Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for HohoSearch

- - - - -
Started by Metallica , Apr 21 2016 12:42 AM
GsearchFinder

  • Please log in to reply
1 reply to this topic

#1
Metallica
Posted 21 April 2016 - 12:42 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is HohoSearch?

The Malwarebytes research team has determined that HohoSearch is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by HohoSearch?

You may see this entry in your list of installed software:

warning4.png

and these changes in your browser setttings:

warning3.png

warning5.png

this Firefox add-on:

warning2.png

this Scheduled Task:

warning7.png

and you will see that the shortcuts for Firefox and/or Chrome on your desktop and in your taskbar (pinned) have been changed:

warning6.png

How did HohoSearch get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove HohoSearch?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of HohoSearch?
  • No, Malwarebytes' Anti-Malware removes HohoSearch completely.
  • This PUP creates a scheduled task. You can read here how to check for and, if necessary, remove Scheduled Tasks.
  • Look at the first reply to this topic to learn how you can go back to your old Firefox profile
  • We advise you to look at our Restore Browser page. You can read there how to fix additional browser redirect methods.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HohoSearch hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png


Technical details for experts

Possible signs in FRST logs:

 FF ProfilePath: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1
 FF NewTab: hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffseng
 FF DefaultSearchEngine: hohosearch
 FF SelectedSearchEngine: hohosearch
 FF Homepage: hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffseng
 FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml [2016-04-20]
 FF Extension: GsearchFinder - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\Extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi [2016-04-20]
 CHR HomePage: Default -> hxxp://www.hohosearch.com/?mode=nnnb&ptid=amz&uid=CB75DF05542D4707119BC449A5FA9A4A&v=20160419&ts=AHEqAH4pAHYsAU..
 CHR StartupUrls: Default -> "hxxp://www.hohosearch.com/?mode=nnnb&ptid=amz&uid=CB75DF05542D4707119BC449A5FA9A4A&v=20160419&ts=AHEqAH4pAHYsAU.."
 CHR DefaultSearchURL: Default -> hxxp://www.hohosearch.com/chrome.php?q={searchTerms}&ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=nnnb
 CHR DefaultSearchKeyword: Default -> hohosearch
 S2 BugreportW; C:\Program Files (x86)\hohobnd\gredity.exe [988904 2016-04-20] ()
 S2 Lnspmekiingcachesrv; C:\Program Files (x86)\Lnspmekiing\Lnspmekiingcachesrv.exe [315616 2016-04-20] ()
 C:\Windows\System32\Tasks\Lnspmekiing Cache
 C:\Users\Public\Documents\dmp
 C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
 C:\Program Files (x86)\Lnspmekiing
 C:\Program Files (x86)\hohobnd

hohosearch - Uninstall (HKLM-x32\...\Uninstall - amz) (Version:  - )
Task: {B56F5EF0-7B18-4C68-8873-ACA0F0928EB0} - System32\Tasks\Lnspmekiing Cache => C:\Program Files (x86)\Lnspmekiing\Lnspmekiingcachetsk.exe [2016-04-20] ()
ShortcutWithArgument: C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
ShortcutWithArgument: C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
ShortcutWithArgument: C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=scrp
Excerpt of the Malwarebytes Anti-Malware log (full log available on request):

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/20/2016
Scan Time: 2:06 PM
Logfile: mbamHohoSearch.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.04.20.03
Rootkit Database: v2016.04.17.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Enabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 364069
Time Elapsed: 9 min, 7 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 8
PUP.Optional.YesSearches, HKU\S-1-5-18\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, Quarantined, [b75c723f3861241288243c84a55de61a], 
PUP.Optional.YesSearches, HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, Quarantined, [db38eac7c4d5ff37426a08b8a55d9d63], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, Quarantined, [47cc00b1613803330f6f2510808332ce], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\hohosearchSoftware, Quarantined, [e72c9c152a6f8ea86d10e2538d76a55b], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\UNINSTALL - AMZ, Quarantined, [0f04535ef0a956e0ecb4acffd92b29d7], 
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, Quarantined, [dd367f3273261422166868cdf40fbb45], 
PUP.Optional.YesSearches, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BugreportW, Quarantined, [32e16d446534f44228eb67457193b050], 
PUP.Optional.HohoSearch, HKCU\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, Quarantined, [b45fb8f95d3cc3731d5f5dd858abde22], 

Registry Values: 13
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffsengext, Quarantined, [47cc00b1613803330f6f2510808332ce]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffsengext, Quarantined, [4bc8813040596ec8dea01520768d3ac6]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.hohosearch.com/chrome.php?uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&q={searchTerms}&ts=AHEqAH4pAHYsAU..&v=20160419&mode=ffsengext, Quarantined, [69aa18996a2f90a689f5a491e2210df3]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.hohosearch.com/chrome.php?uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&ts=AHEqAH4pAHYsAU..&v=20160419&mode=ffexttoolbar&q=, Quarantined, [4cc7a70a0f8a30066f0f0a2b768de11f]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Uninstall - amz|DisplayName, hohosearch - Uninstall, Quarantined, [0f04535ef0a956e0ecb4acffd92b29d7]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffsengext, Quarantined, [dd367f3273261422166868cdf40fbb45]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffsengext, Quarantined, [0b088f22a5f47cba9fdf0233be455ba5]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.hohosearch.com/chrome.php?uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&q={searchTerms}&ts=AHEqAH4pAHYsAU..&v=20160419&mode=ffsengext, Quarantined, [65ae0ba6742551e5b1cd62d331d2827e]
PUP.Optional.HohoSearch, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.hohosearch.com/chrome.php?uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&ts=AHEqAH4pAHYsAU..&v=20160419&mode=ffexttoolbar&q=, Quarantined, [f320cfe2c0d982b492ec9c99bb4833cd]
PUP.Optional.HohoSearch, HKCU\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffsengext, Quarantined, [b45fb8f95d3cc3731d5f5dd858abde22]
PUP.Optional.HohoSearch, HKCU\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffsengext, Quarantined, [aa699e132a6ffb3b15670134ee1533cd]
PUP.Optional.HohoSearch, HKCU\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.hohosearch.com/chrome.php?uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&q={searchTerms}&ts=AHEqAH4pAHYsAU..&v=20160419&mode=ffsengext, Quarantined, [0112ffb2b6e33501245864d1fe055ba5]
PUP.Optional.HohoSearch, HKCU\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.hohosearch.com/chrome.php?uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&ts=AHEqAH4pAHYsAU..&v=20160419&mode=ffexttoolbar&q=, Quarantined, [868d6a47dfba44f26a1275c0887b6a96]

Registry Data: 0
(No malicious items detected)

Folders: 474
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\dmp, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\dmp\CCeuter.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\dmp\gredity.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\dmp\hiqege.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\dmp\Lnspmekiingcachesrv.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\dmp\Lnspmekiingcachetsk.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\aohghmighlieiainnegkcijnfilokake, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_1, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Extension Settings, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Storage, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Storage\ext, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Storage\ext\chrome-signin, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Storage\ext\chrome-signin\def, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Caps, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\reports, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\EVWhitelist, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\PepperFlash, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\pnacl, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\ShaderCache, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwiftShader, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\SwReporter, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\WidevineCDM, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\bookmarkbackups, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\events, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2016-02, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2016-03, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\archived\2016-04, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\gmp\WINNT_x86-msvc, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\minidumps, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\saved-telemetry-pings, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore-backups, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\chrome\idb\2918063365piupsah.files, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 

Files: 579
PUP.Optional.CrossAd.Gen, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, Quarantined, [fb189d14b6e349ed0e4937010ff42ed2], 
PUP.Optional.CrossAd.Gen, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, Quarantined, [4ec57d340f8a7bbb99bea98fb84b6898], 
PUP.Optional.YesSearches, C:\Program Files (x86)\hohobnd\gredity.exe, Quarantined, [32e16d446534f44228eb67457193b050], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\conf.json, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924.xpi, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\CCeuter.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\FFeuter.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\hiqege.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\Uninst.exe, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Program Files (x86)\hohobnd\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}, Quarantined, [36dd2e831b7e1a1ca3498fdd23e212ee], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Secure Preferences, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\ChromeDWriteFontCache, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Cookies, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Cookies-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Current Session, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Current Tabs, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension Cookies, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extension Cookies-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Favicons, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Favicons-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Google Profile.ico, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\History, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\History Provider Cache, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\History-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Last Session, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Last Tabs, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Login Data, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Login Data-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Network Action Predictor, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Network Action Predictor-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Network Persistent State, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Origin Bound Certs, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Origin Bound Certs-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Preferences, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\QuotaManager, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\QuotaManager-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\README, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Secure Preferencesgbak, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Shortcuts, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Shortcuts-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Top Sites, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Top Sites-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\TransportSecurity, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Visited Links, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Data, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Data-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Datagbak, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\Databases.db, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\databases\Databases.db-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\000003.log, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\CURRENT, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\LOCK, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\LOG, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\data_reduction_proxy_leveldb\LOG.old, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_1\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\manifest.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\8.1_0\_metadata\verified_contents.json, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\BF4B.tmp, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIcons\BF4C.tmp, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\6A91.tmp, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\JumpListIconsOld\6A92.tmp, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.youtube.com_0.localstorage, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Local Storage\https_www.youtube.com_0.localstorage-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\000003.log, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\CURRENT, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\LOCK, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\LOG, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\LOG.old, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Session Storage\MANIFEST-000001, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Google Docs.ico.md5, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\chrome_shutdown_ms.txt, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\First Run, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Local State, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Bloom, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Bloom Prefix Set, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Cookies, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Cookies-journal, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Csd Whitelist, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Download, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Download Whitelist, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Extension Blacklist, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing Inclusion Whitelist, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing IP Blacklist, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing UwS List, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Safe Browsing UwS List Prefix Set, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\metadata, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108\Crashpad\settings.dat, Quarantined, [20f36a476f2a0d291d9fe9838d785ca4], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\searchplugins\DD1B66D4.xml, Quarantined, [f320b2ff069315216952b3b9da2b7f81], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\searchplugins\DD1B66D4.xml, Quarantined, [848ff0c11089ff3704b73c30d62f857b], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\prefs.js, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\addons.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\blocklist.xml, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cert8.db, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\compatibility.ini, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\content-prefs.sqlite, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\cookies.sqlite, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\extensions.ini, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\healthreport.sqlite, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\key3.db, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\mimeTypes.rdf, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\parent.lock, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\permissions.sqlite, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\places.sqlite, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\pluginreg.dat, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\revocations.txt, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\search-metadata.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\secmod.db, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionCheckpoints.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\sessionstore.js, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\SiteSecurityServiceState.txt, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\times.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webappsstore.sqlite, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\xulstore.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\crashes\store.json.mozlz4, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\session-state.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\datareporting\state.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.FakeFFProfile, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\CCACCBF1-7AB4-4CF5-B32D-668C686A539F\webapps\webapps.json, Quarantined, [f71cc5ec56436fc7edd43e2eb74efe02], 
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://www.hohosearch.com/?ts=AHEqAH4pAHYsAU..&v=20160419&uid=CB75DF05542D4707119BC449A5FA9A4A&ptid=amz&mode=ffseng");), Replaced,[a96a436e5f3aee48b86a6607927339c7]
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (rt_size.first_run", false);
user_pref("browser.cache.disk.smart_size.use_old_max", false);
user_pref("browser.cache.frecency_experiment", 2);
user_pref("browser.do), Replaced,[848ff5bcddbc9a9cd54d68052bda8c74]
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (hile the application is running,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user), Replaced,[9d76743d4d4c6dc980a27fee4bbab050]
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (nning,
 * the changes will be overwritten when the application exits.
 *
 * To make a manual change to preferences, you can visit the URL about:config
 */

user_pref("accessibility.typeah), Replaced,[c3504e633366af8754ce5d10d92c04fc]
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (
user_pref("app.update.lastUpdateTime.background-update-timer", 0);
user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 0);
user_pref(), Replaced,[977c7b36a0f92d0953cf006d23e22ed2]
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (
user_pref("extensions.autoDisableScopes", 10);
user_pref("extensions.blocklist.pingCountVersion", -1);
user_pref("extensions.bootstrappedAddons", "{\"@E9438230-A7DF-4D1F-8F2D-CA1D0F0F7924\":{\"versio), Replaced,[8d86694845540630ea38a8c5f80d2dd3]
PUP.Optional.HohoSearch, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1\prefs.js, Good: (), Bad: (la.nextupdatetime", "1461157003769");
user_pref("browser.search.countryCode", "NL");
user_pref("browser.search.defaultenginename", "hohosearch");
user_pref("bro), Replaced,[18fb129ffa9f77bfc35fd19ce61fc13f]

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

#2
Metallica
Posted 21 April 2016 - 12:42 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts

How to remove a fake or infected FireFox profile.
  • Close Firefox so the running browser does not interfere with the fix.
  • Use the key combination Windows key + R to open the Run box.
  • Type or copy the command Firefox -P to open the Firefox profile manager.
    Choices.png
  • Make sure the profile called "Firefox Default" is selected (not the one simply called "default") and click on Delete Profile...
  • When prompted to ask if you want to delete the fake profile, click Delete Files.
    Delete.png
  • Select the option to Use the selected profile without asking at startup by putting a checkmark in the corresponding box.
    Check.png
    If more than one profiles are left in the list, select the one that you would prefer to use. Usually only the default profile will be left and automatically selected.
  • Click the Start Firefox button
  • From now on FireFox will open with the selected profile.
If there are other browser settings that you would like to change like the default search engine or the startpage, we advise to have a look at our Restore Browser page.

The information for this procedure was derived from: http://kb.mozillazin...default_profile
  • 0
Back to Malware Removal Guides and Tutorials



Also tagged with one or more of these keywords: GsearchFinder

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.