What is Youtube AdBlock?
The Malwarebytes research team has determined that Youtube AdBlock is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice.
This one belongs to the Neobar family.
How do I know if my computer is affected by Youtube AdBlock?
You may see this entry in your list of installed software:
these warnings during install:
these browser add-ons:
and these Scheduled Tasks:
How did Youtube AdBlock get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove Youtube AdBlock?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to:
Launch Malwarebytes Anti-Malware - Then click Finish.
- Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
- If an update is available, it will be implemented before the rest of the scanning procedure.
- When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
- Restart your computer when prompted to do so.
- No, Malwarebytes' Anti-Malware removes Youtube AdBlock completely.
- If you are using Chrome, you may have to remove the Extension manually under Tools > Settings > Extensions. Remove the checkmark and click on the bin behind the Youtube AdBlock entry.
- This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Youtube AdBlock hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.
Technical details for experts
Possible signs in FRST logs:
GroupPolicy: Restriction - Chrome <======= ATTENTION BHO: Youtube AdBlock -> {95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B} -> C:\Program Files (x86)\Youtube AdBlock\IEEF\pABRh8J7VV.dll [2016-10-06] () BHO-x32: Youtube AdBlock -> {95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B} -> C:\Program Files (x86)\Youtube AdBlock\IEEF\1Gf32TyhLI.dll [2016-10-06] () CHR Extension: (Adblocker for Youtube) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk [2016-10-06] OPR Extension: (Adblocker for Youtube) - C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\dpiglkccaeohciincfjglehlcjlpfmjd [2016-10-06] C:\Users\{username}\AppData\LocalLow\Youtube AdBlock C:\Windows\System32\Tasks\Update Service for Youtube AdBlock2 C:\Windows\System32\Tasks\Update Service for Youtube AdBlock C:\Windows\Tasks\Update Service for Youtube AdBlock2.job C:\Windows\Tasks\Update Service for Youtube AdBlock.job C:\Program Files (x86)\Youtube AdBlock Youtube AdBlock (HKLM-x32\...\Youtube AdBlock) (Version: 2.0.0.51 - Company Inc.) Task: {E43A50EB-0BF1-4551-A7FD-AA797D04B73A} - System32\Tasks\Update Service for Youtube AdBlock2 => C:\Program Files (x86)\Youtube AdBlock\SB7FHny.exe [2016-10-06] () Task: {FA94BFFD-C287-4CEB-A7E7-93259ED8B4A1} - System32\Tasks\Update Service for Youtube AdBlock => C:\Program Files (x86)\Youtube AdBlock\SB7FHny.exe [2016-10-06] () Task: C:\Windows\Tasks\Update Service for Youtube AdBlock.job => C:\Program Files (x86)\Youtube AdBlock\SB7FHny.exe Task: C:\Windows\Tasks\Update Service for Youtube AdBlock2.job => C:\Program Files (x86)\Youtube AdBlock\SB7FHny.exeAlterations made by the installer:
File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Program Files (x86)\Mozilla Firefox\browser\features\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B} Adds the file bootstrap.js"="10/6/2016 9:26 AM, 14901 bytes, A Adds the file chrome.manifest"="10/6/2016 9:26 AM, 78 bytes, A Adds the file install.rdf"="10/6/2016 9:26 AM, 16658 bytes, A Adds the folder C:\Program Files (x86)\Mozilla Firefox\browser\features\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\chrome Adds the file background.html"="10/6/2016 9:26 AM, 69 bytes, A Adds the file background.xul"="10/6/2016 9:26 AM, 452 bytes, A Adds the file Kernel.js"="10/6/2016 9:26 AM, 19212 bytes, A Adds the folder C:\Program Files (x86)\Mozilla Firefox\browser\features\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\chrome\_locales Adds the folder C:\Program Files (x86)\Mozilla Firefox\browser\features\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\chrome\files Adds the file background.js"="10/6/2016 9:26 AM, 12813 bytes, A Adds the file foreground.js"="10/6/2016 9:26 AM, 3460 bytes, A Adds the file main.css"="10/6/2016 9:26 AM, 672 bytes, A Adds the folder C:\Program Files (x86)\Mozilla Firefox\browser\features\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\chrome\icons Adds the file icon19.png"="10/6/2016 9:26 AM, 815 bytes, A Adds the file icon48.png"="10/6/2016 9:26 AM, 2570 bytes, A Adds the file icon64.png"="10/6/2016 9:26 AM, 3158 bytes, A Adds the folder C:\Program Files (x86)\Mozilla Firefox\browser\features\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\chrome\skin Adds the file arrow.png"="10/6/2016 9:26 AM, 332 bytes, A Adds the file background.png"="10/6/2016 9:26 AM, 109 bytes, A Adds the file bindings.css"="10/6/2016 9:26 AM, 1648 bytes, A Adds the file bindings.xml"="10/6/2016 9:26 AM, 1336 bytes, A Adds the file styles.css"="10/6/2016 9:26 AM, 257 bytes, A Adds the folder C:\Program Files (x86)\Youtube AdBlock Adds the file SB7FHny.exe"="10/6/2016 9:26 AM, 144848 bytes, A Adds the file uninstall.exe"="9/29/2016 11:02 PM, 1374641 bytes, A Adds the folder C:\Program Files (x86)\Youtube AdBlock\IEEF Adds the file 1Gf32TyhLI.dll"="10/6/2016 9:26 AM, 291792 bytes, A Adds the file 1Gf32TyhLI.exe"="10/6/2016 9:26 AM, 344016 bytes, A Adds the file icon16.ico"="10/6/2016 9:26 AM, 1150 bytes, A Adds the file pABRh8J7VV.dll"="10/6/2016 9:26 AM, 395216 bytes, A Adds the file YunYj.dll"="9/29/2016 11:02 PM, 548864 bytes, A Adds the folder C:\Program Files (x86)\Youtube AdBlock\IEEF\files Adds the file background.html"="10/6/2016 9:26 AM, 129 bytes, A Adds the file Kernel.js"="10/6/2016 9:26 AM, 21130 bytes, A Adds the folder C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales Adds the folder C:\Program Files (x86)\Youtube AdBlock\IEEF\files\files Adds the file background.js"="10/6/2016 9:26 AM, 13482 bytes, A Adds the file foreground.js"="10/6/2016 9:26 AM, 4197 bytes, A Adds the file main.css"="10/6/2016 9:26 AM, 672 bytes, A Adds the file proxy.js"="10/6/2016 9:26 AM, 363 bytes, A In the existing folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default Alters the file Preferences 2/8/2016 1:47 PM, 7889 bytes, A ==> 10/6/2016 9:26 AM, 16196 bytes, A Alters the file Secure Preferences 2/8/2016 1:47 PM, 36872 bytes, A ==> 10/6/2016 9:26 AM, 65262 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk\362.0.0.51_0 Adds the file manifest.json"="10/6/2016 9:26 AM, 1371 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk\362.0.0.51_0\_locales Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk\362.0.0.51_0\_locales\en Adds the file background.js"="10/6/2016 9:26 AM, 21010 bytes, A Adds the file Content.js"="10/6/2016 9:26 AM, 2182 bytes, A Adds the file foreground.js"="10/6/2016 9:26 AM, 3463 bytes, A Adds the file Kernel.js"="10/6/2016 9:26 AM, 23237 bytes, A Adds the file main.css"="10/6/2016 9:26 AM, 673 bytes, A Adds the file messages.json"="10/6/2016 9:26 AM, 150 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default Adds the file extensions.sqlite"="10/6/2016 9:26 AM, 0 bytes, A Alters the file prefs.js 2/9/2016 9:58 AM, 7556 bytes, A ==> 10/6/2016 9:26 AM, 7891 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions In the existing folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable Alters the file Preferences 2/8/2016 1:40 PM, 20153 bytes, A ==> 10/6/2016 9:26 AM, 33124 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\dpiglkccaeohciincfjglehlcjlpfmjd\2.0.0.51_0 Adds the file manifest.json"="10/6/2016 9:26 AM, 1124 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\dpiglkccaeohciincfjglehlcjlpfmjd\2.0.0.51_0\_locales Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\dpiglkccaeohciincfjglehlcjlpfmjd\2.0.0.51_0\icons In the existing folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default Alters the file Preferences 10/6/2016 9:10 AM, 10329 bytes, A ==> 10/6/2016 9:26 AM, 21111 bytes, A Alters the file Secure Preferences 10/6/2016 9:10 AM, 42028 bytes, A ==> 10/6/2016 9:26 AM, 73706 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk\362.0.0.51_0 Adds the file manifest.json"="10/6/2016 9:26 AM, 1371 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk\362.0.0.51_0\_locales Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cebkcnlhbjapdpofhcokcdhfgpehhajk\362.0.0.51_0\icons In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default Adds the file extensions.sqlite"="10/6/2016 9:26 AM, 0 bytes, A Alters the file prefs.js 10/3/2016 8:41 AM, 10466 bytes, A ==> 10/6/2016 9:26 AM, 10801 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions (-)In the existing folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\saved-telemetry-pings (-)(FILE) 85b48563-041f-46e8-a9fd-f31a6bf08e3c"="9/14/2016 1:19 PM, 10510 bytes, A (-)(FILE) f9081ccb-9532-4cc3-b983-b6e7265cafc0"="10/3/2016 8:41 AM, 10164 bytes, A In the existing folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable Alters the file Preferences 10/6/2016 9:11 AM, 35937 bytes, A ==> 10/6/2016 9:26 AM, 60243 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file Update Service for Youtube AdBlock"="10/6/2016 9:26 AM, 2662 bytes, A Adds the file Update Service for Youtube AdBlock2"="10/6/2016 9:26 AM, 2964 bytes, A In the existing folder C:\Windows\Tasks Adds the file Update Service for Youtube AdBlock.job"="10/6/2016 9:26 AM, 342 bytes, A Adds the file Update Service for Youtube AdBlock2.job"="10/6/2016 9:26 AM, 342 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}] "(Default)"="REG_SZ", "Youtube AdBlock" "ProgID"="REG_SZ", "Toolbar.ExtensionHelperObject.1" "TypeLib"="REG_SZ", "{1D5A4199-956E-49BC-B89F-6A35C57C0D13}" "VersionIndependentProgID"="REG_SZ", "Toolbar.ExtensionHelperObject" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\Implemented Categories] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF\pABRh8J7VV.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\Programmable] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}] "(Default)"="REG_SZ", "{BF8946CD-EEBE-436B-8282-B19A021C9EFE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}\TypeLib] "(Default)"="REG_SZ", "{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}] "(Default)"="REG_SZ", "_I77CjOj56FmMXVzNrtRlEvents" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020420-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}\TypeLib] "(Default)"="REG_SZ", "{45965C76-4C88-4512-9358-368483E1C3B1}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}] "(Default)"="REG_SZ", "I77CjOj56FmMXVzNrtRl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}\TypeLib] "(Default)"="REG_SZ", "{45965C76-4C88-4512-9358-368483E1C3B1}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}\1.0] "(Default)"="REG_SZ", "{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF\pABRh8J7VV.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}\1.0] "(Default)"="REG_SZ", "ZBuadgWruI_3vMRTmHFmCE9LfD8lbn8eKmTB" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF\1Gf32TyhLI.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}] "(Default)"="REG_SZ", "Youtube AdBlock" "ProgID"="REG_SZ", "Toolbar.ExtensionHelperObject.1" "TypeLib"="REG_SZ", "{1D5A4199-956E-49BC-B89F-6A35C57C0D13}" "VersionIndependentProgID"="REG_SZ", "Toolbar.ExtensionHelperObject" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\Implemented Categories] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF\1Gf32TyhLI.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\Programmable] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}] "(Default)"="REG_SZ", "BackgroundScriptEngine Class" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}\LocalServer32] "(Default)"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF\1Gf32TyhLI.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}\Programmable] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}] "(Default)"="REG_SZ", "{BF8946CD-EEBE-436B-8282-B19A021C9EFE}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}\TypeLib] "(Default)"="REG_SZ", "{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}] "(Default)"="REG_SZ", "_I77CjOj56FmMXVzNrtRlEvents" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020420-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}\TypeLib] "(Default)"="REG_SZ", "{45965C76-4C88-4512-9358-368483E1C3B1}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}] "(Default)"="REG_SZ", "I77CjOj56FmMXVzNrtRl" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}\TypeLib] "(Default)"="REG_SZ", "{45965C76-4C88-4512-9358-368483E1C3B1}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}] "(Default)"="REG_SZ", "Youtube AdBlock" "NoExplorer"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures] "Update Service for Youtube AdBlock.job"="REG_BINARY, ................................ "Update Service for Youtube AdBlock.job.fp"="REG_DWORD", 985847024 "Update Service for Youtube AdBlock2.job"="REG_BINARY, ................................ "Update Service for Youtube AdBlock2.job.fp"="REG_DWORD", 1808237760 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node] "global UID"="REG_SZ", "XLNWRBC3ZGE2H70CE3QBLKORMIL3V34X" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}] "AppName"="REG_SZ", "1Gf32TyhLI.exe" "AppPath"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF" "Policy"="REG_DWORD", 3 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}] "(Default)"="REG_SZ", "Youtube AdBlock" "NoExplorer"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Youtube AdBlock] "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\uninstall.exe" "DisplayName"="REG_SZ", "Youtube AdBlock" "DisplayVersion"="REG_SZ", "2.0.0.51" "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "Company Inc." "UninstallString"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\uninstall.exe" "URLInfoAbout"="REG_SZ", "http://youtubeadblock.net/" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions] "{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}"="REG_BINARY, ............ [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D42C3A49-ABAF-464B-BBCE-991C3DD395E8}] "AppName"="REG_SZ", "1Gf32TyhLI.exe" "AppPath"="REG_SZ", "C:\Program Files (x86)\Youtube AdBlock\IEEF" "Policy"="REG_DWORD", 3 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION] "1Gf32TyhLI.exe"="REG_DWORD", 9999Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 10/6/2016 Scan Time: 9:47 AM Logfile: mbamYoutubeAdBlocker.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.10.06.03 Rootkit Database: v2016.09.26.02 License: Premium Malware Protection: Disabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username} Scan Type: Threat Scan Result: Completed Objects Scanned: 323344 Time Elapsed: 9 min, 56 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 26 PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\TYPELIB\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\INTERFACE\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, HKLM\SOFTWARE\CLASSES\CLSID\{95E84BD3-3604-4AAC-B2CA-D9AC3E55B64B}\INPROCSERVER32, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.NeoBar.Generic, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Youtube AdBlock, Quarantined, [23d833622c6e75c12a16b613d72d1fe1], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\CLASSES\TYPELIB\{45965C76-4C88-4512-9358-368483E1C3B1}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\CLASSES\INTERFACE\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\CLASSES\INTERFACE\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{45965C76-4C88-4512-9358-368483E1C3B1}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{45965C76-4C88-4512-9358-368483E1C3B1}, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.NeoBar, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Update Service for Youtube AdBlock, Delete-on-Reboot, [8378d4c1debcda5c3915bc057b896d93], PUP.Optional.NeoBar, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Update Service for Youtube AdBlock2, Delete-on-Reboot, [92690392d9c177bf52fcb60bc143db25], Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 64 PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\files, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\hi, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\am, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ar, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\be, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\bg, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\bn, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ca, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\cs, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\da, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\de, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\el, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\en, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\en_GB, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\en_US, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\es, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\es_419, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\et, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fa, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fi, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fil, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fr, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\gu, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\he, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\hr, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\hu, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\id, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\it, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ja, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\kn, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ko, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\lt, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\lv, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\mk, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ml, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\mr, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ms, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\nl, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\no, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pl, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pt, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pt_BR, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pt_PT, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ro, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ru, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sk, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sl, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sq, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sr, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sv, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sw, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ta, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\te, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\th, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\tr, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\uk, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\vi, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\zh_CN, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\zh_TW, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.NeoBar, C:\Users\{username}\AppData\LocalLow\Youtube AdBlock, Quarantined, [01fa257077231a1c88c318a90cf8758b], Files: 77 PUP.Optional.TorrentSearch, C:\Program Files (x86)\Youtube AdBlock\IEEF\pABRh8J7VV.dll, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.TorrentSearch, C:\Program Files (x86)\Youtube AdBlock\IEEF\1Gf32TyhLI.dll, Quarantined, [d8234f469802003671efc1fbb74a38c8], PUP.Optional.NeoBar.Generic, C:\Users\{username}\Desktop\OqHyzJlCKxNIHoKa.exe, Quarantined, [08f3692cefab3ff782bee3e6b05416ea], PUP.Optional.TorrentSearch, C:\Program Files (x86)\Youtube AdBlock\SB7FHny.exe, Quarantined, [bb40365f7822e353afb18636a16012ee], PUP.Optional.NeoBar.Generic, C:\Program Files (x86)\Youtube AdBlock\uninstall.exe, Quarantined, [23d833622c6e75c12a16b613d72d1fe1], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\YunYj.dll, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\1Gf32TyhLI.exe, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\icon16.ico, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\background.html, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\Kernel.js, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\files\background.js, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\files\foreground.js, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\files\main.css, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\files\proxy.js, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\hi\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\am\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ar\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\be\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\bg\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\bn\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ca\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\cs\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\da\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\de\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\el\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\en\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\en_GB\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\en_US\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\es\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\es_419\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\et\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fa\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fi\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fil\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\fr\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\gu\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\he\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\hr\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\hu\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\id\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\it\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ja\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\kn\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ko\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\lt\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\lv\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\mk\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ml\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\mr\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ms\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\nl\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\no\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pl\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pt\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pt_BR\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\pt_PT\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ro\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ru\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sk\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sl\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sq\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sr\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sv\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\sw\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\ta\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\te\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\th\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\tr\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\uk\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\vi\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\zh_CN\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.YouTubeAdBlock, C:\Program Files (x86)\Youtube AdBlock\IEEF\files\_locales\zh_TW\messages.json, Quarantined, [aa51583d77238da91e91d3edb74d946c], PUP.Optional.NeoBar, C:\Users\{username}\AppData\LocalLow\Youtube AdBlock\Storage.db, Quarantined, [01fa257077231a1c88c318a90cf8758b], PUP.Optional.NeoBar, C:\Windows\Tasks\Update Service for Youtube AdBlock.job, Quarantined, [708bbfd6c1d98fa71735645d22e254ac], PUP.Optional.NeoBar, C:\Windows\Tasks\Update Service for Youtube AdBlock2.job, Quarantined, [44b77c190991270f3b111ca51ce833cd], PUP.Optional.NeoBar, C:\Windows\System32\Tasks\Update Service for Youtube AdBlock, Quarantined, [df1cc1d444569d999db09c259a6acd33], PUP.Optional.NeoBar, C:\Windows\System32\Tasks\Update Service for Youtube AdBlock2, Quarantined, [7388375eaded96a027267849966ea15f], Physical Sectors: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention