Jump to content

Removal instructions for SparPilot

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted (edited)
What is SparPilot?

The Malwarebytes research team has determined that SparPilot is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by SparPilot?

You may see this browser extension:

warning1.png

How did SparPilot get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove SparPilot?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of SparPilot?
  • No, Malwarebytes' Anti-Malware removes SparPilot completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the SparPilot hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

 

protection1.png


Technical details for experts

Possible signs in FRST logs:

  
 FF user.js: detected! => C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\user.js [2016-10-25]
 FF Extension: Sparpilot - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\sparpilot__campaign27@sparpilot.com [2016-10-25]
 FF Extension: QuickTime Shield - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\{e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi [2016-10-25] [not signed]
 C:\Windows\unins000.exe
 C:\Windows\unins000.dat
 C:\Users\{username}\AppData\Local\SparPilot
Alterations made by the installer:
  
File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Users\{username}\AppData\Local\SparPilot
       Adds the file bootstrapped.txt"="6/15/2016 9:49 PM, 175 bytes, A
       Adds the file extensions_json.txt"="6/15/2016 9:49 PM, 4805 bytes, A
       Adds the file FFInstaller_autocheck.exe"="6/23/2016 3:37 PM, 429568 bytes, A
       Adds the file prefs_base.txt"="6/15/2016 9:49 PM, 596 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extension-data\sparpilot__campaign27@sparpilot.com
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions
       Adds the file {e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi"="10/25/2016 12:49 PM, 45849 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com
       Adds the file bootstrap.js"="4/15/2016 2:06 PM, 593 bytes, A
       Adds the file install.rdf"="6/8/2016 6:42 PM, 4705 bytes, A
       Adds the file package.json"="6/8/2016 6:42 PM, 4516 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data
       Adds the file config.json"="4/15/2016 2:06 PM, 57 bytes, A
       Adds the file icon128.png"="4/15/2016 2:06 PM, 9460 bytes, A
       Adds the file icon48.png"="4/15/2016 2:06 PM, 2345 bytes, A
       Adds the file icon64.png"="4/15/2016 2:06 PM, 3409 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld
       Adds the file domains.json"="4/15/2016 2:06 PM, 1079909 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images
       Adds the file bar-bg.png"="4/15/2016 2:06 PM, 732 bytes, A
       Adds the file bar-logo.png"="4/15/2016 2:06 PM, 3546 bytes, A
       Adds the file bar-logo-small.png"="4/15/2016 2:06 PM, 4874 bytes, A
       Adds the file bg-fade-line.png"="4/15/2016 2:06 PM, 150 bytes, A
       Adds the file diagonal-line.png"="4/15/2016 2:06 PM, 491 bytes, A
       Adds the file list-item-bg.png"="4/15/2016 2:06 PM, 8341 bytes, A
       Adds the file list-item-bg-act.png"="4/15/2016 2:06 PM, 11498 bytes, A
       Adds the file list-item-details-bg.png"="4/15/2016 2:06 PM, 2662 bytes, A
       Adds the file list-item-details-bg-act.png"="4/15/2016 2:06 PM, 1661 bytes, A
       Adds the file nav-extraitem-bg-act.png"="4/15/2016 2:06 PM, 3015 bytes, A
       Adds the file nav-item-bg.png"="4/15/2016 2:06 PM, 630 bytes, A
       Adds the file nav-item-bg-act.png"="4/15/2016 2:06 PM, 576 bytes, A
       Adds the file sprite.png"="4/15/2016 2:06 PM, 8422 bytes, A
       Adds the file stars-empty.png"="4/15/2016 2:06 PM, 439 bytes, A
       Adds the file stars-empty-big.png"="4/15/2016 2:06 PM, 890 bytes, A
       Adds the file stars-full.png"="4/15/2016 2:06 PM, 739 bytes, A
       Adds the file stars-full-big.png"="4/15/2016 2:06 PM, 863 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\lib
       Adds the file jquery.hoverIntent.min.js"="4/15/2016 2:06 PM, 1489 bytes, A
       Adds the file jquery.js"="4/15/2016 2:06 PM, 96381 bytes, A
       Adds the file jquery.ui.min.js"="4/15/2016 2:06 PM, 61655 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\pagemod
       Adds the file custom.js"="4/15/2016 2:06 PM, 6437 bytes, A
       Adds the file toolbar.css"="4/15/2016 2:06 PM, 44567 bytes, A
       Adds the file toolbar.js"="4/15/2016 2:06 PM, 6792 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib
       Adds the file config.js"="6/8/2016 6:42 PM, 3257 bytes, A
       Adds the file controller.js"="4/15/2016 2:06 PM, 1719 bytes, A
       Adds the file main.js"="4/15/2016 2:06 PM, 496 bytes, A
       Adds the file preisheld.js"="4/15/2016 2:06 PM, 36382 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\service
       Adds the file promotion-dynamic.js"="4/15/2016 2:06 PM, 546 bytes, A
       Adds the file promotion-static.js"="4/15/2016 2:06 PM, 1076 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\META-INF
       Adds the file manifest.mf"="6/9/2016 7:35 AM, 7377 bytes, A
       Adds the file mozilla.rsa"="6/9/2016 7:35 AM, 4194 bytes, A
       Adds the file mozilla.sf"="6/9/2016 7:35 AM, 121 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\async
       Adds the file package.json"="4/15/2016 2:06 PM, 1730 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\async\lib
       Adds the file async.js"="4/15/2016 2:06 PM, 34652 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge
       Adds the file index.js"="4/15/2016 2:06 PM, 1564 bytes, A
       Adds the file package.json"="4/15/2016 2:06 PM, 1574 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge\test
       Adds the file deepest-merge.js"="4/15/2016 2:06 PM, 1125 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api
       Adds the file api.js"="4/15/2016 2:06 PM, 17055 bytes, A
       Adds the file package.json"="4/15/2016 2:06 PM, 320 bytes, A
       Adds the file sparpilot-api.js"="4/15/2016 2:06 PM, 153 bytes, A
       Adds the file task.js"="4/15/2016 2:06 PM, 3349 bytes, A
       Adds the file tasks.js"="4/15/2016 2:06 PM, 2087 bytes, A
       Adds the file utils.js"="4/15/2016 2:06 PM, 5951 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\trusted-links
       Adds the file package.json"="4/15/2016 2:06 PM, 328 bytes, A
       Adds the file trusted-links.js"="4/15/2016 2:06 PM, 2701 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\sparpilot__campaign27@sparpilot.com\simple-storage
    In the existing folder C:\Windows
       Adds the file unins000.dat"="10/25/2016 12:49 PM, 3726 bytes, A
       Adds the file unins000.exe"="10/25/2016 12:49 PM, 719521 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SparPilot]
Malwarebytes Anti-Malware log:
  
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/25/2016
Scan Time: 5:48 PM
Logfile: mbamSparPilot.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.10.25.11
Rootkit Database: v2016.09.26.02
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 326254
Time Elapsed: 8 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 19
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\pagemod, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\service, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\META-INF, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\async, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\async\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge\test, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\trusted-links, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\sparpilot__campaign27@sparpilot.com, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\sparpilot__campaign27@sparpilot.com\simple-storage, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], 

Files: 60
PUP.Optional.SparPilot, C:\Users\{username}\Desktop\sparpilot_david_27.exe, Quarantined, [9fd05e3fc7d372c4826375a7ea1bdc24], 
PUP.Optional.QuicktimeShield, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\{e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi, Quarantined, [93dc623b7f1b39fd4e9bb16b4fb6e21e], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\bootstrap.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\install.rdf, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\config.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\icon128.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\icon48.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\icon64.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\domains.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\bar-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\bar-logo-small.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\bar-logo.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\bg-fade-line.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\diagonal-line.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\list-item-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\list-item-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\list-item-details-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\list-item-details-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\nav-extraitem-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\nav-item-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\nav-item-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\sprite.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\stars-empty-big.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\stars-empty.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\stars-full-big.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\images\stars-full.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\lib\jquery.hoverIntent.min.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\lib\jquery.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\lib\jquery.ui.min.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\pagemod\custom.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\pagemod\toolbar.css, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\data\preisheld\pagemod\toolbar.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\config.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\controller.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\main.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\preisheld.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\service\promotion-dynamic.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\lib\service\promotion-static.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\META-INF\manifest.mf, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\META-INF\mozilla.rsa, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\META-INF\mozilla.sf, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\async\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\async\lib\async.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge\index.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\deepest-merge\test\deepest-merge.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api\api.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api\sparpilot-api.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api\task.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api\tasks.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\sparpilot-api\utils.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\trusted-links\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpilot__campaign27@sparpilot.com\node_modules\trusted-links\trusted-links.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\bootstrapped.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\extensions_json.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\FFInstaller_autocheck.exe, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\prefs_base.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\sparpilot__campaign27@sparpilot.com\simple-storage\store.json, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Edited by Metallica
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept