Jump to content

Removal instructions for WebDiscover Browser


Recommended Posts

  • Staff

What is WebDiscover Browser?

The Malwarebytes research team has determined that WebDiscover Browser is adware. These adware applications display advertisements not originating from the sites you are browsing.

How do I know if my computer is affected by WebDiscover Browser?

You may see this entry in your list of installed programs:

warning4.png

and this warning during install:

main.png

and this icon and searchbar on your desktop:

icons.png

these tasks in your Task Scheduler:

warning3.png

The adware installs its own browser, a Chromium project with these characteristics:

warning2.png

and these extensions:

warning5.png

How did WebDiscover Browser get on my computer?

Adware applications use different methods for distributing themselves. This particular one is downloaded as part of a software bundle.

How do I remove WebDiscover Browser?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of WebDiscover Browser?
  • No, Malwarebytes' Anti-Malware removes WebDiscover Browser completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this adware application.

Technical details for experts

You will see these signs in a HijackThis log:

O4 - HKCU\..\Run: [WebDiscoverBrowser] C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe --dockedO23 - Service: WebDiscover Browser Startup Service - Unknown owner - C:\Program Files\WebDiscoverBrowser\wdsvc2.exe
You may see these signs in FRST logs:

 (The Chromium Authors) C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe HKCU\...\Run: [WebDiscoverBrowser] => C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe [967680 2015-12-01] (The Chromium Authors) S2 WebDiscover Browser Startup Service; C:\Program Files\WebDiscoverBrowser\wdsvc2.exe [298496 2015-11-24] () [File not signed] C:\Windows\System32\Tasks\WebDiscover Browser Update Task C:\Windows\System32\Tasks\WebDiscover Browser Launch Task C:\Users\Public\Desktop\WebDiscover Browser.lnk C:\Users\{username}\AppData\Local\WebDiscoverBrowser C:\Program Files\WebDiscoverBrowserWebDiscover Browser 1.259.2 (HKLM\...\{fd13f4a2-b0d8-4cad-9ccf-d4128eaf25ff}_is1) (Version: 1.259.2 - WebDiscover Media)Task: {0E102ABC-30EE-4AB3-964D-42DD6EB7F11A} - System32\Tasks\WebDiscover Browser Launch Task => Chrome.exe --sch-launch --dockedTask: {9CFA2E23-330D-413A-9A2D-41AB9BDCB41F} - System32\Tasks\WebDiscover Browser Update Task => Chrome.exe --sch-update
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files\WebDiscoverBrowser       Adds the file config.json"="04/01/2016 15:43, 269 bytes, A       Adds the file DelayedStart.lnk"="04/01/2016 15:43, 970 bytes, A       Adds the file isa.dll"="30/11/2015 14:51, 201216 bytes, A       Adds the file Start.lnk"="04/01/2016 15:43, 932 bytes, A       Adds the file unins000.dat"="04/01/2016 15:43, 36359 bytes, A       Adds the file unins000.exe"="04/01/2016 15:42, 1561847 bytes, A       Adds the file wdsvc2.exe"="24/11/2015 10:49, 298496 bytes, A    Adds the folder C:\Program Files\WebDiscoverBrowser\1.259.2       Adds the file 41.0.2272.74.manifest"="03/03/2015 14:52, 222 bytes, A       Adds the file chrome.dll"="01/12/2015 14:06, 38805504 bytes, A       Adds the file chrome.exe"="01/12/2015 14:06, 967680 bytes, A       Adds the file chrome_100_percent.pak"="01/12/2015 13:56, 1205033 bytes, A       Adds the file chrome_200_percent.pak"="01/12/2015 13:56, 1731141 bytes, A       Adds the file chrome_child.dll"="01/12/2015 14:05, 38728704 bytes, A       Adds the file chrome_elf.dll"="01/12/2015 13:56, 123904 bytes, A       Adds the file d3dcompiler_47.dll"="21/08/2013 15:03, 3466856 bytes, A       Adds the file debug.log"="04/01/2016 15:43, 121 bytes, A       Adds the file delegate_execute.exe"="01/12/2015 13:56, 648192 bytes, A       Adds the file ffmpegsumo.dll"="01/12/2015 13:56, 961024 bytes, A       Adds the file icudtl.dat"="02/03/2015 16:04, 10457856 bytes, A       Adds the file isa.dll"="30/11/2015 14:51, 201216 bytes, A       Adds the file libEGL.dll"="14/10/2015 09:41, 73728 bytes, A       Adds the file libexif.dll"="14/10/2015 09:40, 308224 bytes, A       Adds the file libGLESv2.dll"="14/10/2015 09:41, 1481728 bytes, A       Adds the file master_preferences"="01/12/2015 13:39, 459 bytes, A       Adds the file metro_driver.dll"="01/12/2015 13:56, 479744 bytes, A       Adds the file nacl_irt_x86_32.nexe"="27/11/2015 12:01, 2688004 bytes, A       Adds the file nacl_irt_x86_64.nexe"="27/11/2015 12:01, 3212656 bytes, A       Adds the file nacl64.exe"="01/12/2015 13:56, 2264064 bytes, A       Adds the file pdf.dll"="27/11/2015 11:44, 9596928 bytes, A       Adds the file resources.pak"="01/12/2015 13:56, 15899121 bytes, A    Adds the folder C:\Program Files\WebDiscoverBrowser\1.259.2\default_apps       Adds the file external_extensions.json"="01/12/2015 14:06, 249 bytes, A       Adds the file RightCoupon.crx"="01/12/2015 14:06, 1228 bytes, A       Adds the file theme.crx"="01/12/2015 14:06, 2125 bytes, A       Adds the file webdiscover_helper.crx"="01/12/2015 14:06, 1238 bytes, A    Adds the folder C:\Program Files\WebDiscoverBrowser\1.259.2\locales    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data       Adds the file First Run"="04/01/2016 15:43, 0 bytes, A       Adds the file Local State"="04/01/2016 15:45, 15674 bytes, A       Adds the file lockfile"="04/01/2016 15:43, 0 bytes, A       Adds the file Safe Browsing Bloom"="04/01/2016 15:44, 4697176 bytes, A       Adds the file Safe Browsing Bloom Prefix Set"="04/01/2016 15:44, 681014 bytes, A       Adds the file Safe Browsing Cookies"="04/01/2016 15:45, 6144 bytes, A       Adds the file Safe Browsing Cookies-journal"="04/01/2016 15:45, 4640 bytes, A       Adds the file Safe Browsing Csd Whitelist"="04/01/2016 15:44, 126120 bytes, A       Adds the file Safe Browsing Download"="04/01/2016 15:44, 289184 bytes, A       Adds the file Safe Browsing Download Whitelist"="04/01/2016 15:44, 15504 bytes, A       Adds the file Safe Browsing Extension Blacklist"="04/01/2016 15:44, 56200 bytes, A       Adds the file Safe Browsing IP Blacklist"="04/01/2016 15:44, 116 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Caps    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default       Adds the file ChromeDWriteFontCache"="04/01/2016 15:43, 13192608 bytes, A       Adds the file Current Session"="04/01/2016 15:43, 0 bytes, A       Adds the file Current Tabs"="04/01/2016 15:44, 0 bytes, A       Adds the file Favicons"="04/01/2016 15:43, 20480 bytes, A       Adds the file Favicons-journal"="04/01/2016 15:43, 512 bytes, A       Adds the file Google Profile.ico"="04/01/2016 15:43, 28134 bytes, A       Adds the file History"="04/01/2016 15:43, 94208 bytes, A       Adds the file History-journal"="04/01/2016 15:43, 512 bytes, A       Adds the file Preferences"="04/01/2016 15:43, 5792 bytes, A       Adds the file README"="04/01/2016 15:44, 176 bytes, A       Adds the file Secure Preferences"="04/01/2016 15:43, 27866 bytes, A       Adds the file Shortcuts"="04/01/2016 15:43, 12288 bytes, A       Adds the file Shortcuts-journal"="04/01/2016 15:43, 512 bytes, A       Adds the file Top Sites"="04/01/2016 15:43, 20480 bytes, A       Adds the file Top Sites-journal"="04/01/2016 15:43, 12824 bytes, A       Adds the file Visited Links"="04/01/2016 15:43, 0 bytes, A       Adds the file Web Data"="04/01/2016 15:43, 53248 bytes, A       Adds the file Web Data-journal"="04/01/2016 15:43, 4624 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Cache    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension Rules    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension State    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ckpkimghacdmjngcijkahobkblcdkoma\1.0_0       Adds the file background.js"="11/05/2015 18:33, 527 bytes, A       Adds the file manifest.json"="04/01/2016 15:43, 688 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0       Adds the file craw_background.js"="22/07/2015 10:12, 189710 bytes, A       Adds the file craw_window.js"="22/07/2015 10:12, 219309 bytes, A       Adds the file manifest.json"="04/01/2016 15:43, 1275 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ppfloidffgmiommjibgmbbabccaaajff\1.0.0_0       Adds the file manifest.json"="04/01/2016 15:43, 609 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ppfloidffgmiommjibgmbbabccaaajff\1.0.0_0\js       Adds the file inject.js"="23/06/2015 16:14, 375 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIcons       Adds the file E0C5.tmp"="04/01/2016 15:45, 0 bytes, A       Adds the file E0C6.tmp"="04/01/2016 15:45, 0 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIconsOld       Adds the file 6B83.tmp"="04/01/2016 15:45, 0 bytes, A       Adds the file 6B84.tmp"="04/01/2016 15:45, 0 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh       Adds the file 000003.log"="04/01/2016 15:43, 0 bytes, A       Adds the file CURRENT"="04/01/2016 15:43, 16 bytes, A       Adds the file LOCK"="04/01/2016 15:43, 0 bytes, A       Adds the file LOG"="04/01/2016 15:43, 0 bytes, A       Adds the file MANIFEST-000001"="04/01/2016 15:43, 41 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Storage       Adds the file chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage"="04/01/2016 15:43, 3072 bytes, A       Adds the file chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal"="04/01/2016 15:43, 3608 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Session Storage       Adds the file 000003.log"="04/01/2016 15:44, 0 bytes, A       Adds the file CURRENT"="04/01/2016 15:44, 16 bytes, A       Adds the file LOCK"="04/01/2016 15:44, 0 bytes, A       Adds the file LOG"="04/01/2016 15:44, 0 bytes, A       Adds the file MANIFEST-000001"="04/01/2016 15:44, 41 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\EVWhitelist    Adds the folder C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl    In the existing folder C:\Users\Public\Desktop       Adds the file WebDiscover Browser.lnk"="04/01/2016 15:43, 1012 bytes, A    In the existing folder C:\Windows\System32\Tasks       Adds the file WebDiscover Browser Launch Task"="04/01/2016 15:43, 3310 bytes, A       Adds the file WebDiscover Browser Update Task"="04/01/2016 15:43, 4064 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{fd13f4a2-b0d8-4cad-9ccf-d4128eaf25ff}_is1]       "DisplayIcon"="REG_SZ", "C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe"       "DisplayName"="REG_SZ", "WebDiscover Browser 1.259.2"       "DisplayVersion"="REG_SZ", "1.259.2"       "EstimatedSize"="REG_DWORD", 148219       "Inno Setup: App Path"="REG_SZ", "C:\Program Files\WebDiscoverBrowser"       "Inno Setup: Icon Group"="REG_SZ", "WebDiscover Browser"       "Inno Setup: Language"="REG_SZ", "en"       "Inno Setup: Setup Version"="REG_SZ", "5.5.5 (u)"       "Inno Setup: User"="REG_SZ", "{username}"       "InstallDate"="REG_SZ", "20160104"       "InstallLocation"="REG_SZ", "C:\Program Files\WebDiscoverBrowser\"       "MajorVersion"="REG_DWORD", 1       "MinorVersion"="REG_DWORD", 259       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "WebDiscover Media"       "QuietUninstallString"="REG_SZ", ""C:\Program Files\WebDiscoverBrowser\unins000.exe" /SILENT"       "UninstallString"="REG_SZ", ""C:\Program Files\WebDiscoverBrowser\unins000.exe""       "URLInfoAbout"="REG_SZ", "http://getdiscoverbrowser.com"    [HKEY_LOCAL_MACHINE\SOFTWARE\WebDiscoverBrowser]       "channel"="REG_SZ", ""       "click_id"="REG_SZ", ""       "install_time"="REG_DWORD", 1451917576       "last_profile_check"="REG_DWORD", 1451918600       "last_update_check"="REG_DWORD", 1451918601       "profile"="REG_SZ", ""       "settings"="REG_SZ", "{"search_url":"http://www.safestsearches.com/Results.aspx?n=0001&gd=SY1000235&searchsource=67&UM=8&D=123169&q={searchTerms}","suggest_url":"http://api.bing.com/osjson.aspx?query={searchTerms}"}"       "sub_id"="REG_SZ", ""       "tracking_id"="REG_SZ", "perion-firstoffer"       "tracking_link_key"="REG_SZ", ""       "Version"="REG_SZ", "1.259.2"    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WebDiscover Browser Startup Service]       "Description"="REG_SZ", "This service is required by WebDiscover Browser."       "DisplayName"="REG_SZ", "WebDiscover Browser Startup Service"       "ErrorControl"="REG_DWORD", 1       "ImagePath"="REG_EXPAND_SZ, "C:\Program Files\WebDiscoverBrowser\wdsvc2.exe"       "ObjectName"="REG_SZ", "LocalSystem"       "Start"="REG_DWORD", 2       "Type"="REG_DWORD", 32       "WOW64"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\Chromium\BLBeacon]       "failed_count"="REG_DWORD", 0       "state"="REG_DWORD", 1       "version"="REG_SZ", "41.0.2272.74"    [HKEY_CURRENT_USER\Software\Chromium\BLFinchList]    [HKEY_CURRENT_USER\Software\Chromium\BrowserCrashDumpAttempts]    [HKEY_CURRENT_USER\Software\Chromium\BrowserExitCodes]    [HKEY_CURRENT_USER\Software\Chromium\BrowserExitCodes\3028-13096392205660309]       "BackgroundOn"="REG_QWORD, ....    [HKEY_CURRENT_USER\Software\Chromium\StabilityMetrics]       "user_experience_metrics.stability.exited_cleanly"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]       "WebDiscoverBrowser"="REG_SZ", "C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe --docked"    [HKEY_CURRENT_USER\Software\WebDiscoverBrowser]       "LaunchCount"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\WebDiscoverBrowser\Browser]       "_NumAccounts"="REG_SZ", "1"       "_NumSignedIn"="REG_SZ", "0"       "lastrun"="REG_SZ", "13096392207381651"       "usagestats"="REG_DWORD", 0
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 04/01/2016Scan Time: 16:05Logfile: mbamWebDiscover.txtAdministrator: YesVersion: 2.2.0.1020Malware Database: v2016.01.04.02Rootkit Database: v2015.12.26.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 314323Time Elapsed: 5 min, 1 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 1PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe, 3028, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52]Modules: 3PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.dll, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome_elf.dll, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\isa.dll, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], Registry Keys: 6PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{fd13f4a2-b0d8-4cad-9ccf-d4128eaf25ff}_is1, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WebDiscover Browser Startup Service, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\WebDiscoverBrowser, Quarantined, [5151ae87851438fe4a101ef8996b25db], PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WebDiscover Browser Launch Task, Delete-on-Reboot, [f7ab6fc68b0e42f4b139e734020217e9], PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WebDiscover Browser Update Task, Delete-on-Reboot, [6a382b0a1188f4429d4d71aad92be719], PUP.Optional.WebDiscoverBrowser, HKCU\SOFTWARE\WebDiscoverBrowser, Quarantined, [980ad1645643ea4c85d258be0bf99f61], Registry Values: 2PUP.Optional.WebDiscoverBrowser, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe --docked, Quarantined, [61417bbad3c65fd760f49383ae56ae52]PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{FD13F4A2-B0D8-4CAD-9CCF-D4128EAF25FF}_IS1|DisplayName, WebDiscover Browser 1.259.2, Quarantined, [4260dc5996033afcf5643adc70947f81]Registry Data: 0(No malicious items detected)Folders: 80PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\default_apps, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\locales, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], Files: 236PUP.Optional.WebDiscoverBrowser, C:\Users\Public\Desktop\WebDiscover Browser.lnk, Quarantined, [7131e74e04950f277ad9df37d72d51af], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\unins000.dat, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\config.json, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\DelayedStart.lnk, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\isa.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\Start.lnk, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\unins000.exe, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\wdsvc2.exe, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\41.0.2272.74.manifest, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.dll, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome.exe, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome_100_percent.pak, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome_200_percent.pak, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome_child.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\chrome_elf.dll, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\d3dcompiler_47.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\debug.log, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\delegate_execute.exe, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\ffmpegsumo.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\icudtl.dat, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\isa.dll, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\libEGL.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\libexif.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\libGLESv2.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\master_preferences, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\metro_driver.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\nacl64.exe, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\nacl_irt_x86_32.nexe, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\nacl_irt_x86_64.nexe, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\pdf.dll, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\resources.pak, Delete-on-Reboot, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\default_apps\external_extensions.json, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\default_apps\RightCoupon.crx, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\default_apps\theme.crx, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Program Files\WebDiscoverBrowser\1.259.2\default_apps\webdiscover_helper.crx, Quarantined, [61417bbad3c65fd760f49383ae56ae52], PUP.Optional.WebDiscoverBrowser, C:\Windows\System32\Tasks\WebDiscover Browser Launch Task, Quarantined, [089ab97c44559e9803e59685699b6d93], PUP.Optional.WebDiscoverBrowser, C:\Windows\System32\Tasks\WebDiscover Browser Update Task, Quarantined, [4d55ed48e3b6c670af39f6254cb80df3], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\ev_hashes_whitelist.bin, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\First Run, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Local State, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\lockfile, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Bloom, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Bloom Prefix Set, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Cookies, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Cookies-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Csd Whitelist, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Download, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Download Whitelist, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing Extension Blacklist, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Safe Browsing IP Blacklist, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\ChromeDWriteFontCache, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Current Session, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Current Tabs, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Favicons, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Favicons-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Google Profile.ico, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\History, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\History-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Login Data, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Login Data-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Network Action Predictor, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Network Action Predictor-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Preferences, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\README, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Secure Preferences, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Shortcuts, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Shortcuts-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Top Sites, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Top Sites-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Visited Links, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Web Data, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Web Data-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Cache\data_0, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Cache\data_1, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Cache\data_2, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Cache\data_3, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Cache\index, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension Rules\000003.log, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension Rules\CURRENT, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension Rules\LOCK, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension Rules\LOG, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension Rules\MANIFEST-000001, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension State\000003.log, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension State\CURRENT, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension State\LOCK, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension State\LOG, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extension State\MANIFEST-000001, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ckpkimghacdmjngcijkahobkblcdkoma\1.0_0\background.js, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ckpkimghacdmjngcijkahobkblcdkoma\1.0_0\manifest.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_background.js, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\craw_window.js, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\manifest.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\css\craw_window.css, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\html\craw_window.html, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\flapper.gif, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\icon_128.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\icon_16.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\topbar_floating_button.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\topbar_floating_button_close.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\topbar_floating_button_hover.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\topbar_floating_button_maximize.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\images\topbar_floating_button_pressed.png, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\bg\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ca\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\cs\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\da\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\de\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\el\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\en_GB\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\es_419\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\et\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fi\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fil\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\fr\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hi\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hr\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\hu\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\id\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\it\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ja\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ko\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lt\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\lv\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nb\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\nl\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pl\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_BR\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\pt_PT\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ro\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\ru\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sk\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sl\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sr\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\sv\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\th\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\tr\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\uk\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\vi\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_CN\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_locales\zh_TW\messages.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\_metadata\verified_contents.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ppfloidffgmiommjibgmbbabccaaajff\1.0.0_0\manifest.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Extensions\ppfloidffgmiommjibgmbbabccaaajff\1.0.0_0\js\inject.js, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIcons\DE5F.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIcons\DE60.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIcons\DE61.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIcons\DE82.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIconsOld\691A.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIconsOld\691B.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIconsOld\691C.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\JumpListIconsOld\693D.tmp, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000003.log, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOCK, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000001, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Session Storage\000003.log, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Session Storage\CURRENT, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Session Storage\LOCK, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Session Storage\LOG, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\Default\Session Storage\MANIFEST-000001, Delete-on-Reboot, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\EVWhitelist\7\manifest.fingerprint, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\EVWhitelist\7\manifest.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\EVWhitelist\7\_metadata\verified_contents.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\EVWhitelist\7\_platform_specific\all\ev_hashes_whitelist.bin, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\manifest.fingerprint, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\manifest.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_metadata\verified_contents.json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_pnacl_json, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_for_eh_o, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_crtbegin_o, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_crtend_o, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_ld_nexe, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_libcrt_platform_a, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_a, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_libgcc_eh_a, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_a, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_libpnacl_irt_shim_dummy_a, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], PUP.Optional.WebDiscoverBrowser, C:\Users\{username}\AppData\Local\WebDiscoverBrowser\User Data\pnacl\0.1.0.14206\_platform_specific\x86_64\pnacl_public_x86_64_pnacl_llc_nexe, Quarantined, [930f4beae9b00b2b489b12a9eb17b14f], Physical Sectors: 0(No malicious items detected)(end)
The full version of Malwarebytes Anti-Malware can protect your computer against many threats.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.