Adware.Cmptch is Malwarebytes generic detection name for a family of adware targeting Windows systems.
Adware.Cmptch are Chrome and Firefox extensions that show advertisements fetched from the domain cmptch.com.
Adware.Cmptch is usually installed by bundlers.
Adware.Cmptch is a “removal only” detection name, but Malwarebytes does block the traffic to cmpth.com.
Malwarebytes can detect and remove Adware.Cmptch without further user interaction.
A Malwarebytes log of removal will look similar to this:
Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 3/28/18 Scan Time: 4:05 PM Log File: 15b1a324-3291-11e8-b59f-080027235d76.json Administrator: Yes -Software Information- Version: 3.3.1.2183 Components Version: 1.0.262 Update Package Version: 1.0.4522 License: Premium -System Information- OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: {computername}\{username} -Scan Summary- Scan Type: Threat Scan Result: Completed Objects Scanned: 244698 Threats Detected: 162 Threats Quarantined: 162 Time Elapsed: 5 min, 51 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 19 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\css, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\images, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\fonts, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\_metadata, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\css, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\icons, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\GCDDNKPNINEOJBPKNGBLGAMACIOPBAMA, Delete-on-Reboot, [14662], [504607],1.0.4522 File: 143 Adware.Cmptch, C:\USERS\{username}\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\{PROFILE}.DEFAULT\EXTENSIONS\{70CFAB72-EE99-428A-B5FB-26D924BE3ACB}.XPI, Delete-on-Reboot, [4798], [504606],1.0.4522 Adware.Cmptch.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, Replaced, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama\000003.log, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama\CURRENT, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama\LOCK, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama\LOG, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama\LOG.old, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gcddnkpnineojbpkngblgamaciopbama\MANIFEST-000001, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\USERS\{username}\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\GCDDNKPNINEOJBPKNGBLGAMACIOPBAMA\1.0.18.221_0\BACKGROUND.JS, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\css\style.css, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\css\font-awesome.css, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\css\font-awesome.min.css, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts\fontawesome-webfont.eot, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts\fontawesome-webfont.svg, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts\fontawesome-webfont.ttf, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts\fontawesome-webfont.woff, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts\fontawesome-webfont.woff2, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\fonts\FontAwesome.otf, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\animated.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\bordered-pulled.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\core.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\fixed-width.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\font-awesome.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\icons.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\larger.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\list.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\mixins.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\path.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\rotated-flipped.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\screen-reader.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\stacked.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\less\variables.less, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\font-awesome.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_animated.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_bordered-pulled.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_core.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_fixed-width.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_icons.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_larger.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_list.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_mixins.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_path.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_rotated-flipped.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_screen-reader.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_stacked.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\font-awesome\scss\_variables.scss, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\js\newtab.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\js\newtab.js.map, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_flat_0_aaaaaa_40x100.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_flat_75_ffffff_40x100.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_glass_55_fbf9ee_1x400.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_glass_65_ffffff_1x400.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_glass_75_dadada_1x400.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_glass_75_e6e6e6_1x400.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_glass_95_fef1ec_1x400.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-bg_highlight-soft_75_cccccc_1x100.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-icons_222222_256x240.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-icons_2e83ff_256x240.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-icons_454545_256x240.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-icons_888888_256x240.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\images\ui-icons_cd0a0a_256x240.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\jquery-1.8.3.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\jquery-ui.css, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\jquery\jquery-ui.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\dist\vendor\autocomplete.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\icons\128.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\icons\16.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\icons\32.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\icons\48.png, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\fonts\Roboto-Thin-webfont.eot, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\fonts\Roboto-Thin-webfont.svg, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\fonts\Roboto-Thin-webfont.ttf, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\fonts\Roboto-Thin-webfont.woff, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\analytics.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\colors.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\newtab\index.html, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\_metadata\computed_hashes.json, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\_metadata\verified_contents.json, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\content.js, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\manifest.json, Delete-on-Reboot, [14662], [504607],1.0.4522 Adware.Cmptch.Generic, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama\1.0.18.221_0\settings.json, Delete-on-Reboot, [14662], [504607],1.0.4522 Physical Sector: 0 (No malicious items detected) (end)
You may see these entries in FRST logs:
FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\{70cfab72-ee99-428a-b5fb-26d924be3acb}.xpi [2018-03-28] CHR Extension: (Arcadetab) - C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcddnkpnineojbpkngblgamaciopbama [2018-03-28]
Select your language