Removal instructions for searchassist.net

Content is republished with permission from Malwarebytes.

What is searchassist.net?

The Malwarebytes research team has determined that searchassist.net is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by searchassist.net?

You may see this entry in your list of installed software:

and these warnings during install:

these browser add-ons:

these Scheduled Tasks:

and you will see this new startpage in your affected browser(s):

and this new default search provider:

How did searchassist.net get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove searchassist.net?

Our program Malwarebytes can detect and remove this potentially unwanted program.

Please download Malwarebytes to your desktop.
Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
Then click Finish.
Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
Restart your computer when prompted to do so.

Is there anything else I need to do to get rid of searchassist.net?

No, Malwarebytes removes searchassist.net completely.
This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.

How would the full version of Malwarebytes help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes would have protected you against the searchassist.net hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

and we block traffic to their domain:

Technical details for experts

Possible signs in FRST logs:

 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp
 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp
 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp
 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchassist.net/?p=h&m=1185&c=d&s=sp
 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp
 SearchScopes: HKLM -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = hxxp://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp
 SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.searchassist.net/search?q={searchTerms}&p=sm=1185&c=d&s=sp
 SearchScopes: HKLM -> {BA1BE292-1D15-488B-934D-008742212380} URL = hxxp://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp
 SearchScopes: HKCU -> DefaultScope {BA1BE292-1D15-488B-934D-008742212380} URL = hxxp://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp
 SearchScopes: HKCU -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.searchassist.net/search?q={searchTerms}&p=sm=1185&c=d&s=sp
 SearchScopes: HKCU -> {BA1BE292-1D15-488B-934D-008742212380} URL = hxxp://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp
 BHO: SearchAssist -> {8DDAC7C3-2592-4D84-A7A7-AA7865E53875} -> C:\Program Files\SearchAssist\ie\adxloader64.dll [2013-08-06] ()
 BHO-x32: SearchAssist -> {8DDAC7C3-2592-4D84-A7A7-AA7865E53875} -> C:\Program Files\SearchAssist\ie\adxloader.dll [2013-08-06] ()
 FF NewTab: hxxp://www.SearchAssist.net/?p=t&m=1185&c=d&s=sp
 FF DefaultSearchEngine: Search  
 FF DefaultSearchUrl: hxxp://www.SearchAssist.net/search?p=s&q={searchTerms}&m=1185&c=d&s=sp
 FF SearchEngineOrder.1: Search  
 FF SelectedSearchEngine: Search  
 FF Homepage: hxxp://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp
 FF Keyword.URL: hxxp://www.searchassist.net/search?p=s&q=
 FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\searchplugins\searchassist.xml [2014-02-21]
 CHR DefaultSearchURL: Default -> hxxp://www.searchassist.net/?q={searchTerms}
 CHR DefaultSearchKeyword: Default -> SearchAssist
 CHR Extension: (SearchAssist) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo [2017-03-03]
 CHR HKLM-x32\...\Chrome\Extension: [jlndcojbknbodbijmihgihhgmlkplnbo] - C:\Program Files\SearchAssist\chrome\searchassist.crx [2017-03-03]
 C:\Windows\System32\Tasks\SAUpdate
 C:\Windows\System32\Tasks\SACheck
 C:\Program Files\SearchAssist

SearchAssist (HKLM\...\SearchAssist_is1) (Version: 0.9.8.0 - SecureDownload Ltd)
Task: {09F229CB-039B-4B7B-966C-CEC1BA62FDB5} - System32\Tasks\SACheck => C:\Program Files\SearchAssist\sa.exe [2014-10-26] ()
Task: {D03432BC-9DFA-4893-9BEF-6B368D8AAAE4} - System32\Tasks\SAUpdate => C:\Program Files\SearchAssist\sa.exe [2014-10-26] ()

Significant alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files\SearchAssist
       Adds the file sa.exe"="10/26/2014 1:47 AM, 330568 bytes, A
       Adds the file salib.dll"="10/26/2014 1:47 AM, 1724232 bytes, A
       Adds the file searchassist.xml"="2/21/2014 2:03 PM, 2103 bytes, A
       Adds the file sqlite3.dll"="2/4/2011 8:47 AM, 522752 bytes, A
       Adds the file unins000.dat"="3/3/2017 11:54 AM, 21459 bytes, A
       Adds the file unins000.exe"="3/3/2017 11:54 AM, 1194697 bytes, A
    Adds the folder C:\Program Files\SearchAssist\chrome
       Adds the file searchassist.crx"="9/16/2014 5:31 PM, 113980 bytes, A
    Adds the folder C:\Program Files\SearchAssist\ie
       Adds the file AddinExpress.IE.dll"="10/18/2014 6:14 PM, 1661216 bytes, A
       Adds the file adxloader.dll"="8/6/2013 3:17 PM, 528384 bytes, A
       Adds the file adxloader.dll.manifest"="10/18/2014 7:08 PM, 290 bytes, A
       Adds the file adxloader.exe"="3/3/2017 11:55 AM, 63776 bytes, A
       Adds the file adxloader64.dll"="8/6/2013 3:18 PM, 741888 bytes, A
       Adds the file adxloader64.exe"="3/3/2017 11:55 AM, 63776 bytes, A
       Adds the file adxregext.exe"="8/7/2013 5:19 PM, 63776 bytes, A
       Adds the file adxregistrator.exe"="8/7/2013 5:19 PM, 149792 bytes, A
       Adds the file Interop.MSHTML.dll"="1/24/2014 6:28 PM, 8286208 bytes, A
       Adds the file Interop.SHDocVw.dll"="1/24/2014 6:27 PM, 126976 bytes, A
       Adds the file Microsoft.mshtml.dll"="10/10/2006 3:07 PM, 8007680 bytes, A
       Adds the file SearchAssist.dll"="10/26/2014 1:47 AM, 22344 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\searchplugins
       Adds the file searchassist.xml"="2/21/2014 2:03 PM, 2103 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file SACheck"="3/3/2017 11:54 AM, 3216 bytes, A
       Adds the file SAUpdate"="3/3/2017 11:54 AM, 3988 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\InprocServer32]
       "(Default)"="REG_SZ", "mscoree.dll"
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
       "ThreadingModel"="REG_SZ", "Both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\InprocServer32\1.0.0.0]
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\ProgId]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\InprocServer32]
       "(Default)"="REG_SZ", "mscoree.dll"
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
       "ThreadingModel"="REG_SZ", "Both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\InprocServer32\1.0.0.0]
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\ProgId]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}]
       "(Default)"="REG_SZ", "SearchAssist"
       "ObjectType"="REG_SZ", "{A3A5C6A6-288F-4eee-8634-2BA9D5A28002}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\SearchAssist\ie\adxloader64.dll"
       "Assembly"="REG_SZ", "SearchAssist, PublicKeyToken=830E09EDFB362FDC"
       "Class"="REG_SZ", "SearchAssist.IEModule"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
       "ThreadingModel"="REG_SZ", "Both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\ProgId]
       "(Default)"="REG_SZ", "SearchAssist.IEModule"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchAssist.IEModule]
       "(Default)"="REG_SZ", "SearchAssist.IEModule"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchAssist.IEModule\CLSID]
       "(Default)"="REG_SZ", "{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchAssist.IEModule+IECustomCommands]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchAssist.IEModule+IECustomCommands\CLSID]
       "(Default)"="REG_SZ", "{63C05539-3781-350C-8623-BD86CBF3CCF3}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchAssist.IEModule+IECustomContextMenuCommands]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchAssist.IEModule+IECustomContextMenuCommands\CLSID]
       "(Default)"="REG_SZ", "{284624FC-0E93-36EF-AADE-D53036DAD722}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\InprocServer32]
       "(Default)"="REG_SZ", "mscoree.dll"
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
       "ThreadingModel"="REG_SZ", "Both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\InprocServer32\1.0.0.0]
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{284624FC-0E93-36EF-AADE-D53036DAD722}\ProgId]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomContextMenuCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\InprocServer32]
       "(Default)"="REG_SZ", "mscoree.dll"
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
       "ThreadingModel"="REG_SZ", "Both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\InprocServer32\1.0.0.0]
       "Assembly"="REG_SZ", "SearchAssist, Version=1.0.0.0, Culture=neutral, PublicKeyToken=830e09edfb362fdc"
       "Class"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{63C05539-3781-350C-8623-BD86CBF3CCF3}\ProgId]
       "(Default)"="REG_SZ", "SearchAssist.IEModule+IECustomCommands"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}]
       "(Default)"="REG_SZ", "SearchAssist"
       "ObjectType"="REG_SZ", "{A3A5C6A6-288F-4eee-8634-2BA9D5A28002}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\SearchAssist\ie\adxloader.dll"
       "Assembly"="REG_SZ", "SearchAssist, PublicKeyToken=830E09EDFB362FDC"
       "Class"="REG_SZ", "SearchAssist.IEModule"
       "CodeBase"="REG_SZ", "file:///C:/Program Files/SearchAssist/ie/SearchAssist.DLL"
       "RuntimeVersion"="REG_SZ", "v2.0.50727"
       "ThreadingModel"="REG_SZ", "Both"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\ProgId]
       "(Default)"="REG_SZ", "SearchAssist.IEModule"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
       "Tabs"="REG_SZ", "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp&cn=1&t=43b0136f-d2d9-4d62-8b0e-8da038c2133f"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}]
       "AppName"="REG_SZ", "adxloader64.exe"
       "AppPath"="REG_SZ", "C:\Program Files\SearchAssist\ie"
       "Policy"="REG_DWORD", 3
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN]
       "Default_Page_URL" = REG_SZ, "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp"
       "Start Page" = REG_SZ, "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
       "DefaultScope" = REG_SZ, "{BA1BE292-1D15-488B-934D-008742212380}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
       "DisplayName" = REG_SZ, "Search"
       "FaviconPath"="REG_SZ", "http://www.searchassist.net/favicon.ico"
       "FaviconURLFallback"="REG_SZ", "http://www.searchassist.net/favicon.ico"
       "TopResultURLFallback"="REG_SZ", "http://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp"
       "URL" = REG_SZ, "http://www.searchassist.net/search?q={searchTerms}&p=sm=1185&c=d&s=sp"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BA1BE292-1D15-488B-934D-008742212380}]
       "DisplayName"="REG_SZ", "Search"
       "FaviconUrl"="REG_SZ", "http://www.SearchAssist.net/favicon.ico"
       "URL"="REG_SZ", "http://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}]
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\NoExplorer]
       "(Default)"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchAssist_is1]
       "DisplayName"="REG_SZ", "SearchAssist"
       "DisplayVersion"="REG_SZ", "0.9.8.0"
       "EstimatedSize"="REG_DWORD", 23145
       "Inno Setup: App Path"="REG_SZ", "C:\Program Files\SearchAssist"
       "Inno Setup: Icon Group"="REG_SZ", "(Default)"
       "Inno Setup: Language"="REG_SZ", "default"
       "Inno Setup: Setup Version"="REG_SZ", "5.5.4 (u)"
       "Inno Setup: User"="REG_SZ", "{username}"
       "InstallDate"="REG_SZ", "20170303"
       "InstallLocation"="REG_SZ", "C:\Program Files\SearchAssist\"
       "MajorVersion"="REG_DWORD", 0
       "MinorVersion"="REG_DWORD", 9
       "NoModify"="REG_DWORD", 1
       "NoRepair"="REG_DWORD", 1
       "Publisher"="REG_SZ", "SecureDownload Ltd"
       "QuietUninstallString"="REG_SZ", ""C:\Program Files\SearchAssist\unins000.exe" /SILENT"
       "UninstallString"="REG_SZ", ""C:\Program Files\SearchAssist\unins000.exe""
       "URLInfoAbout"="REG_SZ", "http://www.SearchAssist.net/"
    [HKEY_LOCAL_MACHINE\SOFTWARE\SecureDownload\SearchAssist]
       "cmp"="REG_SZ", "d"
       "engine"="REG_SZ", "true"
       "home"="REG_SZ", "true"
       "id"="REG_SZ", "43b0136f-d2d9-4d62-8b0e-8da038c2133f"
       "installed"="REG_SZ", "true"
       "med"="REG_SZ", "1185"
       "owner"="REG_SZ", "sp"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo]
       "path"="REG_SZ", "C:\Program Files\SearchAssist\chrome\searchassist.crx"
       "version"="REG_SZ", "2.5"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
       "Tabs"="REG_SZ", "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp&cn=1&t=43b0136f-d2d9-4d62-8b0e-8da038c2133f"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}]
       "AppName"="REG_SZ", "adxloader.exe"
       "AppPath"="REG_SZ", "C:\Program Files\SearchAssist\ie"
       "Policy"="REG_DWORD", 3
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN]
       "Start Page" = REG_SZ, "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}]
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\NoExplorer]
       "(Default)"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SecureDownload\SearchAssist]
       "cmp"="REG_SZ", "d"
       "engine"="REG_SZ", "true"
       "home"="REG_SZ", "true"
       "id"="REG_SZ", "43b0136f-d2d9-4d62-8b0e-8da038c2133f"
       "installed"="REG_SZ", "true"
       "med"="REG_SZ", "1185"
       "owner"="REG_SZ", "sp"
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
       "Default_Page_URL"="REG_SZ", "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp"
       "Start Page" = REG_SZ, "http://www.SearchAssist.net/?p=h&m=1185&c=d&s=sp"
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
       "DefaultScope" = REG_SZ, "{BA1BE292-1D15-488B-934D-008742212380}"
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]
       "DisplayName" = REG_SZ, "Search"
       "FaviconPath" = REG_SZ, "http://www.searchassist.net/favicon.ico"
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BA1BE292-1D15-488B-934D-008742212380}]
       "DisplayName"="REG_SZ", "Search"
       "FaviconUrl"="REG_SZ", "http://www.SearchAssist.net/favicon.ico"
       "URL"="REG_SZ", "http://www.SearchAssist.net/search?q={searchTerms}&p=s&m=1185&c=d&s=sp"

Malwarebytes log:

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 3/3/17
Scan Time: 12:21 PM
Logfile: mbamSearchAssistNet.txt
Administrator: Yes

-Software Information-
Version: 3.0.5.1299
Components Version: 1.0.43
Update Package Version: 1.0.1416
License: Premium

-System Information-
OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {computername}\{username}

-Scan Summary-
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 362974
Time Elapsed: 1 min, 29 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 20
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\InprocServer32, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\SearchAssist.IEModule, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\InprocServer32, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}\InprocServer32, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{8DDAC7C3-2592-4D84-A7A7-AA7865E53875}, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\jlndcojbknbodbijmihgihhgmlkplnbo, Delete-on-Reboot, [2929], [242674],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}, Delete-on-Reboot, [2929], [242675],1.0.1416

Registry Value: 19
PUP.Optional.SearchAssist, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [2929], [293148],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Replace-on-Reboot, [2929], [293148],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [2929], [293148],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|TABS, Replace-on-Reboot, [2929], [293147],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|START PAGE, Replace-on-Reboot, [2929], [293145],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Replace-on-Reboot, [2929], [293145],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FAVICONPATH, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FAVICONURLFALLBACK, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TOPRESULTURLFALLBACK, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FAVICONURL, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, Delete-on-Reboot, [2929], [242675],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FAVICONURLFALLBACK, Delete-on-Reboot, [2929], [242673],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|FAVICONPATH, Delete-on-Reboot, [2929], [242673],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|TOPRESULTURLFALLBACK, Delete-on-Reboot, [2929], [242673],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, Delete-on-Reboot, [2929], [242673],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|FAVICONURL, Delete-on-Reboot, [2929], [242673],1.0.1416
PUP.Optional.SearchAssist, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{BA1BE292-1D15-488B-934D-008742212380}|URL, Delete-on-Reboot, [2929], [242673],1.0.1416
PUP.Optional.SearchAssist, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|TABS, Replace-on-Reboot, [2929], [293147],1.0.1416

Data Stream: 0
(No malicious items detected)

Folder: 9
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\_metadata, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\html, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\JLNDCOJBKNBODBIJMIHGIHHGMLKPLNBO, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\PROGRAM FILES\SEARCHASSIST\IE, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\PROGRAM FILES\SEARCHASSIST\CHROME, Delete-on-Reboot, [2929], [242672],1.0.1416

File: 46
PUP.Optional.OpenCandy, C:\USERS\{username}1\APPDATA\LOCAL\TEMP\NSL97B.TMP\OCSETUPHLP.DLL, Delete-on-Reboot, [646], [297667],1.0.1416
PUP.Optional.MindSpark, C:\PROGRAM FILES\SEARCHASSIST\IE\ADXLOADER64.DLL, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.MindSpark, C:\PROGRAM FILES\SEARCHASSIST\IE\ADXLOADER.DLL, Delete-on-Reboot, [341], [168379],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css\bing.css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css\common.css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css\google.css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css\search.css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css\yahoo.css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\css\yahooh.css, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\html\background.html, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\html\options.html, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\html\popup.html, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons\icon128.png, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons\icon16.png, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons\icon19.png, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons\icon200.png, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons\icon32.png, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\icons\Thumbs.db, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\background.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\bing.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\common.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\google.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\jquery.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\options.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\popup.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\uninstall.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\yahoo.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\js\yahooh.js, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\_metadata\computed_hashes.json, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\_metadata\verified_contents.json, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\manifest.json, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlndcojbknbodbijmihgihhgmlkplnbo\2.5_0\newtab.html, Delete-on-Reboot, [2929], [179419],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\AddinExpress.IE.dll, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\adxloader.dll.manifest, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\adxloader.exe, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\adxloader64.exe, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\adxregext.exe, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\adxregistrator.exe, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\Interop.MSHTML.dll, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\Interop.SHDocVw.dll, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\Microsoft.mshtml.dll, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\Program Files\SearchAssist\ie\SearchAssist.dll, Delete-on-Reboot, [2929], [179420],1.0.1416
PUP.Optional.SearchAssist, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\NCH5MQSA.DEFAULT\PREFS.JS, Replaced, [2929], [301620],1.0.1416
PUP.Optional.OpenCandy, C:\USERS\{username}\APPDATA\LOCAL\TEMP\NSL97B.TMP\OCSETUPHLP.DLL, Delete-on-Reboot, [646], [297667],1.0.1416
PUP.Optional.OpenCandy, C:\USERS\{username}\APPDATA\LOCAL\TEMP\POWERISO62.EXE, Delete-on-Reboot, [646], [297667],1.0.1416
PUP.Optional.SearchAssist, C:\PROGRAM FILES\SEARCHASSIST\CHROME\SEARCHASSIST.CRX, Delete-on-Reboot, [2929], [242672],1.0.1416

Physical Sector: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 03 March 2017 - 06:14 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us