Adds the file CURRENT"="11/29/2017 8:54 AM, 16 bytes, A Adds the file LOCK"="11/29/2017 8:54 AM, 0 bytes, A Adds the file LOG"="11/29/2017 8:54 AM, 185 bytes, A Adds the file MANIFEST-000001"="11/29/2017 8:54 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Internet Speed TrackerTooltab Adds the file TooltabExtension.dll"="8/4/2017 7:01 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_9tMembers_@free.internetspeedtracker.com Adds the file storage.js"="11/29/2017 8:53 AM, 2472 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _9tMembers_@free.internetspeedtracker.com.xpi"="11/29/2017 8:52 AM, 44694 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "kohoehgoafblafjinhplmhcbphgaaobc"="REG_SZ", "5D62E9F71822E9740CD6B4F38D59B820BC7706AA534FFE42BEFA29FFEB4015AA" [HKEY_CURRENT_USER\Software\Internet Speed Tracker] "Start Page"="REG_SZ", "http://hp.myway.com/internetspeedtracker/ttab02/index.html?n={n}&p2=^BBQ^mni000^TTAB02&ptb={ptb}&coid={coid}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2F66QYSWY%3Fc%3D{ptb}%26ptb%3D^BBQ^mni000^TTAB02" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/internetspeedtracker/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Speed TrackerTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "Internet Speed Tracker Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\Internet Speed TrackerTooltab\TooltabExtension.dll" U uninstall:Internet Speed Tracker" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/29/17 Scan Time: 9:06 AM Log File: 2978c292-d4dc-11e7-ae87-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3371 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 335568 Threats Detected: 59 Threats Quarantined: 59 Time Elapsed: 4 min, 31 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\Internet Speed TrackerTooltab\TooltabExtension.dll, Quarantined, [851], [356944],1.0.3371 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Internet Speed TrackerTooltab Uninstall Internet Explorer, Quarantined, [851], [356944],1.0.3371 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\Internet Speed Tracker, Quarantined, [851], [444113],1.0.3371 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Internet Speed TrackerTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3371 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\Internet Speed Tracker|START PAGE, Quarantined, [851], [444113],1.0.3371 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3371 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\Internet Speed TrackerTooltab, Quarantined, [851], [356944],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_9tMembers_@free.internetspeedtracker.com, Quarantined, [851], [457935],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\config, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\libs, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KOHOEHGOAFBLAFJINHPLMHCBPHGAAOBC, Quarantined, [851], [456843],1.0.3371 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\Internet Speed TrackerTooltab\TooltabExtension.dll, Quarantined, [851], [356944],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_9tMembers_@free.internetspeedtracker.com.xpi, Quarantined, [851], [457930],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_9tMembers_@free.internetspeedtracker.com\storage.js, Quarantined, [851], [457935],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\000003.log, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\CURRENT, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\LOCK, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\LOG, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kohoehgoafblafjinhplmhcbphgaaobc\MANIFEST-000001, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KOHOEHGOAFBLAFJINHPLMHCBPHGAAOBC\13.321.12.16092_0\MANIFEST.JSON, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\config\config.json, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon128.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon16.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon19disabled.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon19on.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\icons\icon48.png, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\ajax.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\background.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\chrome.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\content_script.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\dlp.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\dlpHelper.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\extension_detect.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\index.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\logger.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\pageUtils.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\product.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\storage.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\TabManager.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\TemplateParser.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\ul.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\urlFragmentActions.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\urlUtils.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\util.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\js\webtooltabAPI.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\libs\PartnerId.js, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata\computed_hashes.json, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\_metadata\verified_contents.json, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\dynamicNewTab.html, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\product.html, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohoehgoafblafjinhplmhcbphgaaobc\13.321.12.16092_0\stubby.html, Quarantined, [851], [456843],1.0.3371 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\INTERNETSPEEDTRACKER.EXE, Quarantined, [260], [365288],1.0.3371 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  3. What is BringMeSports? The Malwarebytes research team has determined that BringMeSports is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. BringMeSports is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by BringMeSports? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did BringMeSports get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove BringMeSports? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of BringMeSports? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the BringMeSports entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the BringMeSports hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/bringmesports/ttab02/index.html?n={n}&p2={p2}&ptb={ptb}&coid={coid} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_1cMembers_@www.bringmesports.com.xpi [2017-11-21] FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2017-11-21] [not signed] CHR Extension: (BringMeSports) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp [2017-11-21] C:\Users\{username}\AppData\Local\BringMeSportsTooltab BringMeSports Internet Explorer Homepage and New Tab (HKCU\...\BringMeSportsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/21/17 Scan Time: 9:19 AM Log File: c16a7300-ce94-11e7-9d77-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3309 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 334440 Threats Detected: 59 Threats Quarantined: 58 Time Elapsed: 1 min, 52 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\BringMeSportsTooltab\TooltabExtension.dll, Quarantined, [849], [356944],1.0.3309 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BringMeSportsTooltab Uninstall Internet Explorer, Quarantined, [849], [356944],1.0.3309 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\BringMeSports, Quarantined, [849], [444113],1.0.3309 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\BringMeSports|START PAGE, Quarantined, [849], [444113],1.0.3309 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BringMeSportsTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3309 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3309 Data Stream: 0 (No malicious items detected) Folder: 10 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\BringMeSportsTooltab, Delete-on-Reboot, [849], [356944],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\BROWSER-EXTENSION-DATA\_1cMembers_@www.bringmesports.com, Quarantined, [849], [457934],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\_metadata, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\config, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\libs, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PLLNAAHMNJFAAOOLILCDEEPHJDDOBCFP\13.321.12.17428_0, Quarantined, [849], [456842],1.0.3309 File: 43 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\BringMeSportsTooltab\TooltabExtension.dll, Delete-on-Reboot, [849], [356944],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_1cMembers_@www.bringmesports.com.xpi, Quarantined, [849], [457930],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_1cMembers_@www.bringmesports.com\storage.js, Quarantined, [849], [457934],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\000003.log, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\CURRENT, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\LOCK, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\LOG, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pllnaahmnjfaaoolilcdeephjddobcfp\MANIFEST-000001, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\PLLNAAHMNJFAAOOLILCDEEPHJDDOBCFP\13.321.12.17428_0\CONFIG\CONFIG.JSON, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon128.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon16.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon19disabled.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon19on.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\icons\icon48.png, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\ajax.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\background.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\chrome.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\content_script.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\dlp.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\dlpHelper.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\extension_detect.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\index.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\logger.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\pageUtils.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\product.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\storage.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\TabManager.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\TemplateParser.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\ul.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\urlFragmentActions.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\urlUtils.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\util.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\js\webtooltabAPI.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\libs\PartnerId.js, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\_metadata\computed_hashes.json, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\_metadata\verified_contents.json, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\dynamicNewTab.html, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\manifest.json, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\product.html, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pllnaahmnjfaaoolilcdeephjddobcfp\13.321.12.17428_0\stubby.html, Quarantined, [849], [456842],1.0.3309 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\BRINGMESPORTS.EXE, Quarantined, [260], [365288],1.0.3309 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  4. What is MyEasyLotto? The Malwarebytes research team has determined that MyEasyLotto is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. MyEasyLotto is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by MyEasyLotto? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did MyEasyLotto get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website after being redirected by an ad-rotator. How do I remove MyEasyLotto? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of MyEasyLotto? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the MyEasyLotto entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the MyEasyLotto hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/myeasylotto/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: moz-extension://0ab636e7-6ece-4957-acbf-d9583497da3b/dynamicHomePage.html FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_pnMembers_@free.myeasylotto.com.xpi [2017-11-14] CHR Extension: (MyEasyLotto) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc [2017-11-14] C:\Users\{username}\AppData\Local\MyEasyLottoTooltab MyEasyLotto Internet Explorer Homepage and New Tab (HKCU\...\MyEasyLottoTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/14/17 Scan Time: 1:49 PM Log File: 387019b1-c93a-11e7-8cbe-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3253 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 333615 Threats Detected: 56 Threats Quarantined: 55 Time Elapsed: 2 min, 6 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyEasyLottoTooltab\TooltabExtension.dll, Quarantined, [850], [356944],1.0.3253 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyEasyLottoTooltab Uninstall Internet Explorer, Quarantined, [850], [356944],1.0.3253 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MyEasyLotto, Quarantined, [850], [444113],1.0.3253 Registry Value: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MyEasyLotto|START PAGE, Quarantined, [850], [444113],1.0.3253 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyEasyLottoTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [262], [352442],1.0.3253 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [262], [293497],1.0.3253 Data Stream: 0 (No malicious items detected) Folder: 9 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyEasyLottoTooltab, Delete-on-Reboot, [850], [356944],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\_metadata, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\config, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\libs, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FEEIDICOCFOBOMAABEPNAMKFBEPCDHJC, Quarantined, [850], [456843],1.0.3253 File: 41 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MyEasyLottoTooltab\TooltabExtension.dll, Delete-on-Reboot, [850], [356944],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_pnMembers_@free.myeasylotto.com.xpi, Quarantined, [850], [457845],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\000003.log, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\CURRENT, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\LOCK, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\LOG, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\feeidicocfobomaabepnamkfbepcdhjc\MANIFEST-000001, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FEEIDICOCFOBOMAABEPNAMKFBEPCDHJC\13.321.12.18566_0\MANIFEST.JSON, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\config\config.json, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon128.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon16.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon19disabled.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon19on.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\icons\icon48.png, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\ajax.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\background.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\chrome.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\content_script.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\dlp.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\dlpHelper.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\extension_detect.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\index.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\logger.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\pageUtils.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\product.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\storage.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\TabManager.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\TemplateParser.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\ul.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\urlFragmentActions.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\urlUtils.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\util.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\js\webtooltabAPI.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\libs\PartnerId.js, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\_metadata\computed_hashes.json, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\_metadata\verified_contents.json, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\dynamicNewTab.html, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\product.html, Quarantined, [850], [456843],1.0.3253 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\feeidicocfobomaabepnamkfbepcdhjc\13.321.12.18566_0\stubby.html, Quarantined, [850], [456843],1.0.3253 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  5. What is DirectionsOnline? The Malwarebytes research team has determined that DirectionsOnline is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. DirectionsOnline is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by DirectionsOnline? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did DirectionsOnline get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove DirectionsOnline? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of DirectionsOnline? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the DirectionsOnline entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the DirectionsOnline hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/directionsonline/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/directionsonline/ttab02/index.html?coId={coid2}&subId&ln=en&n={n2}&ptb={ptb2}&st&p2={p22}&si FF Extension: DirectionsOnline - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_ijMembers_@www.freedirectionsonline.com [2017-11-08] CHR Extension: (DirectionsOnline) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl [2017-11-08] C:\Users\{username}\AppData\Local\FreeDirectionsOnlineTooltab FreeDirectionsOnline Internet Explorer Homepage and New Tab (HKCU\...\FreeDirectionsOnlineTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/8/17 Scan Time: 9:34 AM Log File: b07b5b53-c45f-11e7-a2e4-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3203 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 332951 Threats Detected: 396 Threats Quarantined: 395 Time Elapsed: 1 min, 59 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FreeDirectionsOnlineTooltab\TooltabExtension.dll, Quarantined, [850], [356944],1.0.3203 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FreeDirectionsOnlineTooltab Uninstall Internet Explorer, Quarantined, [850], [356944],1.0.3203 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FreeDirectionsOnline, Quarantined, [850], [444113],1.0.3203 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FreeDirectionsOnlineTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [262], [352442],1.0.3203 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FreeDirectionsOnline|START PAGE, Quarantined, [850], [444113],1.0.3203 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [262], [293497],1.0.3203 Data Stream: 0 (No malicious items detected) Folder: 91 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\FreeDirectionsOnline_ij, Quarantined, [262], [240302],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FreeDirectionsOnlineTooltab, Delete-on-Reboot, [850], [356944],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\abstractbutton\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\thirdparty\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\uninstall\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\weather\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\generic\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\alert\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\link\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\abstractbutton, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\rss\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\images, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\radioWrapper, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\thirdparty, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\foreground, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\uninstall, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\generic, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\weather, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\background, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\alert, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\link, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\rss, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\adapter, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\_metadata, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HAPCFBGKDLNCMKELGHBNGCEHDHFDOPDL, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_IJMEMBERS_@WWW.FREEDIRECTIONSONLINE.COM, Quarantined, [850], [443664],1.0.3203 File: 299 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\FreeDirectionsOnline_ij\{ptb2}.sqlite, Quarantined, [262], [240302],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FreeDirectionsOnlineTooltab\TooltabExtension.dll, Delete-on-Reboot, [850], [356944],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [356946],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\000003.log, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\CURRENT, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\LOCK, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\LOG, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hapcfbgkdlncmkelghbngcehdhfdopdl\MANIFEST-000001, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HAPCFBGKDLNCMKELGHBNGCEHDHFDOPDL\12.702.11.34330_0\MANIFEST.JSON, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\adapter\adapterUtil.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\adapter\widget-adapter.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\alert\background\alertButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\background\FlareWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\flare\icons\Thumbs.db, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\generic\background\GenericWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\link\background\linkButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\background\menuButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\css\menuframe.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\html\menuframe.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\images\right_arrow.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\images\right_arrow_white.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\menuframe.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\query-string.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\menu\README.txt, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\rss\background\RssWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\components\weather\background\weatherButton.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\bs.30.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\common.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\dynamic.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\enableDetect.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\eventListening.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\global.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\list-interaction.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\messageEventListener.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\navRedirector.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\paramReplacer.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\PartnerId.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\set.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\common.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\set.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\invalid.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\jquery.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\qunit.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\qunit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\resource.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\resource.xml, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\common\widget-api\widget-context-1.0.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\background\ApiBasedWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\background\widget-api-impl.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\widgetWindow.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\api\window\widgetWindow.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\background\updateSearch.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\css\movieReviews.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\html\movieReviews.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\moviereviews\js\movieReviews.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\background\RadioWidget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\css\toolbar-item.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\foreground\button.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\background\searchBox.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestions.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestions.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestions.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\search\html\searchSuggestionsInit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\css\supertab.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\html\supertab.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\newtabfork.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\reporting.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\srchsugg.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\supertab.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\components\supertab\js\__utm.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\_metadata\computed_hashes.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\_metadata\verified_contents.json, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\arrowSprite.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon128.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon16.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon19disabled.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon19on.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\icon48.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150452.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150465.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150496.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231150513.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152148.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152149.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152153.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152167.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\231152546.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\down_arrow.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\magnifying_glass.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\RadioPlayerSprite.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\search_button.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\tvf_icon_guide.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\tvf_logo.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\images\wrench.png, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\newTabInitialize.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\chromeStorage.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\chromeUtils.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\companionSWUtils.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\exeManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\exeManagerNMD.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\exePackageManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\focusManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\globalBlacklistManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\messaging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\mutation_summary-min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\mutation_summary.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\nativeMessagingDispatcher.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\newTabInfo.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\options.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\readLocalStorage.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\recentlyClosedTabs.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\reservespacefortoolbar.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\reservespaceifenabled.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\scriptInjector.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\searchContext.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\settingsOverrides.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\toolbarCookieParser.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\toolbarPreinit.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\URILoaderContentScript.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\webTooltabAPI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\Widget.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\widgetContentScriptInjectee.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\widgetFactory.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\js\widgetWindowManager.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs\jquery-1.9.1.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\libs\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\cache.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\ce.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\debug.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\native\ss.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\activePing.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\buttonLogger.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\competitorDnsList.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\console.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\FFPreferencesPersister.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\httpTransport.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\HttpURL.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\internationalSearch.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\LocalStoragePersister.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\MindsparkGlobal.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\MindsparkGlobalNotes.txt, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\rsvp-latest.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\searchSuggestLocale.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\testHttpTransport.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\unifiedLogger.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\unifiedLogging.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\universalConsole.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\shared\utils.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent2.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\bg.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\buildVars, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\buildVars.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\companionSW.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\config.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\contentScript.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\contentScript.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\debug.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\debug.jade, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spentJ.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spentK.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spentK.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\startup.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\stub.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\stubby.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\superFrame.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbar.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbar.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbarUI.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbarUI.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\toolbarUI.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\url.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\urlFragmentActions.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\webtooltab.cs.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\extension_toolbar_api.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\initWidgetWindow.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\newTabContentScript.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\options.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent.html, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent.js, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hapcfbgkdlncmkelghbngcehdhfdopdl\12.702.11.34330_0\spent2.css, Quarantined, [850], [443121],1.0.3203 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_IJMEMBERS_@WWW.FREEDIRECTIONSONLINE.COM\INSTALL.RDF, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome\ffxtbr.jar, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF\manifest.mf, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF\mozilla.rsa, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\META-INF\mozilla.sf, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\bootstrap.js, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome.manifest, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_ijMembers_@www.freedirectionsonline.com\chrome.manifest.restartless, Quarantined, [850], [443664],1.0.3203 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\FREEDIRECTIONSONLINE..EXE, Quarantined, [262], [365288],1.0.3203 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  6. What is FormFetcherPro? The Malwarebytes research team has determined that FormFetcherPro is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. FormFetcherPro is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by FormFetcherPro? You may see this browser extensions/add-ons: these warnings during install: and notice some changed settings: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did FormFetcherPro get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their website. How do I remove FormFetcherPro? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of FormFetcherPro? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the FormFetcherPro entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the FormFetcherPro hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/formfetcherpro/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/formfetcherpro/ttab02/index.html?coId={coid2}&subId&ln=en&n={n1}&ptb={ptb2}&st&p2={p22}&si FF Extension: FormFetcherPro - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_hyMembers_@free.formfetcherpro.com [2017-11-02] CHR Extension: (FormFetcherPro) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc [2017-11-02] C:\Users\{username}\AppData\Local\FormFetcherProTooltab FormFetcherPro Internet Explorer Homepage and New Tab (HKCU\...\FormFetcherProTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/2/17 Scan Time: 11:15 AM Log File: d2cbfd55-bfb6-11e7-b723-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3156 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 332380 Threats Detected: 400 Threats Quarantined: 399 Time Elapsed: 2 min, 13 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FormFetcherProTooltab\TooltabExtension.dll, Quarantined, [850], [356944],1.0.3156 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FormFetcherProTooltab Uninstall Internet Explorer, Quarantined, [850], [356944],1.0.3156 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FormFetcherPro, Quarantined, [850], [444113],1.0.3156 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FormFetcherProTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [262], [352442],1.0.3156 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\FormFetcherPro|START PAGE, Quarantined, [850], [444113],1.0.3156 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [262], [293497],1.0.3156 Data Stream: 0 (No malicious items detected) Folder: 90 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FormFetcherProTooltab, Delete-on-Reboot, [850], [356944],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\abstractbutton\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\thirdparty\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\uninstall\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\weather\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\generic\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\alert\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\link\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\abstractbutton, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\rss\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\images, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\radioWrapper, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\thirdparty, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\foreground, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\uninstall, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\generic, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\weather, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\background, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\alert, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\link, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\rss, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\adapter, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\_metadata, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JCOHBBECONNBKNAEAODOHNJCELEMNLFC, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_HYMEMBERS_@FREE.FORMFETCHERPRO.COM, Quarantined, [850], [443664],1.0.3156 File: 304 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\FormFetcherProTooltab\TooltabExtension.dll, Delete-on-Reboot, [850], [356944],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [319354],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [850], [356946],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\000003.log, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\CURRENT, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\LOCK, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\LOG, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jcohbbeconnbknaeaodohnjcelemnlfc\MANIFEST-000001, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JCOHBBECONNBKNAEAODOHNJCELEMNLFC\12.702.12.2078_0\MANIFEST.JSON, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\adapter\adapterUtil.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\adapter\widget-adapter.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\alert\background\alertButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\background\FlareWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\flare\icons\Thumbs.db, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\generic\background\GenericWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\link\background\linkButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\background\menuButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\css\menuframe.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\html\menuframe.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\images\right_arrow.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\images\right_arrow_white.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\menuframe.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\query-string.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\menu\README.txt, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\rss\background\RssWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\components\weather\background\weatherButton.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\bs.30.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\common.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\dynamic.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\enableDetect.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\eventListening.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\global.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\list-interaction.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\messageEventListener.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\navRedirector.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\paramReplacer.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\PartnerId.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\set.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\common.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\set.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\invalid.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\jquery.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\qunit.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\qunit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\resource.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\resource.xml, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\common\widget-api\widget-context-1.0.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\background\ApiBasedWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\background\widget-api-impl.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\widgetWindow.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\api\window\widgetWindow.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\background\updateSearch.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\css\movieReviews.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\html\movieReviews.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\moviereviews\js\movieReviews.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\background\RadioWidget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\css\toolbar-item.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\foreground\button.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\background\searchBox.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestions.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestions.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestions.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\search\html\searchSuggestionsInit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\css\supertab.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\html\supertab.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\newtabfork.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\reporting.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\srchsugg.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\supertab.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\unifiedLogging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\components\supertab\js\__utm.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\_metadata\computed_hashes.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\_metadata\verified_contents.json, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\arrowSprite.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon128.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon16.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon19disabled.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon19on.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\icon48.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230585972.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586007.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586022.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586023.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586024.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586025.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586026.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586027.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586028.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586029.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586030.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586031.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586032.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586062.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\230586079.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\down_arrow.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\magnifying_glass.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\RadioPlayerSprite.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\search_button.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\tvf_icon_guide.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\tvf_logo.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\images\wrench.png, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\newTabInitialize.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\chromeStorage.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\chromeUtils.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\companionSWUtils.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\exeManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\exeManagerNMD.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\exePackageManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\focusManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\globalBlacklistManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\messaging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\mutation_summary-min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\mutation_summary.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\nativeMessagingDispatcher.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\newTabInfo.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\options.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\readLocalStorage.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\recentlyClosedTabs.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\reservespacefortoolbar.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\reservespaceifenabled.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\scriptInjector.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\searchContext.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\settingsOverrides.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\toolbarCookieParser.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\toolbarPreinit.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\underscore-1.3.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\URILoaderContentScript.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\webTooltabAPI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\Widget.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\widgetContentScriptInjectee.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\widgetFactory.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\js\widgetWindowManager.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs\jquery-1.7.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs\jquery-1.9.1.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\libs\underscore-1.5.2.min.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\cache.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\ce.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\debug.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\native\ss.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\activePing.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\buttonLogger.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\competitorDnsList.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\console.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\FFPreferencesPersister.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\httpTransport.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\HttpURL.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\internationalSearch.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\LocalStoragePersister.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\MindsparkGlobal.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\MindsparkGlobalNotes.txt, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\rsvp-latest.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\searchSuggestLocale.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\testHttpTransport.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\unifiedLogger.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\unifiedLogging.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\universalConsole.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\shared\utils.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent2.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\bg.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\buildVars, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\buildVars.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\companionSW.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\config.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\contentScript.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\contentScript.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\debug.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\debug.jade, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spentJ.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spentK.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spentK.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\startup.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\stub.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\stubby.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\superFrame.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbar.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbar.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbarUI.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbarUI.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\toolbarUI.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\url.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\urlFragmentActions.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\webtooltab.cs.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\extension_toolbar_api.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\initWidgetWindow.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\newTabContentScript.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\options.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent.html, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent.js, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcohbbeconnbknaeaodohnjcelemnlfc\12.702.12.2078_0\spent2.css, Quarantined, [850], [443121],1.0.3156 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_HYMEMBERS_@FREE.FORMFETCHERPRO.COM\INSTALL.RDF, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome\ffxtbr.jar, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF\manifest.mf, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF\mozilla.rsa, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\META-INF\mozilla.sf, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\bootstrap.js, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome.manifest, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_hyMembers_@free.formfetcherpro.com\chrome.manifest.restartless, Quarantined, [850], [443664],1.0.3156 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\FORMFETCHERPRO..EXE, Quarantined, [262], [365288],1.0.3156 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  7. What is AtoZManuals? The Malwarebytes research team has determined that AtoZManuals is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. AtoZManuals is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by AtoZManuals? You may see this browser extensions/add-ons: and these changed Internet Explorer settings: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did AtoZManuals get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site after an ad-rotator redirect. How do I remove AtoZManuals? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of AtoZManuals? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the AtoZManuals entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the AtoZManuals hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/atozmanuals/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/atozmanuals/ttab02/index.html?coId={coid2}&subId={si1}&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si={si1} FF Extension: AtoZManuals - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\_hgMembers_@free.atozmanuals.com [2017-10-24] CHR Extension: (AtoZManuals ) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak [2017-10-24] C:\Users\{username}\AppData\Local\AtoZManualsTooltab AtoZManuals Internet Explorer Homepage and New Tab (HKCU\...\AtoZManualsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/24/17 Scan Time: 10:34 AM Log File: 32bed1a1-b896-11e7-be02-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3081 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 331320 Threats Detected: 109 Threats Quarantined: 108 Time Elapsed: 1 min, 48 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\AtoZManualsTooltab\TooltabExtension.dll, Quarantined, [846], [356944],1.0.3081 Registry Key: 2 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AtoZManualsTooltab Uninstall Internet Explorer, Quarantined, [846], [356944],1.0.3081 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\AtoZManuals, Quarantined, [846], [444113],1.0.3081 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AtoZManualsTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3081 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\AtoZManuals|START PAGE, Quarantined, [846], [444113],1.0.3081 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3081 Data Stream: 0 (No malicious items detected) Folder: 13 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\AtoZManuals_hg, Quarantined, [260], [240302],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\AtoZManualsTooltab, Delete-on-Reboot, [846], [356944],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_HGMEMBERS_@FREE.ATOZMANUALS.COM, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\_metadata, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\config, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\libs, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAFKEPGIKKBAGGOICIKKKDLKNJMNOCAK\13.300.12.6679_0, Quarantined, [846], [449576],1.0.3081 File: 90 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\AtoZManuals_hg\4275E541-3272-4C3D-BEBC-E5C5CFC680B3.sqlite, Quarantined, [260], [240302],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\AtoZManualsTooltab\TooltabExtension.dll, Delete-on-Reboot, [846], [356944],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_HGMEMBERS_@FREE.ATOZMANUALS.COM\INSTALL.RDF, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome\ffxtbr.jar, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF\manifest.mf, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF\mozilla.rsa, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\META-INF\mozilla.sf, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\bootstrap.js, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome.manifest, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_hgMembers_@free.atozmanuals.com\chrome.manifest.restartless, Quarantined, [846], [443664],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [319354],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [846], [356946],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\000003.log, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\CURRENT, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\LOCK, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\LOG, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\LOG.old, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aafkepgikkbaggoicikkkdlknjmnocak\MANIFEST-000001, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AAFKEPGIKKBAGGOICIKKKDLKNJMNOCAK\13.300.12.6679_0\LIBS\PARTNERID.JS, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\config\config.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon128.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon16.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon19disabled.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon19on.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\icons\icon48.png, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\ajax.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\background.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\chrome.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\content_script.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\dlp.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\dlpHelper.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\dynamicNewTab.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\extension_detect.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\index.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\logger.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\pageUtils.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\storage.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\TabManager.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\TemplateParser.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\ul.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\urlFragmentActions.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\urlUtils.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\util.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\js\webtooltabAPI.js, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\_metadata\computed_hashes.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\_metadata\verified_contents.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\dynamicNewTab.html, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafkepgikkbaggoicikkkdlknjmnocak\13.300.12.6679_0\manifest.json, Quarantined, [846], [449576],1.0.3081 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\ATOZMANUALS.EXE, Quarantined, [260], [365288],1.0.3081 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  8. What is InboxAce? The Malwarebytes research team has determined that InboxAce is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. InboxAce is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by InboxAce? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did InboxAce get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site after an ad-rotator redirect. How do I remove InboxAce? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of InboxAce? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the InboxAce entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the InboxAce hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/inboxace/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/inboxace/ttab02/index.html?coId={coid2}&subId={si1}&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si={si1} FF Extension: InboxAce - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\Extensions\_1gMembers_@www.inboxace.com [2017-10-18] CHR Extension: (InboxAce) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid [2017-10-18] C:\Users\{username}\AppData\Local\InboxAceTooltab InboxAce Internet Explorer Homepage and New Tab (HKCU\...\InboxAceTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/18/17 Scan Time: 9:05 AM Log File: c6a083d3-b3d2-11e7-833e-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.212 Update Package Version: 1.0.3037 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 330266 Threats Detected: 401 Threats Quarantined: 400 Time Elapsed: 2 min, 0 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\InboxAceTooltab\TooltabExtension.dll, Quarantined, [846], [356944],1.0.3037 Registry Key: 4 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InboxAceTooltab Uninstall Internet Explorer, Quarantined, [846], [356944],1.0.3037 PUP.Optional.MyWay.Generic, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\DOMSTORAGE\inboxace.dl.myway.com, Quarantined, [9044], [444109],1.0.3037 PUP.Optional.ASK.Generic, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\DOMSTORAGE\inboxace.dl.tb.ask.com, Quarantined, [1376], [444105],1.0.3037 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\InboxAce, Quarantined, [846], [444113],1.0.3037 Registry Value: 2 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\InboxAceTooltab Uninstall Internet Explorer|PUBLISHER, Quarantined, [260], [352442],1.0.3037 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\InboxAce|START PAGE, Quarantined, [846], [444113],1.0.3037 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replaced, [260], [293497],1.0.3037 Data Stream: 0 (No malicious items detected) Folder: 91 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\InboxAce_1g, Quarantined, [260], [240302],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\InboxAceTooltab, Delete-on-Reboot, [846], [356944],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\abstractbutton\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\thirdparty\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\uninstall\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\weather\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\generic\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\alert\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\link\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\abstractbutton, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\rss\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\images, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\radioWrapper, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\thirdparty, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\foreground, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\uninstall, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\generic, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\weather, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\background, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\alert, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\link, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\rss, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\adapter, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\_metadata, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKFCMEOEPJHCLGLAFBPPMEIDJJOLCGID, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\EXTENSIONS\_1GMEMBERS_@WWW.INBOXACE.COM, Quarantined, [846], [443664],1.0.3037 File: 302 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\InboxAce_1g\{ptb2}.sqlite, Quarantined, [260], [240302],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\InboxAceTooltab\TooltabExtension.dll, Delete-on-Reboot, [846], [356944],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [319354],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\PREFS.JS, Replaced, [846], [356946],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Secure Preferences, Removal Failed, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\Preferences, Replaced, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\000003.log, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\CURRENT, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\LOCK, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\LOG, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fkfcmeoepjhclglafbppmeidjjolcgid\MANIFEST-000001, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FKFCMEOEPJHCLGLAFBPPMEIDJJOLCGID\12.703.12.2371_0\MANIFEST.JSON, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\adapter\adapterUtil.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\adapter\widget-adapter.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\alert\background\alertButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\background\FlareWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\flare\icons\Thumbs.db, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\generic\background\GenericWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\link\background\linkButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\background\menuButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\css\menuframe.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\html\menuframe.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\images\right_arrow.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\images\right_arrow_white.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\menuframe.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\query-string.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\menu\README.txt, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\rss\background\RssWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\components\weather\background\weatherButton.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\bs.30.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\common.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\dynamic.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\enableDetect.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\eventListening.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\global.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\list-interaction.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\messageEventListener.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\navRedirector.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\paramReplacer.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\PartnerId.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\set.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\underscore-1.5.2.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\js\unifiedLogging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\common.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\set.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\invalid.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\jquery.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\qunit.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\qunit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\resource.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\resource.xml, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\common\widget-api\widget-context-1.0.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\background\ApiBasedWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\background\widget-api-impl.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\widgetWindow.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\api\window\widgetWindow.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\background\updateSearch.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\css\movieReviews.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\html\movieReviews.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\moviereviews\js\movieReviews.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\background\RadioWidget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\css\toolbar-item.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\foreground\button.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\background\searchBox.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestions.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestions.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestions.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\search\html\searchSuggestionsInit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\css\supertab.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\html\supertab.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\newtabfork.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\reporting.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\srchsugg.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\supertab.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\unifiedLogging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\components\supertab\js\__utm.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\_metadata\computed_hashes.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\_metadata\verified_contents.json, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\arrowSprite.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon128.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon16.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon19disabled.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon19on.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\icon48.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755070.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755074.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755078.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755079.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755080.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755082.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755083.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755084.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\223755096.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\224383952.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\227590534.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\down_arrow.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\magnifying_glass.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\RadioPlayerSprite.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\search_button.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\tvf_icon_guide.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\tvf_logo.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\images\wrench.png, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\newTabInitialize.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\chromeStorage.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\chromeUtils.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\companionSWUtils.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\exeManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\exeManagerNMD.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\exePackageManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\focusManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\globalBlacklistManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\messaging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\mutation_summary-min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\mutation_summary.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\nativeMessagingDispatcher.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\newTabInfo.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\options.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\readLocalStorage.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\recentlyClosedTabs.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\reservespacefortoolbar.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\reservespaceifenabled.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\scriptInjector.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\searchContext.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\settingsOverrides.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\toolbarCookieParser.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\toolbarPreinit.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\underscore-1.3.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\URILoaderContentScript.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\webTooltabAPI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\Widget.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\widgetContentScriptInjectee.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\widgetFactory.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\js\widgetWindowManager.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs\jquery-1.7.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs\jquery-1.9.1.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\libs\underscore-1.5.2.min.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\cache.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\ce.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\debug.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\native\ss.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\activePing.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\buttonLogger.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\competitorDnsList.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\console.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\FFPreferencesPersister.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\httpTransport.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\HttpURL.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\internationalSearch.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\LocalStoragePersister.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\MindsparkGlobal.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\MindsparkGlobal.unitTest.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\MindsparkGlobalNotes.txt, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\rsvp-latest.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\searchSuggestLocale.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\testHttpTransport.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\unifiedLogger.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\unifiedLogging.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\universalConsole.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\shared\utils.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent2.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\bg.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\buildVars, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\buildVars.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\companionSW.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\config.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\contentScript.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\contentScript.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\debug.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\debug.jade, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spentJ.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spentK.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spentK.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\startup.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\stub.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\stubby.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\superFrame.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbar.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbar.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbarUI.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbarUI.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\toolbarUI.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\url.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\urlFragmentActions.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\webtooltab.cs.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\extension_toolbar_api.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\initWidgetWindow.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\newTabContentScript.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\options.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent.html, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent.js, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkfcmeoepjhclglafbppmeidjjolcgid\12.703.12.2371_0\spent2.css, Quarantined, [846], [443121],1.0.3037 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\profile.default\EXTENSIONS\_1GMEMBERS_@WWW.INBOXACE.COM\INSTALL.RDF, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome\ffxtbr.jar, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF\manifest.mf, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF\mozilla.rsa, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\META-INF\mozilla.sf, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\bootstrap.js, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome.manifest, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\profile.default\extensions\_1gMembers_@www.inboxace.com\chrome.manifest.restartless, Quarantined, [846], [443664],1.0.3037 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\INBOXACE.{coid1}.EXE, Quarantined, [260], [365288],1.0.3037 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  9. What is GetFormsOnline? The Malwarebytes research team has determined that GetFormsOnline is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. GetFormsOnline is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by GetFormsOnline? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did GetFormsOnline get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove GetFormsOnline? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of GetFormsOnline? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the GetFormsOnline entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the GetFormsOnline hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/getformsonline/S22907/index.html?n=C05D9F5&p2=%5EBX2%5Expu150%5ES22914%5Enl&ptb=5D1BF817-2DC0-4C43-BCF8-112D52A74C82&si=1088453&coid=d0562ac05d044860aad0c75867bf7bcf FF Homepage: hxxp://hp.myway.com/getformsonline/S22907/index.html?coId=a3f6276cc45d47ef950e892927293263&subId&ln=en&n=783a8341&ptb=B6F49412-F555-4EDC-94DE-47C4ECA0E293&st&p2=%5EBX2%5Efoxyyy%5ES22911%5Enl&si FF Extension: GetFormsOnline - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\_dbMembers_@free.getformsonline.com [2017-10-06] CHR Extension: (GetFormsOnline) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl [2017-10-06] C:\Users\{username}\AppData\Local\GetFormsOnlineTooltab GetFormsOnline Internet Explorer Homepage and New Tab (HKCU\...\GetFormsOnlineTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/6/17 Scan Time: 9:55 AM Log File: c4ae16cc-aa6b-11e7-b751-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2960 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 323100 Threats Detected: 389 Threats Quarantined: 389 Time Elapsed: 1 min, 57 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFormsOnlineTooltab\TooltabExtension.dll, Quarantined, [838], [356944],1.0.2960 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFormsOnlineTooltab Uninstall Internet Explorer, Delete-on-Reboot, [838], [356944],1.0.2960 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFormsOnlineTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2960 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2960 Data Stream: 0 (No malicious items detected) Folder: 89 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFormsOnlineTooltab, Delete-on-Reboot, [838], [356944],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KLEGPJOABNDJFNAKOIGGFNFODDEJHGCL, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_DBMEMBERS_@FREE.GETFORMSONLINE.COM, Delete-on-Reboot, [259], [302304],1.0.2960 File: 296 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFormsOnlineTooltab\TooltabExtension.dll, Delete-on-Reboot, [838], [356944],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KLEGPJOABNDJFNAKOIGGFNFODDEJHGCL\12.703.11.56376_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099316.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099329.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099351.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099352.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099353.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099354.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099355.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099356.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099357.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099358.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099359.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099389.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224099406.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224143527.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\224143528.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\klegpjoabndjfnakoiggfnfoddejhgcl\12.703.11.56376_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\PREFS.JS, Replaced, [838], [319354],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\X82GPANI.DEFAULT-1491393116824\EXTENSIONS\_DBMEMBERS_@FREE.GETFORMSONLINE.COM\INSTALL.RDF, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome\ffxtbr.jar, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF\manifest.mf, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF\mozilla.rsa, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\META-INF\mozilla.sf, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\bootstrap.js, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome.manifest, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\extensions\_dbMembers_@free.getformsonline.com\chrome.manifest.restartless, Delete-on-Reboot, [259], [302304],1.0.2960 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\GETFORMSONLINE.D0562AC05D044860AAD0C75867BF7BCF.EXE, Delete-on-Reboot, [259], [365288],1.0.2960 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  10. What is DigiSmirkz? The Malwarebytes research team has determined that DigiSmirkz is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. DigiSmirkz is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by DigiSmirkz? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did DigiSmirkz get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove DigiSmirkz? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of DigiSmirkz? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the DigiSmirkz entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the DigiSmirkz hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/digismirkz/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/digismirkz/ttab02/index.html?coId={coid2}&subId&ln=en&n={n1}&ptb={ptb2}&st&p2={p22}&si FF Extension: DigiSmirkz - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_i7Members_@free.digismirkz.com [2017-09-28] CHR Extension: (DigiSmirkz) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof [2017-09-28] C:\Users\{username}\AppData\Local\DigiSmirkzTooltab DigiSmirkz Internet Explorer Homepage and New Tab (HKCU\...\DigiSmirkzTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 9/28/17 Scan Time: 10:49 AM Log File: fc49955e-a429-11e7-b751-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2903 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 321655 Threats Detected: 406 Threats Quarantined: 406 Time Elapsed: 1 min, 58 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DigiSmirkzTooltab\TooltabExtension.dll, Quarantined, [838], [356944],1.0.2903 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DigiSmirkzTooltab Uninstall Internet Explorer, Delete-on-Reboot, [838], [356944],1.0.2903 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\DigiSmirkzTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2903 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2903 Data Stream: 0 (No malicious items detected) Folder: 89 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DigiSmirkzTooltab, Delete-on-Reboot, [838], [356944],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FHIBENOOMGNPPDHBJAEPHEPHKDDNOKOF, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_I7MEMBERS_@FREE.DIGISMIRKZ.COM, Delete-on-Reboot, [259], [302304],1.0.2903 File: 313 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\DigiSmirkzTooltab\TooltabExtension.dll, Delete-on-Reboot, [838], [356944],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FHIBENOOMGNPPDHBJAEPHEPHKDDNOKOF\12.702.11.34209_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766924.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230700203.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230700267.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230700284.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230746606.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766915.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766916.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766917.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766918.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766919.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766920.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766921.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766922.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766923.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766925.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766926.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766927.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766928.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766929.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766930.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766931.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766933.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766934.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766935.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766936.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766937.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766938.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766939.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766940.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766941.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\images\230766942.png, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhibenoomgnppdhbjaephephkddnokof\12.702.11.34209_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [319354],1.0.2903 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [838], [356946],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_I7MEMBERS_@FREE.DIGISMIRKZ.COM\INSTALL.RDF, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome\ffxtbr.jar, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF\manifest.mf, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF\mozilla.rsa, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\META-INF\mozilla.sf, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\bootstrap.js, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome.manifest, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_i7Members_@free.digismirkz.com\chrome.manifest.restartless, Delete-on-Reboot, [259], [302304],1.0.2903 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\DIGISMIRKZ.{coid1}.EXE, Delete-on-Reboot, [259], [365288],1.0.2903 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  11. What is GetFreeGifs? The Malwarebytes research team has determined that GetFreeGifs is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. GetFreeGifs is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by GetFreeGifs? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did GetFreeGifs get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove GetFreeGifs? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of GetFreeGifs? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the GetFreeGifs entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the GetFreeGifs hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/getfreegifs/S22699/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_oyMembers_@free.getfreegifs.com.xpi [2017-09-20] CHR Extension: (GetFreeGifs) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep [2017-09-20] C:\Users\{username}\AppData\Local\GetFreeGifsTooltab GetFreeGifs Internet Explorer Homepage and New Tab (HKCU\...\GetFreeGifsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\GetFreeGifsTooltab Adds the file TooltabExtension.dll"="8/7/2017 6:31 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0 Adds the file bg.html"="7/10/2017 2:53 PM, 6119 bytes, A Adds the file buildVars"="7/10/2017 2:53 PM, 8 bytes, A Adds the file buildVars.js"="7/10/2017 2:53 PM, 2582 bytes, A Adds the file companionSW.js"="7/10/2017 2:53 PM, 15026 bytes, A Adds the file config.js"="7/10/2017 2:53 PM, 6203 bytes, A Adds the file contentScript.css"="7/10/2017 2:53 PM, 1362 bytes, A Adds the file contentScript.js"="7/10/2017 2:53 PM, 32297 bytes, A Adds the file debug.html"="7/10/2017 2:53 PM, 299 bytes, A Adds the file debug.jade"="7/10/2017 2:53 PM, 291 bytes, A Adds the file extension_toolbar_api.js"="7/10/2017 2:53 PM, 3146 bytes, A Adds the file initWidgetWindow.js"="7/10/2017 2:53 PM, 768 bytes, A Adds the file manifest.json"="9/20/2017 9:09 AM, 4065 bytes, A Adds the file newTabContentScript.js"="7/10/2017 2:53 PM, 1289 bytes, A Adds the file options.html"="7/10/2017 2:53 PM, 1910 bytes, A Adds the file spent.css"="7/10/2017 2:53 PM, 29420 bytes, A Adds the file spent.html"="7/10/2017 2:53 PM, 4990 bytes, A Adds the file spent.js"="7/10/2017 2:53 PM, 3767 bytes, A Adds the file spent2.css"="7/10/2017 2:53 PM, 29440 bytes, A Adds the file spent2.html"="7/10/2017 2:53 PM, 4988 bytes, A Adds the file spentJ.js"="7/10/2017 2:53 PM, 2892 bytes, A Adds the file spentK.html"="7/10/2017 2:53 PM, 3054 bytes, A Adds the file spentK.js"="7/10/2017 2:53 PM, 875 bytes, A Adds the file startup.js"="7/10/2017 2:53 PM, 4380 bytes, A Adds the file stub.html"="7/10/2017 2:53 PM, 371 bytes, A Adds the file stubby.html"="7/10/2017 2:53 PM, 2665 bytes, A Adds the file superFrame.js"="7/10/2017 2:53 PM, 724 bytes, A Adds the file toolbar.html"="7/10/2017 2:53 PM, 5293 bytes, A Adds the file toolbar.js"="7/10/2017 2:53 PM, 43162 bytes, A Adds the file toolbarUI.css"="7/10/2017 2:53 PM, 4331 bytes, A Adds the file toolbarUI.html"="7/10/2017 2:53 PM, 922 bytes, A Adds the file toolbarUI.js"="7/10/2017 2:53 PM, 28138 bytes, A Adds the file url.js"="7/10/2017 2:53 PM, 13245 bytes, A Adds the file urlFragmentActions.js"="7/10/2017 2:53 PM, 1944 bytes, A Adds the file webtooltab.cs.js"="7/10/2017 2:53 PM, 1694 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata Adds the file computed_hashes.json"="9/20/2017 9:09 AM, 48579 bytes, A Adds the file verified_contents.json"="7/10/2017 2:53 PM, 33279 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter Adds the file adapterUtil.js"="7/10/2017 2:53 PM, 4533 bytes, A Adds the file widget-adapter.js"="7/10/2017 2:53 PM, 7647 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js Adds the file bs.30.js"="7/10/2017 2:53 PM, 1888 bytes, A Adds the file common.js"="7/10/2017 2:53 PM, 23233 bytes, A Adds the file dynamic.js"="7/10/2017 2:53 PM, 2169 bytes, A Adds the file enableDetect.js"="7/10/2017 2:53 PM, 1443 bytes, A Adds the file eventListening.js"="7/10/2017 2:53 PM, 567 bytes, A Adds the file global.js"="7/10/2017 2:53 PM, 4687 bytes, A Adds the file jquery-1.7.1.min.js"="7/10/2017 2:53 PM, 93868 bytes, A Adds the file list-interaction.js"="7/10/2017 2:53 PM, 5032 bytes, A Adds the file messageEventListener.js"="7/10/2017 2:53 PM, 983 bytes, A Adds the file navRedirector.js"="7/10/2017 2:53 PM, 1350 bytes, A Adds the file paramReplacer.js"="7/10/2017 2:53 PM, 5169 bytes, A Adds the file PartnerId.js"="7/10/2017 2:53 PM, 21973 bytes, A Adds the file set.js"="7/10/2017 2:53 PM, 531 bytes, A Adds the file underscore-1.3.1.min.js"="7/10/2017 2:53 PM, 12248 bytes, A Adds the file underscore-1.5.2.min.js"="7/10/2017 2:53 PM, 14431 bytes, A Adds the file unifiedLogging.js"="7/10/2017 2:53 PM, 1224 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background Adds the file ApiBasedWidget.js"="7/10/2017 2:53 PM, 15051 bytes, A Adds the file widget-api-impl.js"="7/10/2017 2:53 PM, 25378 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window Adds the file hiddenWidgetWindow.html"="7/10/2017 2:53 PM, 542 bytes, A Adds the file hiddenWidgetWindow.js"="7/10/2017 2:53 PM, 1253 bytes, A Adds the file hiddenWidgetWindowInit.js"="7/10/2017 2:53 PM, 343 bytes, A Adds the file widgetWindow.html"="7/10/2017 2:53 PM, 780 bytes, A Adds the file widgetWindow.js"="7/10/2017 2:53 PM, 1431 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background Adds the file updateSearch.js"="7/10/2017 2:53 PM, 11273 bytes, A Adds the file updateSearchPromptBg.js"="7/10/2017 2:53 PM, 27728 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground Adds the file 07_buttons2.png"="7/10/2017 2:53 PM, 4928 bytes, A Adds the file 08_buttons2.png"="7/10/2017 2:53 PM, 6597 bytes, A Adds the file defaultSearchModal.html"="7/10/2017 2:53 PM, 6483 bytes, A Adds the file defaultSearchModalInjector.css"="7/10/2017 2:53 PM, 505 bytes, A Adds the file defaultSearchModalInjector.js"="7/10/2017 2:53 PM, 3031 bytes, A Adds the file tvf_btn_ok.png"="7/10/2017 2:53 PM, 2373 bytes, A Adds the file tvf_btn_ok2.png"="7/10/2017 2:53 PM, 3057 bytes, A Adds the file tvf_restart_alert_icon.png"="7/10/2017 2:53 PM, 1281 bytes, A Adds the file tvf_restart_icon.png"="7/10/2017 2:53 PM, 1670 bytes, A Adds the file updateSearchPromptFg.js"="7/10/2017 2:53 PM, 12292 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kcdnokmjmlnenmcehbaofkjmebadocep Adds the file 000003.log"="9/20/2017 9:09 AM, 1213 bytes, A Adds the file CURRENT"="9/20/2017 9:09 AM, 16 bytes, A Adds the file LOCK"="9/20/2017 9:09 AM, 0 bytes, A Adds the file LOG"="9/20/2017 9:09 AM, 185 bytes, A Adds the file MANIFEST-000001"="9/20/2017 9:09 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\kcdnokmjmlnenmcehbaofkjmebadocep Adds the file 000003.log"="9/20/2017 9:09 AM, 398 bytes, A Adds the file CURRENT"="9/20/2017 9:09 AM, 16 bytes, A Adds the file LOCK"="9/20/2017 9:09 AM, 0 bytes, A Adds the file LOG"="9/20/2017 9:09 AM, 184 bytes, A Adds the file MANIFEST-000001"="9/20/2017 9:09 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\browser-extension-data\_oyMembers_@free.getfreegifs.com Adds the file storage.js"="9/20/2017 9:07 AM, 2108 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file _oyMembers_@free.getfreegifs.com.xpi"="9/20/2017 9:07 AM, 28451 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\GetFreeGifs] "Start Page"="REG_SZ", "http://hp.myway.com/getfreegifs/S22699/index.html?n={n1}&p2=^CSU^glgyyy^S22699^nl&ptb={ptb1}&coid={coid1}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYSCVNM%3Fc%3D{ptb1}%26ptb%3D^CSU^glgyyy^S22699^nl" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/getfreegifs/S22699/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\GetFreeGifsTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "GetFreeGifs Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\GetFreeGifsTooltab\TooltabExtension.dll" U uninstall:GetFreeGifs" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 9/20/17 Scan Time: 9:23 AM Log File: 9d591779-9dd4-11e7-a853-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.188 Update Package Version: 1.0.2847 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 320319 Threats Detected: 328 Threats Quarantined: 328 Time Elapsed: 1 min, 50 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFreeGifsTooltab\TooltabExtension.dll, Quarantined, [836], [356944],1.0.2847 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFreeGifsTooltab Uninstall Internet Explorer, Delete-on-Reboot, [259], [352442],1.0.2847 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\GetFreeGifsTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2847 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2847 Data Stream: 0 (No malicious items detected) Folder: 86 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFreeGifsTooltab, Delete-on-Reboot, [836], [356944],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KCDNOKMJMLNENMCEHBAOFKJMEBADOCEP, Delete-on-Reboot, [259], [301932],1.0.2847 File: 238 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\GetFreeGifsTooltab\TooltabExtension.dll, Delete-on-Reboot, [836], [356944],1.0.2847 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\KCDNOKMJMLNENMCEHBAOFKJMEBADOCEP\12.702.11.45161_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953198.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953210.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953211.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953262.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\235953279.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdnokmjmlnenmcehbaofkjmebadocep\12.702.11.45161_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2847 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\GETFREEGIFS.{coid1}.EXE, Delete-on-Reboot, [259], [365288],1.0.2847 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  12. What is WorldOfNotes? The Malwarebytes research team has determined that WorldOfNotes is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. WorldOfNotes is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by WorldOfNotes? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did WorldOfNotes get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove WorldOfNotes? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of WorldOfNotes? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the WorldOfNotes entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the WorldOfNotes hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/worldofnotes/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\Extensions\_lbMembers_@free.worldofnotes.com.xpi [2017-08-29] CHR Extension: (worldofnotes) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc [2017-08-29] C:\Users\{username}\AppData\Local\World of NotesTooltab World of Notes Internet Explorer Homepage and New Tab (HKCU\...\World of NotesTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 8/29/17 Scan Time: 11:44 AM Log File: 9e05a157-8c9e-11e7-a9dc-080027750297.json Administrator: Yes -Software Information- Version: 3.2.2.2018 Components Version: 1.0.186 Update Package Version: 1.0.2680 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 317213 Threats Detected: 334 Threats Quarantined: 334 Time Elapsed: 1 min, 37 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\World of NotesTooltab\TooltabExtension.dll, Quarantined, [829], [356944],1.0.2680 Registry Key: 1 PUP.Optional.MindSpark.Generic, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\World of NotesTooltab Uninstall Internet Explorer, Delete-on-Reboot, [829], [356944],1.0.2680 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\World of NotesTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [259], [352442],1.0.2680 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [259], [293497],1.0.2680 Data Stream: 0 (No malicious items detected) Folder: 86 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\World of NotesTooltab, Delete-on-Reboot, [829], [356944],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\abstractbutton\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\thirdparty\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\uninstall\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\weather\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\generic\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\alert\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\link\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\abstractbutton, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\rss\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\images, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\radioWrapper, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\thirdparty, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\foreground, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\uninstall, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\generic, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\weather, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\background, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\alert, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\link, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\rss, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\adapter, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\_metadata, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MHKNMLPENOHEHEEOPONMDEFINACPMAGC, Delete-on-Reboot, [259], [301932],1.0.2680 File: 244 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_ext.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_ext.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [259], [240306],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.myway.com_0.localstorage, Delete-on-Reboot, [259], [240305],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_worldofnotes.dl.myway.com_0.localstorage-journal, Delete-on-Reboot, [259], [240305],1.0.2680 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\World of NotesTooltab\TooltabExtension.dll, Delete-on-Reboot, [829], [356944],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\MHKNMLPENOHEHEEOPONMDEFINACPMAGC\12.702.11.38290_0\MANIFEST.JSON, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\menu\README.txt, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\bs.30.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\common.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\dynamic.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\enableDetect.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\global.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\messageEventListener.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\navRedirector.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\paramReplacer.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\PartnerId.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\set.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\foreground\button.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\background\searchBox.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\css\supertab.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\html\supertab.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\reporting.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\supertab.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\components\supertab\js\__utm.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\_metadata\computed_hashes.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\_metadata\verified_contents.json, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\arrowSprite.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon128.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon16.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon19disabled.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon19on.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\icon48.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133145.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133157.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133158.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133209.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\235133226.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\down_arrow.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\magnifying_glass.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\search_button.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\tvf_icon_guide.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\tvf_logo.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\images\wrench.png, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\newTabInitialize.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\chromeStorage.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\chromeUtils.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\companionSWUtils.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\exeManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\exeManagerNMD.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\exePackageManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\focusManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\globalBlacklistManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\messaging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\mutation_summary-min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\mutation_summary.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\newTabInfo.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\options.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\readLocalStorage.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\reservespaceifenabled.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\scriptInjector.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\searchContext.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\settingsOverrides.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\toolbarCookieParser.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\toolbarPreinit.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\URILoaderContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\webTooltabAPI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\Widget.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\widgetFactory.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\js\widgetWindowManager.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\cache.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\ce.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\debug.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\native\ss.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\activePing.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\buttonLogger.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\competitorDnsList.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\console.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\httpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\HttpURL.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\internationalSearch.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\rsvp-latest.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\testHttpTransport.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\unifiedLogger.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\unifiedLogging.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\universalConsole.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\shared\utils.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent2.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\bg.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\buildVars, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\buildVars.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\companionSW.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\config.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\contentScript.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\contentScript.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\debug.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\debug.jade, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spentJ.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spentK.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spentK.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\startup.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\stub.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\stubby.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\superFrame.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbar.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbar.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbarUI.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbarUI.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\toolbarUI.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\url.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\urlFragmentActions.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\webtooltab.cs.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\extension_toolbar_api.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\initWidgetWindow.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\newTabContentScript.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\options.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent.html, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent.js, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhknmlpenoheheeoponmdefinacpmagc\12.702.11.38290_0\spent2.css, Delete-on-Reboot, [259], [301932],1.0.2680 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\WORLDOFNOTES.EXE, Delete-on-Reboot, [259], [365288],1.0.2680 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  13. What is VideoDownloadConverter? The Malwarebytes research team has determined that VideoDownloadConverter is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. VideoDownloadConverter is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by VideoDownloadConverter? You may see this browser extension: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did VideoDownloadConverter get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site brought up by adware. How do I remove VideoDownloadConverter? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of VideoDownloadConverter? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the VideoDownloadConverter entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the VideoDownloadConverter hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/videodownloadconverter/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/videodownloadconverter/ttab02/index.html?coId={coid2}&subId={si1}&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si={si1} FF Extension: VideoDownloadConverter - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_4zMembers_@www.videodownloadconverter.com [2017-07-27] VideoDownloadConverter Internet Explorer Homepage and New Tab (HKCU\...\VideoDownloadConverterTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\VideoDownloadConverterTooltab Adds the file TooltabExtension.dll"="10/19/2016 7:30 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com Adds the file bootstrap.js"="7/27/2017 9:10 AM, 24987 bytes, A Adds the file chrome.manifest"="7/27/2017 9:10 AM, 135 bytes, A Adds the file chrome.manifest.restartless"="7/27/2017 9:10 AM, 135 bytes, A Adds the file install.rdf"="7/27/2017 9:10 AM, 1428 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome Adds the file ffxtbr.jar"="7/27/2017 9:10 AM, 346808 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF Adds the file manifest.mf"="7/27/2017 9:10 AM, 680 bytes, A Adds the file mozilla.rsa"="7/27/2017 9:10 AM, 4200 bytes, A Adds the file mozilla.sf"="7/27/2017 9:10 AM, 121 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\VideoDownloadConverter_4z Adds the file {ptb2}.sqlite"="7/27/2017 9:10 AM, 98304 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/videodownloadconverter/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&si={si1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverterTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "VideoDownloadConverter Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\VideoDownloadConverterTooltab\TooltabExtension.dll" U uninstall:VideoDownloadConverter" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\VideoDownloadConverter] "Start Page"="REG_SZ", "http://hp.myway.com/videodownloadconverter/ttab02/index.html?n={n1}&p2=^HJ^xpu632^TTAB02^nl&ptb={ptb1}&si={si1}&coid={coid1}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FDNMWMSZ%3Fc%3D{ptb1}" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/27/17 Scan Time: 9:25 AM Log File: mbamVideoDownloadConvert.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2447 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 319477 Threats Detected: 66 Threats Quarantined: 66 Time Elapsed: 1 min, 34 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\VIDEODOWNLOADCONVERTERTOOLTAB\TOOLTABEXTENSION.DLL, Quarantined, [251], [301125],1.0.2447 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VideoDownloadConverterTooltab Uninstall Internet Explorer, Delete-on-Reboot, [251], [301125],1.0.2447 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VideoDownloadConverterTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [251], [352442],1.0.2447 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [251], [293497],1.0.2447 Data Stream: 0 (No malicious items detected) Folder: 5 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\VideoDownloadConverterTooltab, Delete-on-Reboot, [814], [356944],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\VideoDownloadConverter_4z, Delete-on-Reboot, [251], [240302],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_4ZMEMBERS_@WWW.VIDEODOWNLOADCONVERTER.COM, Delete-on-Reboot, [251], [302304],1.0.2447 File: 57 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\VIDEODOWNLOADCONVERTERTOOLTAB\TOOLTABEXTENSION.DLL, Delete-on-Reboot, [251], [301125],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [319354],1.0.2447 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [814], [356946],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\VIDEODOWNLOADCONVERT.{coid1}.EXE, Delete-on-Reboot, [251], [365288],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\VideoDownloadConverter_4z\{ptb2}.sqlite, Delete-on-Reboot, [251], [240302],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.myway.com_0.localstorage, Delete-on-Reboot, [251], [240305],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.myway.com_0.localstorage-journal, Delete-on-Reboot, [251], [240305],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_4ZMEMBERS_@WWW.VIDEODOWNLOADCONVERTER.COM\INSTALL.RDF, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome\ffxtbr.jar, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF\manifest.mf, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF\mozilla.rsa, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\META-INF\mozilla.sf, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\bootstrap.js, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome.manifest, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_4zMembers_@www.videodownloadconverter.com\chrome.manifest.restartless, Delete-on-Reboot, [251], [302304],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [251], [240306],1.0.2447 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_videodownloadconverter.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [251], [240306],1.0.2447 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  14. What is MergeDocsOnline? The Malwarebytes research team has determined that MergeDocsOnline is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. MergeDocsOnline is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by MergeDocsOnline? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did MergeDocsOnline get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove MergeDocsOnline? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of MergeDocsOnline? If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the MergeDocsOnline hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/mergedocsonline/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/mergedocsonline/ttab02/index.html?coId={coid2}&subId&ln=en&n={n2}&ptb={ptb2}&st&p2={p21}&si FF Extension: MergeDocsOnline - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\Extensions\_ewMembers_@free.mergedocsonline.com [2017-07-17] MergeDocsOnline Internet Explorer Homepage and New Tab (HKCU\...\MergeDocsOnlineTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most significant changes made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\MergeDocsOnlineTooltab Adds the file TooltabExtension.dll"="10/19/2016 6:26 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com Adds the file bootstrap.js"="7/17/2017 2:04 PM, 24987 bytes, A Adds the file chrome.manifest"="7/17/2017 2:04 PM, 135 bytes, A Adds the file chrome.manifest.restartless"="7/17/2017 2:04 PM, 135 bytes, A Adds the file install.rdf"="7/17/2017 2:04 PM, 1375 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\chrome Adds the file ffxtbr.jar"="7/17/2017 2:04 PM, 345719 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\META-INF Adds the file manifest.mf"="7/17/2017 2:04 PM, 680 bytes, A Adds the file mozilla.rsa"="7/17/2017 2:04 PM, 4194 bytes, A Adds the file mozilla.sf"="7/17/2017 2:04 PM, 121 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\MergeDocsOnline_ew Adds the file {ptb2}.sqlite"="7/17/2017 2:04 PM, 98304 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\MergeDocsOnline] "Start Page"="REG_SZ", "http://hp.myway.com/mergedocsonline/ttab02/index.html?n={n1}&p2=^BYS^xdm130^TTAB02^nl&ptb={ptb1}&coid={coid1}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYM%3Fc%3D{ptb1}%26ptb%3D^BYS^xdm1" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/mergedocsonline/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MergeDocsOnlineTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "MergeDocsOnline Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\MergeDocsOnlineTooltab\TooltabExtension.dll" U uninstall:MergeDocsOnline" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/17/17 Scan Time: 2:18 PM Log File: mbamMergeDocsOnline.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.160 Update Package Version: 1.0.2382 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 338391 Threats Detected: 65 Threats Quarantined: 65 Time Elapsed: 1 min, 43 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\MERGEDOCSONLINETOOLTAB\TOOLTABEXTENSION.DLL, Quarantined, [284], [301125],1.0.2382 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MergeDocsOnlineTooltab Uninstall Internet Explorer, Delete-on-Reboot, [284], [301125],1.0.2382 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MergeDocsOnlineTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [284], [352442],1.0.2382 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [284], [293497],1.0.2382 Data Stream: 0 (No malicious items detected) Folder: 5 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\MergeDocsOnline_ew, Delete-on-Reboot, [284], [240302],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\META-INF, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\chrome, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\EXTENSIONS\_EWMEMBERS_@FREE.MERGEDOCSONLINE.COM, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\MergeDocsOnlineTooltab, Delete-on-Reboot, [875], [356944],1.0.2382 File: 56 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\MERGEDOCSONLINETOOLTAB\TOOLTABEXTENSION.DLL, Delete-on-Reboot, [284], [301125],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [319354],1.0.2382 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\PREFS.JS, Replaced, [875], [356946],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\MERGEDOCSONLINE.070779E1ADB149AC8EE0A526D5423376.EXE, Delete-on-Reboot, [284], [365288],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\MergeDocsOnline_ew\{ptb2}.sqlite, Delete-on-Reboot, [284], [240302],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_mergedocsonline.dl.myway.com_0.localstorage, Delete-on-Reboot, [284], [240305],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_mergedocsonline.dl.myway.com_0.localstorage-journal, Delete-on-Reboot, [284], [240305],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\(profile).default\EXTENSIONS\_EWMEMBERS_@FREE.MERGEDOCSONLINE.COM\INSTALL.RDF, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\chrome\ffxtbr.jar, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\META-INF\manifest.mf, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\META-INF\mozilla.rsa, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\META-INF\mozilla.sf, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\bootstrap.js, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\chrome.manifest, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\(profile).default\extensions\_ewMembers_@free.mergedocsonline.com\chrome.manifest.restartless, Delete-on-Reboot, [284], [302304],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_mergedocsonline.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [284], [240306],1.0.2382 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_mergedocsonline.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [284], [240306],1.0.2382 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  15. What is OnlineWorkSuite? The Malwarebytes research team has determined that OnlineWorkSuite is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. OnlineWorkSuite is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by OnlineWorkSuite? You may see this browser extension: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did OnlineWorkSuite get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove OnlineWorkSuite? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of OnlineWorkSuite? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the OnlineWorkSuite entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the OnlineWorkSuite hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/onlineworksuite/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/onlineworksuite/ttab02/index.html?coId={coid2}&subId&ln=en&n={n2}&ptb={ptb2}&st=tab&p2={p22}&si FF Extension: OnlineWorkSuite - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_j1Members_@free.onlineworksuite.com [2017-07-06] C:\Users\{username}\AppData\Local\OnlineWorkSuiteTooltab OnlineWorkSuite Internet Explorer Homepage and New Tab (HKCU\...\OnlineWorkSuiteTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The most relevant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\OnlineWorkSuiteTooltab Adds the file TooltabExtension.dll"="10/19/2016 7:03 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com Adds the file bootstrap.js"="7/6/2017 8:33 AM, 24987 bytes, A Adds the file chrome.manifest"="7/6/2017 8:33 AM, 135 bytes, A Adds the file chrome.manifest.restartless"="7/6/2017 8:33 AM, 135 bytes, A Adds the file install.rdf"="7/6/2017 8:33 AM, 1485 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\chrome Adds the file ffxtbr.jar"="7/6/2017 8:33 AM, 345303 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\META-INF Adds the file manifest.mf"="7/6/2017 8:33 AM, 680 bytes, A Adds the file mozilla.rsa"="7/6/2017 8:33 AM, 4194 bytes, A Adds the file mozilla.sf"="7/6/2017 8:33 AM, 121 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\onlineworksuite_j1 Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/onlineworksuite/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\OnlineWorkSuiteTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "OnlineWorkSuite Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\OnlineWorkSuiteTooltab\TooltabExtension.dll" U uninstall:OnlineWorkSuite" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" [HKEY_CURRENT_USER\Software\OnlineWorkSuite] "Start Page"="REG_SZ", "http://hp.myway.com/onlineworksuite/ttab02/index.html?n={n1}&p2=^CP6^yyyyyy^TTAB02^nl&ptb={ptb1}&coid={coid1}" "UnInstallSurveyUrl"="REG_SZ", "http://@{downloadDomain}.dl.myway.com/uninstall.jhtml?surveyUrl=http%3A%2F%2Fwww.research.net%2Fr%2FHYSCVNM%3Fc%3D{ptb1}%26ptb%3D^CP6^yyyyyy^TTAB02^nl" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/6/17 Scan Time: 9:05 AM Log File: mbamOnlineWorkSuite.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.141 Update Package Version: 1.0.2300 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 337247 Threats Detected: 63 Threats Quarantined: 63 Time Elapsed: 1 min, 47 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\ONLINEWORKSUITETOOLTAB\TOOLTABEXTENSION.DLL, Quarantined, [283], [301125],1.0.2300 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OnlineWorkSuiteTooltab Uninstall Internet Explorer, Delete-on-Reboot, [283], [301125],1.0.2300 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OnlineWorkSuiteTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [283], [352442],1.0.2300 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [283], [293497],1.0.2300 Data Stream: 0 (No malicious items detected) Folder: 4 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\OnlineWorkSuiteTooltab, Delete-on-Reboot, [866], [356944],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\META-INF, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\chrome, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_J1MEMBERS_@FREE.ONLINEWORKSUITE.COM, Delete-on-Reboot, [866], [371671],1.0.2300 File: 55 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\ONLINEWORKSUITETOOLTAB\TOOLTABEXTENSION.DLL, Delete-on-Reboot, [283], [301125],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [356946],1.0.2300 PUP.Optional.MindSpark, C:\USERS\{username}\DESKTOP\ONLINEWORKSUITE.{coid1}.EXE, Delete-on-Reboot, [283], [365288],1.0.2300 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_onlineworksuite.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [283], [240306],1.0.2300 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_onlineworksuite.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [283], [240306],1.0.2300 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_J1MEMBERS_@FREE.ONLINEWORKSUITE.COM\BOOTSTRAP.JS, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\chrome\ffxtbr.jar, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\META-INF\manifest.mf, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\META-INF\mozilla.rsa, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\META-INF\mozilla.sf, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\chrome.manifest, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\chrome.manifest.restartless, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark.Generic, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_j1Members_@free.onlineworksuite.com\install.rdf, Delete-on-Reboot, [866], [371671],1.0.2300 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_onlineworksuite.dl.myway.com_0.localstorage, Delete-on-Reboot, [283], [240305],1.0.2300 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_onlineworksuite.dl.myway.com_0.localstorage-journal, Delete-on-Reboot, [283], [240305],1.0.2300 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  16. What is ConvertersNow? The Malwarebytes research team has determined that ConvertersNow is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. ConvertersNow is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by ConvertersNow? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new homepage in the affected browsers: How did ConvertersNow get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove ConvertersNow? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of ConvertersNow? If you are using Chrome, you may have to remove the Extension manually under Tools > More Tools > Extensions. Click on the bin behind the ConvertersNow entry and confirm Remove in the prompt. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the ConvertersNow hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/convertersnow/ttab02ie/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Extension: ConvertersNow - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_kbMembers_@www.convertersnow.com [2017-06-29] CHR Extension: (ConvertersNow) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec [2017-06-29] C:\Users\{username}\AppData\Local\ConvertersNowTooltab ConvertersNow Internet Explorer Homepage and New Tab (HKCU\...\ConvertersNowTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION Most significant changes made by the installers: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\ConvertersNowTooltab Adds the file TooltabExtension.dll"="5/24/2017 8:28 PM, 266864 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0 Adds the file bg.html"="5/11/2017 11:57 AM, 6119 bytes, A Adds the file buildVars"="5/11/2017 11:57 AM, 8 bytes, A Adds the file buildVars.js"="5/11/2017 11:57 AM, 2588 bytes, A Adds the file companionSW.js"="5/11/2017 11:57 AM, 15026 bytes, A Adds the file config.js"="5/11/2017 11:57 AM, 6225 bytes, A Adds the file contentScript.css"="5/11/2017 11:57 AM, 1362 bytes, A Adds the file contentScript.js"="5/11/2017 11:57 AM, 32297 bytes, A Adds the file debug.html"="5/11/2017 11:57 AM, 299 bytes, A Adds the file debug.jade"="5/11/2017 11:57 AM, 291 bytes, A Adds the file extension_toolbar_api.js"="5/11/2017 11:57 AM, 3148 bytes, A Adds the file initWidgetWindow.js"="5/11/2017 11:57 AM, 768 bytes, A Adds the file manifest.json"="6/29/2017 10:42 AM, 4142 bytes, A Adds the file newTabContentScript.js"="5/11/2017 11:57 AM, 1289 bytes, A Adds the file options.html"="5/11/2017 11:57 AM, 1916 bytes, A Adds the file spent.css"="5/11/2017 11:57 AM, 29420 bytes, A Adds the file spent.html"="5/11/2017 11:57 AM, 4990 bytes, A Adds the file spent.js"="5/11/2017 11:57 AM, 3767 bytes, A Adds the file spent2.css"="5/11/2017 11:57 AM, 29440 bytes, A Adds the file spent2.html"="5/11/2017 11:57 AM, 4988 bytes, A Adds the file spentJ.js"="5/11/2017 11:57 AM, 2892 bytes, A Adds the file spentK.html"="5/11/2017 11:57 AM, 3054 bytes, A Adds the file spentK.js"="5/11/2017 11:57 AM, 875 bytes, A Adds the file startup.js"="5/11/2017 11:57 AM, 4380 bytes, A Adds the file stub.html"="5/11/2017 11:57 AM, 371 bytes, A Adds the file stubby.html"="5/11/2017 11:57 AM, 2665 bytes, A Adds the file superFrame.js"="5/11/2017 11:57 AM, 724 bytes, A Adds the file toolbar.html"="5/11/2017 11:57 AM, 5293 bytes, A Adds the file toolbar.js"="5/11/2017 11:57 AM, 43162 bytes, A Adds the file toolbarUI.css"="5/11/2017 11:57 AM, 4331 bytes, A Adds the file toolbarUI.html"="5/11/2017 11:57 AM, 922 bytes, A Adds the file toolbarUI.js"="5/11/2017 11:57 AM, 28138 bytes, A Adds the file url.js"="5/11/2017 11:57 AM, 13245 bytes, A Adds the file urlFragmentActions.js"="5/11/2017 11:57 AM, 1944 bytes, A Adds the file webtooltab.cs.js"="5/11/2017 11:57 AM, 1694 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\_metadata Adds the file computed_hashes.json"="6/29/2017 10:42 AM, 48579 bytes, A Adds the file verified_contents.json"="5/11/2017 11:57 AM, 33279 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbfdncemokhjnhoiohfdjahheefaiaec Adds the file 000003.log"="6/29/2017 10:43 AM, 1213 bytes, A Adds the file CURRENT"="6/29/2017 10:42 AM, 16 bytes, A Adds the file LOCK"="6/29/2017 10:42 AM, 0 bytes, A Adds the file LOG"="6/29/2017 10:43 AM, 185 bytes, A Adds the file MANIFEST-000001"="6/29/2017 10:42 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\jbfdncemokhjnhoiohfdjahheefaiaec Adds the file 000003.log"="6/29/2017 10:43 AM, 398 bytes, A Adds the file CURRENT"="6/29/2017 10:42 AM, 16 bytes, A Adds the file LOCK"="6/29/2017 10:42 AM, 0 bytes, A Adds the file LOG"="6/29/2017 10:43 AM, 184 bytes, A Adds the file MANIFEST-000001"="6/29/2017 10:42 AM, 41 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\convertersnow_kb Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com Adds the file bootstrap.js"="6/29/2017 10:39 AM, 24987 bytes, A Adds the file chrome.manifest"="6/29/2017 10:39 AM, 135 bytes, A Adds the file chrome.manifest.restartless"="6/29/2017 10:39 AM, 135 bytes, A Adds the file install.rdf"="6/29/2017 10:39 AM, 1458 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\chrome Adds the file ffxtbr.jar"="6/29/2017 10:39 AM, 346347 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\META-INF Adds the file manifest.mf"="6/29/2017 10:39 AM, 680 bytes, A Adds the file mozilla.rsa"="6/29/2017 10:39 AM, 4191 bytes, A Adds the file mozilla.sf"="6/29/2017 10:39 AM, 121 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\ConvertersNow] "Start Page"="REG_SZ", "http://hp.myway.com/convertersnow/ttab02ie/index.html?n={n1}&p2={p22}&ptb={ptb1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" = REG_SZ, "http://hp.myway.com/convertersnow/ttab02ie/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\ConvertersNowTooltab Uninstall Internet Explorer] "DisplayName"="REG_SZ", "ConvertersNow Internet Explorer Homepage and New Tab" "HelpLink"="REG_SZ", "http://support.mindspark.com/" "Publisher"="REG_SZ", "Mindspark Interactive Network, Inc." "UninstallString"="REG_SZ", "Rundll32.exe "C:\Users\{username}\AppData\Local\ConvertersNowTooltab\TooltabExtension.dll" U uninstall:ConvertersNow" "URLInfoAbout"="REG_SZ", "http://support.mindspark.com/" The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 6/29/17 Scan Time: 11:02 AM Log File: mbamConvertersNow.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.141 Update Package Version: 1.0.2254 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 336529 Threats Detected: 373 Threats Quarantined: 373 Time Elapsed: 1 min, 54 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\CONVERTERSNOWTOOLTAB\TOOLTABEXTENSION.DLL, Quarantined, [283], [301125],1.0.2254 Registry Key: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ConvertersNowTooltab Uninstall Internet Explorer, Delete-on-Reboot, [283], [301125],1.0.2254 Registry Value: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ConvertersNowTooltab Uninstall Internet Explorer|PUBLISHER, Delete-on-Reboot, [283], [352442],1.0.2254 Registry Data: 1 PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [283], [293497],1.0.2254 Data Stream: 0 (No malicious items detected) Folder: 89 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\LOCAL\ConvertersNowTooltab, Delete-on-Reboot, [866], [356944],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\abstractbutton\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\thirdparty\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\uninstall\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\weather\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\weather\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\weather\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\generic\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\alert\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\link\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\weather, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\abstractbutton, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\rss\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\rss\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare\icons, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\images, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\rss, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\radioWrapper, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\thirdparty, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\foreground, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\uninstall, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\generic, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\weather, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\background, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\alert, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\link, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\rss, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\window, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\adapter, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\libs, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\_metadata, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JBFDNCEMOKHJNHOIOHFDJAHHEEFAIAEC, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\META-INF, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\chrome, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_KBMEMBERS_@WWW.CONVERTERSNOW.COM, Delete-on-Reboot, [283], [302304],1.0.2254 File: 280 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\CONVERTERSNOWTOOLTAB\TOOLTABEXTENSION.DLL, Delete-on-Reboot, [283], [301125],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark.Generic, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [866], [319354],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_convertersnow.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [283], [240306],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_convertersnow.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [283], [240306],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_ext.dl.tb.ask.com_0.localstorage, Delete-on-Reboot, [283], [240306],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\http_ext.dl.tb.ask.com_0.localstorage-journal, Delete-on-Reboot, [283], [240306],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JBFDNCEMOKHJNHOIOHFDJAHHEEFAIAEC\12.702.11.34041_0\MANIFEST.JSON, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\adapter\adapterUtil.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\adapter\widget-adapter.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\abstractbutton\background\abstractButton.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\alert\background\alertButton.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\background\embedHtmlWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\html\embedHtmlTemplate.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedhtml\js\embedHtmlUI.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\background\embedScriptWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\html\embedScriptTemplate.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\embedscript\js\embedScriptUI.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare\background\FlareWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare\icons\Icon_Flare_blue.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare\icons\Icon_Flare_pink.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\flare\icons\Thumbs.db, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\generic\background\GenericWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\link\background\linkButton.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\background\menuButton.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\css\menuframe.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\html\menuframe.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\images\right_arrow.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\images\right_arrow_white.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\js\jquery-1.7.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\js\menuframe.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\js\query-string.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\js\underscore-1.3.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\menu\README.txt, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\rss\background\RssWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\thirdparty\background\thirdPartyWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\uninstall\background\uninstallButton.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\components\weather\background\weatherButton.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\bs.30.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\common.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\dynamic.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\enableDetect.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\eventListening.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\global.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\jquery-1.7.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\list-interaction.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\messageEventListener.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\navRedirector.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\paramReplacer.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\PartnerId.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\set.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\underscore-1.3.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\underscore-1.5.2.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\js\unifiedLogging.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common\common.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common\eventListening.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common\list-interaction.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common\set.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\css\radio-widget.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\js\radio-custom.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\js\radio-parser.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\js\radio-widget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\radio\radio-widget.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\rss\js\rss-widget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\rss\rssWidget.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\invalid.json, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\jquery.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\qunit.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\qunit.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\resource.json, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\resource.xml, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\testWidget.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\test\testWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\css\widget.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\js\topapps-config.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\js\widget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\topapps\widget.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\weather\css\weatherButton.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\weather\js\weather.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widgets\weather\weatherButton.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\common\widget-api\widget-context-1.0.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\background\ApiBasedWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\background\widget-api-impl.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\window\hiddenWidgetWindow.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\window\hiddenWidgetWindow.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\window\hiddenWidgetWindowInit.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\window\widgetWindow.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\api\window\widgetWindow.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\background\updateSearch.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\background\updateSearchPromptBg.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\07_buttons2.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\08_buttons2.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\defaultSearchModal.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\tvf_btn_ok.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\tvf_restart_icon.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\background\MovieReviewsWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\css\movieReviews.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\html\movieReviews.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\moviereviews\js\movieReviews.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\background\RadioWidget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\css\toolbar-item.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\foreground\button.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\radioWrapper\radioWrapper.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\radio\radioWrapper\radioWrapper.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\background\searchBox.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\html\searchSuggestions.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\html\searchSuggestions.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\html\searchSuggestions.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\search\html\searchSuggestionsInit.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\css\supertab.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\html\supertab.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js\newtabfork.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js\reporting.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js\srchsugg.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js\supertab.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js\unifiedLogging.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\components\supertab\js\__utm.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\_metadata\computed_hashes.json, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\_metadata\verified_contents.json, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\arrowSprite.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\icon128.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\icon16.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\icon19disabled.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\icon19on.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\icon48.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\icons\tb_icon_search_disappearing_ask.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\234145864.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\234145876.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\234145877.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\234145928.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\234145945.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\down_arrow.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\IDR_PRODUCT_LOGO_16.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\IDR_WEBSTORE_ICON.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\magnifying_glass.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\RadioPlayerSprite.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\search_button.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\tvf_icon_guide.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\tvf_logo.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\images\wrench.png, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\newTabInitialize.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\chromeStorage.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\chromeUtils.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\companionSWUtils.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\exeManager.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\exeManagerNMD.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\exePackageManager.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\focusManager.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\globalBlacklistManager.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\messaging.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\mutation_summary-min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\mutation_summary.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\nativeMessagingDispatcher.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\newTabInfo.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\options.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\readLocalStorage.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\recentlyClosedTabs.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\reservespacefortoolbar.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\reservespaceifenabled.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\scriptInjector.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\searchContext.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\settingsOverrides.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\toolbarCookieParser.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\toolbarPreinit.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\underscore-1.3.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\URILoaderContentScript.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\webTooltabAPI.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\Widget.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\widgetContentScriptInjectee.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\widgetFactory.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\js\widgetWindowManager.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\libs\jquery-1.7.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\libs\jquery-1.9.1.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\libs\underscore-1.5.2.min.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\cache.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\ce.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\debug.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\native\ss.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\activePing.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\buttonLogger.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\competitorDnsList.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\console.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\FFPreferencesPersister.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\httpTransport.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\HttpURL.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\internationalSearch.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\LocalStoragePersister.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\MindsparkGlobal.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\MindsparkGlobal.unitTest.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\MindsparkGlobalNotes.txt, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\rsvp-latest.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\searchSuggestLocale.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\testHttpTransport.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\unifiedLogger.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\unifiedLogging.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\universalConsole.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\shared\utils.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spent2.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\bg.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\buildVars, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\buildVars.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\companionSW.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\config.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\contentScript.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\contentScript.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\debug.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\debug.jade, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spentJ.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spentK.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spentK.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\startup.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\stub.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\stubby.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\superFrame.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\toolbar.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\toolbar.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\toolbarUI.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\toolbarUI.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\toolbarUI.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\url.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\urlFragmentActions.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\webtooltab.cs.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\extension_toolbar_api.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\initWidgetWindow.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\newTabContentScript.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\options.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spent.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spent.html, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spent.js, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbfdncemokhjnhoiohfdjahheefaiaec\12.702.11.34041_0\spent2.css, Delete-on-Reboot, [283], [301932],1.0.2254 PUP.Optional.MindSpark, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\EXTENSIONS\_KBMEMBERS_@WWW.CONVERTERSNOW.COM\INSTALL.RDF, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\chrome\ffxtbr.jar, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\META-INF\manifest.mf, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\META-INF\mozilla.rsa, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\META-INF\mozilla.sf, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\bootstrap.js, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\chrome.manifest, Delete-on-Reboot, [283], [302304],1.0.2254 PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_kbMembers_@www.convertersnow.com\chrome.manifest.restartless, Delete-on-Reboot, [283], [302304],1.0.2254 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  17. What is FileShareFanatic? The Malwarebytes research team has determined that FileShareFanatic is a browser NewTab. These so-called "NewTabs" can manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. FileShareFanatic is a member of the Mindspark/Ask family now known as IAC Applications. How do I know if my computer is affected by FileShareFanatic? You may see this browser extensions/add-ons: these warnings during install: You may see this entry in your list of installed software: and this new startpage in the affected browsers: How did FileShareFanatic get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site. How do I remove FileShareFanatic? Our program Malwarebytes can detect and remove this potentially unwanted program. You can use their own uninstall instructions first, but I would advise to follow the steps below anyway. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of FileShareFanatic? If you are using Chrome, you may have to remove the Extension manually under Tools > Settings > Extensions. Remove the checkmark and click on the bin behind the FileShareFanatic entry. If your browsers have been hijacked, you should read our Restore Browser page. You can read there how to fix additional browser redirect methods. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the FileShareFanatic hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late. and it blocks traffic to some of their domains: Technical details for experts Possible signs in a FRST log: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/filesharefanatic/ttab02/index.html?n={n1}&p2={p21}&ptb={ptb1}&coid={coid1} FF Homepage: hxxp://hp.myway.com/filesharefanatic/ttab02/index.html?coId={coid2}&subId&ln=en&n={n2}&ptb={ptb2}&st&p2={p22}&si FF Extension: FileShareFanatic - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\_8lMembers_@free.filesharefanatic.com [2017-06-19] CHR Extension: (FileShareFanatic) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\boboolfdkacnekhiebkclmbefjialhli [2017-06-19] C:\Users\{username}\AppData\Local\FileShareFanaticTooltab FileShareFanatic Internet Explorer Homepage and New Tab (HKCU\...\FileShareFanaticTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== ATTENTION The Malwarebytes scan log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 6/19/17 Scan Time: 9:01 AM Log File: mbamFileShareFanatic2.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.141 Update Package Version: 1.0.2183 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: METALLICA-PC\Metallica -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 335286 Threats Detected: 390 Threats Quarantined: 0 (No malicious items detected) Time Elapsed: 2 min, 20 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 1 PUP.Optional.MindSpark, C:\USERS\METALLICA\APPDATA\LOCAL\FILESHAREFANATICTOOLTAB\TOOLTABEXTENSION.DLL, No Action By User, [276], [301125],1.0.2183 Registry Key: 1 PUP.Optional.MindSpark, HKU\S-1-5-21-1350903546-318028887-1286703239-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FileShareFanaticTooltab Uninstall Internet Explorer, No Action By User, [276], [301125],1.0.2183 Registry Value: 1 PUP.Optional.MindSpark, HKU\S-1-5-21-1350903546-318028887-1286703239-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FileShareFanaticTooltab Uninstall Internet Explorer|PUBLISHER, No Action By User, [276], [352442],1.0.2183 Registry Data: 1 PUP.Optional.MindSpark, HKU\S-1-5-21-1350903546-318028887-1286703239-1003\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, No Action By User, [276], [293497],1.0.2183 Data Stream: 0 (No malicious items detected) Folder: 90 PUP.Optional.MindSpark, C:\USERS\METALLICA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\FileShareFanatic_8l, No Action By User, [276], [240302],1.0.2183 PUP.Optional.MindSpark.Generic, C:\USERS\METALLICA\APPDATA\LOCAL\FileShareFanaticTooltab, No Action By User, [848], [356944],1.0.2183 PUP.Optional.MindSpark, C:\Users\Metallica\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\_8