Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
DLLHOST.EXE eating through all my memory please help me
Message
<blockquote data-quote="plz help" data-source="post: 442583" data-attributes="member: 43824"><p>Thank you for the quick response.</p><p></p><p><u>Scan Log from MalwareBytes</u></p><p>Malwarebytes Anti-Malware</p><p><a href="http://www.malwarebytes.org" target="_blank">www.malwarebytes.org</a></p><p></p><p>Scan Date: 10/17/2015</p><p>Scan Time: 5:38 PM</p><p>Logfile: Scan Log.txt</p><p>Administrator: Yes</p><p></p><p>Version: 2.2.0.1024</p><p>Malware Database: v2015.10.17.05</p><p>Rootkit Database: v2015.10.16.01</p><p>License: Free</p><p>Malware Protection: Disabled</p><p>Malicious Website Protection: Disabled</p><p>Self-protection: Disabled</p><p></p><p>OS: Windows 7 Service Pack 1</p><p>CPU: x64</p><p>File System: NTFS</p><p>User: KuroHANA</p><p></p><p>Scan Type: Threat Scan</p><p>Result: Completed</p><p>Objects Scanned: 360129</p><p>Time Elapsed: 1 hr, 36 min, 15 sec</p><p></p><p>Memory: Enabled</p><p>Startup: Enabled</p><p>Filesystem: Enabled</p><p>Archives: Enabled</p><p>Rootkits: Enabled</p><p>Heuristics: Enabled</p><p>PUP: Enabled</p><p>PUM: Enabled</p><p></p><p>Processes: 0</p><p>(No malicious items detected)</p><p></p><p>Modules: 0</p><p>(No malicious items detected)</p><p></p><p>Registry Keys: 23</p><p>PUP.Optional.Spigot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], </p><p>PUP.Optional.Spigot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], </p><p>PUP.Optional.Spigot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], </p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], </p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], </p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], </p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], </p><p>PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], </p><p>PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], </p><p>PUP.Optional.VuzeTB, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{05478A66-EDB6-4A22-A870-A5987F80A7DA}, Quarantined, [749569ef8ffcff37907ac96ba55d837d], </p><p>PUP.Optional.VuzeTB, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{05478A66-EDB6-4A22-A870-A5987F80A7DA}, Quarantined, [749569ef8ffcff37907ac96ba55d837d], </p><p>PUP.Optional.Spigot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{3A787631-66A2-4634-B928-A37E73B58FB6}, Quarantined, [0ffae3759eed4aec45d6af88936d966a], </p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Quarantined, [65a40355840742f4b337bad7f50e50b0], </p><p>PUP.Optional.SlickSavings, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\mhkaekfpcppmmioggniknbnbdbcigpkk, Quarantined, [a7620157d9b2c274ac13d6be699a08f8], </p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Quarantined, [67a24d0b0388b6802ebcbed355ae53ad], </p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, Quarantined, [34d52f29ee9d7fb7fed83a5cf11212ee], </p><p>PUP.Optional.SerachQU, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\APPDATALOW\SOFTWARE\searchqutoolbar, Quarantined, [f9105cfc434892a40c479ef51be811ef], </p><p>PUP.Optional.SlickSavings, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\APPDATALOW\SOFTWARE\Slick Savings, Quarantined, [c5447ddbd7b472c4c2fc8014f013da26], </p><p>PUP.Optional.Conduit, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Quarantined, [8b7e60f8aae1a78fb7601a4fc142649c], </p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{21E15933-AA34-466E-A6EA-4CA64A5AA051}, Quarantined, [c94091c71378a88e95437f1711f29868], </p><p>PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Quarantined, [74954612d1ba57df8b5c1f727f84867a], </p><p>PUP.Optional.YahooVNM, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}, Quarantined, [1aefbf994b408da9fb42b5ed20e3817f], </p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE44DE45-A46E-447E-A245-3DD0C7F3F07F}, Quarantined, [34d50c4c3d4e6acc5583e2b4dc27b54b], </p><p></p><p>Registry Values: 12</p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, <a href="http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}" target="_blank">http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}</a>, Quarantined, [65a40355840742f4b337bad7f50e50b0]</p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, <a href="http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json" target="_blank">http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json</a>, Quarantined, [030616422368171fc9218d04768d25db]</p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, <a href="http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}" target="_blank">Ask.com</a>, Quarantined, [67a24d0b0388b6802ebcbed355ae53ad]</p><p>PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, <a href="http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json" target="_blank">http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json</a>, Quarantined, [8d7c75e322690b2b09e1bad729da6a96]</p><p>PUP.Optional.Conduit, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, <a href="http://www.bing.com/search?pc=COSP&ptag=D060115-A166D148A50&form=CONBDF&conlogo=CT3334470&q={searchTerms}" target="_blank">http://www.bing.com/search?pc=COSP&ptag=D060115-A166D148A50&form=CONBDF&conlogo=CT3334470&q={searchTerms}</a>, Quarantined, [8b7e60f8aae1a78fb7601a4fc142649c]</p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{21E15933-AA34-466E-A6EA-4CA64A5AA051}|URL, <a href="http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}" target="_blank">http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}</a>, Quarantined, [c94091c71378a88e95437f1711f29868]</p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{21E15933-AA34-466E-A6EA-4CA64A5AA051}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, Quarantined, [59b079df6724ac8a35a4c0d681826f91]</p><p>PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, <a href="http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}" target="_blank">http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}</a>, Quarantined, [74954612d1ba57df8b5c1f727f84867a]</p><p>PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, <a href="http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json" target="_blank">http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json</a>, Quarantined, [44c53f19b8d385b1697e6f224bb8b24e]</p><p>PUP.Optional.YahooVNM, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}|URL, <a href="https://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10154_swoc_campaign_150601__yaie&p={searchTerms}" target="_blank">https://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10154_swoc_campaign_150601__yaie&p={searchTerms}</a>, Quarantined, [1aefbf994b408da9fb42b5ed20e3817f]</p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE44DE45-A46E-447E-A245-3DD0C7F3F07F}|URL, <a href="http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}" target="_blank">http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}</a>, Quarantined, [34d50c4c3d4e6acc5583e2b4dc27b54b]</p><p>PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE44DE45-A46E-447E-A245-3DD0C7F3F07F}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, Quarantined, [d831a2b63b50f2446c6d1086e41ffb05]</p><p></p><p>Registry Data: 0</p><p>(No malicious items detected)</p><p></p><p>Folders: 24</p><p>PUP.Optional.SearchQu, C:\Users\KuroHANA\AppData\LocalLow\searchquband, Quarantined, [da2f77e1543782b4127dfd708a78d42c], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\icons, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Local\Slick Savings, Quarantined, [a366a4b4018ad1653b12403602006799], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings, Quarantined, [d930ef698efd999d282794e2f70b946c], </p><p>PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers, Quarantined, [81889abe3754da5c0d47730454ae3fc1], </p><p>PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers, Quarantined, [81889abe3754da5c0d47730454ae3fc1], </p><p>PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers\x64, Quarantined, [81889abe3754da5c0d47730454ae3fc1], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\popupResource, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\userCode, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\actions, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\_metadata, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p></p><p>Files: 99</p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\Coupons.dll, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\Coupons.dll{CC623B08-796A-47E5-AF90-35DB7C1C332F}.old, Quarantined, [cf3a95c36d1e7eb844f2b6b144c0e31d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\CouponsHelper.exe, Quarantined, [62a70f494942b5811b1b12556e96a25e], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\Uninstall.exe, Quarantined, [0ffae3759eed4aec45d6af88936d966a], </p><p>PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTubeCatcher(1).exe, Quarantined, [73961a3ef299d363d5cc0b4b43bed030], </p><p>PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTubeCatcher.exe, Quarantined, [cc3d3721f596df57ddc4dd79c43d3fc1], </p><p>PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTube_Catcher(1).exe, Quarantined, [9772bb9dc8c35adc0b966ee810f1dc24], </p><p>PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTube_Catcher(2).exe, Quarantined, [dc2dde7a95f67abcbee362f4778a4fb1], </p><p>PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTube_Catcher(3).exe, Quarantined, [bb4eadab0d7e82b4930ec393dc25a858], </p><p>PUP.Optional.OpenCandy, C:\Users\KuroHANA\Downloads\aTube_Catcher.exe, Quarantined, [000976e24249a78f7518fc60679d728e], </p><p>PUP.Optional.OpenCandy, C:\Users\KuroHANA\Downloads\aTube_Catcher_Setup(1).exe, Quarantined, [fe0b0c4c33587abc1b72e97314f07987], </p><p>PUP.Optional.OpenCandy, C:\Users\KuroHANA\Downloads\aTube_Catcher_Setup.exe, Quarantined, [ba4f0b4d3d4e5adc6a233f1d887c52ae], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\searchplugins\yahoo_ff.xml, Quarantined, [8287015753382115ffd5ebabf60d2dd3], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\background.html, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\config.json, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\manifest.json, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\icons\ss-128.png, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\icons\ss-48.png, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts\background.js, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts\loader_1036.js, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts\utils.js, Quarantined, [a56483d50388191d58a8e08fb25036ca], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome.manifest, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\icon.png, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\install.rdf, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\config.json, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\main.js, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\savingsslider.js, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\savingsslider.xul, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\spigot.js, Quarantined, [75945602e0abab8bb3b8135da260639d], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Local\Slick Savings\coupons.crx, Quarantined, [a366a4b4018ad1653b12403602006799], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\coupons_2.4.crx, Quarantined, [d930ef698efd999d282794e2f70b946c], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\coupons_2.7.xpi, Quarantined, [d930ef698efd999d282794e2f70b946c], </p><p>PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers\x64\BrowserConnection.dll, Quarantined, [81889abe3754da5c0d47730454ae3fc1], </p><p>PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers\x64\DnsBHO.dll, Quarantined, [81889abe3754da5c0d47730454ae3fc1], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\main.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\background.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\platformVersion.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\chrome.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\cookie.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\message.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\monitor.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\pageAction.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\pageActionBG.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\app_api.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\bg_app_api.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\consts.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\cookie_store.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\delegate.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\events.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\extensionDataStore.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\installer.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\logFile.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\logging.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\onBGDocumentLoad.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\reports.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\storageWrapper.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\updateManager.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\util.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\xhr.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\popupResource\newPopup.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\popupResource\popup.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\background.html, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\chromeCoreFilesIndex.txt, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\manifest.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\popup.html, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\Settings.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\manifest.xml, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\1.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\13.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\14.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\17.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\177.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\182.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\183.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\19.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\207.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\21.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\22.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\28.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\4.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\47.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\64.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\72.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\78.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\80.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\97.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\userCode\background.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\userCode\extension.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\icon128.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\icon16.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\icon48.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\actions\1.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\_metadata\computed_hashes.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\_metadata\verified_contents.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "<a href="http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p=" target="_blank">http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p=</a>")<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink ;)" loading="lazy" data-shortname=";)" />, Replaced,[6a9fafa92f5c95a12ba0e5865da7a35d]</p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\prefs.js, Good: (browser.startup.homepage", "<a href="https://www.malwarebytes.org/restorebrowser/" target="_blank">https://www.malwarebytes.org/restorebrowser/</a>), Bad: (browser.startup.homepage", "<a href="http://search.yahoo.com?type=994519&fr=spigot-" target="_blank">http://search.yahoo.com?type=994519&fr=spigot-</a>), Replaced,[e0293d1bb7d4ad89549a0a6711f3837d]</p><p>PUP.Optional.ASK.Gen, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\searchplugins\askcom.xml, Quarantined, [957489cf95f67bbbb538a1ce28dcdf21], </p><p>PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\k5grvdxx.default-1354733456351\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "<a href="http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p=" target="_blank">http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p=</a>")<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink ;)" loading="lazy" data-shortname=";)" />, Replaced,[db2e1543fb90cb6bc6056605d62eb34d]</p><p></p><p>Physical Sectors: 0</p><p>(No malicious items detected)</p><p></p><p></p><p>(end)</p></blockquote><p></p>
[QUOTE="plz help, post: 442583, member: 43824"] Thank you for the quick response. [U]Scan Log from MalwareBytes[/U] Malwarebytes Anti-Malware [URL="http://www.malwarebytes.org"]www.malwarebytes.org[/URL] Scan Date: 10/17/2015 Scan Time: 5:38 PM Logfile: Scan Log.txt Administrator: Yes Version: 2.2.0.1024 Malware Database: v2015.10.17.05 Rootkit Database: v2015.10.16.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: KuroHANA Scan Type: Threat Scan Result: Completed Objects Scanned: 360129 Time Elapsed: 1 hr, 36 min, 15 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 23 PUP.Optional.Spigot, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], PUP.Optional.Spigot, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], PUP.Optional.Spigot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{34A0D84B-CDDC-4EC4-AFDD-4F1DDE1D14E5}, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], PUP.Optional.SearchQu, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{99079A25-328F-4BD4-BE04-00955ACAA0A7}, Quarantined, [0dfcf068c7c42e0886c76b9cb34f27d9], PUP.Optional.VuzeTB, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{05478A66-EDB6-4A22-A870-A5987F80A7DA}, Quarantined, [749569ef8ffcff37907ac96ba55d837d], PUP.Optional.VuzeTB, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{05478A66-EDB6-4A22-A870-A5987F80A7DA}, Quarantined, [749569ef8ffcff37907ac96ba55d837d], PUP.Optional.Spigot, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{3A787631-66A2-4634-B928-A37E73B58FB6}, Quarantined, [0ffae3759eed4aec45d6af88936d966a], PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Quarantined, [65a40355840742f4b337bad7f50e50b0], PUP.Optional.SlickSavings, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\mhkaekfpcppmmioggniknbnbdbcigpkk, Quarantined, [a7620157d9b2c274ac13d6be699a08f8], PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Quarantined, [67a24d0b0388b6802ebcbed355ae53ad], PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings, Quarantined, [34d52f29ee9d7fb7fed83a5cf11212ee], PUP.Optional.SerachQU, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\APPDATALOW\SOFTWARE\searchqutoolbar, Quarantined, [f9105cfc434892a40c479ef51be811ef], PUP.Optional.SlickSavings, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\APPDATALOW\SOFTWARE\Slick Savings, Quarantined, [c5447ddbd7b472c4c2fc8014f013da26], PUP.Optional.Conduit, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Quarantined, [8b7e60f8aae1a78fb7601a4fc142649c], PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{21E15933-AA34-466E-A6EA-4CA64A5AA051}, Quarantined, [c94091c71378a88e95437f1711f29868], PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}, Quarantined, [74954612d1ba57df8b5c1f727f84867a], PUP.Optional.YahooVNM, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}, Quarantined, [1aefbf994b408da9fb42b5ed20e3817f], PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE44DE45-A46E-447E-A245-3DD0C7F3F07F}, Quarantined, [34d50c4c3d4e6acc5583e2b4dc27b54b], Registry Values: 12 PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, [URL]http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}[/URL], Quarantined, [65a40355840742f4b337bad7f50e50b0] PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, [URL]http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json[/URL], Quarantined, [030616422368171fc9218d04768d25db] PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, [URL="http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}"]Ask.com[/URL], Quarantined, [67a24d0b0388b6802ebcbed355ae53ad] PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, [URL]http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json[/URL], Quarantined, [8d7c75e322690b2b09e1bad729da6a96] PUP.Optional.Conduit, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, [URL]http://www.bing.com/search?pc=COSP&ptag=D060115-A166D148A50&form=CONBDF&conlogo=CT3334470&q={searchTerms}[/URL], Quarantined, [8b7e60f8aae1a78fb7601a4fc142649c] PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{21E15933-AA34-466E-A6EA-4CA64A5AA051}|URL, [URL]http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}[/URL], Quarantined, [c94091c71378a88e95437f1711f29868] PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{21E15933-AA34-466E-A6EA-4CA64A5AA051}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, Quarantined, [59b079df6724ac8a35a4c0d681826f91] PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|URL, [URL]http://www.searchqu.com/web?src=ieb&appid=146&systemid=406&sr=0&q={searchTerms}[/URL], Quarantined, [74954612d1ba57df8b5c1f727f84867a] PUP.Optional.SearchQu, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}|SuggestionsURL_JSON, [URL]http://www.searchqu.com/suggest.php?src=ieb&appid=146&systemid=406&qu={searchTerms}&ft=json[/URL], Quarantined, [44c53f19b8d385b1697e6f224bb8b24e] PUP.Optional.YahooVNM, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}|URL, [URL]https://search.yahoo.com/search?fr=vmn&type=vmn__webcompa__1_0__ya__ch_WCYID10154_swoc_campaign_150601__yaie&p={searchTerms}[/URL], Quarantined, [1aefbf994b408da9fb42b5ed20e3817f] PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE44DE45-A46E-447E-A245-3DD0C7F3F07F}|URL, [URL]http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms}[/URL], Quarantined, [34d50c4c3d4e6acc5583e2b4dc27b54b] PUP.Optional.Spigot, HKU\S-1-5-21-1624520076-3274274859-1713139034-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{EE44DE45-A46E-447E-A245-3DD0C7F3F07F}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, Quarantined, [d831a2b63b50f2446c6d1086e41ffb05] Registry Data: 0 (No malicious items detected) Folders: 24 PUP.Optional.SearchQu, C:\Users\KuroHANA\AppData\LocalLow\searchquband, Quarantined, [da2f77e1543782b4127dfd708a78d42c], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\icons, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Local\Slick Savings, Quarantined, [a366a4b4018ad1653b12403602006799], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings, Quarantined, [d930ef698efd999d282794e2f70b946c], PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers, Quarantined, [81889abe3754da5c0d47730454ae3fc1], PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers, Quarantined, [81889abe3754da5c0d47730454ae3fc1], PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers\x64, Quarantined, [81889abe3754da5c0d47730454ae3fc1], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\popupResource, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\userCode, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\actions, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\_metadata, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], Files: 99 PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\Coupons.dll, Quarantined, [3dcc3a1e3e4d64d22e203acd5fa3ef11], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\Coupons.dll{CC623B08-796A-47E5-AF90-35DB7C1C332F}.old, Quarantined, [cf3a95c36d1e7eb844f2b6b144c0e31d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\CouponsHelper.exe, Quarantined, [62a70f494942b5811b1b12556e96a25e], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\Uninstall.exe, Quarantined, [0ffae3759eed4aec45d6af88936d966a], PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTubeCatcher(1).exe, Quarantined, [73961a3ef299d363d5cc0b4b43bed030], PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTubeCatcher.exe, Quarantined, [cc3d3721f596df57ddc4dd79c43d3fc1], PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTube_Catcher(1).exe, Quarantined, [9772bb9dc8c35adc0b966ee810f1dc24], PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTube_Catcher(2).exe, Quarantined, [dc2dde7a95f67abcbee362f4778a4fb1], PUP.Optional.APNToolBar, C:\Users\KuroHANA\Downloads\aTube_Catcher(3).exe, Quarantined, [bb4eadab0d7e82b4930ec393dc25a858], PUP.Optional.OpenCandy, C:\Users\KuroHANA\Downloads\aTube_Catcher.exe, Quarantined, [000976e24249a78f7518fc60679d728e], PUP.Optional.OpenCandy, C:\Users\KuroHANA\Downloads\aTube_Catcher_Setup(1).exe, Quarantined, [fe0b0c4c33587abc1b72e97314f07987], PUP.Optional.OpenCandy, C:\Users\KuroHANA\Downloads\aTube_Catcher_Setup.exe, Quarantined, [ba4f0b4d3d4e5adc6a233f1d887c52ae], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\searchplugins\yahoo_ff.xml, Quarantined, [8287015753382115ffd5ebabf60d2dd3], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\background.html, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\config.json, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\manifest.json, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\icons\ss-128.png, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\icons\ss-48.png, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts\background.js, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts\loader_1036.js, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.SlickSavings, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk\2.6_0\scripts\utils.js, Quarantined, [a56483d50388191d58a8e08fb25036ca], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome.manifest, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\icon.png, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\install.rdf, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\config.json, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\main.js, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\savingsslider.js, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\savingsslider.xul, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\extensions\savingsslider@mybrowserbar.com\chrome\content\spigot.js, Quarantined, [75945602e0abab8bb3b8135da260639d], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Local\Slick Savings\coupons.crx, Quarantined, [a366a4b4018ad1653b12403602006799], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\coupons_2.4.crx, Quarantined, [d930ef698efd999d282794e2f70b946c], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Slick Savings\coupons_2.7.xpi, Quarantined, [d930ef698efd999d282794e2f70b946c], PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers\x64\BrowserConnection.dll, Quarantined, [81889abe3754da5c0d47730454ae3fc1], PUP.Optional.DataMngr, C:\Program Files (x86)\SearchCore for Browsers\SearchCore for Browsers\x64\DnsBHO.dll, Quarantined, [81889abe3754da5c0d47730454ae3fc1], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\main.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\background.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\platformVersion.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\chrome.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\cookie.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\message.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\monitor.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\pageAction.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\api\pageActionBG.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\app_api.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\bg_app_api.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\consts.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\cookie_store.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\delegate.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\events.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\extensionDataStore.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\installer.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\logFile.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\logging.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\onBGDocumentLoad.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\reports.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\storageWrapper.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\updateManager.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\util.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\xhr.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\popupResource\newPopup.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\js\lib\popupResource\popup.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\background.html, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\chromeCoreFilesIndex.txt, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\manifest.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\popup.html, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\Settings.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\manifest.xml, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\1.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\13.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\14.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\17.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\177.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\182.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\183.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\19.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\207.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\21.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\22.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\28.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\4.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\47.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\64.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\72.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\78.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\80.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\plugins\97.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\userCode\background.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\extensionData\userCode\extension.js, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\icon128.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\icon16.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\icon48.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\icons\actions\1.png, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\_metadata\computed_hashes.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.CrossRider, C:\Users\KuroHANA\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbdhgcmaickfigdopnlhfofimhikogid\1.26.8_0\_metadata\verified_contents.json, Quarantined, [cc3d63f5c9c25fd70b13b6b7c242b14f], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "[URL]http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p=[/URL]");), Replaced,[6a9fafa92f5c95a12ba0e5865da7a35d] PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\prefs.js, Good: (browser.startup.homepage", "[URL]https://www.malwarebytes.org/restorebrowser/[/URL]), Bad: (browser.startup.homepage", "[URL]http://search.yahoo.com?type=994519&fr=spigot-[/URL]), Replaced,[e0293d1bb7d4ad89549a0a6711f3837d] PUP.Optional.ASK.Gen, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\je2e67i9.default\searchplugins\askcom.xml, Quarantined, [957489cf95f67bbbb538a1ce28dcdf21], PUP.Optional.Spigot, C:\Users\KuroHANA\AppData\Roaming\Mozilla\Firefox\Profiles\k5grvdxx.default-1354733456351\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "[URL]http://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=994519&p=[/URL]");), Replaced,[db2e1543fb90cb6bc6056605d62eb34d] Physical Sectors: 0 (No malicious items detected) (end) [/QUOTE]
Insert quotes…
Verification
Post reply
Top
