Removal instructions for HowToSuite

[Metallica]

What is HowToSuite?

The Malwarebytes research team has determined that HowToSuite is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

HowToSuite is a Mindspark/Ask toolbar.

How do I know if my computer is affected by HowToSuite?

You may see these browser extensions/add-ons:

You may see this entry in your list of installed software:

these warnings during install:

and this toolbar in your browser(s):

How did HowToSuite get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was downloaded from their site.

How do I remove HowToSuite?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

You can use their own uninstall instructions first, but I would advise to follow the steps below anyway.

• Please download Malwarebytes Anti-Malware to your desktop.
• Double-click mbam-setup-version.exe and follow the prompts to install the program.
• At the end, be sure a check-mark is placed next to the following:
  • Enable free trial of Malwarebytes Anti-Malware Premium
  • Launch Malwarebytes Anti-Malware
• Then click Finish.
• If an update is found, you will be prompted to download and install the latest version.
• Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
• When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
• Restart your computer when prompted to do so.

Is there anything else I need to do to get rid of HowToSuite?

• If you are using Chrome, you may have to remove the Extension manually under Tools > Settings > Extensions. Remove the checkmark and click on the bin behind the HowToSuite entry.
• If you are using Chrome or Firefox, you should be redirected to our Restore Browser page. You can read there how to fix additional browser redirect methods.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HowToSuite hijacker. It would have warned you before the hijacker could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.tb.ask.com/index.jhtml?n={n}&p2={p2ie}&ptb={ptb}R3 - URLSearchHook: (no name) - {0b83c24b-a962-4a80-a942-4b245604243c} - C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwSrcAs.dllO2 - BHO: Search Assistant BHO - {24c3e2a5-54b3-4901-8c87-d178e6b756c1} - C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwSrcAs.dllO2 - BHO: Toolbar BHO - {5465b327-dc50-4026-8eeb-dccb70290b62} - C:\PROGRA~2\HOWTOS~1\bar\1.bin\fwbar.dllO3 - Toolbar: HowToSuite - {2f06e199-4985-4aaa-8639-78404d5da516} - C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbar.dllO4 - HKLM\..\Run: [HowToSuite EPM Support] "C:\PROGRA~2\HOWTOS~1\bar\1.bin\fwmedint.exe" t8EPMSup.dll,SO23 - Service: HowToSuiteService (HowToSuite_fwService) - Mindspark - C:\PROGRA~2\HOWTOS~1\bar\1.bin\fwbarsvc.exe

Possible signs in a FRST log:

 (Mindspark) C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbarsvc.exe (Mindspark) C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AppIntegrator.exe (Mindspark) C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AppIntegrator64.exe HKLM-x32\...\Run: [HowToSuite EPM Support] => C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwmedint.exe [11600 2015-11-02] (Mindspark) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.tb.ask.com/index.jhtml?n={n}&p2={p2}&ptb={ptb} URLSearchHook: HKCU - (No Name) - {0b83c24b-a962-4a80-a942-4b245604243c} - C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwSrcAs.dll (Mindspark) SearchScopes: HKLM-x32 -> {3decfe3a-1a5e-4190-90b8-384f8ea10d5a} URL = hxxp://int.search.tb.ask.com/search/GGmain.jhtml?p2={p2}&ptb={ptb}&ind={ind}&n=781c2dff&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKCU -> {3decfe3a-1a5e-4190-90b8-384f8ea10d5a} URL = hxxp://int.search.tb.ask.com/search/GGmain.jhtml?p2={p2}&ptb={ptb}&ind={ind}&n={nss}&psa=&st=sb&searchfor={searchTerms} BHO-x32: Search Assistant BHO -> {24c3e2a5-54b3-4901-8c87-d178e6b756c1} -> C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwSrcAs.dll [2015-11-02] (Mindspark) BHO-x32: Toolbar BHO -> {5465b327-dc50-4026-8eeb-dccb70290b62} -> C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbar.dll [2015-11-02] (Mindspark) Toolbar: HKLM-x32 - HowToSuite - {2f06e199-4985-4aaa-8639-78404d5da516} - C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbar.dll [2015-11-02] (Mindspark) Toolbar: HKCU -> No Name - {2F06E199-4985-4AAA-8639-78404D5DA516} -  No File FF DefaultSearchEngine: Ask Web Search FF SelectedSearchEngine: Ask Web Search FF Homepage: hxxp://home.tb.ask.com/index.jhtml?ptb={ptbff}&n={nff}&p2={p2ff} FF Keyword.URL: hxxp://int.search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb={ptbff}&n={nff}&ind={ind}&p2={p2ff}&searchfor= FF SearchPlugin: C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\searchplugins\ask-web-search.xml [2015-11-27] FF Extension: HowToSuite - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\fwffxtbr@free.howtosuite.com [2015-11-27] [not signed] CHR NewTab: Default -> "chrome-extension://obnljkamlkedffammjddflhjepplhnoj/stubby.html" CHR Extension: (HowToSuite) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj [2015-11-27] R2 HowToSuite_fwService; C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbarsvc.exe [89424 2015-11-02] (Mindspark) C:\Users\{username}\AppData\LocalLow\HowToSuite_fw C:\Users\{username}\AppData\Local\HowToSuite_fw C:\Program Files (x86)\HowToSuite_fwHowToSuite Internet Explorer Toolbar (HKLM-x32\...\HowToSuite_fwbar Uninstall Internet Explorer) (Version:  - Mindspark Interactive Network) <==== ATTENTION

An excerpt from the Malwarebytes Anti-Malware scan log:

(full log available on request)

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 27/11/2015Scan Time: 10:03Logfile: mbamHowToSuite.txtAdministrator: YesVersion: 2.2.0.1020Malware Database: v2015.11.27.01Rootkit Database: v2015.11.26.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 310295Time Elapsed: 5 min, 5 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 151PUP.Optional.AudioToAudioToolBar, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HowToSuite_fwService, Quarantined, [df1e6a183b50270fd4a147e47d83b64a], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3eda9d27-f922-4e04-8dc5-284549689d56}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{e8730a64-63aa-45f5-a5a2-0395f2221d2f}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{062AC1D7-FF1C-47AE-9354-A81E537F631A}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{062AC1D7-FF1C-47AE-9354-A81E537F631A}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{062AC1D7-FF1C-47AE-9354-A81E537F631A}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{e8730a64-63aa-45f5-a5a2-0395f2221d2f}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{e8730a64-63aa-45f5-a5a2-0395f2221d2f}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3EDA9D27-F922-4E04-8DC5-284549689D56}, Quarantined, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{24c3e2a5-54b3-4901-8c87-d178e6b756c1}, Quarantined, [b449c6bc72196dc95e0e94f89470718f], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{24C3E2A5-54B3-4901-8C87-D178E6B756C1}, Quarantined, [b449c6bc72196dc95e0e94f89470718f], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{24C3E2A5-54B3-4901-8C87-D178E6B756C1}, Quarantined, [b449c6bc72196dc95e0e94f89470718f], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{24C3E2A5-54B3-4901-8C87-D178E6B756C1}, Quarantined, [b449c6bc72196dc95e0e94f89470718f], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{24C3E2A5-54B3-4901-8C87-D178E6B756C1}, Quarantined, [b449c6bc72196dc95e0e94f89470718f], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{2f06e199-4985-4aaa-8639-78404d5da516}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{00cb0ead-7db9-4fcb-8d5f-e257fa2d1db6}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{8710590e-9521-4a32-9068-3445e1676f7b}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{0A7DE24B-7163-471F-BE17-EC45CEBD0E23}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{22CE5DC4-99F0-4887-9AC1-68C195B7E4B0}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{B208B2E0-2C7A-48BC-BC5D-AEACB70EBB11}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{B2C592ED-D11B-459E-947F-341C55E23C19}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{BB7656D1-8C88-4003-8485-804D079CA4A2}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{C370E345-E023-45B3-828F-1D20F260738D}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{0A7DE24B-7163-471F-BE17-EC45CEBD0E23}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{22CE5DC4-99F0-4887-9AC1-68C195B7E4B0}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B208B2E0-2C7A-48BC-BC5D-AEACB70EBB11}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B2C592ED-D11B-459E-947F-341C55E23C19}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BB7656D1-8C88-4003-8485-804D079CA4A2}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{C370E345-E023-45B3-828F-1D20F260738D}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{0A7DE24B-7163-471F-BE17-EC45CEBD0E23}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{22CE5DC4-99F0-4887-9AC1-68C195B7E4B0}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B208B2E0-2C7A-48BC-BC5D-AEACB70EBB11}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B2C592ED-D11B-459E-947F-341C55E23C19}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BB7656D1-8C88-4003-8485-804D079CA4A2}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{C370E345-E023-45B3-828F-1D20F260738D}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8710590e-9521-4a32-9068-3445e1676f7b}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{8710590e-9521-4a32-9068-3445e1676f7b}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.SettingsPlugin.1, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.SettingsPlugin, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.SettingsPlugin, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.SettingsPlugin, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.SettingsPlugin.1, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.SettingsPlugin.1, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{00CB0EAD-7DB9-4FCB-8D5F-E257FA2D1DB6}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{00CB0EAD-7DB9-4FCB-8D5F-E257FA2D1DB6}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{00CB0EAD-7DB9-4FCB-8D5F-E257FA2D1DB6}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5465b327-dc50-4026-8eeb-dccb70290b62}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{5465B327-DC50-4026-8EEB-DCCB70290B62}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{5465B327-DC50-4026-8EEB-DCCB70290B62}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{5465B327-DC50-4026-8EEB-DCCB70290B62}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5465B327-DC50-4026-8EEB-DCCB70290B62}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{2f06e199-4985-4aaa-8639-78404d5da516}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{2F06E199-4985-4AAA-8639-78404D5DA516}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{2F06E199-4985-4AAA-8639-78404D5DA516}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HowToSuite_fwbar Uninstall Internet Explorer, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{38c2852e-28f3-4044-8e0f-9b3a71c61d20}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{bd005a33-16cf-41ef-b3ea-1fbf7267ea78}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{7013DC66-93CD-4BDB-97A6-1DC7E8FE0418}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{83302AA4-B0CE-4612-88DF-494CAAF03690}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{BE257BB2-9F90-4092-BB74-B5D4A48B7AF2}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7013DC66-93CD-4BDB-97A6-1DC7E8FE0418}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{83302AA4-B0CE-4612-88DF-494CAAF03690}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BE257BB2-9F90-4092-BB74-B5D4A48B7AF2}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7013DC66-93CD-4BDB-97A6-1DC7E8FE0418}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{83302AA4-B0CE-4612-88DF-494CAAF03690}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{BE257BB2-9F90-4092-BB74-B5D4A48B7AF2}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{bd005a33-16cf-41ef-b3ea-1fbf7267ea78}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{bd005a33-16cf-41ef-b3ea-1fbf7267ea78}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.ToolbarProtector.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.ToolbarProtector, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.ToolbarProtector, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.ToolbarProtector, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.ToolbarProtector.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.ToolbarProtector.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{38C2852E-28F3-4044-8E0F-9B3A71C61D20}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{D03BADDB-A0F7-46F4-83D0-CC418A3CD8E8}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.HTMLMenu.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.HTMLMenu, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.HTMLMenu, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.HTMLMenu, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.HTMLMenu.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.HTMLMenu.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D03BADDB-A0F7-46F4-83D0-CC418A3CD8E8}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{D03BADDB-A0F7-46F4-83D0-CC418A3CD8E8}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{7c719bf2-3e13-4f45-9e6d-905675deffee}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{891b8baa-ee0a-4ed1-bd07-aa34217e4901}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{10B22BD6-8FB1-41B9-B1C8-7AFE4A58AB45}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{5D86373F-31D0-458D-8A88-E93C68FD7C15}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{10B22BD6-8FB1-41B9-B1C8-7AFE4A58AB45}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{5D86373F-31D0-458D-8A88-E93C68FD7C15}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{10B22BD6-8FB1-41B9-B1C8-7AFE4A58AB45}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{5D86373F-31D0-458D-8A88-E93C68FD7C15}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{891b8baa-ee0a-4ed1-bd07-aa34217e4901}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{891b8baa-ee0a-4ed1-bd07-aa34217e4901}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{7C719BF2-3E13-4F45-9E6D-905675DEFFEE}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9db2ac9f-bc86-4e9f-8311-5e3fa6f56e98}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{9d907ed9-2fac-4659-ae5b-cc8accc33608}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{2EF58851-8594-45BD-A6E5-5E3A8982BE59}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{62E114F5-6DC1-49D1-BE85-06D520AD964F}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{D2839B12-B7DD-42E8-A8DA-3898D5A4B35B}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{EDA68F89-49F4-49B2-A17E-E9CEFA51F6FD}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2EF58851-8594-45BD-A6E5-5E3A8982BE59}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{62E114F5-6DC1-49D1-BE85-06D520AD964F}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{D2839B12-B7DD-42E8-A8DA-3898D5A4B35B}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EDA68F89-49F4-49B2-A17E-E9CEFA51F6FD}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2EF58851-8594-45BD-A6E5-5E3A8982BE59}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{62E114F5-6DC1-49D1-BE85-06D520AD964F}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{D2839B12-B7DD-42E8-A8DA-3898D5A4B35B}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EDA68F89-49F4-49B2-A17E-E9CEFA51F6FD}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9d907ed9-2fac-4659-ae5b-cc8accc33608}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{9d907ed9-2fac-4659-ae5b-cc8accc33608}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{9DB2AC9F-BC86-4E9F-8311-5E3FA6F56E98}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9DB2AC9F-BC86-4E9F-8311-5E3FA6F56E98}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{cbb315d3-c5a7-4777-a6ca-43d2bec8c41a}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.PseudoTransparentPlugin.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.PseudoTransparentPlugin, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.PseudoTransparentPlugin, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.PseudoTransparentPlugin, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.PseudoTransparentPlugin.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.PseudoTransparentPlugin.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{CBB315D3-C5A7-4777-A6CA-43D2BEC8C41A}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{CBB315D3-C5A7-4777-A6CA-43D2BEC8C41A}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{d405558c-4fb7-4051-977a-0b779d2ebde1}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{D405558C-4FB7-4051-977A-0B779D2EBDE1}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{14a4a313-0153-490e-a97a-553c24fa647e}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\TYPELIB\{fe85cb7b-84eb-4b22-9d6d-01b8ce5e7de9}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{8E9F7E0C-7088-476C-87BA-3473E754CB51}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\INTERFACE\{EF152959-CCC0-4B76-BB2C-66EF80365CC5}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{8E9F7E0C-7088-476C-87BA-3473E754CB51}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EF152959-CCC0-4B76-BB2C-66EF80365CC5}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{8E9F7E0C-7088-476C-87BA-3473E754CB51}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EF152959-CCC0-4B76-BB2C-66EF80365CC5}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{fe85cb7b-84eb-4b22-9d6d-01b8ce5e7de9}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{fe85cb7b-84eb-4b22-9d6d-01b8ce5e7de9}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.HTMLPanel.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\HowToSuite_fw.HTMLPanel, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.HTMLPanel, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.HTMLPanel, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\CLASSES\HowToSuite_fw.HTMLPanel.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\HowToSuite_fw.HTMLPanel.1, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{14A4A313-0153-490E-A97A-553C24FA647E}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{14A4A313-0153-490E-A97A-553C24FA647E}, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\HowToSuite_fw, Quarantined, [f904a6dc1279fe3861b2bb26b54eb64a], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22CE5DC4-99F0-4887-9AC1-68C195B7E4B0}, Quarantined, [50adcfb394f7b0867f0edab73bc80af6], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{49C4C68B-F9F9-4FB9-809F-9F1AFF4FB054}, Quarantined, [97664e34810ad2645736b4dd09fa24dc], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9B17E23F-EC09-4AEA-A7CA-76C4A297FA0D}, Quarantined, [4cb1c8ba25668ea8820b6a27c43f4ab6], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B208B2E0-2C7A-48BC-BC5D-AEACB70EBB11}, Quarantined, [f607483a6f1cab8b731a7c15a063af51], PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DECFE3A-1A5E-4190-90B8-384F8EA10D5A}, Quarantined, [56a77c065e2d41f5cadce9c925de9967], PUP.Optional.MindSpark, HKCU\SOFTWARE\HowToSuite_fw, Quarantined, [b4491270682361d59081459c8e7527d9], PUP.Optional.MindSpark, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\HowToSuite_fw, Quarantined, [db22186a7912e650828eb32e10f3748c], PUP.Optional.ASK, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3DECFE3A-1A5E-4190-90B8-384F8EA10D5A}, Quarantined, [31cce0a2a2e9b5819709ffb39271639d], Registry Values: 18PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|HowToSuite EPM Support, "C:\PROGRA~2\HOWTOS~1\bar\1.bin\fwmedint.exe" t8EPMSup.dll,S, Quarantined, [d92482002d5ebc7ae28a0389ed1702fe]PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{2F06E199-4985-4AAA-8639-78404D5DA516}, �� /�I�J�9x@M]� , Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b]PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{2F06E199-4985-4AAA-8639-78404D5DA516}, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{2F06E199-4985-4AAA-8639-78404D5DA516}, Quarantined, [f409671b147731050eb9321ed929619f], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS\{0b83c24b-a962-4a80-a942-4b245604243c}, Quarantined, [a6575d2554378aac837dbe60a95914ec], PUP.Optional.MindSpark, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\URLSEARCHHOOKS|{0B83C24B-A962-4A80-A942-4B245604243C}, Quarantined, [a6575d2554378aac837dbe60a95914ec], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{2f06e199-4985-4aaa-8639-78404d5da516}, Quarantined, [6895e89ae6a5f93d7d4acd8315edd729], PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{22ce5dc4-99f0-4887-9ac1-68c195b7e4b0}|AppPath, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin, Quarantined, [50adcfb394f7b0867f0edab73bc80af6]PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{49c4c68b-f9f9-4fb9-809f-9f1aff4fb054}|AppPath, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin, Quarantined, [97664e34810ad2645736b4dd09fa24dc]PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9b17e23f-ec09-4aea-a7ca-76c4a297fa0d}|AppPath, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin, Quarantined, [4cb1c8ba25668ea8820b6a27c43f4ab6]PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{9db2ac9f-bc86-4e9f-8311-5e3fa6f56e98}|AppPath, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin, Quarantined, [6994fd850883a98d6f1eb2df778ce818]PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{b208b2e0-2c7a-48bc-bc5d-aeacb70ebb11}|AppPath, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin, Quarantined, [f607483a6f1cab8b731a7c15a063af51]PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN\FEATURECONTROL\FEATURE_BROWSER_EMULATION|CrExtPfw.exe, 0, Quarantined, [e716463cb9d2092d5ed0a14060a3b34d]PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3decfe3a-1a5e-4190-90b8-384f8ea10d5a}|DisplayName, Ask Web Search, Quarantined, [56a77c065e2d41f5cadce9c925de9967]PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3decfe3a-1a5e-4190-90b8-384f8ea10d5a}|URL, http://int.search.tb.ask.com/search/GGmain.jhtml?p2={p2}&ptb={ptb}&ind={ind}&n={nss}&psa=&st=sb&searchfor={searchTerms}, Quarantined, [22db7210c0cb6dc9cbda01b105febe42]PUP.Optional.MindSpark, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HowToSuite_fwService|ImagePath, C:\PROGRA~2\HOWTOS~1\bar\1.bin\fwbarsvc.exe, Quarantined, [738a1d655437cc6aba3b2869976cbc44]PUP.Optional.ASK, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3decfe3a-1a5e-4190-90b8-384f8ea10d5a}|DisplayName, Ask Web Search, Quarantined, [31cce0a2a2e9b5819709ffb39271639d]PUP.Optional.ASK, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{3decfe3a-1a5e-4190-90b8-384f8ea10d5a}|URL, http://int.search.tb.ask.com/search/GGmain.jhtml?p2={p2}&ptb={ptb}&ind={ind}&n={nss}&psa=&st=sb&searchfor={searchTerms}, Quarantined, [24d9453d25664beb0699f8ba45be48b8]Registry Data: 1PUP.Optional.ASK, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://home.tb.ask.com/index.jhtml?n={n}&p2={p2}&ptb={ptb},'>http://home.tb.ask.com/index.jhtml?n={n}&p2={p2}&ptb={ptb}, Good: (www.google.com), Bad: (http://home.tb.ask.com/index.jhtml?n={n}&p2={p2}&ptb={ptb}),Replaced,[e11ca2e0aae192a4d1ff66042dd70000]Folders: 148PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\HowToSuite_fw, Quarantined, [f5087f033d4e8fa7ae63bed17a89cd33], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\0f21f5f88ab18f8107fdcffdf8c5c898ec8c3ddb, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\0f21f5f88ab18f8107fdcffdf8c5c898ec8c3ddb\1.2.3, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e\1.2.0, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Settings, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\History, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw, Delete-on-Reboot, [ca33176bafdc85b153d7d4be01017b85], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw, Quarantined, [02fbf58d1c6f9f979d8e1d75a161f60a], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\components, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\icons, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\images, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\js, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\native, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\native\libs, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\shared, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\_metadata, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\chrome, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\META-INF, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\plugins, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], Files: 689PUP.Optional.AudioToAudioToolBar, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbarsvc.exe, Delete-on-Reboot, [df1e6a183b50270fd4a147e47d83b64a], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AppIntegrator.exe, Delete-on-Reboot, [35c85a28305b8babd29a355718ec0af6], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\BAT.dll, Delete-on-Reboot, [07f619696f1ca1950b613d4f8f75a65a], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwdlghk.dll, Delete-on-Reboot, [cd30fa8882099a9ce884ff8d31d331cf], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwSrcAs.dll, Delete-on-Reboot, [b449c6bc72196dc95e0e94f89470718f], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\ToolbarGuard.dll, Delete-on-Reboot, [b746037f404bc57185e7dfad6d97b34d], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\HiddenToolbarReminder.dll, Delete-on-Reboot, [34c9c7bb29621d19690305870df73ac6], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AppIntegratorStub.dll, Delete-on-Reboot, [b34aa0e27e0d6acc422a85073aca57a9], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AppIntegrator64.exe, Delete-on-Reboot, [be3ff290d7b4ed499dcfeaa230d43ac6], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwmedint.exe, Quarantined, [d92482002d5ebc7ae28a0389ed1702fe], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbar.dll, Quarantined, [20dd4d35ff8c2d09289fa5abfd05758b], PUP.Optional.MindSpark, C:\Users\{username}\Desktop\HowToSuite.exe, Quarantined, [d02d5032a5e6999d8fdd63292bd9a858], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\HowToSuite_fw\{ptbff}.sqlite, Quarantined, [f5087f033d4e8fa7ae63bed17a89cd33], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\searchplugins\ask-web-search.xml, Quarantined, [45b8e0a2f09bc274b65ca1ee82817c84], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\UrlFolderExtension.ufm, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\UrlFolderExtension.uf1, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\background.html, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\lang-en.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\manifest.json, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\reminder.html, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\window.html, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\js\Background.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\js\Reminder.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\js\Review.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\js\Widget.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\16bc6df399154d51dd9dd6dadb8d88625cfbc08b\1.2.0\vicinio-data\icon-1436887596461.bmp, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e\1.2.0\manifest.json, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e\1.2.0\js\Background.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e\1.2.0\js\Widget.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e\1.2.0\vicinio-data\icon-1444838269165.bmp, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\8fd4683d8d862b8564aca600e8e89608d4dda76e\1.2.0\vicinio-data\icon-1444838269165.png, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\App.html, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\Background.html, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\lang-en.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\manifest.json, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\Player.html, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\css\App.css, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\css\App.min.css, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\css\Player.css, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\css\Player.min.css, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\js\App.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\js\Background.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\js\Player.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\js\Review.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\libs\anemone-1.2.7.js, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\vicinio-data\icon-1444838255015.bmp, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\vicinio-data\icon-1444838255015.bmp,hot,flags=none.png, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\HowToSuite_fw\e309e9e57935a9bd12c297eb25238e554265f75d\1.1.6\vicinio-data\icon-1444838255015.png, Quarantined, [0df08af890fb96a063b0bfd022e1dc24], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_howtosuite.dl.myway.com_0.localstorage, Quarantined, [b04d7210107be05637ddc4cb3ec5c040], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_howtosuite.dl.myway.com_0.localstorage-journal, Quarantined, [718c0c76602bc96d50c4a2ed40c36a96], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_howtosuite.dl.tb.ask.com_0.localstorage, Quarantined, [88758cf6494239fd0b0aeda209fa5da3], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_howtosuite.dl.tb.ask.com_0.localstorage-journal, Quarantined, [f00d0181246753e34ec71f70669d1ae6], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Settings\ToolbarStructure.json, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Settings\prevcfg2.htm, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015E71D, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015E9FC, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015EB05.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015EB15.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015EB44.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015EB54.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015EC4E.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015ED48.cab, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015F3B0.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015F49B.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015F575.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015F66F.cab, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015FA67.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015FB51.cab, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015FEBC.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015FEDC.bmp, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\0015FEEB.cab, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\Cache\files.ini, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Users\{username}\AppData\LocalLow\HowToSuite_fw\bar\History\search3, Quarantined, [c13cc1c1d3b85bdbbaea1c73b64d21df], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\logo.bmp, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwdlghk64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AppIntegratorStub64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AssistMonitor.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\AssistMonitor64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\CrExt.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\CrExtPfw.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\DpnMngr.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\FF-NativeMessagingDispatcher.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwbprtct.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwhighin.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwhtmlmu.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwhttpct.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwidle.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwregiet.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwskin.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwskplay.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\fwtpinst.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\HkFxMgr.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\HkFxMgr64.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\InstallEnabler.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\t8EPMSup.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\T8EXTEX.DLL, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\T8EXTPEX.DLL, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\T8HTML.DLL, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\t8Res.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\T8TICKER.DLL, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\ToolbarGuard64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\TPIManagerConsole.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\Verify.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\Apa\arbiter.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\Apa\arbiter64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\Apa\Bar\assist.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\Apa\Bar\config.xml, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\Apa\Dialog\assist.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\Apa\Dialog\config.xml, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_default_search_provider\arbiter.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_default_search_provider\arbiter64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_default_search_provider\assist.exe, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_default_search_provider\config.xml, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_enable\arbiter.dll, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_enable\arbiter64.dll, Delete-on-Reboot, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\1.bin\assists\ie_enable\config.xml, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\assists\common.t8s, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\gen1\common.t8s, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\Message\common.t8s, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Program Files (x86)\HowToSuite_fw\bar\Settings\s_pid.dat, Quarantined, [35c8fd85a8e366d00a1dc6f38a79ca36], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_free.howtosuite.com_0.localstorage, Quarantined, [f90488fa7b107abc52fc746d0bf830d0], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_free.howtosuite.com_0.localstorage-journal, Quarantined, [ed104a385a317bbbd6784b96927158a8], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_obnljkamlkedffammjddflhjepplhnoj_0.localstorage, Quarantined, [fc01077bee9d50e6de72ebf670938d73], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_obnljkamlkedffammjddflhjepplhnoj_0.localstorage-journal, Quarantined, [e914acd6b0db8da99db333ae739046ba], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnljkamlkedffammjddflhjepplhnoj\12.14.8.33656_0\manifest.json, Quarantined, [17e681014c3fde58fc0ac2d0bc48a45c], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\install.rdf, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\bootstrap.js, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\chrome.manifest, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\install_old.rdf, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\chrome\fwffxtbr.jar, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\META-INF\manifest.mf, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\META-INF\zigbert.rsa, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\META-INF\zigbert.sf, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.MindSpark, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\fwffxtbr@free.howtosuite.com\plugins\NativeMessagingDispatcher.dll, Quarantined, [f30a562cc7c4b77f7d857f13e51f8f71], PUP.Optional.ASK, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("keyword.URL", "http://int.search.tb.ask.com/search/GGmain.jhtml?st=kwd&ptb={ptbff}&n={nff}&ind={ind}&p2={p2ff}&searchfor="), Replaced,[f805bcc60b80b28443b5d1be689cc23e]PUP.Optional.ASK, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (browser.startup.homepage", "http://home.tb.ask.com), Replaced,[22dbd2b0a7e4a78ff15e524448bc2ed2]PUP.Optional.ASK, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Bad: (browser.startup.homepage.tb", "http://home.tb.ask.com), Replaced,[29d4364ce0ab44f2430cff974db748b8]Physical Sectors: 0(No malicious items detected)(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.