Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for SparPilot

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 32,141 posts
Content is republished with permission from Malwarebytes.

What is SparPilot?

The Malwarebytes research team has determined that SparPilot is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by SparPilot?

You may see this browser extension:

warning1.png

How did SparPilot get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove SparPilot?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to:
    Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • If an update is available, it will be implemented before the rest of the scanning procedure.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of SparPilot?
  • No, Malwarebytes' Anti-Malware removes SparPilot completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the SparPilot hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


Technical details for experts

Possible signs in FRST logs:

 FF user.js: detected! => C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\user.js [2016-10-25]
 FF Extension: Sparpilot - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\[email protected] [2016-10-25]
 FF Extension: QuickTime Shield - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\{e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi [2016-10-25] [not signed]
 C:\Windows\unins000.exe
 C:\Windows\unins000.dat
 C:\Users\{username}\AppData\Local\SparPilot
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Users\{username}\AppData\Local\SparPilot
       Adds the file bootstrapped.txt"="6/15/2016 9:49 PM, 175 bytes, A
       Adds the file extensions_json.txt"="6/15/2016 9:49 PM, 4805 bytes, A
       Adds the file FFInstaller_autocheck.exe"="6/23/2016 3:37 PM, 429568 bytes, A
       Adds the file prefs_base.txt"="6/15/2016 9:49 PM, 596 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extension-data\[email protected]
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions
       Adds the file {e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi"="10/25/2016 12:49 PM, 45849 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]om
       Adds the file bootstrap.js"="4/15/2016 2:06 PM, 593 bytes, A
       Adds the file install.rdf"="6/8/2016 6:42 PM, 4705 bytes, A
       Adds the file package.json"="6/8/2016 6:42 PM, 4516 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data
       Adds the file config.json"="4/15/2016 2:06 PM, 57 bytes, A
       Adds the file icon128.png"="4/15/2016 2:06 PM, 9460 bytes, A
       Adds the file icon48.png"="4/15/2016 2:06 PM, 2345 bytes, A
       Adds the file icon64.png"="4/15/2016 2:06 PM, 3409 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld
       Adds the file domains.json"="4/15/2016 2:06 PM, 1079909 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images
       Adds the file bar-bg.png"="4/15/2016 2:06 PM, 732 bytes, A
       Adds the file bar-logo.png"="4/15/2016 2:06 PM, 3546 bytes, A
       Adds the file bar-logo-small.png"="4/15/2016 2:06 PM, 4874 bytes, A
       Adds the file bg-fade-line.png"="4/15/2016 2:06 PM, 150 bytes, A
       Adds the file diagonal-line.png"="4/15/2016 2:06 PM, 491 bytes, A
       Adds the file list-item-bg.png"="4/15/2016 2:06 PM, 8341 bytes, A
       Adds the file list-item-bg-act.png"="4/15/2016 2:06 PM, 11498 bytes, A
       Adds the file list-item-details-bg.png"="4/15/2016 2:06 PM, 2662 bytes, A
       Adds the file list-item-details-bg-act.png"="4/15/2016 2:06 PM, 1661 bytes, A
       Adds the file nav-extraitem-bg-act.png"="4/15/2016 2:06 PM, 3015 bytes, A
       Adds the file nav-item-bg.png"="4/15/2016 2:06 PM, 630 bytes, A
       Adds the file nav-item-bg-act.png"="4/15/2016 2:06 PM, 576 bytes, A
       Adds the file sprite.png"="4/15/2016 2:06 PM, 8422 bytes, A
       Adds the file stars-empty.png"="4/15/2016 2:06 PM, 439 bytes, A
       Adds the file stars-empty-big.png"="4/15/2016 2:06 PM, 890 bytes, A
       Adds the file stars-full.png"="4/15/2016 2:06 PM, 739 bytes, A
       Adds the file stars-full-big.png"="4/15/2016 2:06 PM, 863 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib
       Adds the file jquery.hoverIntent.min.js"="4/15/2016 2:06 PM, 1489 bytes, A
       Adds the file jquery.js"="4/15/2016 2:06 PM, 96381 bytes, A
       Adds the file jquery.ui.min.js"="4/15/2016 2:06 PM, 61655 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod
       Adds the file custom.js"="4/15/2016 2:06 PM, 6437 bytes, A
       Adds the file toolbar.css"="4/15/2016 2:06 PM, 44567 bytes, A
       Adds the file toolbar.js"="4/15/2016 2:06 PM, 6792 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib
       Adds the file config.js"="6/8/2016 6:42 PM, 3257 bytes, A
       Adds the file controller.js"="4/15/2016 2:06 PM, 1719 bytes, A
       Adds the file main.js"="4/15/2016 2:06 PM, 496 bytes, A
       Adds the file preisheld.js"="4/15/2016 2:06 PM, 36382 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service
       Adds the file promotion-dynamic.js"="4/15/2016 2:06 PM, 546 bytes, A
       Adds the file promotion-static.js"="4/15/2016 2:06 PM, 1076 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF
       Adds the file manifest.mf"="6/9/2016 7:35 AM, 7377 bytes, A
       Adds the file mozilla.rsa"="6/9/2016 7:35 AM, 4194 bytes, A
       Adds the file mozilla.sf"="6/9/2016 7:35 AM, 121 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async
       Adds the file package.json"="4/15/2016 2:06 PM, 1730 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\lib
       Adds the file async.js"="4/15/2016 2:06 PM, 34652 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge
       Adds the file index.js"="4/15/2016 2:06 PM, 1564 bytes, A
       Adds the file package.json"="4/15/2016 2:06 PM, 1574 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\test
       Adds the file deepest-merge.js"="4/15/2016 2:06 PM, 1125 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api
       Adds the file api.js"="4/15/2016 2:06 PM, 17055 bytes, A
       Adds the file package.json"="4/15/2016 2:06 PM, 320 bytes, A
       Adds the file sparpilot-api.js"="4/15/2016 2:06 PM, 153 bytes, A
       Adds the file task.js"="4/15/2016 2:06 PM, 3349 bytes, A
       Adds the file tasks.js"="4/15/2016 2:06 PM, 2087 bytes, A
       Adds the file utils.js"="4/15/2016 2:06 PM, 5951 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links
       Adds the file package.json"="4/15/2016 2:06 PM, 328 bytes, A
       Adds the file trusted-links.js"="4/15/2016 2:06 PM, 2701 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected]\simple-storage
    In the existing folder C:\Windows
       Adds the file unins000.dat"="10/25/2016 12:49 PM, 3726 bytes, A
       Adds the file unins000.exe"="10/25/2016 12:49 PM, 719521 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SparPilot]
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/25/2016
Scan Time: 5:48 PM
Logfile: mbamSparPilot.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.10.25.11
Rootkit Database: v2016.09.26.02
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 326254
Time Elapsed: 8 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 19
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected], Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\test, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected], Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected]\simple-storage, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], 

Files: 60
PUP.Optional.SparPilot, C:\Users\{username}\Desktop\sparpilot_david_27.exe, Quarantined, [9fd05e3fc7d372c4826375a7ea1bdc24], 
PUP.Optional.QuicktimeShield, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\{e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi, Quarantined, [93dc623b7f1b39fd4e9bb16b4fb6e21e], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\bootstrap.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\install.rdf, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\config.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\icon128.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\icon48.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\icon64.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\domains.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bar-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bar-logo-small.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bar-logo.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bg-fade-line.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\diagonal-line.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-details-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-details-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\nav-extraitem-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\nav-item-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\nav-item-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\sprite.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-empty-big.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-empty.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-full-big.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-full.png, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib\jquery.hoverIntent.min.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib\jquery.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib\jquery.ui.min.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod\custom.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod\toolbar.css, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod\toolbar.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\config.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\controller.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\main.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\preisheld.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service\promotion-dynamic.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service\promotion-static.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF\manifest.mf, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF\mozilla.rsa, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF\mozilla.sf, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\lib\async.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\index.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\test\deepest-merge.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\api.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\sparpilot-api.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\task.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\tasks.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\utils.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\sparpi[email protected]\node_modules\trusted-links\trusted-links.js, Quarantined, [185744597723e353e7ff42da52b3eb15], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\bootstrapped.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\extensions_json.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\FFInstaller_autocheck.exe, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\prefs_base.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], 
PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected]\simple-storage\store.json, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.