Sign in to follow this  
Metallica

Removal instructions for Web Safeguard

Recommended Posts

What is Web Safeguard?

The Malwarebytes research team has determined that Web Safeguard is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Web Safeguard?

This is how the start- and search-page looks:

main.png

And you may see these toolbars:

warning2.png

warning3.png

or this warning:

warning1.png

and this enrty in your list of installed programs:

warning4.png

How did Web Safeguard get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was offered as protetive software.

How do I remove Web Safeguard?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of Web Safeguard?
  • The hijacker replaces your hosts file, so you may have to restore the old one. You can find third-party hosts file alternatives at hpHosts or at mvps.org or you can simply reset the default hosts file as outlined here by Microsoft.
  • The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Web Safeguard listing. Then confirm removal.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Web Safeguard hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

C:\Program Files\Web Safeguard\FrameworkEngine.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:3128O1 - Hosts: 54.204.28.26 cabeibpjbbfnocgbmpmkifcljmgcmgpfO2 - BHO: Web Safeguard BHO - {CC862B2A-308A-4184-9AE6-09832D7296AD} - C:\Program Files\Web Safeguard\FrameworkBHO.dllO4 - HKLM\..\Run: [BService] C:\Program Files\Bench\BService\1.1\bservice.exeO4 - HKLM\..\Run: [Wd] C:\Program Files\Bench\Wd\wd.exeO4 - HKLM\..\Run: [Bench Communicator Watcher] C:\Program Files\Bench\Proxy\pwdg.exeO4 - HKLM\..\Run: [Bench Settings Cleaner] C:\Program Files\Bench\Proxy\cl.exeO4 - HKLM\..\RunOnce: [Web Safeguard-repairJob] wscript.exe "C:\Users\{username}\AppData\Local\Web Safeguard\repair.js" "Web Safeguard-repairJob"
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\Bench\BService\1.1       Adds the file bhelper.dll"="7/15/2014 11:10 PM, 53248 bytes, A       Adds the file bservice.exe"="7/15/2014 11:10 PM, 52736 bytes, A    Adds the folder C:\Program Files\Bench\NmHost       Adds the file manifest.json"="8/23/2014 10:34 AM, 215 bytes, A       Adds the file nmhost.exe"="7/15/2014 11:09 PM, 165376 bytes, A    Adds the folder C:\Program Files\Bench\NmHost\data\installer       Adds the file cabeibpjbbfnocgbmpmkifcljmgcmgpf"="8/23/2014 10:34 AM, 936 bytes, A    Adds the folder C:\Program Files\Bench\Proxy       Adds the file cl.exe"="7/15/2014 11:04 PM, 55296 bytes, A       Adds the file icon.ico"="8/20/2014 4:32 PM, 32038 bytes, A       Adds the file proc.exe"="8/1/2014 5:06 PM, 430592 bytes, A       Adds the file pwdg.exe"="7/15/2014 11:04 PM, 127488 bytes, A    Adds the folder C:\Program Files\Bench\Updater       Adds the file products.xml"="8/23/2014 10:34 AM, 377 bytes, A       Adds the file updater.exe"="7/15/2014 11:04 PM, 67072 bytes, A    Adds the folder C:\Program Files\Bench\Updater\1.7.0.0       Adds the file updater.exe"="7/15/2014 11:04 PM, 419840 bytes, A    Adds the folder C:\Program Files\Bench\Wd       Adds the file wd.exe"="7/15/2014 11:10 PM, 92672 bytes, A    Adds the folder C:\Program Files\Web Safeguard       Adds the file background.html"="8/20/2014 4:32 PM, 157 bytes, A       Adds the file config.xml"="8/20/2014 4:32 PM, 2242 bytes, A       Adds the file extension_info.json"="8/23/2014 10:34 AM, 2361 bytes, A       Adds the file FrameworkBHO.dll"="8/20/2014 4:32 PM, 356584 bytes, A       Adds the file FrameworkBHO64.dll"="8/20/2014 4:32 PM, 577256 bytes, A       Adds the file FrameworkEngine.exe"="8/20/2014 4:32 PM, 264016 bytes, A    Adds the folder C:\Program Files\Web Safeguard\AppFramework       Adds the file appAPI_bg.js"="8/20/2014 4:32 PM, 2582 bytes, A       Adds the file appAPI_browseraction.js"="8/20/2014 4:32 PM, 799 bytes, A       Adds the file appAPI_common.js"="8/20/2014 4:32 PM, 9871 bytes, A       Adds the file appAPI_content.js"="8/20/2014 4:32 PM, 1247 bytes, A       Adds the file appAPI_settings.js"="8/20/2014 4:32 PM, 83 bytes, A       Adds the file appAPI_webrequest.js"="8/20/2014 4:32 PM, 138 bytes, A       Adds the file jquery.min.js"="8/20/2014 4:32 PM, 93548 bytes, A    Adds the folder C:\Program Files\Web Safeguard\CanvasFramework       Adds the file canvas_bg.js"="8/20/2014 4:32 PM, 5651 bytes, A       Adds the file canvasscript_engine.js"="8/20/2014 4:32 PM, 437 bytes, A       Adds the file md5.js"="8/20/2014 4:32 PM, 3264 bytes, A       Adds the file registry.js"="8/20/2014 4:32 PM, 908 bytes, A       Adds the file webrequest.js"="8/20/2014 4:32 PM, 4005 bytes, A    Adds the folder C:\Program Files\Web Safeguard\framework       Adds the file backgroundscript_engine.js"="8/20/2014 4:32 PM, 1872 bytes, A       Adds the file base.js"="8/20/2014 4:32 PM, 2933 bytes, A       Adds the file browser.js"="8/20/2014 4:32 PM, 11200 bytes, A       Adds the file console.js"="8/20/2014 4:32 PM, 489 bytes, A       Adds the file framework.js"="8/20/2014 4:32 PM, 3542 bytes, A       Adds the file global.js"="8/20/2014 4:32 PM, 1850 bytes, A       Adds the file i18n.js"="8/20/2014 4:32 PM, 1661 bytes, A       Adds the file initialize.js"="8/20/2014 4:32 PM, 316 bytes, A       Adds the file invoke_async.js"="8/20/2014 4:32 PM, 2312 bytes, A       Adds the file io.js"="8/20/2014 4:32 PM, 1308 bytes, A       Adds the file json2.js"="8/20/2014 4:32 PM, 2791 bytes, A       Adds the file lang.js"="8/20/2014 4:32 PM, 1633 bytes, A       Adds the file legacy.js"="8/20/2014 4:32 PM, 1270 bytes, A       Adds the file message_target.js"="8/20/2014 4:32 PM, 854 bytes, A       Adds the file messaging.js"="8/20/2014 4:32 PM, 1507 bytes, A       Adds the file storage.js"="8/20/2014 4:32 PM, 3603 bytes, A       Adds the file timer.js"="8/20/2014 4:32 PM, 409 bytes, A       Adds the file updater.js"="8/20/2014 4:32 PM, 2417 bytes, A       Adds the file userscript_client.js"="8/20/2014 4:32 PM, 310 bytes, A       Adds the file userscript_engine.js"="8/20/2014 4:32 PM, 3062 bytes, A       Adds the file utils.js"="8/20/2014 4:32 PM, 2492 bytes, A       Adds the file xhr.js"="8/20/2014 4:32 PM, 3081 bytes, A    Adds the folder C:\Program Files\Web Safeguard\framework-ui       Adds the file browser_button.js"="8/20/2014 4:32 PM, 5135 bytes, A       Adds the file context_menu.js"="8/20/2014 4:32 PM, 738 bytes, A       Adds the file context_menu_item_handler.html"="8/20/2014 4:32 PM, 225 bytes, A       Adds the file framework_api.js"="8/20/2014 4:32 PM, 1589 bytes, A       Adds the file notification.html"="8/20/2014 4:32 PM, 6591 bytes, A       Adds the file notifications.js"="8/20/2014 4:32 PM, 2409 bytes, A       Adds the file options.js"="8/20/2014 4:32 PM, 660 bytes, A       Adds the file ui_base.js"="8/20/2014 4:32 PM, 1788 bytes, A    Adds the folder C:\Program Files\Web Safeguard\framework-ui\theme\bubble       Adds the file bottom-left.png"="8/20/2014 4:32 PM, 316 bytes, A       Adds the file bottom-middle.png"="8/20/2014 4:32 PM, 240 bytes, A       Adds the file bottom-right.png"="8/20/2014 4:32 PM, 311 bytes, A       Adds the file middle-left.png"="8/20/2014 4:32 PM, 235 bytes, A       Adds the file middle-right.png"="8/20/2014 4:32 PM, 234 bytes, A       Adds the file tail-bottom.png"="8/20/2014 4:32 PM, 315 bytes, A       Adds the file tail-left.png"="8/20/2014 4:32 PM, 307 bytes, A       Adds the file tail-right.png"="8/20/2014 4:32 PM, 304 bytes, A       Adds the file tail-top.png"="8/20/2014 4:32 PM, 315 bytes, A       Adds the file top-left.png"="8/20/2014 4:32 PM, 310 bytes, A       Adds the file top-middle.png"="8/20/2014 4:32 PM, 240 bytes, A       Adds the file top-right.png"="8/20/2014 4:32 PM, 308 bytes, A    Adds the folder C:\Program Files\Web Safeguard\icons       Adds the file button.png"="8/20/2014 4:32 PM, 904 bytes, A       Adds the file icon100.png"="8/20/2014 4:32 PM, 7311 bytes, A       Adds the file icon128.png"="8/20/2014 4:32 PM, 9600 bytes, A       Adds the file icon32.png"="8/20/2014 4:32 PM, 1922 bytes, A       Adds the file icon48.png"="8/20/2014 4:32 PM, 3155 bytes, A    In the existing folder C:\Users\{username}\AppData\Local       Adds the file proxy.log"="8/23/2014 10:34 AM, 0 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\BenchUpdater       Adds the file products.xml"="8/23/2014 10:34 AM, 442 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard       Adds the file chrome_gp_update.js"="7/15/2014 11:10 PM, 2348 bytes, A       Adds the file chrome_installer.js"="7/15/2014 11:10 PM, 6304 bytes, A       Adds the file clear_cache.js"="7/15/2014 11:10 PM, 522 bytes, A       Adds the file common.js"="7/15/2014 11:09 PM, 13540 bytes, A       Adds the file firefox_installer.js"="7/15/2014 11:09 PM, 6848 bytes, A       Adds the file gpedit.exe"="7/15/2014 11:09 PM, 93184 bytes, A       Adds the file icon.ico"="8/20/2014 4:32 PM, 32038 bytes, A       Adds the file ie_installer.js"="7/15/2014 11:10 PM, 3685 bytes, A       Adds the file installer.js"="7/15/2014 11:09 PM, 799 bytes, A       Adds the file main_installer.js"="7/15/2014 11:10 PM, 1567 bytes, A       Adds the file migrate.js"="7/15/2014 11:10 PM, 4746 bytes, A       Adds the file projectInstaller.js"="7/15/2014 11:09 PM, 3004 bytes, A       Adds the file repair.js"="7/15/2014 11:10 PM, 1735 bytes, A       Adds the file repair_data.json"="8/23/2014 10:34 AM, 2919 bytes, A       Adds the file SoftwareDetector.exe"="8/1/2014 5:06 PM, 78848 bytes, A       Adds the file sqlite3.exe"="7/15/2014 11:09 PM, 492544 bytes, A       Adds the file storageedit.exe"="7/15/2014 11:10 PM, 75264 bytes, A       Adds the file uninstall.exe"="8/23/2014 10:34 AM, 132626 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard\firefox       Adds the file background.html"="8/20/2014 4:32 PM, 157 bytes, A       Adds the file bootstrap.js"="8/20/2014 4:32 PM, 2857 bytes, A       Adds the file chrome.manifest"="8/20/2014 4:32 PM, 57 bytes, A       Adds the file extension_info.json"="8/20/2014 4:32 PM, 1682 bytes, A       Adds the file install.rdf"="8/20/2014 4:32 PM, 1207 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework       Adds the file appAPI_bg.js"="8/20/2014 4:32 PM, 2582 bytes, A       Adds the file appAPI_browseraction.js"="8/20/2014 4:32 PM, 799 bytes, A       Adds the file appAPI_common.js"="8/20/2014 4:32 PM, 9871 bytes, A       Adds the file appAPI_content.js"="8/20/2014 4:32 PM, 1247 bytes, A       Adds the file appAPI_settings.js"="8/20/2014 4:32 PM, 83 bytes, A       Adds the file appAPI_webrequest.js"="8/20/2014 4:32 PM, 138 bytes, A       Adds the file jquery.min.js"="8/20/2014 4:32 PM, 83059 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework       Adds the file canvas_bg.js"="8/20/2014 4:32 PM, 5651 bytes, A       Adds the file canvasscript_engine.js"="8/20/2014 4:32 PM, 437 bytes, A       Adds the file md5.js"="8/20/2014 4:32 PM, 3264 bytes, A       Adds the file registry.js"="8/20/2014 4:32 PM, 796 bytes, A       Adds the file webrequest.js"="8/20/2014 4:32 PM, 5575 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework       Adds the file backgroundscript_engine.js"="8/20/2014 4:32 PM, 1580 bytes, A       Adds the file base.js"="8/20/2014 4:32 PM, 2933 bytes, A       Adds the file browser.js"="8/20/2014 4:32 PM, 12801 bytes, A       Adds the file chrome_windows.js"="8/20/2014 4:32 PM, 2627 bytes, A       Adds the file console.js"="8/20/2014 4:32 PM, 540 bytes, A       Adds the file content_proxy.js"="8/20/2014 4:32 PM, 502 bytes, A       Adds the file framework.js"="8/20/2014 4:32 PM, 4381 bytes, A       Adds the file i18n.js"="8/20/2014 4:32 PM, 1601 bytes, A       Adds the file invoke_async.js"="8/20/2014 4:32 PM, 2312 bytes, A       Adds the file io.js"="8/20/2014 4:32 PM, 976 bytes, A       Adds the file lang.js"="8/20/2014 4:32 PM, 3080 bytes, A       Adds the file legacy.js"="8/20/2014 4:32 PM, 1270 bytes, A       Adds the file message_target.js"="8/20/2014 4:32 PM, 854 bytes, A       Adds the file messaging.js"="8/20/2014 4:32 PM, 1507 bytes, A       Adds the file storage.js"="8/20/2014 4:32 PM, 6156 bytes, A       Adds the file timer.js"="8/20/2014 4:32 PM, 977 bytes, A       Adds the file uninstall.js"="8/20/2014 4:32 PM, 73 bytes, A       Adds the file userscript_client.js"="8/20/2014 4:32 PM, 310 bytes, A       Adds the file userscript_engine.js"="8/20/2014 4:32 PM, 3062 bytes, A       Adds the file utils.js"="8/20/2014 4:32 PM, 2492 bytes, A       Adds the file xhr.js"="8/20/2014 4:32 PM, 2155 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui       Adds the file browser_button.js"="8/20/2014 4:32 PM, 9099 bytes, A       Adds the file content_notifications.js"="8/20/2014 4:32 PM, 9098 bytes, A       Adds the file contentNotification.tmpl"="8/20/2014 4:32 PM, 836 bytes, A       Adds the file contentNotificationStyle.tmpl"="8/20/2014 4:32 PM, 3729 bytes, A       Adds the file context_menu.js"="8/20/2014 4:32 PM, 2144 bytes, A       Adds the file framework_api.js"="8/20/2014 4:32 PM, 1627 bytes, A       Adds the file notifications.js"="8/20/2014 4:32 PM, 3542 bytes, A       Adds the file options.js"="8/20/2014 4:32 PM, 934 bytes, A       Adds the file ui_base.js"="8/20/2014 4:32 PM, 1788 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons       Adds the file button.png"="8/20/2014 4:32 PM, 904 bytes, A       Adds the file icon100.png"="8/20/2014 4:32 PM, 7311 bytes, A       Adds the file icon128.png"="8/20/2014 4:32 PM, 9600 bytes, A       Adds the file icon32.png"="8/20/2014 4:32 PM, 1922 bytes, A       Adds the file icon48.png"="8/20/2014 4:32 PM, 3155 bytes, A    Adds the folder C:\Users\{username}\AppData\LocalLow\Protect\Blocker       Adds the file 212e90ffa529f5c99c44dc574c6f9a16"="8/23/2014 10:34 AM, 2785330 bytes, A       Adds the file 8d3f613ded3421026a6b47abd4042139"="8/23/2014 10:34 AM, 8 bytes, A       Adds the file b24f88eb229178ba93accf228dc5b280"="8/23/2014 10:34 AM, 70 bytes, A    Adds the folder C:\Users\{username}\AppData\LocalLow\Protect\CanvasStorage       Adds the file 7bf8e2b7288ee31947f028830fe682c3"="8/23/2014 10:34 AM, 28 bytes, A       Adds the file 8ab1244a97308124c8207af9517ce460"="8/23/2014 10:34 AM, 94 bytes, A       Adds the file a645fa10d3b7c3be385a23d8e9796994"="8/23/2014 10:34 AM, 30 bytes, A       Adds the file c8ca0d6097bee7d978cc54b0e9075409"="8/23/2014 10:34 AM, 46 bytes, A       Adds the file ee9adb2bad520b37c67f38edc62ec22d"="8/23/2014 10:34 AM, 230 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Web Safeguard       Adds the file Uninstall.lnk"="8/23/2014 10:34 AM, 1081 bytes, A       Adds the file Web Safeguard Settings.url"="8/23/2014 10:34 AM, 124 bytes, A       Adds the file Web Safeguard.lnk"="8/23/2014 10:34 AM, 1968 bytes, A    In the existing folder C:\Windows\System32\drivers\etc       Alters the file hosts        6/10/2009 11:39 PM, 824 bytes, A ==> 8/23/2014 10:34 AM, 871 bytes, A    In the existing folder C:\Windows\System32\Tasks       Adds the file bench-S-1-5-21-4016700205-1717049133-1125222536-1001"="8/23/2014 10:34 AM, 3234 bytes, A       Adds the file bench-sys"="8/23/2014 10:34 AM, 3242 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file bench-S-1-5-21-4016700205-1717049133-1125222536-1001.job"="8/23/2014 10:34 AM, 346 bytes, A       Adds the file bench-sys.job"="8/23/2014 10:34 AM, 346 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE]       "39008"="REG_SZ", "Web Safeguard"    [HKEY_LOCAL_MACHINE\SOFTWARE\AdvertisingSupport]       "Existing"="REG_SZ", "1"       "Seen"="REG_SZ", "1"       "SeenDate"="REG_SZ", "1408782852"       "SystemId"="REG_SZ", "619bdd98c7140d14e62a62d4922b6abd"    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\BService]       "Path"="REG_SZ", "C:\Program Files\Bench\BService\1.1"       "Version"="REG_SZ", "1.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\BService\39008]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\InstalledExtensions]       "39008"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\NmHost]       "(Default)"="REG_SZ", "C:\Program Files\Bench\NmHost\nmhost.exe"    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\NmHost\39008]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\Updater]       "path"="REG_SZ", "C:\Program Files\Bench\Updater\updater.exe"    [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\Updater\39008]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}]       "(Default)"="REG_SZ", "Web Safeguard"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\Web Safeguard\FrameworkBHO.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}\TypeLib]       "(Default)"="REG_SZ", "{97D49F97-DBFA-476B-B935-1BF3D0E7C183}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}\Version]       "(Default)"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DFD9E51-F7C6-492B-B542-6A8DE6399182}]       "(Default)"="REG_SZ", "Web Safeguard"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DFD9E51-F7C6-492B-B542-6A8DE6399182}\LocalServer32]       "(Default)"="REG_SZ", ""C:\Program Files\Web Safeguard\FrameworkEngine.exe""       "ServerExecutable"="REG_SZ", "C:\Program Files\Web Safeguard\FrameworkEngine.exe"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DFD9E51-F7C6-492B-B542-6A8DE6399182}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DFD9E51-F7C6-492B-B542-6A8DE6399182}\TypeLib]       "(Default)"="REG_SZ", "{C2F75769-1682-45DC-A036-1B1403491613}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9DFD9E51-F7C6-492B-B542-6A8DE6399182}\Version]       "(Default)"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}]       "(Default)"="REG_SZ", "Web Safeguard BHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\Web Safeguard\FrameworkBHO.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}\TypeLib]       "(Default)"="REG_SZ", "{97D49F97-DBFA-476B-B935-1BF3D0E7C183}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}\Version]       "(Default)"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0C20D857-3961-417F-B689-D000B71F3941}]       "(Default)"="REG_SZ", "IKangoToolbar"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0C20D857-3961-417F-B689-D000B71F3941}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0C20D857-3961-417F-B689-D000B71F3941}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0C20D857-3961-417F-B689-D000B71F3941}\TypeLib]       "(Default)"="REG_SZ", "{97D49F97-DBFA-476B-B935-1BF3D0E7C183}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9DAD9E6E-F78C-4950-BEBF-148DFD398282}]       "(Default)"="REG_SZ", "IKangoEngine"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9DAD9E6E-F78C-4950-BEBF-148DFD398282}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9DAD9E6E-F78C-4950-BEBF-148DFD398282}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9DAD9E6E-F78C-4950-BEBF-148DFD398282}\TypeLib]       "(Default)"="REG_SZ", "{C2F75769-1682-45DC-A036-1B1403491613}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CCE72B1D-3050-41CF-8498-4C83E872EAAD}]       "(Default)"="REG_SZ", "IKangoBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CCE72B1D-3050-41CF-8498-4C83E872EAAD}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CCE72B1D-3050-41CF-8498-4C83E872EAAD}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CCE72B1D-3050-41CF-8498-4C83E872EAAD}\TypeLib]       "(Default)"="REG_SZ", "{97D49F97-DBFA-476B-B935-1BF3D0E7C183}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{97D49F97-DBFA-476B-B935-1BF3D0E7C183}\1.0]       "(Default)"="REG_SZ", "Framework 1.0 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{97D49F97-DBFA-476B-B935-1BF3D0E7C183}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\Web Safeguard\FrameworkBHO.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{97D49F97-DBFA-476B-B935-1BF3D0E7C183}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{97D49F97-DBFA-476B-B935-1BF3D0E7C183}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\Web Safeguard"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C2F75769-1682-45DC-A036-1B1403491613}\1.0]       "(Default)"="REG_SZ", "EngineLib"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C2F75769-1682-45DC-A036-1B1403491613}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\Web Safeguard\FrameworkEngine.exe"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C2F75769-1682-45DC-A036-1B1403491613}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C2F75769-1682-45DC-A036-1B1403491613}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\Web Safeguard"    [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.bench.nmhost]       "(Default)"="REG_SZ", "C:\Program Files\Bench\NmHost\manifest.json"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC862B2A-308A-4184-9AE6-09832D7296AD}]       "(Default)"="REG_SZ", "Web Safeguard BHO"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]       "{CC862B2A-308A-4184-9AE6-09832D7296AD}"="REG_SZ", "1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]       "Bench Communicator Watcher"="REG_SZ", "C:\Program Files\Bench\Proxy\pwdg.exe"       "Bench Settings Cleaner"="REG_SZ", "C:\Program Files\Bench\Proxy\cl.exe"       "BService"="REG_SZ", "C:\Program Files\Bench\BService\1.1\bservice.exe"       "Wd"="REG_SZ", "C:\Program Files\Bench\Wd\wd.exe"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]       "Web Safeguard"="REG_SZ", ""       "Web Safeguard-repairJob"="REG_SZ", "wscript.exe "C:\Users\{username}\AppData\Local\Web Safeguard\repair.js" "Web Safeguard-repairJob""    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\39008_Web Safeguard]       "DisplayIcon"="REG_SZ", "C:\Users\{username}\AppData\Local\Web Safeguard/icon.ico"       "DisplayName"="REG_SZ", "Web Safeguard"       "DisplayVersion"="REG_SZ", "1.0"       "InstallLocation"="REG_SZ", "C:\Users\{username}\AppData\Local\Web Safeguard"       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "Actually Apps"       "UninstallString"="REG_SZ", "C:\Users\{username}\AppData\Local\Web Safeguard\uninstall.exe "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "bench-S-1-5-21-4016700205-1717049133-1125222536-1001.job"="REG_BINARY, ................................       "bench-S-1-5-21-4016700205-1717049133-1125222536-1001.job.fp"="REG_DWORD", 1395778665       "bench-sys.job"="REG_BINARY, ................................       "bench-sys.job.fp"="REG_DWORD", -337842873    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist]       "1"="REG_SZ", "cabeibpjbbfnocgbmpmkifcljmgcmgpf;http://cabeibpjbbfnocgbmpmkifcljmgcmgpf/check/.eJwVy0EKgCAQQNG7zFqitl4mHBtt1FFRiyC6e7X8D_4Nw_QIGuzeihAoOKl1LvmjZZq_5tyHSYka6NEOUkDXWHn7F4PEWAOiy8V6lCqRnU1BvBVfHTwv2kAhEw.Pj4UtcDpKwuR0i2Cacr4lt08FV0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Proxy\Installations\Web Safeguard]       "aoi"="REG_SZ", "1408790052"       "domain"="REG_SZ", "websafeguard-a.akamaihd.net"       "ext"="REG_SZ", "Web Safeguard"       "format"="REG_SZ", "//{domain}/loaders/{pid}/l.js?pid={pid}&systemid={systemid}&ext={ext}&aoi={aoi}&zoneid={zoneid}&crr={crr}&type=p"       "more_info_url"="REG_SZ", "http://web-safeguard.com"       "pid"="REG_SZ", "0"       "protect_redirect_url"="REG_SZ", "http://web-safeguard.com/warning.php?%blocked_url%"       "settings_url"="REG_SZ", "http://web-safeguard.com/settings.php"       "system_black_list_url"="REG_SZ", "http://websafeguard-a.akamaihd.net/protect/block.json"       "zoneid"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Web Safeguard]       "(Default)"="REG_SZ", "C:\Users\{username}\AppData\Local\Web Safeguard"       "AllowProxy"="REG_SZ", "1"       "CDN"="REG_SZ", "websafeguard-a.akamaihd.net"       "InstallTime"="REG_SZ", "1408790052"       "Pid"="REG_SZ", "0"       "Seen"="REG_SZ", "1"       "SeenDate"="REG_SZ", "1408782852"       "SystemId"="REG_SZ", "619bdd98c7140d14e62a62d4922b6abd"       "UTCInstallTime"="REG_SZ", "1408782852"       "ZoneId"="REG_SZ", "0"    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC862B2A-308A-4184-9AE6-09832D7296AD}]       "Flags"="REG_DWORD", 1024       "VerCache"="REG_BINARY, ......................    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]       "ProxyEnable"="REG_DWORD, 1"       "ProxyServer"="REG_SZ", "http=127.0.0.1:3128"    [HKEY_CURRENT_USER\Software\Proxy]       "app_name"="REG_SZ", "Web Safeguard"       "AutoConfigURL"="REG_SZ", ""       "disableChainProxy"="REG_DWORD", 0       "ProxyEnable"="REG_DWORD", 0       "ProxyServer"="REG_SZ", ""       "totalFail"="REG_DWORD", 0
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 8/23/2014Scan Time: 10:46:36 AMLogfile: mbamSafeGuard.txtAdministrator: YesVersion: 2.00.2.1012Malware Database: v2014.08.23.01Rootkit Database: v2014.08.21.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 258199Time Elapsed: 2 min, 39 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 5PUP.Optional.Bench.A, C:\Program Files\Bench\Wd\wd.exe, 3320, Delete-on-Reboot, [e21b8049f18aae888d4e5cb2ca39ec14]PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\pwdg.exe, 3180, Delete-on-Reboot, [44b9facf5922d6601187f40b4fb359a7]PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bservice.exe, 3628, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11]PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\proc.exe, 848, Delete-on-Reboot, [ca3349801b607db959e80dbea260ee12]PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\FrameworkEngine.exe, 1296, Delete-on-Reboot, [52ab3a8f3a412412b4784a9a19e9b947]Modules: 10PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], Registry Keys: 19PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\CLSID\{0CD8D8B3-399B-4164-97CF-CB004A1FC741}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{97D49F97-DBFA-476B-B935-1BF3D0E7C183}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{0C20D857-3961-417F-B689-D000B71F3941}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{CCE72B1D-3050-41CF-8498-4C83E872EAAD}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\CLSID\{CC862B2A-308A-4184-9AE6-09832D7296AD}\INPROCSERVER32, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{CC862B2A-308A-4184-9AE6-09832D7296AD}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{CC862B2A-308A-4184-9AE6-09832D7296AD}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.WebSafeGuard.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{CC862B2A-308A-4184-9AE6-09832D7296AD}, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.ActuallyApps.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\39008_Web Safeguard, Quarantined, [c439ac1ddd9e55e1c5e3cfdeee13a759], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\Web Safeguard, Quarantined, [0eef9534700b44f24589ba2a40c2fb05], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\BService, Quarantined, [ee0f8c3d6912f73fb2b856a440c230d0], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\InstalledExtensions, Quarantined, [53aa7950e09bf83e511a5aa039c9e21e], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\NmHost, Quarantined, [35c83990c0bbc6702a42a25833cfc838], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\Updater, Quarantined, [a6571aaf314ad95dafbe2ad014eeb749], PUP.Optional.Bench.A, HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\com.bench.nmhost, Quarantined, [cc31eedbdaa174c28bc3370d0df735cb], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\PROXY\INSTALLATIONS\Web Safeguard, Quarantined, [718cd2f7bac171c5597239abc33f05fb], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{C2F75769-1682-45DC-A036-1B1403491613}, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{9DAD9E6E-F78C-4950-BEBF-148DFD398282}, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], Registry Values: 6PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Wd, C:\Program Files\Bench\Wd\wd.exe, Quarantined, [e21b8049f18aae888d4e5cb2ca39ec14]PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Bench Communicator Watcher, C:\Program Files\Bench\Proxy\pwdg.exe, Quarantined, [44b9facf5922d6601187f40b4fb359a7]PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Bench Settings Cleaner, C:\Program Files\Bench\Proxy\cl.exe, Quarantined, [6a935673215af83e7f1a847bb54df50b]PUP.Optional.SmartApps, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|Web Safeguard-repairJob, wscript.exe "C:\Users\{username}\AppData\Local\Web Safeguard\repair.js" "Web Safeguard-repairJob", Quarantined, [b04da32637441c1a8787ba8bbc48936d]PUM.Bad.Proxy, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:3128, Quarantined, [2ecf4e7bbcbfae8845db51a87e84dd23]PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BService, C:\Program Files\Bench\BService\1.1\bservice.exe, Quarantined, [8776cdfccbb07fb708b1bf02b54def11]Registry Data: 0(No malicious items detected)Folders: 34PUP.Optional.BenchUpdater, C:\Program Files\Bench\NmHost, Quarantined, [6499a722accf9a9c015066b0b350cb35], PUP.Optional.BenchUpdater, C:\Program Files\Bench\NmHost\data, Quarantined, [6499a722accf9a9c015066b0b350cb35], PUP.Optional.BenchUpdater, C:\Program Files\Bench\NmHost\data\installer, Quarantined, [6499a722accf9a9c015066b0b350cb35], PUP.Optional.BenchUpdater.A, C:\Users\{username}\AppData\Local\BenchUpdater, Quarantined, [43babc0d0675241293cd19fe62a1758b], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater, Quarantined, [02fbb51498e385b1ca0d9e2056ac15eb], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\1.7.0.0, Quarantined, [02fbb51498e385b1ca0d9e2056ac15eb], PUP.Optional.Bench.A, C:\Program Files\Bench\BService, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\Wd, Delete-on-Reboot, [b8457752a4d763d3dae0229f3ac8f10f], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy, Delete-on-Reboot, [ca3349801b607db959e80dbea260ee12], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\CanvasFramework, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\icons, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\includes, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard, Delete-on-Reboot, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard, Delete-on-Reboot, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\CanvasFramework, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\icons, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Web Safeguard, Quarantined, [55a803c68deeea4cdf4e18cc49b9d927], Files: 206PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\FrameworkBHO.dll, Quarantined, [a558973248337fb775508fe04eb4847c], PUP.Optional.ActuallyApps.A, C:\Users\{username}\Desktop\Web Safeguard.exe, Quarantined, [6e8f75546a11f73f07a1703d08f99967], PUP.Optional.ActuallyApps.A, C:\Users\{username}\AppData\Local\Web Safeguard\uninstall.exe, Quarantined, [c439ac1ddd9e55e1c5e3cfdeee13a759], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cabeibpjbbfnocgbmpmkifcljmgcmgpf_0.localstorage, Quarantined, [de1f7158b1ca81b5a82909db758dce32], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cabeibpjbbfnocgbmpmkifcljmgcmgpf_0.localstorage-journal, Quarantined, [04f9c10862198aac29a84d97e51dbb45], PUP.Optional.Proxy.A, C:\Users\{username}\AppData\Local\proxy.log, Delete-on-Reboot, [59a401c87a01af87effeffe97092c63a], PUP.Optional.BenchUpdater.A, C:\Windows\System32\Tasks\bench-S-1-5-21-4016700205-1717049133-1125222536-1001, Quarantined, [ee0f02c7afcc1c1a32b17e74976bc937], PUP.Optional.BenchUpdater.A, C:\Windows\System32\Tasks\bench-sys, Quarantined, [b24b18b17b0047ef29ba3eb43dc504fc], PUP.Optional.BenchUpdater, C:\Program Files\Bench\NmHost\nmhost.exe, Quarantined, [6499a722accf9a9c015066b0b350cb35], PUP.Optional.BenchUpdater, C:\Program Files\Bench\NmHost\manifest.json, Quarantined, [6499a722accf9a9c015066b0b350cb35], PUP.Optional.BenchUpdater, C:\Program Files\Bench\NmHost\data\installer\cabeibpjbbfnocgbmpmkifcljmgcmgpf, Quarantined, [6499a722accf9a9c015066b0b350cb35], PUP.Optional.BenchUpdater.A, C:\Windows\Tasks\bench-S-1-5-21-4016700205-1717049133-1125222536-1001.job, Quarantined, [df1e29a05427092d84dba374ed16718f], PUP.Optional.BenchUpdater.A, C:\Windows\Tasks\bench-sys.job, Quarantined, [c33aa821fe7dc96d144bbc5b05fe669a], PUP.Optional.BenchUpdater.A, C:\Users\{username}\AppData\Local\BenchUpdater\products.xml, Quarantined, [43babc0d0675241293cd19fe62a1758b], PUP.Optional.Bench.A, C:\Program Files\Bench\Wd\wd.exe, Delete-on-Reboot, [e21b8049f18aae888d4e5cb2ca39ec14], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\pwdg.exe, Delete-on-Reboot, [44b9facf5922d6601187f40b4fb359a7], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\cl.exe, Quarantined, [6a935673215af83e7f1a847bb54df50b], PUP.Optional.SmartApps, C:\Users\{username}\AppData\Local\Web Safeguard\repair.js, Quarantined, [b04da32637441c1a8787ba8bbc48936d], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\products.xml, Quarantined, [02fbb51498e385b1ca0d9e2056ac15eb], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\updater.exe, Quarantined, [02fbb51498e385b1ca0d9e2056ac15eb], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\1.7.0.0\updater.exe, Quarantined, [02fbb51498e385b1ca0d9e2056ac15eb], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bservice.exe, Delete-on-Reboot, [8776cdfccbb07fb708b1bf02b54def11], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\icon.ico, Quarantined, [ca3349801b607db959e80dbea260ee12], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\proc.exe, Delete-on-Reboot, [ca3349801b607db959e80dbea260ee12], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\background.html, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\extension_info.json, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\manifest.json, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\appAPI_bg.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\appAPI_browseraction.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\appAPI_common.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\appAPI_content.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\appAPI_settings.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\appAPI_webrequest.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\AppFramework\jquery.min.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\CanvasFramework\canvasscript_engine.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\CanvasFramework\canvas_bg.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\CanvasFramework\webrequest.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\backgroundscript_engine.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\base.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\browser.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\console.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\framework.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\i18n.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\initialize.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\invoke_async.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\io.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\lang.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\legacy.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\message_target.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\messaging.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\storage.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\timer.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\userscript_client.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\userscript_engine.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\utils.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework\xhr.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\browser_button.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\context_menu.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\framework_api.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\notifications.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\options.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\remote_popup_host.html, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\remote_popup_host.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\framework-ui\ui_base.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\icons\button.png, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\icons\icon100.png, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\icons\icon128.png, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\icons\icon32.png, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\icons\icon48.png, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cabeibpjbbfnocgbmpmkifcljmgcmgpf\1.0_0\includes\content.js, Quarantined, [06f7c405304b4ceaeb3d26be47bb33cd], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\chrome_gp_update.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\chrome_installer.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\clear_cache.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\common.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox_installer.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\gpedit.exe, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\icon.ico, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\ie_installer.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\installer.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\main_installer.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\migrate.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\projectInstaller.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\repair_data.json, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\SoftwareDetector.exe, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\sqlite3.exe, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\storageedit.exe, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\background.html, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\bootstrap.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\chrome.manifest, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\extension_info.json, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\install.rdf, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\appAPI_bg.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\appAPI_browseraction.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\appAPI_common.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\appAPI_content.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\appAPI_settings.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\appAPI_webrequest.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\AppFramework\jquery.min.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework\canvasscript_engine.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework\canvas_bg.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework\md5.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework\registry.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\CanvasFramework\webrequest.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\backgroundscript_engine.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\base.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\browser.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\chrome_windows.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\console.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\content_proxy.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\framework.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\i18n.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\invoke_async.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\io.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\lang.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\legacy.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\message_target.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\messaging.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\storage.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\timer.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\uninstall.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\userscript_client.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\userscript_engine.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\utils.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework\xhr.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\browser_button.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\contentNotification.tmpl, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\contentNotificationStyle.tmpl, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\content_notifications.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\context_menu.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\framework_api.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\notifications.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\options.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\framework-ui\ui_base.js, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons\button.png, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons\icon100.png, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons\icon128.png, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons\icon32.png, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Local\Web Safeguard\firefox\icons\icon48.png, Quarantined, [4db0caffdf9c360073b7c0247f8306fa], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\background.html, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\config.xml, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\extension_info.json, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\FrameworkBHO64.dll, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\FrameworkEngine.exe, Delete-on-Reboot, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\appAPI_bg.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\appAPI_browseraction.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\appAPI_common.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\appAPI_content.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\appAPI_settings.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\appAPI_webrequest.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\AppFramework\jquery.min.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\CanvasFramework\canvasscript_engine.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\CanvasFramework\canvas_bg.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\CanvasFramework\md5.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\CanvasFramework\registry.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\CanvasFramework\webrequest.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\backgroundscript_engine.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\base.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\browser.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\console.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\framework.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\global.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\i18n.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\initialize.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\invoke_async.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\io.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\json2.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\lang.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\legacy.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\message_target.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\messaging.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\storage.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\timer.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\updater.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\userscript_client.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\userscript_engine.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\utils.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework\xhr.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\browser_button.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\context_menu.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\context_menu_item_handler.html, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\framework_api.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\notification.html, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\notifications.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\options.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\ui_base.js, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\bottom-left.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\bottom-middle.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\bottom-right.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\middle-left.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\middle-right.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\tail-bottom.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\tail-left.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\tail-right.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\tail-top.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\top-left.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\top-middle.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\framework-ui\theme\bubble\top-right.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\icons\button.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\icons\icon100.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\icons\icon128.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\icons\icon32.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Program Files\Web Safeguard\icons\icon48.png, Quarantined, [52ab3a8f3a412412b4784a9a19e9b947], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Web Safeguard\Uninstall.lnk, Quarantined, [55a803c68deeea4cdf4e18cc49b9d927], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Web Safeguard\Web Safeguard Settings.url, Quarantined, [55a803c68deeea4cdf4e18cc49b9d927], PUP.Optional.WebSafeGuard.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Web Safeguard\Web Safeguard.lnk, Quarantined, [55a803c68deeea4cdf4e18cc49b9d927], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.