What is Browser Warden?
The Malwarebytes research team has determined that Browser Warden is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is affected by Browser Warden?
You may see this icon + warning in your taskbar:
This is the website with your "settings" for the hijacker:
You may see this entry in your list of installed software:
and these browser add-ons:
How did Browser Warden get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove Browser Warden?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-version.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
- When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
- Reboot your computer if prompted.
- Browser Warden replaces your hosts file, so you may have to restore the old one. You can find third-party hosts file alternatives at hpHosts or at mvps.org or you can simply reset the default hosts file as outlined here by Microsoft.
How would the full version of Malwarebytes Anti-Malware help protect me?
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Browser Warden hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
Technical details for experts
Signs in a HijackThis log:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:3128 O1 - Hosts: 54.204.28.26 hjjjegfhiceggepdokloeepnhlfnedkk O2 - BHO: Browser Warden BHO - {2C09954F-CDA8-4BD1-8794-1D543E050378} - C:\Program Files\Browser Warden\FrameworkBHO.dll O4 - HKLM\..\Run: [BService] C:\Program Files\Bench\BService\1.1\bservice.exe O4 - HKLM\..\Run: [Wd] C:\Program Files\Bench\Wd\wd.exe O4 - HKLM\..\Run: [Bench Communicator Watcher] C:\Program Files\Bench\Proxy\pwdg.exe O4 - HKLM\..\Run: [Bench Settings Cleaner] C:\Program Files\Bench\Proxy\cl.exe O4 - HKLM\..\RunOnce: [Browser Warden-repairJob] wscript.exe "C:\Users\{username}\AppData\Local\Browser Warden\repair.js" "Browser Warden-repairJob"Alterations made by the installer:
File system details --------------------------------------------- Adds the folder C:\Program Files\Bench\BService\1.1 Adds the file bhelper.dll"="8/20/2014 5:03 PM, 53248 bytes, A Adds the file bservice.exe"="8/20/2014 5:03 PM, 52736 bytes, A Adds the folder C:\Program Files\Bench\NmHost Adds the file manifest.json"="1/1/2015 2:00 PM, 215 bytes, A Adds the file nmhost.exe"="8/20/2014 5:03 PM, 165376 bytes, A Adds the folder C:\Program Files\Bench\NmHost\data\installer Adds the file hjjjegfhiceggepdokloeepnhlfnedkk"="1/1/2015 2:00 PM, 981 bytes, A Adds the folder C:\Program Files\Bench\Proxy Adds the file cl.exe"="11/6/2014 7:36 PM, 62464 bytes, A Adds the file icon.ico"="11/28/2014 6:08 AM, 32038 bytes, A Adds the file proc.exe"="11/12/2014 10:10 PM, 486912 bytes, A Adds the file pwdg.exe"="11/12/2014 10:10 PM, 123392 bytes, A Adds the folder C:\Program Files\Bench\Updater Adds the file products.xml"="1/1/2015 2:00 PM, 377 bytes, A Adds the file updater.exe"="10/14/2014 4:41 PM, 72192 bytes, A Adds the folder C:\Program Files\Bench\Updater\1.7.0.0 Adds the file updater.exe"="10/14/2014 4:41 PM, 371712 bytes, A Adds the folder C:\Program Files\Bench\Wd Adds the file wd.exe"="8/20/2014 5:04 PM, 92672 bytes, A Adds the folder C:\Program Files\Browser Warden Adds the file background.html"="11/28/2014 6:08 AM, 157 bytes, A Adds the file config.xml"="11/28/2014 6:08 AM, 2242 bytes, A Adds the file extension_info.json"="1/1/2015 2:00 PM, 2405 bytes, A Adds the file FrameworkBHO.dll"="11/28/2014 6:08 AM, 355432 bytes, A Adds the file FrameworkBHO64.dll"="11/28/2014 6:08 AM, 577072 bytes, A Adds the file FrameworkEngine.exe"="11/28/2014 6:08 AM, 264024 bytes, A Adds the folder C:\Program Files\Browser Warden\AppFramework Adds the folder C:\Program Files\Browser Warden\CanvasFramework Adds the folder C:\Program Files\Browser Warden\framework Adds the folder C:\Program Files\Browser Warden\framework-ui Adds the folder C:\Program Files\Browser Warden\framework-ui\theme\bubble Adds the folder C:\Program Files\Browser Warden\icons In the existing folder C:\Users\{username}\AppData\Local Adds the file proxy.log"="1/1/2015 2:00 PM, 0 bytes, A Adds the folder C:\Users\{username}\AppData\Local\BenchUpdater Adds the file products.xml"="1/1/2015 2:00 PM, 444 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Browser Warden Adds the file chrome_gp_update.js"="8/20/2014 5:04 PM, 2348 bytes, A Adds the file chrome_installer.js"="11/12/2014 10:10 PM, 6571 bytes, A Adds the file chrome_workaround.js"="11/12/2014 10:10 PM, 1105 bytes, A Adds the file clear_cache.js"="8/20/2014 5:03 PM, 522 bytes, A Adds the file common.js"="11/12/2014 10:10 PM, 15095 bytes, A Adds the file firefox_installer.js"="8/20/2014 5:03 PM, 6848 bytes, A Adds the file gpedit.exe"="8/20/2014 5:03 PM, 93184 bytes, A Adds the file icon.ico"="11/28/2014 6:08 AM, 32038 bytes, A Adds the file ie_installer.js"="8/20/2014 5:03 PM, 3685 bytes, A Adds the file installer.js"="8/20/2014 5:03 PM, 799 bytes, A Adds the file main_installer.js"="8/20/2014 5:03 PM, 1567 bytes, A Adds the file migrate.js"="8/20/2014 5:03 PM, 4746 bytes, A Adds the file projectInstaller.js"="9/10/2014 6:14 PM, 3036 bytes, A Adds the file repair.js"="8/20/2014 5:04 PM, 1735 bytes, A Adds the file repair_data.json"="1/1/2015 2:00 PM, 3055 bytes, A Adds the file SoftwareDetector.exe"="10/14/2014 4:41 PM, 122880 bytes, A Adds the file sqlite3.exe"="8/20/2014 5:03 PM, 492544 bytes, A Adds the file storageedit.exe"="8/20/2014 5:03 PM, 75264 bytes, A Adds the file uninstall.exe"="1/1/2015 2:00 PM, 191667 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Browser Warden\firefox Adds the folder C:\Users\{username}\AppData\LocalLow\{2C09954F-CDA8-4BD1-8794-1D543E050378} Adds the file 2b9967fc5df442d326053c15a3a31808"="1/1/2015 2:01 PM, 74 bytes, A Adds the file 68dff1af7b0834716285f3ba83f7239b"="1/1/2015 2:01 PM, 204 bytes, A Adds the file 6a2db82e7fd31e42305dfa2af82c50a2"="1/1/2015 2:01 PM, 29940 bytes, A Adds the file 6bbc478dbc7b50d8f3ab85edc559e56d"="1/1/2015 2:01 PM, 10 bytes, A Adds the file 76619ba043e3bc5b0c01c334528b0d9e"="1/1/2015 2:01 PM, 322 bytes, A Adds the file 7b0447bd3542ddb5d051559c0271a1d3"="1/1/2015 2:01 PM, 486 bytes, A Adds the file 7c163af162793819310a278751b0a02f"="1/1/2015 2:01 PM, 1000 bytes, A Adds the file 836a82612a811bf04ea7c3fcbebf55c3"="1/1/2015 2:01 PM, 32 bytes, A Adds the file 89b4c67965980fd11818aa6480b90244"="1/1/2015 2:01 PM, 30 bytes, A Adds the file 9bc188728746ec6f53f5d0434852d3d7"="1/1/2015 2:01 PM, 1306 bytes, A Adds the file abb3b8b3368d6d70ab9da841c5e39324"="1/1/2015 2:01 PM, 224 bytes, A Adds the file b3be5b36915120d312a06398609311ee"="1/1/2015 2:01 PM, 14378 bytes, A Adds the folder C:\Users\{username}\AppData\LocalLow\Protect\Blocker Adds the file 212e90ffa529f5c99c44dc574c6f9a16"="1/1/2015 2:00 PM, 4274618 bytes, A Adds the file 8d3f613ded3421026a6b47abd4042139"="1/1/2015 2:00 PM, 8 bytes, A Adds the file b24f88eb229178ba93accf228dc5b280"="1/1/2015 2:00 PM, 70 bytes, A Adds the folder C:\Users\{username}\AppData\LocalLow\Protect\CanvasStorage Adds the file 7bf8e2b7288ee31947f028830fe682c3"="1/1/2015 2:00 PM, 28 bytes, A Adds the file 8ab1244a97308124c8207af9517ce460"="1/1/2015 2:00 PM, 94 bytes, A Adds the file a645fa10d3b7c3be385a23d8e9796994"="1/1/2015 2:00 PM, 30 bytes, A Adds the file c8ca0d6097bee7d978cc54b0e9075409"="1/1/2015 2:00 PM, 46 bytes, A Adds the file ee9adb2bad520b37c67f38edc62ec22d"="1/1/2015 2:00 PM, 230 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden Adds the file Browser Warden Settings.url"="1/1/2015 2:00 PM, 124 bytes, A Adds the file Browser Warden.lnk"="1/1/2015 2:00 PM, 1970 bytes, A Adds the file Uninstall.lnk"="1/1/2015 2:00 PM, 1086 bytes, A In the existing folder C:\Windows\System32\drivers\etc Alters the file hosts 6/10/2009 11:39 PM, 824 bytes, A ==> 1/1/2015 2:00 PM, 871 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file bench-S-1-5-21-4016700205-1717049133-1125222536-1001"="1/1/2015 2:00 PM, 3234 bytes, A Adds the file bench-sys"="1/1/2015 2:00 PM, 3242 bytes, A In the existing folder C:\Windows\Tasks Adds the file bench-S-1-5-21-4016700205-1717049133-1125222536-1001.job"="1/1/2015 2:00 PM, 346 bytes, A Adds the file bench-sys.job"="1/1/2015 2:00 PM, 346 bytes, A Registry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE] "39012"="REG_SZ", "Browser Warden" [HKEY_LOCAL_MACHINE\SOFTWARE\AdvertisingSupport] "Existing"="REG_SZ", "0" "Seen"="REG_SZ", "1" "SeenDate"="REG_SZ", "1420117247" "SystemId"="REG_SZ", "619bdd98c7140d14e62a62d4922b6abd" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\BService] "Path"="REG_SZ", "C:\Program Files\Bench\BService\1.1" "Version"="REG_SZ", "1.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\BService\39012] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\InstalledExtensions] "39012"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\NmHost] "(Default)"="REG_SZ", "C:\Program Files\Bench\NmHost\nmhost.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\NmHost\39012] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\Updater] "path"="REG_SZ", "C:\Program Files\Bench\Updater\updater.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Bench\Updater\39012] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Browser Warden] "(Default)"="REG_SZ", "C:\Users\{username}\AppData\Local\Browser Warden" "AllowProxy"="REG_SZ", "1" "CDN"="REG_SZ", "browserwarden-a.akamaihd.net" "InstallTime"="REG_SZ", "1420120847" "Pid"="REG_SZ", "2071" "Seen"="REG_SZ", "1" "SeenDate"="REG_SZ", "1420117247" "StrAOI"="REG_SZ", "jan 1, 2015" "SystemId"="REG_SZ", "619bdd98c7140d14e62a62d4922b6abd" "UTCInstallTime"="REG_SZ", "1420117247" "ZoneId"="REG_SZ", "7416373" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}] "(Default)"="REG_SZ", "Browser Warden BHO" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\Browser Warden\FrameworkBHO.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}\TypeLib] "(Default)"="REG_SZ", "{9C9242E6-4B6B-4E40-B532-5279636F4918}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}\Version] "(Default)"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}] "(Default)"="REG_SZ", "Browser Warden" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\Browser Warden\FrameworkBHO.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}\TypeLib] "(Default)"="REG_SZ", "{9C9242E6-4B6B-4E40-B532-5279636F4918}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}\Version] "(Default)"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED045727-C541-4D1C-8949-3BCC878EEA8D}] "(Default)"="REG_SZ", "Browser Warden" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED045727-C541-4D1C-8949-3BCC878EEA8D}\LocalServer32] "(Default)"="REG_SZ", ""C:\Program Files\Browser Warden\FrameworkEngine.exe"" "ServerExecutable"="REG_SZ", "C:\Program Files\Browser Warden\FrameworkEngine.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED045727-C541-4D1C-8949-3BCC878EEA8D}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED045727-C541-4D1C-8949-3BCC878EEA8D}\TypeLib] "(Default)"="REG_SZ", "{1F165007-8086-434B-9499-9A7DC65D1AD2}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED045727-C541-4D1C-8949-3BCC878EEA8D}\Version] "(Default)"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CE7951D-CD50-4BCF-8498-4C54E805EA78}] "(Default)"="REG_SZ", "IKangoBHO" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CE7951D-CD50-4BCF-8498-4C54E805EA78}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CE7951D-CD50-4BCF-8498-4C54E805EA78}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2CE7951D-CD50-4BCF-8498-4C54E805EA78}\TypeLib] "(Default)"="REG_SZ", "{9C9242E6-4B6B-4E40-B532-5279636F4918}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D920E957-7261-417F-B689-D0E8B7053925}] "(Default)"="REG_SZ", "IKangoToolbar" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D920E957-7261-417F-B689-D0E8B7053925}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D920E957-7261-417F-B689-D0E8B7053925}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D920E957-7261-417F-B689-D0E8B7053925}\TypeLib] "(Default)"="REG_SZ", "{9C9242E6-4B6B-4E40-B532-5279636F4918}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EDAD576E-C58C-4D50-BEBF-14CCFD8E828D}] "(Default)"="REG_SZ", "IKangoEngine" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EDAD576E-C58C-4D50-BEBF-14CCFD8E828D}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EDAD576E-C58C-4D50-BEBF-14CCFD8E828D}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EDAD576E-C58C-4D50-BEBF-14CCFD8E828D}\TypeLib] "(Default)"="REG_SZ", "{1F165007-8086-434B-9499-9A7DC65D1AD2}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1F165007-8086-434B-9499-9A7DC65D1AD2}\1.0] "(Default)"="REG_SZ", "EngineLib" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1F165007-8086-434B-9499-9A7DC65D1AD2}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files\Browser Warden\FrameworkEngine.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1F165007-8086-434B-9499-9A7DC65D1AD2}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{1F165007-8086-434B-9499-9A7DC65D1AD2}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\Browser Warden" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9C9242E6-4B6B-4E40-B532-5279636F4918}\1.0] "(Default)"="REG_SZ", "Framework 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9C9242E6-4B6B-4E40-B532-5279636F4918}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files\Browser Warden\FrameworkBHO.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9C9242E6-4B6B-4E40-B532-5279636F4918}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9C9242E6-4B6B-4E40-B532-5279636F4918}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\Browser Warden" [HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.bench.nmhost] "(Default)"="REG_SZ", "C:\Program Files\Bench\NmHost\manifest.json" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F165007-8086-434B-9499-9A7DC65D1AD2}] "AppName"="REG_SZ", "FrameworkEngine.exe" "AppPath"="REG_SZ", "C:\Program Files\Browser Warden\" "Policy"="REG_DWORD", 3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION] "FrameworkEngine.exe"="REG_DWORD", 10000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2C09954F-CDA8-4BD1-8794-1D543E050378}] "(Default)"="REG_SZ", "Browser Warden BHO" "NoExplorer"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{2C09954F-CDA8-4BD1-8794-1D543E050378}"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Bench Communicator Watcher"="REG_SZ", "C:\Program Files\Bench\Proxy\pwdg.exe" "Bench Settings Cleaner"="REG_SZ", "C:\Program Files\Bench\Proxy\cl.exe" "BService"="REG_SZ", "C:\Program Files\Bench\BService\1.1\bservice.exe" "Wd"="REG_SZ", "C:\Program Files\Bench\Wd\wd.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Browser Warden"="REG_SZ", "" "Browser Warden-repairJob"="REG_SZ", "wscript.exe "C:\Users\{username}\AppData\Local\Browser Warden\repair.js" "Browser Warden-repairJob"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\39012_Browser Warden] "DisplayIcon"="REG_SZ", "C:\Users\{username}\AppData\Local\Browser Warden/icon.ico" "DisplayName"="REG_SZ", "Browser Warden" "DisplayVersion"="REG_SZ", "1.0" "InstallLocation"="REG_SZ", "C:\Users\{username}\AppData\Local\Browser Warden" "NoModify"="REG_DWORD", 1 "NoRepair"="REG_DWORD", 1 "Publisher"="REG_SZ", "Gratifying Apps" "UninstallString"="REG_SZ", "C:\Users\{username}\AppData\Local\Browser Warden\uninstall.exe " [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist] "1"="REG_SZ", "hjjjegfhiceggepdokloeepnhlfnedkk;http://hjjjegfhiceggepdokloeepnhlfnedkk/check/.eJwNyVsKgCAQRuG9zLNEvbaZEP29NyNqEUR7z8fznZeG7pl2MqHJCVJ0o_UoPGlb1tmR-9CloNE-2gVFeMYR7fwhpQTvQjTwHtVKLgJUDsUxbM70_d0vIS4.7hNgYl77Pdyp2oLCl4WxcthPiwU" [HKEY_LOCAL_MACHINE\SOFTWARE\Proxy\Installations\Browser Warden] "aoi"="REG_SZ", "1420120847" "domain"="REG_SZ", "browserwarden-a.akamaihd.net" "ext"="REG_SZ", "Browser Warden" "format"="REG_SZ", "//{domain}/loaders/{pid}/l.js?pid={pid}&systemid={systemid}&ext={ext}&aoi={aoi}&zoneid={zoneid}&crr={crr}&type=p" "more_info_url"="REG_SZ", "http://browserwarden.com" "pid"="REG_SZ", "2071" "protect_redirect_url"="REG_SZ", "http://browserwarden.com/warning.php?%blocked_url%" "settings_url"="REG_SZ", "http://browserwarden.com/settings.php" "straoi"="REG_SZ", "jan 1, 2015" "system_black_list_url"="REG_SZ", "http://browserwarden-a.akamaihd.net/protect/block.json" "zoneid"="REG_SZ", "7416373" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2C09954F-CDA8-4BD1-8794-1D543E050378}] "Flags"="REG_DWORD", 1024 "VerCache"="REG_BINARY, ...................... [HKEY_CURRENT_USER\Software\Microsoft\Windows Script Host\Settings] [HKEY_CURRENT_USER\Software\Proxy] "app_name"="REG_SZ", "Browser Warden" "AutoConfigURL"="REG_SZ", "" "disableChainProxy"="REG_DWORD", 0 "ProxyEnable"="REG_DWORD", 0 "ProxyServer"="REG_SZ", "" "totalFail"="REG_DWORD", 0 [HKEY_CURRENT_USER\Software\Proxy\installations\Browser Warden] "czoneid"="REG_SZ", "18741983" [HKEY_CURRENT_USER\System\CurrentControlSet\Control\NetTrace\Session]Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 1/1/2015 Scan Time: 2:06:32 PM Logfile: mbamBrowserWarden.txt Administrator: Yes Version: 2.00.4.1028 Malware Database: v2015.01.01.02 Rootkit Database: v2014.12.30.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Malwarebytes Scan Type: Threat Scan Result: Completed Objects Scanned: 286267 Time Elapsed: 3 min, 25 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 6 PUP.Optional.Bprotector, C:\Program Files\Bench\Wd\wd.exe, 3004, Delete-on-Reboot, [cd692fc397f241f5fffc01e930d1a65a] PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bservice.exe, 2164, Delete-on-Reboot, [1521de14a9e0b185f6018cd6ff049769] PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\pwdg.exe, 2932, Delete-on-Reboot, [8fa7b43ed5b4f83ea86b147b6a990cf4] PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\proc.exe, 2272, Delete-on-Reboot, [072fd51df2979e98c40f2414fe05ee12] PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\FrameworkEngine.exe, 3564, Delete-on-Reboot, [1224955d9fea6acce46d31167e857c84] PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\FrameworkEngine.exe, 2792, Delete-on-Reboot, [1224955d9fea6acce46d31167e857c84] Modules: 10 PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], Registry Keys: 21 PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\CLSID\{D9D6E931-72E0-418A-90C2-06E86D059E25}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{9C9242E6-4B6B-4E40-B532-5279636F4918}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{2CE7951D-CD50-4BCF-8498-4C54E805EA78}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{D920E957-7261-417F-B689-D0E8B7053925}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\CLSID\{2C09954F-CDA8-4BD1-8794-1D543E050378}\INPROCSERVER32, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{2C09954F-CDA8-4BD1-8794-1D543E050378}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2C09954F-CDA8-4BD1-8794-1D543E050378}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2C09954F-CDA8-4BD1-8794-1D543E050378}, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\39012_Browser Warden, Quarantined, [3cfa876b35542d09ae503523966a946c], PUP.Optional.AdevertisingSupport.A, HKLM\SOFTWARE\AdvertisingSupport, Quarantined, [f34302f061282016889b96d263a030d0], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\Browser Warden, Quarantined, [ca6c26cc94f5340251e704d88c789070], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\BService, Quarantined, [71c5ac4696f34fe7ce28164cfc076997], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\InstalledExtensions, Quarantined, [c571549edbae5adc3dc11772b152dd23], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\NmHost, Quarantined, [4beb8c66eb9e02349f60f099e32036ca], PUP.Optional.Bench.A, HKLM\SOFTWARE\BENCH\Updater, Quarantined, [e25422d0533655e137c98efc41c2eb15], PUP.Optional.Bench.A, HKLM\SOFTWARE\GOOGLE\CHROME\NATIVEMESSAGINGHOSTS\com.bench.nmhost, Quarantined, [1a1cc230fb8e5dd9b47d8d46f50fa957], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\PROXY\INSTALLATIONS\Browser Warden, Quarantined, [ce68629069203600d4699e3e9272669a], PUP.Optional.BrowserWarden.A, HKCU\SOFTWARE\PROXY\INSTALLATIONS\Browser Warden, Quarantined, [40f67b77a5e4cb6b08345a826e9647b9], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{1F165007-8086-434B-9499-9A7DC65D1AD2}, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{EDAD576E-C58C-4D50-BEBF-14CCFD8E828D}, Quarantined, [1224955d9fea6acce46d31167e857c84], Registry Values: 6 PUP.Optional.Bprotector, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Wd, C:\Program Files\Bench\Wd\wd.exe, Quarantined, [cd692fc397f241f5fffc01e930d1a65a] PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BService, C:\Program Files\Bench\BService\1.1\bservice.exe, Quarantined, [1521de14a9e0b185f6018cd6ff049769] PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Bench Communicator Watcher, C:\Program Files\Bench\Proxy\pwdg.exe, Quarantined, [8fa7b43ed5b4f83ea86b147b6a990cf4] PUP.Optional.Bench.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Bench Settings Cleaner, C:\Program Files\Bench\Proxy\cl.exe, Quarantined, [ed49fdf55633c86e26ee741b649fa45c] PUP.Optional.SmartApps, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE|Browser Warden-repairJob, wscript.exe "C:\Users\{username}\AppData\Local\Browser Warden\repair.js" "Browser Warden-repairJob", Quarantined, [2016d71bbccdfc3ac629dbf85fa51ee2] PUM.Bad.Proxy, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:3128, Quarantined, [e84e48aa21683bfb5b5f3058ee15a35d] Registry Data: 0 (No malicious items detected) Folders: 34 PUP.Optional.BenchUpdater.A, C:\Users\{username}\AppData\Local\BenchUpdater, Quarantined, [999d1fd34841ad89494292140cf75ea2], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater, Quarantined, [350112e097f22c0a1383e943d330ac54], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\1.7.0.0, Quarantined, [350112e097f22c0a1383e943d330ac54], PUP.Optional.Bench.A, C:\Program Files\Bench\Wd, Delete-on-Reboot, [6ccadb17b8d1e056c2a7d7589d6633cd], PUP.Optional.Bench.A, C:\Program Files\Bench\NmHost, Quarantined, [e155b2409aef7db9e6841d12c93a1ae6], PUP.Optional.Bench.A, C:\Program Files\Bench\NmHost\data, Quarantined, [e155b2409aef7db9e6841d12c93a1ae6], PUP.Optional.Bench.A, C:\Program Files\Bench\NmHost\data\installer, Quarantined, [e155b2409aef7db9e6841d12c93a1ae6], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy, Delete-on-Reboot, [072fd51df2979e98c40f2414fe05ee12], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\CanvasFramework, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\icons, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\includes, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden, Delete-on-Reboot, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\CanvasFramework, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\icons, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden, Delete-on-Reboot, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\CanvasFramework, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\icons, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden, Quarantined, [e551a54dbccd65d13d1559ee897a25db], PUP.Optional.Bench.A, C:\Program Files\Bench\BService, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], Files: 208 PUP.Optional.Bprotector, C:\Program Files\Bench\Wd\wd.exe, Delete-on-Reboot, [cd692fc397f241f5fffc01e930d1a65a], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\FrameworkBHO.dll, Quarantined, [4ee8df1380098da92ae5b467e41fef11], PUP.Optional.BrowserWarden.A, C:\Users\{username}\Desktop\BrowserWarden.exe, Quarantined, [4de97979fc8def473cc25107b24e718f], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\uninstall.exe, Quarantined, [3cfa876b35542d09ae503523966a946c], PUP.Optional.Proxy.A, C:\Users\{username}\AppData\Local\proxy.log, Delete-on-Reboot, [e74f3cb67514f541269fd2a6847fce32], PUP.Optional.BenchUpdater.A, C:\Windows\System32\Tasks\bench-S-1-5-21-4016700205-1717049133-1125222536-1001, Quarantined, [54e2c9290a7fa3932c686f13748fce32], PUP.Optional.BenchUpdater.A, C:\Windows\System32\Tasks\bench-sys, Quarantined, [85b17e744742a294f59f1a6809fac739], PUP.Optional.BenchUpdater.A, C:\Windows\Tasks\bench-S-1-5-21-4016700205-1717049133-1125222536-1001.job, Quarantined, [3ef8569c6128dc5aaddd14928380af51], PUP.Optional.BenchUpdater.A, C:\Windows\Tasks\bench-sys.job, Quarantined, [b581a34f9bee84b2404ad4d2cc377789], PUP.Optional.BenchUpdater.A, C:\Users\{username}\AppData\Local\BenchUpdater\products.xml, Quarantined, [999d1fd34841ad89494292140cf75ea2], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hjjjegfhiceggepdokloeepnhlfnedkk_0.localstorage, Quarantined, [b48239b9e1a8fb3b1e1d528a32d211ef], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hjjjegfhiceggepdokloeepnhlfnedkk_0.localstorage-journal, Quarantined, [d06608ea0a7ff83ec675ba22da2af20e], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bservice.exe, Delete-on-Reboot, [1521de14a9e0b185f6018cd6ff049769], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\pwdg.exe, Delete-on-Reboot, [8fa7b43ed5b4f83ea86b147b6a990cf4], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\cl.exe, Quarantined, [ed49fdf55633c86e26ee741b649fa45c], PUP.Optional.SmartApps, C:\Users\{username}\AppData\Local\Browser Warden\repair.js, Quarantined, [2016d71bbccdfc3ac629dbf85fa51ee2], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\products.xml, Quarantined, [350112e097f22c0a1383e943d330ac54], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\updater.exe, Quarantined, [350112e097f22c0a1383e943d330ac54], PUP.Optional.AdwarePlugin, C:\Program Files\Bench\Updater\1.7.0.0\updater.exe, Quarantined, [350112e097f22c0a1383e943d330ac54], PUP.Optional.Bench.A, C:\Program Files\Bench\NmHost\manifest.json, Quarantined, [e155b2409aef7db9e6841d12c93a1ae6], PUP.Optional.Bench.A, C:\Program Files\Bench\NmHost\nmhost.exe, Quarantined, [e155b2409aef7db9e6841d12c93a1ae6], PUP.Optional.Bench.A, C:\Program Files\Bench\NmHost\data\installer\hjjjegfhiceggepdokloeepnhlfnedkk, Quarantined, [e155b2409aef7db9e6841d12c93a1ae6], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\icon.ico, Quarantined, [072fd51df2979e98c40f2414fe05ee12], PUP.Optional.Bench.A, C:\Program Files\Bench\Proxy\proc.exe, Delete-on-Reboot, [072fd51df2979e98c40f2414fe05ee12], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\background.html, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\extension_info.json, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\manifest.json, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\appAPI_bg.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\appAPI_browseraction.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\appAPI_common.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\appAPI_content.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\appAPI_settings.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\appAPI_webrequest.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\AppFramework\jquery.min.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\CanvasFramework\canvasscript_engine.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\CanvasFramework\canvas_bg.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\CanvasFramework\webrequest.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\backgroundscript_engine.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\base.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\browser.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\console.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\framework.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\i18n.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\initialize.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\invoke_async.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\io.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\lang.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\legacy.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\message_target.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\messaging.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\storage.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\timer.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\userscript_client.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\userscript_engine.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\utils.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework\xhr.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\browser_button.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\context_menu.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\framework_api.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\notifications.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\options.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\remote_popup_host.html, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\remote_popup_host.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\framework-ui\ui_base.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\icons\button.png, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\icons\icon100.png, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\icons\icon128.png, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\icons\icon32.png, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\icons\icon48.png, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjjjegfhiceggepdokloeepnhlfnedkk\1.0_0\includes\content.js, Quarantined, [2b0b2fc36e1b6cca72d82b1c1de6c63a], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\chrome_gp_update.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\chrome_installer.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\chrome_workaround.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\clear_cache.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\common.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox_installer.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\gpedit.exe, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\icon.ico, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\ie_installer.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\installer.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\main_installer.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\migrate.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\projectInstaller.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\repair_data.json, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\SoftwareDetector.exe, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\sqlite3.exe, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\storageedit.exe, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\background.html, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\bootstrap.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\chrome.manifest, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\extension_info.json, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\install.rdf, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\appAPI_bg.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\appAPI_browseraction.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\appAPI_common.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\appAPI_content.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\appAPI_settings.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\appAPI_webrequest.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\AppFramework\jquery.min.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\CanvasFramework\canvasscript_engine.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\CanvasFramework\canvas_bg.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\CanvasFramework\md5.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\CanvasFramework\registry.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\CanvasFramework\webrequest.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\backgroundscript_engine.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\base.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\browser.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\chrome_windows.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\console.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\content_proxy.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\framework.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\i18n.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\invoke_async.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\io.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\lang.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\legacy.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\message_target.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\messaging.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\storage.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\timer.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\uninstall.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\userscript_client.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\userscript_engine.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\utils.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework\xhr.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\browser_button.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\contentNotification.tmpl, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\contentNotificationStyle.tmpl, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\content_notifications.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\context_menu.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\framework_api.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\notifications.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\options.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\framework-ui\ui_base.js, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\icons\button.png, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\icons\icon100.png, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\icons\icon128.png, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\icons\icon32.png, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Local\Browser Warden\firefox\icons\icon48.png, Quarantined, [bb7b688a6a1f2115430b103750b3a45c], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\background.html, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\config.xml, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\extension_info.json, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\FrameworkBHO64.dll, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\FrameworkEngine.exe, Delete-on-Reboot, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\appAPI_bg.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\appAPI_browseraction.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\appAPI_common.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\appAPI_content.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\appAPI_settings.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\appAPI_webrequest.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\AppFramework\jquery.min.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\CanvasFramework\canvasscript_engine.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\CanvasFramework\canvas_bg.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\CanvasFramework\md5.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\CanvasFramework\registry.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\CanvasFramework\webrequest.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\backgroundscript_engine.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\base.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\browser.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\console.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\framework.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\global.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\i18n.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\initialize.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\invoke_async.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\io.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\json2.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\lang.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\legacy.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\message_target.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\messaging.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\storage.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\timer.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\updater.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\userscript_client.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\userscript_engine.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\utils.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework\xhr.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\browser_button.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\context_menu.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\context_menu_item_handler.html, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\framework_api.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\notification.html, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\notifications.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\options.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\ui_base.js, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\bottom-left.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\bottom-middle.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\bottom-right.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\middle-left.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\middle-right.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\tail-bottom.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\tail-left.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\tail-right.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\tail-top.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\top-left.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\top-middle.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\framework-ui\theme\bubble\top-right.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\icons\button.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\icons\icon100.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\icons\icon128.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\icons\icon32.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Program Files\Browser Warden\icons\icon48.png, Quarantined, [1224955d9fea6acce46d31167e857c84], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden\Browser Warden Settings.url, Quarantined, [e551a54dbccd65d13d1559ee897a25db], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden\Browser Warden.lnk, Quarantined, [e551a54dbccd65d13d1559ee897a25db], PUP.Optional.BrowserWarden.A, C:\Users\{username}\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Warden\Uninstall.lnk, Quarantined, [e551a54dbccd65d13d1559ee897a25db], PUP.Optional.Bench.A, C:\Program Files\Bench\BService\1.1\bhelper.dll, Delete-on-Reboot, [ff3730c27a0f8ea8508b9bc20ef5f50b], Hijack.Host, C:\Windows\System32\drivers\etc\hosts, Good: (), Bad: (54.204.28.26 hjjjegfhiceggepdokloeepnhlfnedkk), Replaced,[d75feb07721774c20ac00fadad58e51b] Physical Sectors: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention