What is SparPilot?
The Malwarebytes research team has determined that SparPilot is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is affected by SparPilot?
You may see this browser extension:
How did SparPilot get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove SparPilot?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-{version}.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to:
Launch Malwarebytes Anti-Malware - Then click Finish.
- Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
- If an update is available, it will be implemented before the rest of the scanning procedure.
- When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
- Restart your computer when prompted to do so.
- No, Malwarebytes' Anti-Malware removes SparPilot completely.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the SparPilot hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.
Technical details for experts
Possible signs in FRST logs:
FF user.js: detected! => C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\user.js [2016-10-25] FF Extension: Sparpilot - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\[email protected] [2016-10-25] FF Extension: QuickTime Shield - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\{e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi [2016-10-25] [not signed] C:\Windows\unins000.exe C:\Windows\unins000.dat C:\Users\{username}\AppData\Local\SparPilotAlterations made by the installer:
File system details [View: All details] (Selection) --------------------------------------------------- Adds the folder C:\Users\{username}\AppData\Local\SparPilot Adds the file bootstrapped.txt"="6/15/2016 9:49 PM, 175 bytes, A Adds the file extensions_json.txt"="6/15/2016 9:49 PM, 4805 bytes, A Adds the file FFInstaller_autocheck.exe"="6/23/2016 3:37 PM, 429568 bytes, A Adds the file prefs_base.txt"="6/15/2016 9:49 PM, 596 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extension-data\[email protected] Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions Adds the file {e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi"="10/25/2016 12:49 PM, 45849 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected] Adds the file bootstrap.js"="4/15/2016 2:06 PM, 593 bytes, A Adds the file install.rdf"="6/8/2016 6:42 PM, 4705 bytes, A Adds the file package.json"="6/8/2016 6:42 PM, 4516 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data Adds the file config.json"="4/15/2016 2:06 PM, 57 bytes, A Adds the file icon128.png"="4/15/2016 2:06 PM, 9460 bytes, A Adds the file icon48.png"="4/15/2016 2:06 PM, 2345 bytes, A Adds the file icon64.png"="4/15/2016 2:06 PM, 3409 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld Adds the file domains.json"="4/15/2016 2:06 PM, 1079909 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images Adds the file bar-bg.png"="4/15/2016 2:06 PM, 732 bytes, A Adds the file bar-logo.png"="4/15/2016 2:06 PM, 3546 bytes, A Adds the file bar-logo-small.png"="4/15/2016 2:06 PM, 4874 bytes, A Adds the file bg-fade-line.png"="4/15/2016 2:06 PM, 150 bytes, A Adds the file diagonal-line.png"="4/15/2016 2:06 PM, 491 bytes, A Adds the file list-item-bg.png"="4/15/2016 2:06 PM, 8341 bytes, A Adds the file list-item-bg-act.png"="4/15/2016 2:06 PM, 11498 bytes, A Adds the file list-item-details-bg.png"="4/15/2016 2:06 PM, 2662 bytes, A Adds the file list-item-details-bg-act.png"="4/15/2016 2:06 PM, 1661 bytes, A Adds the file nav-extraitem-bg-act.png"="4/15/2016 2:06 PM, 3015 bytes, A Adds the file nav-item-bg.png"="4/15/2016 2:06 PM, 630 bytes, A Adds the file nav-item-bg-act.png"="4/15/2016 2:06 PM, 576 bytes, A Adds the file sprite.png"="4/15/2016 2:06 PM, 8422 bytes, A Adds the file stars-empty.png"="4/15/2016 2:06 PM, 439 bytes, A Adds the file stars-empty-big.png"="4/15/2016 2:06 PM, 890 bytes, A Adds the file stars-full.png"="4/15/2016 2:06 PM, 739 bytes, A Adds the file stars-full-big.png"="4/15/2016 2:06 PM, 863 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib Adds the file jquery.hoverIntent.min.js"="4/15/2016 2:06 PM, 1489 bytes, A Adds the file jquery.js"="4/15/2016 2:06 PM, 96381 bytes, A Adds the file jquery.ui.min.js"="4/15/2016 2:06 PM, 61655 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod Adds the file custom.js"="4/15/2016 2:06 PM, 6437 bytes, A Adds the file toolbar.css"="4/15/2016 2:06 PM, 44567 bytes, A Adds the file toolbar.js"="4/15/2016 2:06 PM, 6792 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib Adds the file config.js"="6/8/2016 6:42 PM, 3257 bytes, A Adds the file controller.js"="4/15/2016 2:06 PM, 1719 bytes, A Adds the file main.js"="4/15/2016 2:06 PM, 496 bytes, A Adds the file preisheld.js"="4/15/2016 2:06 PM, 36382 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service Adds the file promotion-dynamic.js"="4/15/2016 2:06 PM, 546 bytes, A Adds the file promotion-static.js"="4/15/2016 2:06 PM, 1076 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF Adds the file manifest.mf"="6/9/2016 7:35 AM, 7377 bytes, A Adds the file mozilla.rsa"="6/9/2016 7:35 AM, 4194 bytes, A Adds the file mozilla.sf"="6/9/2016 7:35 AM, 121 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async Adds the file package.json"="4/15/2016 2:06 PM, 1730 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\lib Adds the file async.js"="4/15/2016 2:06 PM, 34652 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge Adds the file index.js"="4/15/2016 2:06 PM, 1564 bytes, A Adds the file package.json"="4/15/2016 2:06 PM, 1574 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\test Adds the file deepest-merge.js"="4/15/2016 2:06 PM, 1125 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api Adds the file api.js"="4/15/2016 2:06 PM, 17055 bytes, A Adds the file package.json"="4/15/2016 2:06 PM, 320 bytes, A Adds the file sparpilot-api.js"="4/15/2016 2:06 PM, 153 bytes, A Adds the file task.js"="4/15/2016 2:06 PM, 3349 bytes, A Adds the file tasks.js"="4/15/2016 2:06 PM, 2087 bytes, A Adds the file utils.js"="4/15/2016 2:06 PM, 5951 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links Adds the file package.json"="4/15/2016 2:06 PM, 328 bytes, A Adds the file trusted-links.js"="4/15/2016 2:06 PM, 2701 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected]\simple-storage In the existing folder C:\Windows Adds the file unins000.dat"="10/25/2016 12:49 PM, 3726 bytes, A Adds the file unins000.exe"="10/25/2016 12:49 PM, 719521 bytes, A Registry details [View: All details] (Selection) ------------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SparPilot]Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 10/25/2016 Scan Time: 5:48 PM Logfile: mbamSparPilot.txt Administrator: Yes Version: 2.2.1.1043 Malware Database: v2016.10.25.11 Rootkit Database: v2016.09.26.02 License: Premium Malware Protection: Disabled Malicious Website Protection: Enabled Self-protection: Enabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {username} Scan Type: Threat Scan Result: Completed Objects Scanned: 326254 Time Elapsed: 8 min, 34 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 19 PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected], Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\lib, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\test, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot, Quarantined, [0a655a43bedc58de3fa80517d62f837d], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected], Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected]\simple-storage, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], Files: 60 PUP.Optional.SparPilot, C:\Users\{username}\Desktop\sparpilot_david_27.exe, Quarantined, [9fd05e3fc7d372c4826375a7ea1bdc24], PUP.Optional.QuicktimeShield, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\{e1722817-ebdb-43ad-aa06-5776b048aa95}.xpi, Quarantined, [93dc623b7f1b39fd4e9bb16b4fb6e21e], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\bootstrap.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\install.rdf, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\config.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\icon128.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\icon48.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\icon64.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\domains.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bar-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bar-logo-small.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bar-logo.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\bg-fade-line.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\diagonal-line.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-details-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\list-item-details-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\nav-extraitem-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\nav-item-bg-act.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\nav-item-bg.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\sprite.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-empty-big.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-empty.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-full-big.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\images\stars-full.png, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib\jquery.hoverIntent.min.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib\jquery.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\lib\jquery.ui.min.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod\custom.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod\toolbar.css, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\data\preisheld\pagemod\toolbar.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\config.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\controller.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\main.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\preisheld.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service\promotion-dynamic.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\lib\service\promotion-static.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF\manifest.mf, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF\mozilla.rsa, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\META-INF\mozilla.sf, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\async\lib\async.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\index.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\deepest-merge\test\deepest-merge.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\api.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\sparpilot-api.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\task.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\tasks.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\sparpilot-api\utils.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links\package.json, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\[email protected]\node_modules\trusted-links\trusted-links.js, Quarantined, [185744597723e353e7ff42da52b3eb15], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\bootstrapped.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\extensions_json.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\FFInstaller_autocheck.exe, Quarantined, [0a655a43bedc58de3fa80517d62f837d], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Local\SparPilot\prefs_base.txt, Quarantined, [0a655a43bedc58de3fa80517d62f837d], PUP.Optional.SparPilot, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\jetpack\[email protected]\simple-storage\store.json, Quarantined, [c7a8d2cbdcbeea4cda0ef824c342966a], Physical Sectors: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention