Solved What to do when Chrome & Firefox browsers are very very slow

October 7, 2016 at 16:59:12
Specs: Windows 10
I've checked all add ons run a malware scan nothing is coming up but both my browsers are so incredibly slow it's taking me several minutes to load even simple things and things like games won't load at all anymore. I was fine a week ago. Haven't done anything except maybe an automatic upgrade on my machine. Can anyone help?

See More: What to do when Chrome & Firefox browsers are very very slow

Report •

✔ Best Answer
October 9, 2016 at 01:33:49
Extract from the fixlog.
"EmptyTemp: => 1.1 GB temporary data Removed"
Too big, even if you are a gamer.
Here are temp file settings for a normal user, adjust to suit your requirements.
All browsers, limit the cache to 50mb ( that's MB, not GB )
IE & Edge share the same setting.
Control Panel > Internet Options > General > Browsing history > Settings. Refer SS below.
http://fs5.directupload.net/images/...
Example for Firefox.
https://www.sitepoint.com/3-tweaks-...
Chrome is not so straight forward.
How to set Google Chrome cache to 50mb max temporary files.
With comps, there is always more than one way to do things, try this way.
Right click on the Google Chrome shortcut > Properties.
Copy & Paste this below after .exe" as per SS ( Screenshot )
NOTE: There is a space after .exe"
http://i.imgur.com/vgkU3X1.gif
--disk-cache-size=50000"
Click > Apply & then OK.

/////////////////////////////////////////////////////

Extract from the FRST log.
"Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)"

Make sure ALL your Regional and Language Options settings are Ok. They will be something similar to this, the main point being, you should have at least 3 places to make sure you have your country displayed.

Windows 10: Change or Add Another Language or Region.
http://www.tech-recipes.com/rx/5633...
http://i.imgur.com/gkPnT4j.gif
http://i.imgur.com/8J4WO6U.gif
http://i.imgur.com/gtwlzJo.gif
http://i.imgur.com/vSWwH00.gif

/////////////////////////////////////////////////////

Here is how a USER got the problems, no AV would have prevented USER error. Go to any Malware forum & no matter what AV they have installed, they got infected.

As you can see from your logs, you had a lot of stuff installed, that you do not know, how it got installed.
A lot of programs, now give you the choice to install toolbars & other during the install. Either uncheck these items during install, or use Custom install. No more click, click during an install, you have to read after each click.

Or, Use Unchecky to help prevent these third party installs. Nothing is perfect, the badies are always ahead of the goodies, so be vigilant.
http://www.softpedia.com/get/System...
http://www.freewarefiles.com/Unchec...
http://unchecky.com/
A reliable application that aims to protect your computer against third-party components often offered during software installations.

I use Softpedia & FreewareFiles.com, they make you aware what Ad-supported programs the author of the program has included.
http://win.softpedia.com/index.free...
http://www.freewarefiles.com/new_fi...
Sample/Example pages.
http://www.softpedia.com/get/Multim...
http://fs5.directupload.net/images/...
Users are advised to pay attention while installing this ad-supported application:
· Offers to download or install software or components (Facemoods toolbar) that the program does not require to fully function
· Offers to change the homepage for web browsers installed in the system.
SS of above.
http://fs5.directupload.net/images/...

You may be better off purchasing Malwarebytes. You will then have Malwarebytes realtime protection & Unchecky to help prevent the problems you have been having. Malwarebytes runs perfectly with your existing AV.
http://fs5.directupload.net/images/...



#1
October 7, 2016 at 17:29:46
These three small freebies often find what anti-virus programs miss. Run them in the order given:

AdwCleaner:
https://toolslib.net/downloads/view...
(blue "Download Now" button on right).
Download and "Save" the file somewhere. Go to the saved file then double click it to run the program. Use the "Scan" button, followed by the "Clean" button.

Junkware Removal Tool (JRT)
https://www.malwarebytes.org/junkwa...
(blue Download button).
Download and "Save" the file somewhere. Go to the saved file then double click it to run JRT. It might appear to have stopped at times or flash the screen but sit tight until it has finished.

MalwareBytes:
https://www.malwarebytes.org/
(use the "download" button rather than the "buy" button).
Install and Run the program but before running the Scan go to "Settings > Detection and Protection" and put a checkmark in "Scan for rootkits". Quarantine anything it finds.

Please copy/paste the logs on here please. To access the logs in Malwarebytes, open it, go to History at the top then Application Logs at the left. Put a check mark in the latest "Scan log" and Export it to a txt file.

Always pop back and let us know the outcome - thanks


Report •

#2
October 7, 2016 at 20:45:26
In addition to the very important steps Derek laid out, you should periodically clean out your browser's History. I like to do it manually but many here like using CCleaner which does this and more.

You have to be a little bit crazy to keep you from going insane.


Report •

#3
October 8, 2016 at 06:03:50

Report •

Related Solutions

#4
October 8, 2016 at 17:15:06
I ran the adware scan and it brought up a bunch of stuff. It says to unclick the stuff I want to save. How do I know what to save and what to clean? It looks like there may be driver updates and other important things in there. Here is the log:
# AdwCleaner v6.021 - Logfile created 08/10/2016 at 19:56:43
# Updated on 06/10/2016 by ToolsLib
# Database : 2016-10-07.1 [Server]
# Operating System : Windows 10 Home (X64)
# Username : amyatigger - AMYHOFFERANSON
# Running from : C:\Users\amyatigger\Downloads\adwcleaner_6.021.exe
# Mode: Scan
# Support : https://toolslib.net/forum

***** [ Services ] *****

Service Found: swdumon


***** [ Folders ] *****

Folder Found: C:\Users\Public\Documents\Downloaded Installers\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}
Folder Found: C:\WINDOWS\Installer\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}
Folder Found: C:\Users\amyatigger\AppData\Local\ArcadeYum
Folder Found: C:\Users\amyatigger\AppData\Local\slimware utilities inc
Folder Found: C:\Users\amyatigger\AppData\Local\Downloaded Installers
Folder Found: C:\Users\amyatigger\AppData\LocalLow\Inbox Toolbar
Folder Found: C:\Users\amyatigger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeYum
Folder Found: C:\Program Files\slimcleaner plus
Folder Found: C:\Program Files\SlimCleaner Plus
Folder Found: C:\ProgramData\slimware utilities inc
Folder Found: C:\ProgramData\Application Data\slimware utilities inc
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driverupdate
Folder Found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar
Folder Found: C:\Users\Public\Documents\Downloaded Installers
Folder Found: C:\Program Files (x86)\driverupdate
Folder Found: C:\Program Files (x86)\Inbox Toolbar
Folder Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmbmildjdmppofnohldicmnkojfhggmb
Folder Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jmbmildjdmppofnohldicmnkojfhggmb
Folder Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc


***** [ Files ] *****

File Found: C:\WINDOWS\SysNative\drivers\swdumon.sys
File Found: C:\Users\Public\Desktop\eBay.lnk
File Found: C:\Users\Public\Desktop\driverupdate.lnk
File Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jmbmildjdmppofnohldicmnkojfhggmb_0.localstorage
File Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jmbmildjdmppofnohldicmnkojfhggmb_0.localstorage-journal
File Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlmebkoiahbppacaicbgncnjhbpdfkcc_0.localstorage
File Found: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlmebkoiahbppacaicbgncnjhbpdfkcc_0.localstorage-journal


***** [ DLL ] *****

No malicious DLLs found.


***** [ WMI ] *****

No malicious keys found.


***** [ Shortcuts ] *****

Shortcut infected: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Help.lnk ( /showurl hxxp://toolbar.inbox.com/faq.aspx )
Shortcut infected: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Inbox.com.lnk ( /showurl hxxp://www.inbox.com/homepage.aspx?tbid=80105&iwk=256&lng=en )


***** [ Scheduled Tasks ] *****

Task Found: driverupdate startup
Task Found: DriverUpdate Scan


***** [ Registry ] *****

Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}
Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}_is1
Key Found: HKLM\SOFTWARE\Classes\Inbox.AppServer
Key Found: HKLM\SOFTWARE\Classes\Inbox.IBX404
Key Found: HKLM\SOFTWARE\Classes\Inbox.JSServer
Key Found: HKLM\SOFTWARE\Classes\Inbox.JSServer2
Key Found: HKLM\SOFTWARE\Classes\Inbox.Toolbar
Key Found: [x64] HKLM\SOFTWARE\Classes\Inbox.AppServer
Key Found: [x64] HKLM\SOFTWARE\Classes\Inbox.IBX404
Key Found: [x64] HKLM\SOFTWARE\Classes\Inbox.JSServer
Key Found: [x64] HKLM\SOFTWARE\Classes\Inbox.JSServer2
Key Found: [x64] HKLM\SOFTWARE\Classes\Inbox.Toolbar
Key Found: HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found: HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found: HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Key Found: HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{615E8AA1-6BB8-4A3D-A1CC-373194DB612C}
Key Found: HKLM\SOFTWARE\Classes\TypeLib\{CBEF8724-D080-4737-88DA-111EEC6651AA}
Key Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Found: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Inbox Toolbar
Key Found: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\SlimWare Utilities Inc
Key Found: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\AppDataLow\Software\ArcadeYum
Key Found: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\ArcadeYum
Key Found: HKCU\Software\Inbox Toolbar
Key Found: HKCU\Software\SlimWare Utilities Inc
Key Found: HKCU\Software\AppDataLow\Software\ArcadeYum
Key Found: HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
Key Found: HKLM\SOFTWARE\Inbox Toolbar
Key Found: HKLM\SOFTWARE\SlimWare Utilities Inc
Key Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ArcadeYum
Key Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{612AD33D-9824-4E87-8396-92374E91C4BB}_is1
Key Found: [x64] HKCU\Software\Inbox Toolbar
Key Found: [x64] HKCU\Software\SlimWare Utilities Inc
Key Found: [x64] HKCU\Software\AppDataLow\Software\ArcadeYum
Key Found: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ArcadeYum
Key Found: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Key Found: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Key Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
Data Found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [AutoConfigURL] - C:\Users\amyatigger\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\BAC_PAC.js
Data Found: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [AutoConfigURL] - C:\Users\amyatigger\AppData\Roaming\ShopAtHome.com BrowserAppCore Service\BAC_PAC.js
Value Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BrowserAppCoreService]
Value Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [BrowserAppCoreService]
Value Found: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [InboxToolbar]
Value Found: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [InboxToolbar]
Value Found: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SlimCleaner Plus]
Key Found: HKLM\SOFTWARE\Classes\PROTOCOLS\handler\inbox
Key Found: HKLM\SOFTWARE\Classes\protocols\handler\inbox


***** [ Web browsers ] *****

No malicious Firefox based browser items found.
Chrome pref Found: [C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - dlmebkoiahbppacaicbgncnjhbpdfkcc
Chrome pref Found: [C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences ] - jmbmildjdmppofnohldicmnkojfhggmb

*************************

C:\AdwCleaner\AdwCleaner[S0].txt - [8168 Bytes] - [08/10/2016 19:56:43]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8241 Bytes] ##########


Report •

#5
October 8, 2016 at 18:02:48
"How do I know what to save and what to clean?"
All of those can be cleaned.

Copy & Paste the clean log when done.


Report •

#6
October 8, 2016 at 18:17:04
Here is the Clean Log for AdwCleaner: # AdwCleaner v6.021 - Logfile created 08/10/2016 at 21:08:26
# Updated on 06/10/2016 by ToolsLib
# Database : 2016-10-07.1 [Server]
# Operating System : Windows 10 Home (X64)
# Username : amyatigger - AMYHOFFERANSON
# Running from : C:\Users\amyatigger\Downloads\adwcleaner_6.021.exe
# Mode: Clean
# Support : https://toolslib.net/forum

***** [ Services ] *****

[-] Service deleted: swdumon


***** [ Folders ] *****

[-] Folder deleted: C:\Users\Public\Documents\Downloaded Installers\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}
[-] Folder deleted: C:\WINDOWS\Installer\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}
[-] Folder deleted: C:\Users\amyatigger\AppData\Local\ArcadeYum
[-] Folder deleted: C:\Users\amyatigger\AppData\Local\slimware utilities inc
[-] Folder deleted: C:\Users\amyatigger\AppData\Local\Downloaded Installers
[-] Folder deleted: C:\Users\amyatigger\AppData\LocalLow\Inbox Toolbar
[-] Folder deleted: C:\Users\amyatigger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeYum
[-] Folder deleted: C:\Program Files\slimcleaner plus
[#] Folder deleted on reboot: C:\Program Files\SlimCleaner Plus
[-] Folder deleted: C:\ProgramData\slimware utilities inc
[#] Folder deleted on reboot: C:\ProgramData\Application Data\slimware utilities inc
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driverupdate
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar
[-] Folder deleted: C:\Users\Public\Documents\Downloaded Installers
[-] Folder deleted: C:\Program Files (x86)\driverupdate
[-] Folder deleted: C:\Program Files (x86)\Inbox Toolbar
[-] Folder deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmbmildjdmppofnohldicmnkojfhggmb
[-] Folder deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jmbmildjdmppofnohldicmnkojfhggmb
[-] Folder deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc


***** [ Files ] *****

[-] File deleted: C:\WINDOWS\SysNative\drivers\swdumon.sys
[-] File deleted: C:\Users\Public\Desktop\eBay.lnk
[-] File deleted: C:\Users\Public\Desktop\driverupdate.lnk
[-] File deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jmbmildjdmppofnohldicmnkojfhggmb_0.localstorage
[-] File deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jmbmildjdmppofnohldicmnkojfhggmb_0.localstorage-journal
[-] File deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlmebkoiahbppacaicbgncnjhbpdfkcc_0.localstorage
[-] File deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlmebkoiahbppacaicbgncnjhbpdfkcc_0.localstorage-journal


***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

[!] Shortcut not deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Help.lnk
[!] Shortcut not deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Inbox.com.lnk


***** [ Scheduled Tasks ] *****

***** [ Registry ] *****

[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}
[#] Key deleted on reboot: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B2B04F8B-6444-4364-89C8-F3088D4E8D02}_is1
[-] Key deleted: HKLM\SOFTWARE\Classes\Inbox.AppServer
[-] Key deleted: HKLM\SOFTWARE\Classes\Inbox.IBX404
[-] Key deleted: HKLM\SOFTWARE\Classes\Inbox.JSServer
[-] Key deleted: HKLM\SOFTWARE\Classes\Inbox.JSServer2
[-] Key deleted: HKLM\SOFTWARE\Classes\Inbox.Toolbar
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Inbox.AppServer
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Inbox.IBX404
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Inbox.JSServer
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Inbox.JSServer2
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Inbox.Toolbar
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
[-] Key deleted: HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{615E8AA1-6BB8-4A3D-A1CC-373194DB612C}
[-] Key deleted: HKLM\SOFTWARE\Classes\TypeLib\{CBEF8724-D080-4737-88DA-111EEC6651AA}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
[-] Key deleted: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Inbox Toolbar
[-] Key deleted: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\SlimWare Utilities Inc
[-] Key deleted: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\AppDataLow\Software\ArcadeYum
[-] Key deleted: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\ArcadeYum
[#] Key deleted on reboot: HKCU\Software\Inbox Toolbar
[#] Key deleted on reboot: HKCU\Software\SlimWare Utilities Inc
[#] Key deleted on reboot: HKCU\Software\AppDataLow\Software\ArcadeYum
[-] Key deleted: HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
[-] Key deleted: HKLM\SOFTWARE\Inbox Toolbar
[-] Key deleted: HKLM\SOFTWARE\SlimWare Utilities Inc
[#] Key deleted on reboot: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ArcadeYum
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{612AD33D-9824-4E87-8396-92374E91C4BB}_is1
[#] Key deleted on reboot: [x64] HKCU\Software\Inbox Toolbar
[#] Key deleted on reboot: [x64] HKCU\Software\SlimWare Utilities Inc
[#] Key deleted on reboot: [x64] HKCU\Software\AppDataLow\Software\ArcadeYum
[#] Key deleted on reboot: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ArcadeYum
[-] Key deleted: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
[-] Data restored: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [AutoConfigURL]
[-] Data restored: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [AutoConfigURL]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BrowserAppCoreService]
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [BrowserAppCoreService]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [InboxToolbar]
[-] Value deleted: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32 [InboxToolbar]
[-] Value deleted: HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SlimCleaner Plus]
[-] Key deleted: HKLM\SOFTWARE\Classes\PROTOCOLS\handler\inbox
[#] Key deleted on reboot: HKLM\SOFTWARE\Classes\protocols\handler\inbox


***** [ Web browsers ] *****

[-] [C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default] [extension] Deleted: dlmebkoiahbppacaicbgncnjhbpdfkcc
[-] [C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default] [extension] Deleted: jmbmildjdmppofnohldicmnkojfhggmb


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************


Report •

#7
October 8, 2016 at 18:22:37
JRT log:

File System: 7

Successfully deleted: C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmbmildjdmppofnohldicmnkojfhggmb (Folder)
Successfully deleted: C:\Users\amyatigger\AppData\Roaming\Mozilla\Firefox\Profiles\rhqlprtu.default\extensions\trash (Folder)
Successfully deleted: C:\WINDOWS\system32\Tasks\ArcadeYum (Task)
Successfully deleted: C:\WINDOWS\system32\Tasks\SlimCleaner Plus (Scheduled Scan - amyatigger) (Task)
Successfully deleted: C:\WINDOWS\Tasks\ArcadeYum.job (Task)
Successfully deleted: C:\WINDOWS\Tasks\SlimCleaner Plus (Scheduled Scan - amyatigger).job (Task)
Successfully deleted: C:\WINDOWS\prefetch\DRIVERUPDATE.EXE-1647F161.pf (File)

Registry: 5

Successfully deleted: HKLM\Software\Google\Chrome\Extensions\apgjagobplilmcdfelodhgefiidomnfl (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CD628A62-55F7-4873-B61D-307CC49E111C} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{CD628A62-55F7-4873-B61D-307CC49E111C} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{651CA263-4157-4AC5-B7C2-03A7C1C00457} (Registry Key)
Successfully deleted: HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{651CA263-4157-4AC5-B7C2-03A7C1C00457} (Registry Key)


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sat 10/08/2016 at 21:20:47.06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Report •

#8
October 8, 2016 at 18:22:51
Thanks, now run the other 2 tools please. Junkware first.

Report •

#9
October 8, 2016 at 18:23:44
Opp's, you beat me to it.

Report •

#10
October 8, 2016 at 19:12:08
There are two log files for Malware, the scan log file is too large for me to post here. But here's the protection log, if you need the other I can try to post it in 2 or more posts, just let me know what else I need to do. Thanks Johnw!

Report •

#11
October 8, 2016 at 19:15:24
Here is the first part of the Malware scan file:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/8/2016
Scan Time: 9:26 PM
Logfile: Malware scan log file.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.10.08.07
Rootkit Database: v2016.09.26.02
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 10
CPU: x64
File System: NTFS
User: amyatigger

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 316976
Time Elapsed: 28 min, 38 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 7
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\CLASSES\CLSID\{042DA63B-0933-403D-9395-B49307691690}, Quarantined, [04c35b3b5941a88ec1e9197dac5612ee],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\CLASSES\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}, Quarantined, [5671c8cef2a81b1beb451977e919ba46],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\CLASSES\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, Quarantined, [4a7d088ebae03bfb0a277d1344bea957],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, Quarantined, [4a7d088ebae03bfb0a277d1344bea957],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}, Quarantined, [4a7d088ebae03bfb0a277d1344bea957],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{612AD33D-9824-4E87-8396-92374E91C4BB}, Quarantined, [ab1c9afcc0dad660f53ad8b8d62c60a0],
PUP.Optional.InboxToolBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{612AD33D-9824-4E87-8396-92374E91C4BB}, Quarantined, [ab1c9afcc0dad660f53ad8b8d62c60a0],

Registry Values: 1
PUP.Optional.Inbox, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|Inbox.exe, 11000, Quarantined, [9235c2d4c3d7f83efd28ad3139ca629e]

Registry Data: 0
(No malicious items detected)

Folders: 85
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\adapter, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\abstractbutton, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\abstractbutton\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\alert, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\alert\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare\icons, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\generic, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\generic\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\link, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\link\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\images, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\rss, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\rss\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\thirdparty, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\thirdparty\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\uninstall, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\uninstall\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\weather, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\weather\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\rss, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\rss\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\weather, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\weather\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\weather\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\window, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\foreground, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\radioWrapper, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\background, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\libs, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\shared, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\_metadata, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik, Quarantined, [20a760360d8d2d0999abb5e547bde719],


Report •

#12
October 8, 2016 at 19:15:37
Upload it here AmyAnson.

Upload it using Zippy ( No account/registration needed ) or upload to a site of your choosing. Give us the link please.
http://www.zippyshare.com/
Instructions on how to use ZippyShare.
http://i.imgur.com/naG6t2T.gif
http://i.imgur.com/Vi9ZdIh.gif
http://i.imgur.com/1IZu5kP.gif


Report •

#13
October 8, 2016 at 19:17:58
Here is the 2nd part of the Malware scan file:
Files: 231
PUP.Optional.Inbox, C:\Users\amyatigger\Downloads\MusicSetup (1).exe, Quarantined, [289f5c3a683201353966673c6f91cf31],
PUP.Optional.Inbox, C:\Users\amyatigger\Downloads\MusicSetup (2).exe, Quarantined, [d6f12d690e8cc571dcc38023907014ec],
PUP.Optional.Inbox, C:\Users\amyatigger\Downloads\MusicSetup.exe, Quarantined, [b3141b7bedad86b0148ba7fc1ce4fb05],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (1).exe, Quarantined, [96319303b4e692a45f69ad7c54ad8977],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (2).exe, Quarantined, [e0e7b8de1981a1952d9bb871fa074ab6],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (3).exe, Quarantined, [5b6c95017525e650f5d3b17851b03dc3],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (4).exe, Quarantined, [a027286e7525d66010b871b858a9b050],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (5).exe, Quarantined, [6f58cec86c2e84b29a2e7aaf827f6997],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (6).exe, Quarantined, [b31405916337f14515b335f4c041c040],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames (7).exe, Quarantined, [3f880690fd9d57dfaa1e78b17c857a86],
PUP.Optional.ArcadeYum, C:\Users\amyatigger\Downloads\ArcadeYumGames.exe, Quarantined, [9f28eaac5e3c9e98c800032621e021df],
PUP.Optional.Solimba, C:\Users\amyatigger\Downloads\Setup.exe, Quarantined, [daed732354466accc1b6f1b1eb15c838],
PUP.Optional.Slimware.Offers, C:\Users\amyatigger\Downloads\DriverUpdate-setup.exe, Quarantined, [ffc820766a300f27042cda18aa56c040],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\manifest.json, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spent.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\bg.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\buildVars, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\buildVars.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\companionSW.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\config.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\contentScript.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\contentScript.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\debug.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\debug.jade, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\extension_toolbar_api.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\initWidgetWindow.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\newTabContentScript.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\options.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spent.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spent.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spent2.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spent2.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spentJ.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spentK.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\spentK.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\startup.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\stub.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\stubby.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\superFrame.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\toolbar.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\toolbar.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\toolbarUI.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\toolbarUI.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\toolbarUI.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\url.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\adapter\adapterUtil.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\adapter\widget-adapter.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\abstractbutton\background\abstractButton.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\alert\background\alertButton.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\background\embedHtmlWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\html\embedHtmlTemplate.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\html\innerEmbedHtmlTemplate.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedhtml\js\embedHtmlUI.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\background\embedScriptWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\html\embedScriptTemplate.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\html\innerEmbedScriptTemplate.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\embedscript\js\embedScriptUI.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare\background\FlareWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare\icons\Icon_Flare_blue.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare\icons\Icon_Flare_pink.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\flare\icons\Thumbs.db, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\generic\background\GenericWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\link\background\linkButton.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\README.txt, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\background\menuButton.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\css\menuframe.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\html\menuframe.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\images\right_arrow.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\images\right_arrow_white.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\js\jquery-1.7.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\js\menuframe.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\js\query-string.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\menu\js\underscore-1.3.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\rss\background\RssWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\thirdparty\background\thirdPartyWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\uninstall\background\uninstallButton.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\components\weather\background\weatherButton.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\bs.30.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\common.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\dynamic.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\enableDetect.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\eventListening.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\global.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\jquery-1.7.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\list-interaction.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\messageEventListener.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\navRedirector.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\paramReplacer.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\PartnerId.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\set.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\underscore-1.3.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\underscore-1.5.2.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\js\unifiedLogging.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widget-context-1.0.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common\common.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common\eventListening.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common\jquery-1.7.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common\list-interaction.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common\set.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\common\underscore-1.3.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\radio-widget.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\css\radio-widget.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\js\radio-custom.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\js\radio-parser.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\js\radio-widget-ui.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\radio\js\radio-widget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\rss\rssWidget.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\rss\js\rss-widget-custom.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\rss\js\rss-widget-parse.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\rss\js\rss-widget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\invalid.json, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\jquery.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\qunit.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\qunit.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\resource.json, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\resource.xml, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\testWidget.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\test\testWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\widget.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\css\widget.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\js\nanigans-topapps-feed.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\js\topapps-config.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\topapps\js\widget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\weather\weatherButton.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\weather\css\weatherButton.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\common\widget-api\widgets\weather\js\weather.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\background\ApiBasedWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],

Report •

#14
October 8, 2016 at 19:18:57
This is the third part of the Malware scan file. Thanks!
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\background\widget-api-impl.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\window\hiddenWidgetWindow.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\window\hiddenWidgetWindow.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\window\hiddenWidgetWindowInit.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\window\widgetWindow.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\api\window\widgetWindow.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\background\updateSearch.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\background\updateSearchPromptBg.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\07_buttons2.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\08_buttons2.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\defaultSearchModal.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\defaultSearchModalInjector.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\defaultSearchModalInjector.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\tvf_btn_ok.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\tvf_btn_ok2.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\tvf_restart_alert_icon.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\tvf_restart_icon.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\defaultSearch\foreground\updateSearchPromptFg.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\background\MovieReviewsWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\css\movieReviews.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\html\movieReviews.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\moviereviews\js\movieReviews.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\background\RadioWidget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\css\toolbar-item.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\foreground\button.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\radioWrapper\radioWrapper.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\radio\radioWrapper\radioWrapper.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\background\searchBox.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\html\searchSuggestions.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\html\searchSuggestions.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\html\searchSuggestions.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\search\html\searchSuggestionsInit.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\css\supertab.css, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\html\supertab.html, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js\newtabfork.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js\reporting.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js\srchsugg.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js\supertab.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js\unifiedLogging.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\components\supertab\js\__utm.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\arrowSprite.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\icon128.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\icon16.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\icon19disabled.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\icon19on.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\icon48.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\icons\tb_icon_search_disappearing_ask.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119082.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119085.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119089.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119091.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119092.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119093.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119094.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\222119109.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\down_arrow.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\IDR_PRODUCT_LOGO_16.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\IDR_WEBSTORE_ICON.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\magnifying_glass.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\RadioPlayerSprite.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\search_button.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\tvf_icon_guide.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\tvf_logo.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\images\wrench.png, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\chromeUtils.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\exeManager.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\exeManagerNMD.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\exePackageManager.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\focusManager.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\globalBlacklistManager.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\messaging.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\mutation_summary-min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\mutation_summary.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\nativeMessagingDispatcher.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\newTabInfo.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\newTabInitialize.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\options.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\readLocalStorage.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\reservespacefortoolbar.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\reservespaceifenabled.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\scriptInjector.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\searchContext.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\settingsOverrides.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\toolbarCookieParser.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\toolbarPreinit.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\underscore-1.3.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\URILoaderContentScript.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\Widget.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\widgetContentScriptInjectee.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\widgetFactory.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\js\widgetWindowManager.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\cache.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\ce.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\debug.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\ss.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\libs\jquery-1.7.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\libs\jquery-1.9.1.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\native\libs\underscore-1.5.2.min.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\shared\HttpURL.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\shared\rsvp-latest.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\shared\unifiedLogging.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\shared\universalConsole.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\shared\utils.js, Quarantined, [20a760360d8d2d0999abb5e547bde719],
PUP.Optional.MindSpark, C:\Users\amyatigger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihncljabjemfknlkjmhcmhlajcnigaik\12.9.6.9745_0\_metadata\verified_contents.json, Quarantined, [20a760360d8d2d0999abb5e547bde719],

Physical Sectors: 0
(No malicious items detected)


(end)


Report •

#15
October 8, 2016 at 19:18:58
Thanks.

I will at the end of getting you clean, explain how you got all this stuff & give you some preventitive measures.

Please download Farbar Recovery Scan Tool and save it to your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
http://www.bleepingcomputer.com/dow...
If we have to run Farbar more than once, refer this SS.
http://i.imgur.com/yUxNw0j.gif
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the Desktop.
The first time the tool is run, it makes also another log (Addition.txt)
The logs are large, upload them using Zippy ( No account/registration needed ) or upload to a site of your choosing. Give us the links please.
http://www.zippyshare.com/
Instructions on how to use ZippyShare.
http://i.imgur.com/naG6t2T.gif
http://i.imgur.com/Vi9ZdIh.gif
http://i.imgur.com/1IZu5kP.gif


Report •

#16
October 8, 2016 at 19:21:24
So sorry, just saw your reply. Here's the link: http://www105.zippyshare.com/v/lVJC...

Report •

#17
October 8, 2016 at 19:39:15
This is the Farbar txt file
http://www23.zippyshare.com/v/9rdox...

This is the Farbar Addition.txt file:
http://www115.zippyshare.com/v/u8eE...


Report •

#18
October 8, 2016 at 19:41:52
Are you staying online for a while?

I will be back after going through the logs, in about 20mins.


Report •

#19
October 8, 2016 at 19:46:33
I'll be here for about another hour

Report •

#20
October 8, 2016 at 19:55:43
You will need to drag FRST64 out of Downloads onto your desktop, as per my original instructions.

Copy & Paste the text in Blue below & save it into Notepad on your Desktop & name it fixlist.txt
NOTE: It is important that Notepad is used. The fix will not work if Word or some other program is used.
NOTE: It is important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

CreateRestorePoint:
emptytemp:
closeprocesses:
ShopAtHome.com BrowserAppCore Service Chrome (HKLM-x32\...\ShopAtHome.com BrowserAppCore Service Chrome) (Version: - ShopAtHome.com) <==== ATTENTION
Task: {048C0F74-C91A-432D-BAFB-05B00642AE2B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {06C0844C-1762-4541-87DA-37C1B4441CFA} - \WPD\SqmUpload_S-1-5-21-278302097-4242692893-2613242415-1001 -> No File <==== ATTENTION
Task: {22EE57DE-5262-4E38-883C-A727D9994A25} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {3D553069-9B62-4583-A9FC-886280EF2AFF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {520A0189-41C4-4FE3-9A97-1670FBD7F50D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {6FE144E2-2318-441A-8AF1-02FCA472FBE5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {90F1F553-3FB7-44CA-AE1F-8FCDF5692859} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {AA5857CB-53D3-47BB-A9E1-00EC8A9739B8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {BF69D526-A192-45FE-A212-C271FA33B0EC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {C4DAE1DD-2857-4E5E-9684-A24D990B7E91} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {F265D2A0-81E3-45DA-967D-423B4A6D8EF6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F633127D-1DDC-4BEF-85F5-4B80ED4F5CDF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:15E76ABF [135]
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F [134]
HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM -> {CD628A62-55F7-4873-B61D-307CC49E111C} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://us.search.yahoo.com/search?fr=ds-dt&type=bestsearch_US_DefaultSearchEngine&p={searchTerms}
SearchScopes: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://us.search.yahoo.com/search?fr=ds-dt&type=bestsearch_US_DefaultSearchEngine&p={searchTerms}
SearchScopes: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
Toolbar: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> No Name - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No File
FF HKLM-x32\...\Firefox\Extensions: [caaphishtoolbar@ca.com] - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\Firefox => not found
CHR HKLM-x32\...\Chrome\Extension: [hpdpkkpdlooddakbebmkeeegehfjdnih] - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\GoogleChrome\td_aphish_toolbar.crx <not found>

Open FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that, let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please Copy & Paste the contents into your reply.
Refer these SS if needed.
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...

message edited by Johnw


Report •

#21
October 8, 2016 at 20:41:07
Fix result of Farbar Recovery Scan Tool (x64) Version: 04-10-2016
Ran by amyatigger (08-10-2016 23:31:03) Run:1
Running from C:\Users\amyatigger\Desktop
Loaded Profiles: amyatigger (Available Profiles: amyatigger)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
emptytemp:
closeprocesses:
ShopAtHome.com BrowserAppCore Service Chrome (HKLM-x32\...\ShopAtHome.com BrowserAppCore Service Chrome) (Version: - ShopAtHome.com) <==== ATTENTION
Task: {048C0F74-C91A-432D-BAFB-05B00642AE2B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
Task: {06C0844C-1762-4541-87DA-37C1B4441CFA} - \WPD\SqmUpload_S-1-5-21-278302097-4242692893-2613242415-1001 -> No File <==== ATTENTION
Task: {22EE57DE-5262-4E38-883C-A727D9994A25} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
Task: {3D553069-9B62-4583-A9FC-886280EF2AFF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {520A0189-41C4-4FE3-9A97-1670FBD7F50D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {6FE144E2-2318-441A-8AF1-02FCA472FBE5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {90F1F553-3FB7-44CA-AE1F-8FCDF5692859} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
Task: {AA5857CB-53D3-47BB-A9E1-00EC8A9739B8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
Task: {BF69D526-A192-45FE-A212-C271FA33B0EC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {C4DAE1DD-2857-4E5E-9684-A24D990B7E91} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
Task: {F265D2A0-81E3-45DA-967D-423B4A6D8EF6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {F633127D-1DDC-4BEF-85F5-4B80ED4F5CDF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:15E76ABF [135]
AlternateDataStreams: C:\ProgramData\Temp:2CB9631F [134]
HKLM-x32\...\Run: [] => [X]
SearchScopes: HKLM -> {CD628A62-55F7-4873-B61D-307CC49E111C} URL = hxxp://www.amazon.com/s/ref=azs_osd_iea?ie=UTF-8&tag=hp-us2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://us.search.yahoo.com/search?fr=ds-dt&type=bestsearch_US_DefaultSearchEngine&p={searchTerms}
SearchScopes: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://us.search.yahoo.com/search?fr=ds-dt&type=bestsearch_US_DefaultSearchEngine&p={searchTerms}
SearchScopes: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/711-154371-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
Toolbar: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKU\S-1-5-21-278302097-4242692893-2613242415-1001 -> No Name - {0123B506-0AD9-43AA-B0CF-916C122AD4C5} - No File
FF HKLM-x32\...\Firefox\Extensions: [caaphishtoolbar@ca.com] - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\Firefox => not found
CHR HKLM-x32\...\Chrome\Extension: [hpdpkkpdlooddakbebmkeeegehfjdnih] - C:\Program Files\Total Defense\Internet Security Suite\Anti-Phishing\x86\Toolbar\GoogleChrome\td_aphish_toolbar.crx <not found>
*****************

Restore point was successfully created.
Processes closed successfully.
ShopAtHome.com BrowserAppCore Service Chrome (HKLM-x32\...\ShopAtHome.com BrowserAppCore Service Chrome) (Version: - ShopAtHome.com) <==== ATTENTION => Error: No automatic fix found for this entry.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{048C0F74-C91A-432D-BAFB-05B00642AE2B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{048C0F74-C91A-432D-BAFB-05B00642AE2B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{06C0844C-1762-4541-87DA-37C1B4441CFA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{06C0844C-1762-4541-87DA-37C1B4441CFA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-278302097-4242692893-2613242415-1001" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{22EE57DE-5262-4E38-883C-A727D9994A25}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22EE57DE-5262-4E38-883C-A727D9994A25}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3D553069-9B62-4583-A9FC-886280EF2AFF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D553069-9B62-4583-A9FC-886280EF2AFF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{520A0189-41C4-4FE3-9A97-1670FBD7F50D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{520A0189-41C4-4FE3-9A97-1670FBD7F50D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6FE144E2-2318-441A-8AF1-02FCA472FBE5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6FE144E2-2318-441A-8AF1-02FCA472FBE5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{90F1F553-3FB7-44CA-AE1F-8FCDF5692859}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{90F1F553-3FB7-44CA-AE1F-8FCDF5692859}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AA5857CB-53D3-47BB-A9E1-00EC8A9739B8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA5857CB-53D3-47BB-A9E1-00EC8A9739B8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF69D526-A192-45FE-A212-C271FA33B0EC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF69D526-A192-45FE-A212-C271FA33B0EC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C4DAE1DD-2857-4E5E-9684-A24D990B7E91}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4DAE1DD-2857-4E5E-9684-A24D990B7E91}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F265D2A0-81E3-45DA-967D-423B4A6D8EF6}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F265D2A0-81E3-45DA-967D-423B4A6D8EF6}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F633127D-1DDC-4BEF-85F5-4B80ED4F5CDF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F633127D-1DDC-4BEF-85F5-4B80ED4F5CDF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully
C:\ProgramData\Temp => ":15E76ABF" ADS removed successfully.
C:\ProgramData\Temp => ":2CB9631F" ADS removed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CD628A62-55F7-4873-B61D-307CC49E111C}" => key removed successfully
HKCR\CLSID\{CD628A62-55F7-4873-B61D-307CC49E111C} => key not found.
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}" => key removed successfully
HKCR\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}" => key removed successfully
HKCR\Wow6432Node\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => key not found.
HKU\S-1-5-21-278302097-4242692893-2613242415-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
"HKU\S-1-5-21-278302097-4242692893-2613242415-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => key removed successfully
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => key not found.
"HKU\S-1-5-21-278302097-4242692893-2613242415-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}" => key removed successfully
HKCR\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => key not found.
HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => value removed successfully
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => key not found.
HKU\S-1-5-21-278302097-4242692893-2613242415-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0123B506-0AD9-43AA-B0CF-916C122AD4C5} => value removed successfully
HKCR\CLSID\{0123B506-0AD9-43AA-B0CF-916C122AD4C5} => key not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\caaphishtoolbar@ca.com => value removed successfully
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hpdpkkpdlooddakbebmkeeegehfjdnih" => key removed successfully

=========== EmptyTemp: ==========

BITS transfer queue => 1973136 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 43447022 B
Java, Flash, Steam htmlcache => 1217 B
Windows/system/drivers => 24202244 B
Edge => 183696850 B
Chrome => 444333630 B
Firefox => 367246820 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 821928 B
NetworkService => 112324 B
amyatigger => 61232469 B

RecycleBin => 35978080 B
EmptyTemp: => 1.1 GB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 23:32:29 ====


Report •

#22
October 8, 2016 at 20:43:28
Thanks AmyAnson, I now will have to take a break, will get back ASAP later today.

I'm here.
http://www.timeanddate.com/worldclo...


Report •

#23
October 9, 2016 at 01:33:49
✔ Best Answer
Extract from the fixlog.
"EmptyTemp: => 1.1 GB temporary data Removed"
Too big, even if you are a gamer.
Here are temp file settings for a normal user, adjust to suit your requirements.
All browsers, limit the cache to 50mb ( that's MB, not GB )
IE & Edge share the same setting.
Control Panel > Internet Options > General > Browsing history > Settings. Refer SS below.
http://fs5.directupload.net/images/...
Example for Firefox.
https://www.sitepoint.com/3-tweaks-...
Chrome is not so straight forward.
How to set Google Chrome cache to 50mb max temporary files.
With comps, there is always more than one way to do things, try this way.
Right click on the Google Chrome shortcut > Properties.
Copy & Paste this below after .exe" as per SS ( Screenshot )
NOTE: There is a space after .exe"
http://i.imgur.com/vgkU3X1.gif
--disk-cache-size=50000"
Click > Apply & then OK.

/////////////////////////////////////////////////////

Extract from the FRST log.
"Platform: Windows 10 Home Version 1607 (X64) Language: English (United States)"

Make sure ALL your Regional and Language Options settings are Ok. They will be something similar to this, the main point being, you should have at least 3 places to make sure you have your country displayed.

Windows 10: Change or Add Another Language or Region.
http://www.tech-recipes.com/rx/5633...
http://i.imgur.com/gkPnT4j.gif
http://i.imgur.com/8J4WO6U.gif
http://i.imgur.com/gtwlzJo.gif
http://i.imgur.com/vSWwH00.gif

/////////////////////////////////////////////////////

Here is how a USER got the problems, no AV would have prevented USER error. Go to any Malware forum & no matter what AV they have installed, they got infected.

As you can see from your logs, you had a lot of stuff installed, that you do not know, how it got installed.
A lot of programs, now give you the choice to install toolbars & other during the install. Either uncheck these items during install, or use Custom install. No more click, click during an install, you have to read after each click.

Or, Use Unchecky to help prevent these third party installs. Nothing is perfect, the badies are always ahead of the goodies, so be vigilant.
http://www.softpedia.com/get/System...
http://www.freewarefiles.com/Unchec...
http://unchecky.com/
A reliable application that aims to protect your computer against third-party components often offered during software installations.

I use Softpedia & FreewareFiles.com, they make you aware what Ad-supported programs the author of the program has included.
http://win.softpedia.com/index.free...
http://www.freewarefiles.com/new_fi...
Sample/Example pages.
http://www.softpedia.com/get/Multim...
http://fs5.directupload.net/images/...
Users are advised to pay attention while installing this ad-supported application:
· Offers to download or install software or components (Facemoods toolbar) that the program does not require to fully function
· Offers to change the homepage for web browsers installed in the system.
SS of above.
http://fs5.directupload.net/images/...

You may be better off purchasing Malwarebytes. You will then have Malwarebytes realtime protection & Unchecky to help prevent the problems you have been having. Malwarebytes runs perfectly with your existing AV.
http://fs5.directupload.net/images/...


Report •

#24
October 9, 2016 at 07:22:52
Thanks Johnw,
I did everything Derek had initially instructed and then you had told me to do. The only thing I didn't do was download Softpedia or FreewareFiles. I have Unchecky and Malwarebytes free version and may decide to do the upgrade. I'll see how the free version works for a while. Thank you so much for all your help with this. I haven't tried my other browsers yet but my Chrome is working so much better. You're awesome!

Report •

#25
October 9, 2016 at 09:19:21
Good to hear your progress - keep an eye out for John in case he hasn't quite finished the cleanup.

Always pop back and let us know the outcome - thanks


Report •

#26
October 9, 2016 at 15:32:19
"The only thing I didn't do was download Softpedia or FreewareFiles"
You only use either of those sites for doing downloads of new programs that you want to try.

"Chrome is working so much better"

Enjoy, we are finished.


Report •

Ask Question