What is EasyDirections?
The Malwarebytes research team has determined that EasyDirections is a potentially unwanted program (PUP )behaving like adware. These adware applications display advertisements not originating from the sites you are browsing.
How do I know if my computer is affected by EasyDirections?
You may see this extension in your list of Chrome extensions:
You may see these warnings during install:
How did EasyDirections get on my computer?
Adware applications use different methods for distributing themselves. This particular one was downloaded from the webstore:
after a redirect from their website:
How do I remove EasyDirections?
Our program Malwarebytes can detect and remove this potentially unwanted program.
- Please download Malwarebytes to your desktop.
- Double-click mb3-setup-consumer-{version}.exe and follow the prompts to install the program.
- Then click Finish.
- Once the program has fully updated, select Scan Now on the Dashboard. Or select the Threat Scan from the Scan menu.
- If another update of the definitions is available, it will be implemented before the rest of the scanning procedure.
- When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
- Restart your computer when prompted to do so.
- No, Malwarebytes removes EasyDirections completely.
We hope our application and this guide have helped you eradicate this adware.
The paid version of Malwarebytes would have protected you against the EasyDirections adware. It would have blocked their website.
Technical details for experts
Possible signs in FRST logs:
CHR Extension: (EasyDirections) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi [2018-11-16]The changes made by the installer:
File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0 Adds the file add_worker.js"="11/14/2018 8:45 AM, 7974 bytes, A Adds the file analyze_configs.js"="11/14/2018 8:45 AM, 1133 bytes, A Adds the file delete_parameters.js"="11/14/2018 8:45 AM, 1731 bytes, A Adds the file manifest.json"="11/16/2018 10:47 AM, 2734 bytes, A Adds the file minimal_account.js"="11/14/2018 8:45 AM, 3359 bytes, A Adds the file return_word.js"="11/14/2018 8:45 AM, 6810 bytes, A Adds the file verify_access.js"="11/14/2018 8:45 AM, 2620 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\_metadata Adds the file computed_hashes.json"="11/16/2018 10:47 AM, 22861 bytes, A Adds the file verified_contents.json"="11/14/2018 8:45 AM, 11625 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css Adds the file backcomp.css"="11/14/2018 8:45 AM, 1737 bytes, A Adds the file bb-ta-template.css"="11/14/2018 8:45 AM, 1257 bytes, A Adds the file lbx-template.css"="11/14/2018 8:45 AM, 1139 bytes, A Adds the file style.css"="11/14/2018 8:45 AM, 6099 bytes, A Adds the file tl-template.css"="11/14/2018 8:45 AM, 10277 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\html Adds the file background.html"="11/14/2018 8:45 AM, 313 bytes, A Adds the file bb-ta-template.html"="11/14/2018 8:45 AM, 873 bytes, A Adds the file lbx-template.html"="11/14/2018 8:45 AM, 490 bytes, A Adds the file tl-template.html"="11/14/2018 8:45 AM, 3819 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons Adds the file 128.png"="11/16/2018 10:47 AM, 3061 bytes, A Adds the file 16.png"="11/16/2018 10:47 AM, 422 bytes, A Adds the file 19.png"="11/16/2018 10:47 AM, 508 bytes, A Adds the file 32.png"="11/16/2018 10:47 AM, 762 bytes, A Adds the file 38.png"="11/16/2018 10:47 AM, 937 bytes, A Adds the file 48.png"="11/16/2018 10:47 AM, 1130 bytes, A Adds the file 64.png"="11/14/2018 8:45 AM, 2067 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images Adds the file ads.svg"="11/14/2018 8:45 AM, 1331 bytes, A Adds the file clicks.svg"="11/14/2018 8:45 AM, 1124 bytes, A Adds the file close.svg"="11/14/2018 8:45 AM, 749 bytes, A Adds the file h.png"="11/14/2018 8:45 AM, 1025 bytes, A Adds the file h_on.png"="11/14/2018 8:45 AM, 1025 bytes, A Adds the file overlay-close.png"="11/14/2018 8:45 AM, 1674 bytes, A Adds the file overlay-question.png"="11/14/2018 8:45 AM, 1671 bytes, A Adds the file questionmark.svg"="11/14/2018 8:45 AM, 1522 bytes, A Adds the file trans_close.gif"="11/14/2018 8:45 AM, 155 bytes, A Adds the file trans_question.gif"="11/14/2018 8:45 AM, 199 bytes, A Adds the file trans_separator.gif"="11/14/2018 8:45 AM, 114 bytes, A Adds the file views.svg"="11/14/2018 8:45 AM, 2045 bytes, A Adds the file x.png"="11/14/2018 8:45 AM, 1052 bytes, A Adds the file x_on.png"="11/14/2018 8:45 AM, 1048 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js Adds the file vast.js"="11/14/2018 8:45 AM, 42967 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\background Adds the file require-config.js"="11/14/2018 8:45 AM, 1197 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\bb-ta-template Adds the file require-config.js"="11/14/2018 8:45 AM, 152 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\content Adds the file require-config.js"="11/14/2018 8:45 AM, 1968 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\lbx-template Adds the file require-config.js"="11/14/2018 8:45 AM, 301 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\tl-template Adds the file require-config.js"="11/14/2018 8:45 AM, 252 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_ Adds the file abolish_moduo.js"="11/14/2018 8:45 AM, 21101 bytes, A Adds the file adapt_tier.js"="11/14/2018 8:45 AM, 38349 bytes, A Adds the file addition_power.js"="11/14/2018 8:45 AM, 28077 bytes, A Adds the file copy_account.js"="11/14/2018 8:45 AM, 4818 bytes, A Adds the file cycle_list.js"="11/14/2018 8:45 AM, 8794 bytes, A Adds the file decrement_positive.js"="11/14/2018 8:45 AM, 15008 bytes, A Adds the file delete_queue.js"="11/14/2018 8:45 AM, 36195 bytes, A Adds the file dig_configs.js"="11/14/2018 8:45 AM, 7112 bytes, A Adds the file leave_actor.js"="11/14/2018 8:45 AM, 15440 bytes, A Adds the file minimal_mutex.js"="11/14/2018 8:45 AM, 23169 bytes, A Adds the file replace_server.js"="11/14/2018 8:45 AM, 19933 bytes, A Adds the file return_project.js"="11/14/2018 8:45 AM, 20903 bytes, A Adds the file return_word.js"="11/14/2018 8:45 AM, 17059 bytes, A Adds the file segment_architecture.js"="11/14/2018 8:45 AM, 7216 bytes, A Adds the file throwback_name.js"="11/14/2018 8:45 AM, 89590 bytes, A Adds the file throwback_parameters.js"="11/14/2018 8:45 AM, 18537 bytes, A Adds the file verify_handle.js"="11/14/2018 8:45 AM, 5015 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\lib Adds the file pako.js"="11/14/2018 8:45 AM, 295784 bytes, A Adds the file Readability.js"="11/14/2018 8:45 AM, 63902 bytes, A Adds the file require.js"="11/14/2018 8:45 AM, 86328 bytes, A Adds the file require-content.js"="11/14/2018 8:45 AM, 410 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main Adds the file access_metro.js"="11/14/2018 8:45 AM, 25368 bytes, A Adds the file acquisition_account.js"="11/14/2018 8:45 AM, 3659 bytes, A Adds the file adaptive_handle.js"="11/14/2018 8:45 AM, 3211 bytes, A Adds the file adaptive_practical.js"="11/14/2018 8:45 AM, 20693 bytes, A Adds the file add_gate.js"="11/14/2018 8:45 AM, 4849 bytes, A Adds the file analyze_configs.js"="11/14/2018 8:45 AM, 26638 bytes, A Adds the file analyze_practical.js"="11/14/2018 8:45 AM, 8737 bytes, A Adds the file build_system.js"="11/14/2018 8:45 AM, 927 bytes, A Adds the file fill_abstractor.js"="11/14/2018 8:45 AM, 3927 bytes, A Adds the file get_access.js"="11/14/2018 8:45 AM, 6193 bytes, A Adds the file increment_counter.js"="11/14/2018 8:45 AM, 43031 bytes, A Adds the file list_thread.js"="11/14/2018 8:45 AM, 5203 bytes, A Adds the file maximum_config.js"="11/14/2018 8:45 AM, 74151 bytes, A Adds the file notify_handle.js"="11/14/2018 8:45 AM, 1005 bytes, A Adds the file notify_handleA.js"="11/14/2018 8:45 AM, 14924 bytes, A Adds the file notify_handleB.js"="11/14/2018 8:45 AM, 7705 bytes, A Adds the file put_accountant.js"="11/14/2018 8:45 AM, 68216 bytes, A Adds the file read_metro.js"="11/14/2018 8:45 AM, 3247 bytes, A Adds the file segment_range.js"="11/14/2018 8:45 AM, 7828 bytes, A Adds the file substract_moduo.js"="11/14/2018 8:45 AM, 1563 bytes, A Adds the file toogle_config.js"="11/14/2018 8:45 AM, 8699 bytes, A Adds the file verify_access.js"="11/14/2018 8:45 AM, 26638 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\src Adds the file minimal_account.js"="11/14/2018 8:45 AM, 26638 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi Adds the file 000003.log"="11/16/2018 10:49 AM, 2847 bytes, A Adds the file CURRENT"="11/16/2018 10:47 AM, 16 bytes, A Adds the file LOCK"="11/16/2018 10:47 AM, 0 bytes, A Adds the file LOG"="11/16/2018 10:47 AM, 185 bytes, A Adds the file MANIFEST-000001"="11/16/2018 10:47 AM, 41 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_CURRENT_USER\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings] "eaieaipgaojhbdckgcoddcaclngllhmi"="REG_SZ", "37F1A4BF98374C4E611DAFEEF71CEBA3F510898E8CB0DCD7D3B0B299F4A1330C"Malwarebytes log:
Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 11/16/18 Scan Time: 10:52 AM Log File: 534fbb84-e985-11e8-a3cb-00ffb9f1a7a9.json -Software Information- Version: 3.6.1.2711 Components Version: 1.0.482 Update Package Version: 1.0.7871 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 237960 Threats Detected: 115 Threats Quarantined: 115 Time Elapsed: 2 min, 49 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 1 PUP.Optional.AdvertisingExt.Generic, HKCU\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|eaieaipgaojhbdckgcoddcaclngllhmi, Quarantined, [14312], [542296],1.0.7871 Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 18 PUP.Optional.AdvertisingExt.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\bb-ta-template, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\lbx-template, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\tl-template, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\background, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\content, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\_metadata, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\html, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\lib, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\src, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EAIEAIPGAOJHBDCKGCODDCACLNGLLHMI, Quarantined, [14312], [542296],1.0.7871 File: 96 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi\000003.log, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi\CURRENT, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi\LOCK, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi\LOG, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\eaieaipgaojhbdckgcoddcaclngllhmi\MANIFEST-000001, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\EAIEAIPGAOJHBDCKGCODDCACLNGLLHMI\190.7509.1035.33_0\MANIFEST.JSON, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css\backcomp.css, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css\bb-ta-template.css, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css\lbx-template.css, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css\style.css, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\css\tl-template.css, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\html\background.html, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\html\bb-ta-template.html, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\html\lbx-template.html, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\html\tl-template.html, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\128.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\16.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\19.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\32.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\38.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\48.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\icons\64.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\ads.svg, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\clicks.svg, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\close.svg, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\h.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\h_on.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\overlay-close.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\overlay-question.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\questionmark.svg, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\trans_close.gif, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\trans_question.gif, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\trans_separator.gif, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\views.svg, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\x.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\images\x_on.png, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\background\require-config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\bb-ta-template\require-config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\content\require-config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\lbx-template\require-config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\tl-template\require-config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js\vast.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\abolish_moduo.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\adapt_tier.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\addition_power.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\copy_account.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\cycle_list.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\decrement_positive.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\delete_queue.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\dig_configs.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\leave_actor.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\minimal_mutex.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\replace_server.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\return_project.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\return_word.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\segment_architecture.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\throwback_name.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\throwback_parameters.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\js_\verify_handle.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\lib\pako.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\lib\Readability.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\lib\require-content.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\lib\require.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\get_access.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\access_metro.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\acquisition_account.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\adaptive_handle.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\adaptive_practical.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\add_gate.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\analyze_configs.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\analyze_practical.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\build_system.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\fill_abstractor.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\increment_counter.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\list_thread.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\maximum_config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\notify_handle.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\notify_handleA.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\notify_handleB.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\put_accountant.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\read_metro.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\segment_range.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\substract_moduo.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\toogle_config.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\main\verify_access.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\src\minimal_account.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\_metadata\computed_hashes.json, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\_metadata\verified_contents.json, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\add_worker.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\analyze_configs.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\delete_parameters.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\minimal_account.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\return_word.js, Quarantined, [14312], [542296],1.0.7871 PUP.Optional.AdvertisingExt.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\eaieaipgaojhbdckgcoddcaclngllhmi\190.7509.1035.33_0\verify_access.js, Quarantined, [14312], [542296],1.0.7871 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention