Jump to content

Search the Community

Showing results for tags 'pup.optional.searchmanager'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Endpoint Protection
    • Malwarebytes Incident Response (includes Breach Remediation)
    • Malwarebytes Endpoint Security
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 5 results

  1. So I've recently decided to install Malwarebytes to scan my computer for threats after being an idiot and not having it installed in the first place years ago. It quarantined/removed a lot of malware that I wasn't aware I had, with the exception of one labelled "PUP.Optional.SearchManager.BITSRST" which is located in my Secure Preferences folder for Google Chrome. When I repeatedly scanned my computer to try to quarantine it, it keeps telling me I have 12 threats labelled "PUP.Optional.SearchManager.BITSRST", and keeps saying that all of them are removed except for the same one that Malwarebytes kept failing to remove. However despite all this and even prior to installing Malwarebytes, I have not noticed anything unusual going on my computer and I do not see the Search Manager extension in Chrome as I removed it years ago from Chrome. Should I be concerned these threats as I otherwise use my computer just fine? If so, what steps should I take to ensure that I am completely FREE of any threats? Thanks in advance for answering my questions. The images attached to this post are my first and latest reports.
  2. Hello, Malware does not detect anything but running AdwCleaner gets me PUP.Optional.Legacy PUP.Optional.SecuredSearches PUP.Optional.SearchManager I deleted all other search engines except Google. Deleted extensions I did not really need, reset sync, and ran a malware scan on Chrome. Everytime AdwCleaner scans and restarts my computer the three muusketeers are still there. PLEASE HELP!1 AdwCleaner[C01].txt MalwareScan.txt Addition.txt FRST.txt
  3. What is Search Manager?The Malwarebytes research team has determined that Search Manager is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.How do I know if my computer is affected by Search Manager?You may see these Chrome extensions:these warnings during install:this prompt when you click the icon in the Chrome menu bar:and this changed settings:How did Search Manager get on my computer?Browser hijackers use different methods for distributing themselves. This particular one was installed by a bundler posing as a Flash Player update:How do I remove Search Manager?Our program Malwarebytes can detect and remove this potentially unwanted program. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of Search Manager? No, Malwarebytes removes Search Manager completely. How would the full version of Malwarebytes help protect me?We hope our application and this guide have helped you eradicate this hijacker.As you can see below the full version of Malwarebytes would have protected you against the Search Manager hijacker by blocking the bundler:Technical details for expertsPossible signs in FRST logs: SearchScopes: HKCU -> {518b33ae-375d-712d-6742-d1fe0400268d} URL = hxxps://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_kpf8ace8acsz_18_30_20&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dus%26pa%3Dwingy%26cd%3D2XzuyEtN2Y1L1QzutDzztDtDtByBtBtAyD0DyByCyBtDyCyCtN0D0Tzu0StBtAzyzytN1L2XzuyEtFtByCtFtDtFzyzztN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyDtDzzzzzy0A0F0AtGtD0CyB0CtG0F0F0DtCtGtD0AzytCtG0C0FyDzytB0EzytAyByE0CtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtDtCyDzz1RyC1StG1RtAyDzztGyEyCyCzztG1T1RzzyDtGyDyCtBzy1StAtBtDtCyBtAyE2QtN0A0LzutDtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtAtByCzztCyCtCyB%26cr%3D977776022%26a%3Dbgy_kpf8ace8acsz_18_30_20%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate&p={searchTerms} FF Homepage: hxxps://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_kpf8ace8acsz_18_30_20&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3Dus%26pa%3Dwingy%26cd%3D2XzuyEtN2Y1L1QzutDzztDtDtByBtBtAyD0DyByCyBtDyCyCtN0D0Tzu0StBtAzyzytN1L2XzuyEtFtByCtFtDtFzyzztN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyDtDzzzzzy0A0F0AtGtD0CyB0CtG0F0F0DtCtGtD0AzytCtG0C0FyDzytB0EzytAyByE0CtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtDtCyDzz1RyC1StG1RtAyDzztGyEyCyCzztG1T1RzzyDtGyDyCtBzy1StAtBtDtCyBtAyE2QtN0A0LzutDtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtAtByCzztCyCtCyB%26cr%3D977776022%26a%3Dbgy_kpf8ace8acsz_18_30_20%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\60l2dg92.default-1519559592148\searchplugins\yahoo! powered search.xml [2018-07-27] CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms} CHR DefaultSearchKeyword: Default -> sm CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms} CHR Extension: (Search Manager) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce [2018-07-27] CHR Extension: (Search Manager) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej [2018-07-27] Significant chnages made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- In the existing folder C:\Users\{username}\AppData\LocalLow\Microsoft\Internet Explorer\Services Adds the file Yahoo! Powered Search.ico"="7/27/2018 10:53 AM, 5406 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\60l2dg92.default-1519559592148 Alters the file prefs.js 7/6/2018 8:33 AM, 12250 bytes, A ==> 7/27/2018 10:53 AM, 12767 bytes, A Adds the file prefs.js.copy"="7/27/2018 10:53 AM, 12767 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\60l2dg92.default-1519559592148\searchplugins Adds the file yahoo! powered search.xml"="7/27/2018 10:53 AM, 1846 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\csastats\ic\1633c09e3c4d5d39f62fd6a30e2cbf65c3f2365eebb3092eb7afc008daeffd08] "advertisers_ids"="REG_SZ", "554cb9c7b6" "channel"="REG_SZ", "fa4c6bd7a1041373f7d7e4e48a86d46b2e70b2b807d5b6d5e28969e058476090" "hmac_sha256_validation"="REG_SZ", "5b174f6189ecbaeae8488cde1ff5a0ab575af47fc928ad9439fd8136a4ce3a2a" "install_id"="REG_SZ", "1633c09e3c4d5d39f62fd6a30e2cbf65c3f2365eebb3092eb7afc008daeffd08" "install_time_client"="REG_SZ", "20180727105303076" "install_time_server"="REG_SZ", "20180727035305426" "publisher_id"="REG_SZ", "5bce72fa04" "vendor_id"="REG_SZ", "ic" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page" ==> REG_SZ, "https://us.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_kpf8ace8acsz_18_30_20" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes] "DefaultScope" ==> REG_SZ, "{518b33ae-375d-712d-6742-d1fe0400268d}" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{518b33ae-375d-712d-6742-d1fe0400268d}] "(Default)"="REG_SZ", "Yahoo! Powered Search" "DisplayName"="REG_SZ", "Yahoo! Powered Search" "FaviconPath"="REG_SZ", "C:\Users\{username}\AppData\LocalLow\Microsoft\Internet Explorer\Services\Yahoo! Powered Search.ico" "URL"="REG_SZ", "https://us.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_kpf8ace8acsz_18_30_20&p={searchTerms}" [HKEY_CURRENT_USER\Software\ProductSetup\Uninstall\0B2U2Z1P0F1P1G1R1P1V0A1Q1Q0O1G] "uninstall"="REG_SZ", "0B2U2Z1P0F1P1G1R1P0M1F1Q2Y1I1P" [HKEY_CURRENT_USER\Software\ProductSetup\Uninstall\0S1P1T1C1R1MtT0P1C1F2X1L1Q1P1QtT1S2UtT0Y1T1M1F1F] Malwarebytes log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/27/18 Scan Time: 11:03 AM Log File: ff6a7089-917b-11e8-8b9b-00ffdcc6fdfc.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.374 Update Package Version: 1.0.6089 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 252480 Threats Detected: 391 Threats Quarantined: 391 Time Elapsed: 4 min, 15 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 7 PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, HKCU\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\PILPLLOABDEDFMIALNFCHJOMJMPJCOEJ, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, HKCU\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\PILPLLOABDEDFMIALNFCHJOMJMPJCOEJ, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Quarantined, [245], [260991],1.0.6089 PUP.Optional.WinYahoo, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{518b33ae-375d-712d-6742-d1fe0400268d}, Quarantined, [248], [413444],1.0.6089 Registry Value: 1 PUP.Optional.WinYahoo, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{518b33ae-375d-712d-6742-d1fe0400268d}|URL, Quarantined, [248], [413444],1.0.6089 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 44 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\tiles, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\pt_BR, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\en, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\fr, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\hi, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\vi, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\skin\icons, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_metadata, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\skin, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\EXTENSIONS\nahhmpbckpgdidfnmfkfgiflpjijilce, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\tiles, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\pt_BR, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\en, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\fr, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\hi, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\vi, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin\icons, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_metadata, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Extensions\PILPLLOABDEDFMIALNFCHJOMJMPJCOEJ, Quarantined, [245], [260991],1.0.6089 File: 339 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, Quarantined, [245], [453138],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts\HelveticaNeue-Thin.otf, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts\HelveticaNeueLT-Roman.woff, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts\neue-bold.woff, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\fonts\neue.woff, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\close-FF8A5A.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\collection-9B9B9B.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\collection-FF691E.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\doc-icon-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\error-FF691E.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\pdf-2-doc-9B9B9B.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\pdf-2-doc-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\pdf-icon-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\success-FF8A5A.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\tab-arrow-FF691E.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\converter\upload-FF691E.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\amazon-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\amazon.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\close.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\enlarge-000000-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\enlarge-FFCA00-000000.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\hulu-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\hulu.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\minimize-000000-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\netflix-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\netflix.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\refresh-FFFFFF-000000.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\shrink-FFCA00-000000.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\shuffle-000000.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\shuffle-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\vudu-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films\vudu.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons\128.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons\16.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons\48.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons\close.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons\favicon.ico, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\icons\trends.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\bing-maps-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\from-to-icon-8881FF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\google-maps-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\location-icon-8881FF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\search-4A4A4A.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\search-8881FF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\switch-8881FF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\tab-arrow-8881FF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\whereto-logo-8881FF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\maps\whereto-logo-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\facebook_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\aliexpress.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\aliexpress_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\amazon.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\amazon_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\booking.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\booking_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\ebay.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\ebay_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\expedia.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\expedia_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\facebook.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\gmail.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\gmail_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\google-translate-icon-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\gtranslte.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\pinterest.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\pinterest_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\twitter.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\twitter_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\wix.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\wix_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\yahoo.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\yahoo_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\youtube.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sitesThumbnails\youtube_tile_v2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\tiles\DOC-to-PDF.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\tiles\PDF-to-DOC.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\tiles\Translation.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\tiles\View-PDF.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\01d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\01n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\02d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\02n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\03d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\03n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\04d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\04n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\09d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\09n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\10d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\10n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\11d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\11n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\13d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\13n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\50d.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\weather\50n.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\down.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\alot.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\angle-arrow-down.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\bing.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\bing_large.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\bluesky-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\brush.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\bt.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\clock.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\cloud.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\cupcake-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\desk-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\doodle.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\enhanced_google.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\eyeglass.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\eyeglass_transparent.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\films-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\gmx_large.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\google.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\google_large.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\hero-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\just-the-box-empty.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\just-the-box.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\mountain-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\pointer2.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\radio-selected.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\radio-unselected.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\sea-bg.jpg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\search-D7D7D7.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\search-FFFFFF.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\settings.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\smallMagnifier.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\star-unselected.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\star.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\todoc.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\toggle-off.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\toggle-on.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\topdf.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\transparent_img.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\yahoo.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\yahoo.svg, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\yahoo_large.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\yandex.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\_enhanced_google.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\images\_gmx_large.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\content\bundle.v0.0.1.min.css, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\skin\icons\16.png, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor\md5.min.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor\react-dom.min.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\vendor\react-with-addons.min.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\en\messages.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\fr\messages.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\hi\messages.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\pt_BR\messages.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_locales\vi\messages.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_metadata\computed_hashes.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\_metadata\verified_contents.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\2bfc185be71f44cd73ac81511fc1f5a5.woff, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\b495e340f4ef8924fea0284c1bf9e7ac.woff, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\background.html, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\background.v0.0.1.min.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\c5a5cbf4dbcaa7064f2bc77f52101aec.otf, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\client.v0.0.1.min.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\common.js.v0.0.1.min.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\e5d3501d500d07b0a1e952b0f8a81d78.woff, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\e_.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\index.html, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\manifest.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\popupTab2.html, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\popupTab2.js, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce\10.1.3.52_0\responseConfig.json, Quarantined, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [245], [443378],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts\HelveticaNeue-Thin.otf, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts\HelveticaNeueLT-Roman.woff, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts\neue-bold.woff, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\fonts\neue.woff, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\close-FF8A5A.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\collection-9B9B9B.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\collection-FF691E.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\doc-icon-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\error-FF691E.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\pdf-2-doc-9B9B9B.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\pdf-2-doc-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\pdf-icon-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\success-FF8A5A.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\tab-arrow-FF691E.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\converter\upload-FF691E.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\amazon-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\amazon.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\close.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\enlarge-000000-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\enlarge-FFCA00-000000.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\hulu-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\hulu.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\minimize-000000-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\netflix-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\netflix.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\refresh-FFFFFF-000000.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\shrink-FFCA00-000000.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\shuffle-000000.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\shuffle-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\vudu-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films\vudu.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons\128.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons\16.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons\48.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons\close.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons\favicon.ico, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\icons\trends.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\bing-maps-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\from-to-icon-8881FF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\google-maps-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\location-icon-8881FF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\search-4A4A4A.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\search-8881FF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\switch-8881FF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\tab-arrow-8881FF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\whereto-logo-8881FF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\maps\whereto-logo-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\facebook_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\aliexpress.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\aliexpress_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\amazon.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\amazon_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\booking.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\booking_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\ebay.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\ebay_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\expedia.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\expedia_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\facebook.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\gmail.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\gmail_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\google-translate-icon-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\gtranslte.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\pinterest.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\pinterest_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\twitter.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\twitter_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\wix.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\wix_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\yahoo.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\yahoo_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\youtube.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sitesThumbnails\youtube_tile_v2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\tiles\DOC-to-PDF.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\tiles\PDF-to-DOC.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\tiles\Translation.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\tiles\View-PDF.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\01d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\01n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\02d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\02n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\03d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\03n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\04d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\04n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\09d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\09n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\10d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\10n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\11d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\11n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\13d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\13n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\50d.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\weather\50n.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\down.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\alot.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\angle-arrow-down.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\bing.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\bing_large.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\bluesky-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\brush.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\bt.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\clock.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\cloud.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\cupcake-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\desk-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\doodle.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\enhanced_google.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\eyeglass.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\eyeglass_transparent.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\films-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\gmx_large.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\google.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\google_large.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\hero-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\just-the-box-empty.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\just-the-box.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\mountain-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\pointer2.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\radio-selected.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\radio-unselected.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\sea-bg.jpg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\search-D7D7D7.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\search-FFFFFF.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\settings.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\smallMagnifier.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\star-unselected.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\star.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\todoc.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\toggle-off.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\toggle-on.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\topdf.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\transparent_img.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\yahoo.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\yahoo.svg, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\yahoo_large.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\yandex.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\_enhanced_google.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\images\_gmx_large.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\content\bundle.v0.0.1.min.css, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\skin\icons\16.png, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor\md5.min.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor\react-dom.min.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\vendor\react-with-addons.min.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\en\messages.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\fr\messages.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\hi\messages.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\pt_BR\messages.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_locales\vi\messages.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\_metadata\verified_contents.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\2bfc185be71f44cd73ac81511fc1f5a5.woff, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\b495e340f4ef8924fea0284c1bf9e7ac.woff, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\background.html, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\background.v0.0.1.min.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\c5a5cbf4dbcaa7064f2bc77f52101aec.otf, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\client.v0.0.1.min.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\common.js.v0.0.1.min.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\e5d3501d500d07b0a1e952b0f8a81d78.woff, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\e_.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\index.html, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\manifest.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\popupTab2.html, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\popupTab2.js, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.3.54_0\responseConfig.json, Quarantined, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [245], [260991],1.0.6089 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [245], [260991],1.0.6089 PUP.Optional.WinYahoo, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\60L2DG92.DEFAULT-1519559592148\PREFS.JS, Replaced, [248], [413431],1.0.6089 PUP.Optional.WinYahoo, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\60L2DG92.DEFAULT-1519559592148\SEARCHPLUGINS\YAHOO! POWERED SEARCH.XML, Quarantined, [248], [413427],1.0.6089 PUP.Optional.InstallCore.Generic, C:\USERS\{username}\DESKTOP\MPP_SETUP_1820095530.EXE, Quarantined, [6192], [511843],1.0.6089 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat.We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  4. What is Nix Player? The Malwarebytes research team has determined that Nix Player is a bundler. This so-called bundler installed a browser hijacker. Hijackers manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. How do I know if my computer is affected by Nix Player? You may see this entry in your list of installed software: and these warnings during install: this browser extension: these changed settings: and you will see these icons in your startmenu and on your desktop: This is the mains screen of the program: How did Nix Player get on my computer? Bundlers use different methods for distributing themselves. This particular one was offered as a "necessary" media player. How do I remove Nix Player? Our program Malwarebytes can detect and remove this potentially unwanted program. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of Nix Player? No, Malwarebytes removes Nix Player completely. The shortcut called Nix Player on the desktop can be deleted if it belonged to the potentially unwanted program. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the Nix Player hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late. and we would have blocked the download of the installer: Technical details for experts Possible signs in FRST logs: FF NewTab: about:newtab FF DefaultSearchEngine: Yahoo! Powered Search FF SelectedSearchEngine: Yahoo! Powered Search FF Homepage: hxxps://{cc}.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_bboi_17_48_ssg01&param1=1&param2={Firefox} FF Keyword.URL: user_pref("keyword.URL", true); FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\searchplugins\yahoo! powered search.xml [2017-11-30] FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2017-11-30] [not signed] CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms} CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms} CHR Extension: (Search Manager) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej [2017-11-30] CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKCU\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx C:\Users\{username}\Desktop\Nix Player.lnk C:\Users\{username}\AppData\Roaming\Nix Player C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nix Player (Nix Player ) C:\Users\{username}\Downloads\Nix_Player [1].exe Nix Player (HKCU\...\{EBD7166E-C6A6-4b68-80CA-CA08108C76EE} Nix Player_is1) (Version: 1.0.0.0 - Nix Player) Significant alterations made by the installer: File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0 Adds the file 2bfc185be71f44cd73ac81511fc1f5a5.woff"="11/27/2017 11:30 AM, 48112 bytes, A Adds the file b495e340f4ef8924fea0284c1bf9e7ac.woff"="11/27/2017 11:30 AM, 14492 bytes, A Adds the file background.html"="11/27/2017 11:30 AM, 534 bytes, A Adds the file background.v0.0.1.min.js"="11/27/2017 11:30 AM, 3383 bytes, A Adds the file c5a5cbf4dbcaa7064f2bc77f52101aec.otf"="11/27/2017 11:30 AM, 24888 bytes, A Adds the file client.v0.0.1.min.js"="11/27/2017 11:30 AM, 324009 bytes, A Adds the file common.js"="11/27/2017 11:30 AM, 392960 bytes, A Adds the file e_.json"="11/27/2017 11:30 AM, 110 bytes, A Adds the file e5d3501d500d07b0a1e952b0f8a81d78.woff"="11/27/2017 11:30 AM, 16320 bytes, A Adds the file index.html"="11/27/2017 11:30 AM, 1397 bytes, A Adds the file manifest.json"="11/30/2017 10:29 AM, 2232 bytes, A Adds the file popupTab2.html"="11/27/2017 11:30 AM, 3424 bytes, A Adds the file popupTab2.js"="11/27/2017 11:30 AM, 7635 bytes, A Adds the file responseConfig.json"="11/27/2017 11:30 AM, 149704 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_metadata Adds the file verified_contents.json"="11/27/2017 11:30 AM, 15997 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content Adds the file bundle.v0.0.1.min.css"="11/27/2017 11:30 AM, 4169 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\fonts Adds the file HelveticaNeueLT-Roman.woff"="11/27/2017 11:30 AM, 16320 bytes, A Adds the file HelveticaNeue-Thin.otf"="11/27/2017 11:30 AM, 24888 bytes, A Adds the file neue.woff"="11/27/2017 11:30 AM, 14492 bytes, A Adds the file neue-bold.woff"="11/27/2017 11:30 AM, 48112 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\skin\icons Adds the file 16.png"="11/27/2017 11:30 AM, 615 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\vendor Adds the file md5.min.js"="11/27/2017 11:30 AM, 8209 bytes, A Adds the file react-dom.min.js"="11/27/2017 11:30 AM, 709 bytes, A Adds the file react-with-addons.min.js"="11/27/2017 11:30 AM, 160185 bytes, A Adds the file underscore-min.js"="11/27/2017 11:30 AM, 16449 bytes, A In the existing folder C:\Users\{username}\AppData\LocalLow\Microsoft\Internet Explorer\Services Adds the file searchy.ico"="11/30/2017 10:28 AM, 5430 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nix Player Adds the file Nix Player.lnk"="11/30/2017 10:30 AM, 1873 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\searchplugins Adds the file yahoo! powered search.xml"="11/30/2017 10:28 AM, 1595 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player Adds the file FlvPlayer.Core.dll"="11/22/2017 7:10 PM, 44544 bytes, A Adds the file FlvPlayer.Wpf.dll"="11/22/2017 7:10 PM, 35840 bytes, A Adds the file Nix Player.exe"="11/22/2017 7:10 PM, 140288 bytes, A Adds the file unins000.dat"="11/30/2017 10:30 AM, 24107 bytes, A Adds the file unins000.exe"="11/30/2017 10:29 AM, 742053 bytes, A Adds the file Vlc.DotNet.Core.Interops.dll"="11/20/2017 6:34 PM, 94208 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries Adds the file axvlc.dll"="6/4/2017 4:41 PM, 416256 bytes, A Adds the file axvlc.dll.manifest"="6/4/2017 4:41 PM, 304 bytes, A Adds the file libvlc.dll"="6/4/2017 4:41 PM, 111104 bytes, A Adds the file libvlccore.dll"="6/4/2017 4:41 PM, 2285056 bytes, A Adds the file npvlc.dll"="6/4/2017 4:41 PM, 305152 bytes, A Adds the file npvlc.dll.manifest"="6/4/2017 4:41 PM, 304 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins Adds the file plugins.dat"="11/30/2017 10:32 AM, 41062 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\access Adds the file libfilesystem_plugin.dll"="6/4/2017 4:41 PM, 43520 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\access_output Adds the file libaccess_output_file_plugin.dll"="6/4/2017 4:41 PM, 35840 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\audio_filter Adds the file liba52tofloat32_plugin.dll"="6/4/2017 4:41 PM, 69120 bytes, A Adds the file liba52tospdif_plugin.dll"="6/4/2017 4:41 PM, 34816 bytes, A Adds the file libaudio_format_plugin.dll"="6/4/2017 4:41 PM, 45568 bytes, A Adds the file libaudiobargraph_a_plugin.dll"="6/4/2017 4:41 PM, 41472 bytes, A Adds the file libchorus_flanger_plugin.dll"="6/4/2017 4:41 PM, 39424 bytes, A Adds the file libcompressor_plugin.dll"="6/4/2017 4:41 PM, 42496 bytes, A Adds the file libconverter_fixed_plugin.dll"="6/4/2017 4:41 PM, 36864 bytes, A Adds the file libdolby_surround_decoder_plugin.dll"="6/4/2017 4:41 PM, 36352 bytes, A Adds the file libdtstofloat32_plugin.dll"="6/4/2017 4:41 PM, 182272 bytes, A Adds the file libdtstospdif_plugin.dll"="6/4/2017 4:41 PM, 36864 bytes, A Adds the file libequalizer_plugin.dll"="6/4/2017 4:41 PM, 46592 bytes, A Adds the file libheadphone_channel_mixer_plugin.dll"="6/4/2017 4:41 PM, 41472 bytes, A Adds the file libkaraoke_plugin.dll"="6/4/2017 4:41 PM, 34304 bytes, A Adds the file libmono_plugin.dll"="6/4/2017 4:41 PM, 42496 bytes, A Adds the file libmpgatofixed32_plugin.dll"="6/4/2017 4:41 PM, 135168 bytes, A Adds the file libnormvol_plugin.dll"="6/4/2017 4:41 PM, 37376 bytes, A Adds the file libparam_eq_plugin.dll"="6/4/2017 4:41 PM, 38912 bytes, A Adds the file libsamplerate_plugin.dll"="6/4/2017 4:41 PM, 1518080 bytes, A Adds the file libscaletempo_plugin.dll"="6/4/2017 4:41 PM, 40960 bytes, A Adds the file libsimple_channel_mixer_plugin.dll"="6/4/2017 4:41 PM, 38400 bytes, A Adds the file libspatializer_plugin.dll"="6/4/2017 4:41 PM, 107520 bytes, A Adds the file libspeex_resampler_plugin.dll"="6/4/2017 4:41 PM, 46592 bytes, A Adds the file libtrivial_channel_mixer_plugin.dll"="6/4/2017 4:41 PM, 36352 bytes, A Adds the file libugly_resampler_plugin.dll"="6/4/2017 4:41 PM, 35328 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\audio_mixer Adds the file libfixed32_mixer_plugin.dll"="6/4/2017 4:41 PM, 34816 bytes, A Adds the file libfloat32_mixer_plugin.dll"="6/4/2017 4:41 PM, 33792 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\audio_output Adds the file libaout_directx_plugin.dll"="6/4/2017 4:41 PM, 49664 bytes, A Adds the file libwaveout_plugin.dll"="6/4/2017 4:41 PM, 51200 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\codec Adds the file libavcodec_plugin.dll"="6/4/2017 4:41 PM, 9532416 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\video_filter Adds the file libswscale_plugin.dll"="6/4/2017 4:41 PM, 370688 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Nix Player\Libraries\plugins\video_output Adds the file libvmem_plugin.dll"="6/4/2017 4:41 PM, 38912 bytes, A In the existing folder C:\Users\{username}\Desktop Adds the file Nix Player.lnk"="11/30/2017 10:30 AM, 1881 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{82D7B48B-A67F-D833-CBE7-FDDBEF8F0143}] "aflt"="REG_SZ", "bgy_bboi_17_48_ssg01" "c_ver"="REG_SZ", "3.26.2.59" "cd"="REG_SZ", "2XzuyEtN2Y1L1QzutDzztDtDtByByByDtDtBzyyByBtDyCyCtN0D0Tzu0StBtCyCtDtN1L2XzutAtFtByCtFtBtFyDzytN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyB0AtByBtD0B0EyEtGyDyByDyBtGtA0B0FtBtGtCtCyE0DtGtB0E0E0FtC0AtAyD0A0A0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCtBtAzyzztByEtGtDyB0C0FtGyE0ByCyCtG0AzztB0AtGtB0EtA0Ezz0Fzz0AyEtC0DtB2QtN0A0LzutD" "cr"="REG_SZ", "1761208239" "DT"="REG_SZ", "S2160" "insDate"="REG_SZ", "20171130102837668" "instlRef"="REG_SZ", "b" "st_ver"="REG_SZ", "3.6.0.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej] "install_parameter"="REG_SZ", "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" "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej] "install_parameter"="REG_SZ", "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" "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx" [HKEY_CURRENT_USER\Software\csastats\ic\0001b697c1f9893aedbfdf6cba3203491bdd733a18fd2b6869d551e874153226] "advertisers_ids"="REG_SZ", "554cb9c7b6" "channel"="REG_SZ", "c2356069e9d1e79ca924378153cfbbfb4d4416b1f99d41a2940bfdb66c5319db" "hmac_sha256_validation"="REG_SZ", "e1524acfa490c565e7793ac737ce8aace113643aceb4479e6aac2fdee2e91e68" "install_id"="REG_SZ", "0001b697c1f9893aedbfdf6cba3203491bdd733a18fd2b6869d551e874153226" "install_time_client"="REG_SZ", "20171130102729172" "install_time_server"="REG_SZ", "20171130042736550" "publisher_id"="REG_SZ", "4a890e7444" "vendor_id"="REG_SZ", "ic" [HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\pilplloabdedfmialnfchjomjmpjcoej] "install_parameter"="REG_SZ", "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" "update_url"="REG_SZ", "https://clients2.google.com/service/update2/crx" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EBD7166E-C6A6-4b68-80CA-CA08108C76EE} Nix Player_is1] "DisplayIcon"="REG_SZ", "C:\Users\{username}\AppData\Roaming\Nix Player\Nix Player.exe" "DisplayName"="REG_SZ", "Nix Player" "DisplayVersion"="REG_SZ", "1.0.0.0" "EstimatedSize"="REG_DWORD", 16758 "Inno Setup: App Path"="REG_SZ", "C:\Users\{username}\AppData\Roaming\Nix Player" "Inno Setup: Deselected Tasks"="REG_SZ", "" "Inno Setup: Icon Group"="REG_SZ", "Nix Player" "Inno Setup: Language"="REG_SZ", "en" "Inno Setup: Selected Tasks"="REG_SZ", "desktopicon" "Inno Setup: Setup Version"="REG_SZ", "5.5.8 (a)" "Inno Setup: User"="REG_SZ", "{username}" "InstallDate"="REG_SZ", "20171130" "InstallLocation"="REG_SZ", "C:\Users\{username}\AppData\Roaming\Nix Player\" "MajorVersion"="REG_DWORD", 1 "MinorVersion"="REG_DWORD", 0 "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "Nix Player" "QuietUninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Roaming\Nix Player\unins000.exe" /SILENT" "UninstallString"="REG_SZ", ""C:\Users\{username}\AppData\Roaming\Nix Player\unins000.exe"" [HKEY_CURRENT_USER\Software\undefined] "Nix_Player [1].exe"="REG_SZ", "1512034148483,http://cdn.bridgeaccesspoint.com/Nix_Player.exe" Malwarebytes log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/30/17 Scan Time: 11:26 AM Log File: ea295588-d5b8-11e7-ae87-080027750297.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.236 Update Package Version: 1.0.3379 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 335741 Threats Detected: 143 Threats Quarantined: 143 Time Elapsed: 2 min, 4 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 5 PUP.Optional.InstallCore, HKCU\SOFTWARE\csastats, Delete-on-Reboot, [2], [260986],1.0.3379 PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\PILPLLOABDEDFMIALNFCHJOMJMPJCOEJ, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, HKCU\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\PILPLLOABDEDFMIALNFCHJOMJMPJCOEJ, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.ProductSetup, HKCU\SOFTWARE\PRODUCTSETUP, Delete-on-Reboot, [14409], [242047],1.0.3379 Registry Value: 1 PUP.Optional.ProductSetup, HKCU\SOFTWARE\PRODUCTSETUP|TB, Delete-on-Reboot, [14409], [242047],1.0.3379 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 19 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\tiles, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\pt_BR, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\fonts, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\en, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\fr, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\hi, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\vi, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\skin\icons, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_metadata, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\vendor, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\skin, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej, Delete-on-Reboot, [529], [260991],1.0.3379 File: 118 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\fonts\HelveticaNeue-Thin.otf, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\fonts\HelveticaNeueLT-Roman.woff, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\fonts\neue-bold.woff, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\fonts\neue.woff, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons\128.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons\16.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons\48.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons\close.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons\favicon.ico, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\icons\trends.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\amazon_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\booking_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\ebay.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\ebay_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\facebook.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\facebook_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\gmail.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\gmail_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\gtranslte.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\pinterest.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\twitter.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\twitter_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\yahoo.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\yahoo_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\youtube.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sitesThumbnails\youtube_tile_v2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\tiles\DOC-to-PDF.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\tiles\PDF-to-DOC.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\tiles\Translation.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\tiles\View-PDF.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\01d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\01n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\02d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\02n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\03d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\03n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\04d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\04n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\09d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\09n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\10d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\10n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\11d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\11n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\13d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\13n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\50d.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\weather\50n.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\eyeglass.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\angle-arrow-down.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\bing.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\bing_large.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\bluesky-bg.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\brush.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\bt.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\clock.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\cloud.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\cupcake-bg.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\desk-bg.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\doodle.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\down.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\enhanced_google.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\gmx_large.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\google.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\google_large.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\hero-bg.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\just-the-box-empty.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\just-the-box.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\mountain-bg.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\pointer2.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\radio-selected.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\radio-unselected.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\sea-bg.jpg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\settings.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\smallMagnifier.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\star-unselected.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\star.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\todoc.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\toggle-off.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\toggle-on.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\topdf.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\transparent_img.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\yahoo.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\yahoo.svg, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\yahoo_large.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\images\yandex.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\content\bundle.v0.0.1.min.css, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\skin\icons\16.png, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\vendor\md5.min.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\vendor\react-dom.min.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\vendor\react-with-addons.min.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\vendor\underscore-min.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\en\messages.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\fr\messages.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\hi\messages.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\pt_BR\messages.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_locales\vi\messages.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\_metadata\verified_contents.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\2bfc185be71f44cd73ac81511fc1f5a5.woff, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\b495e340f4ef8924fea0284c1bf9e7ac.woff, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\background.html, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\background.v0.0.1.min.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\c5a5cbf4dbcaa7064f2bc77f52101aec.otf, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\client.v0.0.1.min.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\common.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\e5d3501d500d07b0a1e952b0f8a81d78.woff, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\e_.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\index.html, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\manifest.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\popupTab2.html, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\popupTab2.js, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.2.53_0\responseConfig.json, Delete-on-Reboot, [529], [260991],1.0.3379 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, Delete-on-Reboot, [529], [453138],1.0.3379 PUP.Optional.WinYahoo, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\PREFS.JS, Replaced, [63], [413431],1.0.3379 PUP.Optional.WinYahoo, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{profile}.default\SEARCHPLUGINS\YAHOO! POWERED SEARCH.XML, Delete-on-Reboot, [63], [413427],1.0.3379 PUP.Optional.InstallCore, C:\USERS\{username}\DESKTOP\NIX_PLAYER.EXE, Delete-on-Reboot, [2], [461898],1.0.3379 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
  5. What is SearchManager? The Malwarebytes research team has determined that SearchManager is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one replaces your default search provider. How do I know if my computer is affected by SearchManager? You may see these warnings during install: this Chrome extension: this new newtab page: and these changed search settings: How did SearchManager get on my computer? Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software. How do I remove SearchManager? Our program Malwarebytes can detect and remove this potentially unwanted program. Please download Malwarebytes to your desktop. Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program. Then click Finish. Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu. If another update of the definitions is available, it will be implemented before the rest of the scanning procedure. When the scan is complete, make sure that all Threats are selected, and click Remove Selected. Restart your computer when prompted to do so. Is there anything else I need to do to get rid of SearchManager? No, Malwarebytes removes SearchManager completely. How would the full version of Malwarebytes help protect me? We hope our application and this guide have helped you eradicate this hijacker. As you can see below the full version of Malwarebytes would have protected you against the SearchManager hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late. Technical details for experts Possible signs in FRST logs: HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://{cc}.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_fs_17_27&param1=1&param2={p2}{cc}os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate SearchScopes: HKCU -> DefaultScope {518b33ae-375d-712d-6742-d1fe0400268d} URL = hxxps://{cc}.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_fs_17_27&param1=1&param2={p3}{cc}os%3DWindows%2B7%2BUltimate&p={searchTerms} SearchScopes: HKCU -> {518b33ae-375d-712d-6742-d1fe0400268d} URL = hxxps://{cc}.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_fs_17_27&param1=1&param2={p3}{cc}os%3DWindows%2B7%2BUltimate&p={searchTerms} FF NewTab: about:newtab FF DefaultSearchEngine: Yahoo! Powered Search FF SelectedSearchEngine: Yahoo! Powered Search FF Homepage: hxxps://{cc}.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_fs_17_27&param1=1&param2=f%3D1%26b%3DFirefox%26cc%3D{cc}os%3DWindows%2B7%2BUltimate FF Keyword.URL: user_pref("keyword.URL", true); FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\x82gpani.default-1491393116824\searchplugins\yahoo! powered search.xml [2017-07-05] CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms} CHR DefaultSearchKeyword: Default -> sm CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms} CHR Extension: (Search Manager) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej [2017-07-05] CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKCU\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx Malwarebytes log: Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 7/5/17 Scan Time: 9:41 AM Log File: mbamSearchManager.txt Administrator: Yes -Software Information- Version: 3.1.2.1733 Components Version: 1.0.141 Update Package Version: 1.0.2294 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 337109 Threats Detected: 101 Threats Quarantined: 101 Time Elapsed: 3 min, 16 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 5 PUP.Optional.InstallCore, HKCU\SOFTWARE\csastats, Delete-on-Reboot, [3], [260986],1.0.2294 PUP.Optional.ProductSetup, HKCU\SOFTWARE\PRODUCTSETUP, Delete-on-Reboot, [15069], [242047],1.0.2294 PUP.Optional.SearchManager, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Delete-on-Reboot, [542], [260991],1.0.2294 PUP.Optional.SearchManager, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Delete-on-Reboot, [542], [260991],1.0.2294 PUP.Optional.SearchManager, HKCU\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Delete-on-Reboot, [542], [183362],1.0.2294 Registry Value: 1 PUP.Optional.ProductSetup, HKCU\SOFTWARE\PRODUCTSETUP|TB, Delete-on-Reboot, [15069], [242047],1.0.2294 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 11 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\fonts, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\skin\icons, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\_metadata, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\vendor, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\skin, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\EXTENSIONS\pilplloabdedfmialnfchjomjmpjcoej, Delete-on-Reboot, [542], [331417],1.0.2294 File: 84 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\fonts\HelveticaNeue-Thin.otf, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\fonts\HelveticaNeueLT-Roman.woff, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\fonts\neue-bold.woff, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\fonts\neue.woff, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons\128.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons\16.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons\48.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons\close.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons\favicon.ico, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\icons\trends.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\01d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\01n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\02d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\02n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\03d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\03n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\04d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\04n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\09d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\09n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\10d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\10n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\11d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\11n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\13d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\13n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\50d.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\weather\50n.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\hero-bg.jpg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\bing.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\bing_large.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\bluesky-bg.jpg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\brush.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\bt.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\clock.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\cloud.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\cupcake-bg.jpg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\desk-bg.jpg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\doodle.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\down.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\eyeglass.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\google.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\google_large.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\just-the-box-empty.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\just-the-box.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\mountain-bg.jpg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\pointer2.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\radio-selected.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\radio-unselected.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\sea-bg.jpg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\settings.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\star-unselected.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\star.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\toggle-off.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\toggle-on.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\transparent_img.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\yahoo.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\yahoo.svg, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\images\yahoo_large.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\content\bundle.v0.0.1.min.css, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\skin\icons\16.png, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\vendor\md5.min.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\vendor\react-dom.min.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\vendor\react-with-addons.min.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\vendor\underscore-min.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\_metadata\computed_hashes.json, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\_metadata\verified_contents.json, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\2bfc185be71f44cd73ac81511fc1f5a5.woff, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\b495e340f4ef8924fea0284c1bf9e7ac.woff, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\background.html, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\background.v0.0.1.min.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\c5a5cbf4dbcaa7064f2bc77f52101aec.otf, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\client.v0.0.1.min.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\common.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\e5d3501d500d07b0a1e952b0f8a81d78.woff, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\e_.json, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\index.html, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\manifest.json, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\popupTab2.html, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\popupTab2.js, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.SearchManager, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej\10.1.1.52_0\responseConfig.json, Delete-on-Reboot, [542], [331417],1.0.2294 PUP.Optional.FusionCore, C:\USERS\{username}\DESKTOP\ADVANCEDOCRFREE.EXE, Delete-on-Reboot, [982], [413201],1.0.2294 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage, Delete-on-Reboot, [542], [260990],1.0.2294 PUP.Optional.SearchManager, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\LOCAL STORAGE\chrome-extension_pilplloabdedfmialnfchjomjmpjcoej_0.localstorage-journal, Delete-on-Reboot, [542], [260990],1.0.2294 Physical Sector: 0 (No malicious items detected) (end) As mentioned before the full version of Malwarebytes could have protected your computer against this threat. We use different ways of protecting your computer(s): Dynamically Blocks Malware Sites & Servers Malware Execution Prevention Save yourself the hassle and get protected.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.