Jump to content
Sign in to follow this  
Metallica

Removal instructions for OMG Music Plus

Recommended Posts

What is OMG Music Plus?

The Malwarebytes research team has determined that OMG Music Plus is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is effected by OMG Music Plus?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

and this entry in your list of installed programs:

warning4.png

How did OMG Music Plus get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove OMG Music Plus?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You will need Malwarebytes Anti-Malware version 2.00 (beta) or newer to disable the Chrome and Firefox extensions.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-consumer.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of OMG Music Plus?
  • The Firefox extension can now safely be removed. Open the "Extensions" tab under "Add-ons" and click "Remove" and "Restart" to complete the removal.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the OMG Music Plus rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protections1.png

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0049182 - {11111111-1111-1111-1111-110411911182} - C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll
Alterations made by the installer:

File system details  ---------------------------------------------	Adds the folder C:\Program Files\OMG Music Plus	   Adds the file 49182.xpi"="3/16/2014 1:18 PM, 283903 bytes, A	   Adds the file background.html"="2/10/2014 3:08 PM, 729 bytes, A	   Adds the file Installer.log"="3/16/2014 1:18 PM, 215471 bytes, A	   Adds the file OMG Music Plus.ico"="2/10/2014 3:08 PM, 9662 bytes, A	   Adds the file OMG Music Plus-bg.exe"="3/16/2014 1:18 PM, 773120 bytes, A	   Adds the file OMG Music Plus-bho.dll"="3/16/2014 1:18 PM, 677888 bytes, A	   Adds the file OMG Music Plus-buttonutil.dll"="3/16/2014 1:18 PM, 428544 bytes, A	   Adds the file OMG Music Plus-buttonutil.exe"="3/16/2014 1:18 PM, 331264 bytes, A	   Adds the file OMG Music Plus-codedownloader.exe"="3/16/2014 1:18 PM, 553984 bytes, A	   Adds the file OMG Music Plus-enabler.exe"="3/16/2014 1:18 PM, 405504 bytes, A	   Adds the file OMG Music Plus-firefoxinstaller.exe"="3/16/2014 1:18 PM, 932352 bytes, A	   Adds the file OMG Music Plus-helper.exe"="3/16/2014 1:18 PM, 331776 bytes, A	   Adds the file OMG Music Plus-updater.exe"="3/16/2014 1:18 PM, 379392 bytes, A	   Adds the file Uninstall.exe"="3/16/2014 1:18 PM, 77312 bytes, A	   Adds the file utils.exe"="3/16/2014 1:18 PM, 1171595 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com	   Adds the file chrome.manifest"="3/16/2014 1:18 PM, 732 bytes, A	   Adds the file install.rdf"="3/16/2014 1:18 PM, 1345 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content	   Adds the file api.js"="3/16/2014 1:18 PM, 18742 bytes, A	   Adds the file background.html"="3/16/2014 1:18 PM, 2001 bytes, A	   Adds the file baseObject.js"="3/16/2014 1:18 PM, 19 bytes, A	   Adds the file browser.xul"="3/16/2014 1:18 PM, 4819 bytes, A	   Adds the file dialog.js"="3/16/2014 1:18 PM, 1343 bytes, A	   Adds the file ffCoreFilesIndex.txt"="3/16/2014 1:18 PM, 1052 bytes, A	   Adds the file main.js"="3/16/2014 1:18 PM, 18750 bytes, A	   Adds the file options.js"="3/16/2014 1:18 PM, 1931 bytes, A	   Adds the file options.xul"="3/16/2014 1:18 PM, 1913 bytes, A	   Adds the file platformVersion.js"="3/16/2014 1:18 PM, 612 bytes, A	   Adds the file search_dialog.xul"="3/16/2014 1:18 PM, 2457 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api	   Adds the file asyncDB.js"="3/16/2014 1:18 PM, 4805 bytes, A	   Adds the file background.js"="3/16/2014 1:18 PM, 1336 bytes, A	   Adds the file browserAction.js"="3/16/2014 1:18 PM, 8906 bytes, A	   Adds the file contextMenu.js"="3/16/2014 1:18 PM, 5359 bytes, A	   Adds the file dbManager.js"="3/16/2014 1:18 PM, 10097 bytes, A	   Adds the file dom_bg.js"="3/16/2014 1:18 PM, 2505 bytes, A	   Adds the file fileManager.js"="3/16/2014 1:18 PM, 943 bytes, A	   Adds the file firefox.js"="3/16/2014 1:18 PM, 353 bytes, A	   Adds the file firefoxNotifications.js"="3/16/2014 1:18 PM, 1116 bytes, A	   Adds the file firefoxOmnibox.js"="3/16/2014 1:18 PM, 1515 bytes, A	   Adds the file message.js"="3/16/2014 1:18 PM, 4935 bytes, A	   Adds the file pageAction.js"="3/16/2014 1:18 PM, 11257 bytes, A	   Adds the file request.js"="3/16/2014 1:18 PM, 2314 bytes, A	   Adds the file tabs.js"="3/16/2014 1:18 PM, 3628 bytes, A	   Adds the file webRequest.js"="3/16/2014 1:18 PM, 3801 bytes, A	   Adds the file windowsMessagingHandler.js"="3/16/2014 1:18 PM, 960 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core	   Adds the file addressBarChangeObserver.js"="3/16/2014 1:18 PM, 130 bytes, A	   Adds the file console.js"="3/16/2014 1:18 PM, 1753 bytes, A	   Adds the file consts.js"="3/16/2014 1:18 PM, 2356 bytes, A	   Adds the file delegate.js"="3/16/2014 1:18 PM, 2180 bytes, A	   Adds the file extensionDataStore.js"="3/16/2014 1:18 PM, 8607 bytes, A	   Adds the file folderIOWrapper.js"="3/16/2014 1:18 PM, 3526 bytes, A	   Adds the file httpObserver.js"="3/16/2014 1:18 PM, 2561 bytes, A	   Adds the file IDBWrapper.js"="3/16/2014 1:18 PM, 4191 bytes, A	   Adds the file installer.js"="3/16/2014 1:18 PM, 1320 bytes, A	   Adds the file logFile.js"="3/16/2014 1:18 PM, 1562 bytes, A	   Adds the file prefs.js"="3/16/2014 1:18 PM, 1649 bytes, A	   Adds the file progressListenerObserver.js"="3/16/2014 1:18 PM, 1368 bytes, A	   Adds the file registry.js"="3/16/2014 1:18 PM, 1158 bytes, A	   Adds the file reloadObserver.js"="3/16/2014 1:18 PM, 1527 bytes, A	   Adds the file reports.js"="3/16/2014 1:18 PM, 3869 bytes, A	   Adds the file requestObject.js"="3/16/2014 1:18 PM, 1261 bytes, A	   Adds the file searchSettings.js"="3/16/2014 1:18 PM, 3426 bytes, A	   Adds the file uninstallObserver.js"="3/16/2014 1:18 PM, 2372 bytes, A	   Adds the file updateManager.js"="3/16/2014 1:18 PM, 11288 bytes, A	   Adds the file utils.js"="3/16/2014 1:18 PM, 18554 bytes, A	   Adds the file xhr.js"="3/16/2014 1:18 PM, 2852 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences	   Adds the file prefs.js"="3/16/2014 1:18 PM, 3972 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData	   Adds the file manifest.xml"="3/16/2014 1:21 PM, 1701 bytes, A	   Adds the file plugins.json"="3/16/2014 1:21 PM, 11799 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins	   Adds the file 1_base.js"="3/16/2014 1:18 PM, 6908 bytes, A	   Adds the file 102_dealply_m.js"="3/16/2014 1:18 PM, 2201 bytes, A	   Adds the file 103_intext_5_m.js"="3/16/2014 1:21 PM, 2294 bytes, A	   Adds the file 104_jollywallet_m.js"="3/16/2014 1:18 PM, 1450 bytes, A	   Adds the file 13_CrossriderAppUtils.js"="3/16/2014 1:18 PM, 7056 bytes, A	   Adds the file 14_CrossriderUtils.js"="3/16/2014 1:18 PM, 20810 bytes, A	   Adds the file 16_FFAppAPIWrapper.js"="3/16/2014 1:18 PM, 16158 bytes, A	   Adds the file 17_jQuery.js"="3/16/2014 1:18 PM, 79982 bytes, A	   Adds the file 177_crossriderDashboard.js"="3/16/2014 1:18 PM, 30419 bytes, A	   Adds the file 182_openUrl.js"="3/16/2014 1:18 PM, 14301 bytes, A	   Adds the file 183_tabsWrapper.js"="3/16/2014 1:18 PM, 2555 bytes, A	   Adds the file 191_ciuvo_m.js"="3/16/2014 1:18 PM, 1106 bytes, A	   Adds the file 207_dbWrapper.js"="3/16/2014 1:18 PM, 1661 bytes, A	   Adds the file 21_debug.js"="3/16/2014 1:18 PM, 3676 bytes, A	   Adds the file 22_resources.js"="3/16/2014 1:18 PM, 9082 bytes, A	   Adds the file 245_engageya_overlay_m.js"="3/16/2014 1:21 PM, 475 bytes, A	   Adds the file 246_setup.js"="3/16/2014 1:21 PM, 1840 bytes, A	   Adds the file 28_initializer.js"="3/16/2014 1:18 PM, 664 bytes, A	   Adds the file 4_jquery_1_7_1.js"="3/16/2014 1:18 PM, 94180 bytes, A	   Adds the file 47_resources_background.js"="3/16/2014 1:18 PM, 7720 bytes, A	   Adds the file 64_appApiMessage.js"="3/16/2014 1:18 PM, 2332 bytes, A	   Adds the file 72_appApiValidation.js"="3/16/2014 1:21 PM, 46060 bytes, A	   Adds the file 78_CrossriderInfo.js"="3/16/2014 1:18 PM, 3321 bytes, A	   Adds the file 91_monetizationLoader.js.js"="3/16/2014 1:21 PM, 145065 bytes, A	   Adds the file 93_superfish_no_coupons_m.js"="3/16/2014 1:18 PM, 775 bytes, A	   Adds the file 98_omniCommands.js"="3/16/2014 1:18 PM, 1936 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode	   Adds the file background.js"="3/16/2014 1:18 PM, 1515 bytes, A	   Adds the file extension.js"="3/16/2014 1:21 PM, 383 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US	   Adds the file translations.dtd"="3/16/2014 1:18 PM, 425 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin	   Adds the file button1.png"="3/16/2014 1:18 PM, 1351 bytes, A	   Adds the file button2.png"="3/16/2014 1:18 PM, 1361 bytes, A	   Adds the file button3.png"="3/16/2014 1:18 PM, 1361 bytes, A	   Adds the file button4.png"="3/16/2014 1:18 PM, 1361 bytes, A	   Adds the file button5.png"="3/16/2014 1:18 PM, 1361 bytes, A	   Adds the file crossrider_statusbar.png"="3/16/2014 1:18 PM, 1361 bytes, A	   Adds the file icon128.png"="3/16/2014 1:18 PM, 4438 bytes, A	   Adds the file icon16.png"="3/16/2014 1:18 PM, 1351 bytes, A	   Adds the file icon24.png"="3/16/2014 1:18 PM, 2660 bytes, A	   Adds the file icon48.png"="3/16/2014 1:18 PM, 3716 bytes, A	   Adds the file panelarrow-up.png"="3/16/2014 1:18 PM, 917 bytes, A	   Adds the file popup.html"="3/16/2014 1:18 PM, 349 bytes, A	   Adds the file skin.css"="3/16/2014 1:18 PM, 990 bytes, A	   Adds the file update.css"="3/16/2014 1:18 PM, 140 bytes, A	In the existing folder C:\Windows\System32\Tasks	   Adds the file OMG Music Plus-codedownloader"="3/16/2014 1:18 PM, 4498 bytes, A	   Adds the file OMG Music Plus-enabler"="3/16/2014 1:18 PM, 4392 bytes, A	   Adds the file OMG Music Plus-firefoxinstaller"="3/16/2014 1:18 PM, 5326 bytes, A	   Adds the file OMG Music Plus-updater"="3/16/2014 1:18 PM, 4558 bytes, A	In the existing folder C:\Windows\Tasks	   Adds the file OMG Music Plus-codedownloader.job"="3/16/2014 1:18 PM, 1468 bytes, A	   Adds the file OMG Music Plus-enabler.job"="3/16/2014 1:18 PM, 1362 bytes, A	   Adds the file OMG Music Plus-firefoxinstaller.job"="3/16/2014 1:18 PM, 2296 bytes, A	   Adds the file OMG Music Plus-updater.job"="3/16/2014 1:18 PM, 1528 bytes, ARegistry details  ------------------------------------------	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}]	   "(Default)"="REG_SZ", "OMG Music Plus"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Implemented Categories]	   "(Default)"="REG_SZ", ""	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]	   "(Default)"="REG_SZ", ""	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\InprocServer32]	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll"	   "ThreadingModel"="REG_SZ", "Apartment"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\ProgID]	   "(Default)"="REG_SZ", "CrossriderApp0049182.BHO.1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Programmable]	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\VersionIndependentProgID]	   "(Default)"="REG_SZ", "CrossriderApp0049182"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}]	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\InprocServer32]	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll"	   "ThreadingModel"="REG_SZ", "Apartment"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\ProgID]	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox.1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\Programmable]	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\VersionIndependentProgID]	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO]	   "(Default)"="REG_SZ", "CrossriderApp0049182"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO\CLSID]	   "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110411911182}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO\CurVer]	   "(Default)"="REG_SZ", "CrossriderApp0049182"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO.1]	   "(Default)"="REG_SZ", "CrossriderApp0049182"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO.1\CLSID]	   "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110411911182}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox]	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox\CLSID]	   "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220422912282}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox\CurVer]	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox.1]	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox.1\CLSID]	   "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220422912282}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}]	   "(Default)"="REG_SZ", "ICrossriderBHO"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\ProxyStubClsid]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\ProxyStubClsid32]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"	   "Version"="REG_SZ", "1.0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}]	   "(Default)"="REG_SZ", "ISandBox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\ProxyStubClsid]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\ProxyStubClsid32]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"	   "Version"="REG_SZ", "1.0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0]	   "(Default)"="REG_SZ", "CrossriderApp0049182 Type Library"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\0\win32]	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\FLAGS]	   "(Default)"="REG_SZ", "0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\HELPDIR]	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus"	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411911182}]	   "(Default)"="REG_SZ", "CrossriderApp0049182"	   "NoExplorer"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]	   "{11111111-1111-1111-1111-110411911182}"="REG_SZ", "1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OMG Music Plus]	   "CrAppId"="REG_SZ", "49182"	   "CrPublisherId"="REG_SZ", "5526"	   "DisplayIcon"="REG_SZ", "C:\Program Files\OMG Music Plus\utils.exe"	   "DisplayName"="REG_SZ", "OMG Music Plus"	   "DisplayVersion"="REG_SZ", "1.34.1.29"	   "Publisher"="REG_SZ", "Bundlore LTD"	   "UninstallString"="REG_SZ", "C:\Program Files\OMG Music Plus\Uninstall.exe /fromcontrolpanel=1"	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Firefox]	   "TotalProfiles"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Firefox\Profiles]	   "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\IE]	   "TotalProfiles"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Installer]	   "BundledFirefox"="REG_DWORD", 1	   "BundledIe"="REG_DWORD", 1	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]	   "Bic"="REG_SZ", "F4F5096D5934430D803D464022014ED6IE"	   "Verifier"="REG_SZ", "094540c5d4d623d3ddf38dcdfed2671f"	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\Button]	   "49182"="REG_DWORD", 1	   "Index"="REG_DWORD", 1	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]	   "49182"="REG_SZ", ""	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]	   "49182"="REG_SZ", ""	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus]	   "ActiveAppId"="REG_SZ", "49182"	   "BhoRunningVersion"="REG_SZ", "153"	   "IsBhoEnabled"="REG_DWORD", 1	   "LastSetSearch"="REG_DWORD", 1394972459	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\background]	   "__onDocumentStart_script__"="REG_SZ", ""	   "__onDocumentStart_script_store__"="REG_SZ", ""	   "IsEnabled"="REG_DWORD", 1	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\Code]	   "AppJavaScript"="REG_SZ", "{javascript removed, full log available by request} "	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\Update]	   "LastCheck"="REG_DWORD", 1394972310	[HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Bundlore LTD]	   "49182"="REG_SZ", "OMG Music Plus"	[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411911182}\iexplore]	   "Count"="REG_DWORD", 4	   "Flags"="REG_DWORD", 0	   "LoadTimeArray"="REG_BINARY, ....................	   "NavTimeArray"="REG_BINARY, ....................	   "Time"="REG_BINARY, ........	   "Type"="REG_DWORD", 3
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 3/16/2014Scan Time: 1:26:32 PMLogfile: mbamOMGusic.txtAdministrator: YesVersion: 2.00.0.1000Malware Database: v2014.03.16.02Rootkit Database: v2014.02.20.01License: TrialMalware Protection: DisabledMalicious Website Protection: DisabledChameleon: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 201640Time Elapsed: 2 min, 48 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledShuriken: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 18PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444914482}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455915582}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466916682}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.BHO.1, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.BHO, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220422912282}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.Sandbox.1, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.Sandbox, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411911182}\INPROCSERVER32, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\OMG Music Plus, Quarantined, [d9191be86e0df14534f00f8bcf330bf5],PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [f8fab053d7a4a88ebff36e6009fa39c7],PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\OMG Music Plus, Quarantined, [7082f3103843fd39b86a1981b34fb050],PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Bundlore LTD, Quarantined, [33bf22e184f71d192473a1fd36ccf20e],PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OMG Music Plus, Quarantined, [48aae122afcccc6a7b677d1957abf10f],Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin, Quarantined, [777b00031467251119376730f80a37c9],Files: 118PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],PUP.Optional.OMGMusicPlus.A, C:\Users\{username}\Desktop\Nvwngyuuiux.exe, Quarantined, [bf331de614676fc735da594f68996a96],PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-codedownloader.job, Quarantined, [92603fc4daa11b1b879ac2d81fe3e41c],PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-enabler.job, Quarantined, [f3fff80b7b0047efac75c1d9659d6b95],PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-firefoxinstaller.job, Quarantined, [fdf518eb6f0c56e051d048523dc530d0],PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-updater.job, Quarantined, [15dd788b6813bc7a8e933c5e1de52cd4],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\49182.xpi, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\background.html, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\Installer.log, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-bg.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-buttonutil.dll, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-buttonutil.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-codedownloader.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-enabler.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-firefoxinstaller.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-helper.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-updater.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus.ico, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\Uninstall.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\utils.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome.manifest, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\install.rdf, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\background.html, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\baseObject.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\browser.xul, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\dialog.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\main.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\options.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\options.xul, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\platformVersion.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\search_dialog.xul, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\asyncDB.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\background.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\browserAction.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\contextMenu.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\dbManager.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\dom_bg.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\fileManager.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefox.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefoxNotifications.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\message.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\pageAction.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\request.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\tabs.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\webRequest.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\console.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\consts.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\delegate.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\extensionDataStore.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\folderIOWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\httpObserver.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\IDBWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\installer.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\logFile.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\prefs.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\progressListenerObserver.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\registry.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\reloadObserver.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\reports.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\requestObject.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\searchSettings.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\uninstallObserver.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\updateManager.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\utils.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\xhr.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences\prefs.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\manifest.xml, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins.json, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\102_dealply_m.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\17_jQuery.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\182_openUrl.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\191_ciuvo_m.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\1_base.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\21_debug.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\22_resources.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\245_engageya_overlay_m.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\246_setup.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\28_initializer.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\47_resources_background.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\98_omniCommands.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode\background.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode\extension.js, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US\translations.dtd, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button1.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button2.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button3.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button4.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button5.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\crossrider_statusbar.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon128.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon16.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon24.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon48.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\panelarrow-up.png, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\popup.html, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\skin.css, Quarantined, [777b00031467251119376730f80a37c9],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\update.css, Quarantined, [777b00031467251119376730f80a37c9],PUP.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "144cad6cd11e5259ebb287b85bd2e06e"), Replaced,[cc26f2115823bd79fe05a3bd8381936d]PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.adc77187f1ad74b198787a0a5cc10343fe6264eef24574fa2bea4bd6135e1199dcom49182.49182.internaldb.Resources_meta.value", "%7B%22browserbutton.png%22%3A%7B%22id%22%3A482036Replaced,[d919798a285320161af598c80ff57e82]C%22ver%22%3A1Replaced,[d919798a285320161af598c80ff57e82]C%22status%22%3A1Replaced,[d919798a285320161af598c80ff57e82]C%22name%22%3A%22browserbutton.png%22Replaced,[d919798a285320161af598c80ff57e82]C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/49182/482036%22%7D%7D"), %5Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.