The most common payload: a browser extension that redirects every search to scam flight sim forums or fake “FSX 2026” upgrade sites. Your default search engine becomes something like “search-here-for-fsx.com” and is nearly impossible to remove without reformatting your drive.