Jump to content
Sign in to follow this  
Metallica

Removal instructions for FLV Player Addon

Recommended Posts

What is FLV Player Addon?

The Malwarebytes research team has determined that FLV Player Addon is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by FLV Player Addon?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

warning3.png

and this entry in your list of installed programs:

warning4.png

How did FLV Player Addon get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove FLV Player Addon?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You will need Malwarebytes Anti-Malware version 2.00 (beta) or newer to disable the Chrome and Firefox extensions.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-consumer.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of FLV Player Addon?
  • The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the FLV Player Addon 1.26.35 listing. Then confirm removal.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the FLV Player Addon rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0052466 - {11111111-1111-1111-1111-110511241166} - C:\Program Files\FLV Player Addon\FLV Player Addon-bho.dll
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\FLV Player Addon       Adds the file 52466.crx"="3/19/2014 7:51 AM, 242712 bytes, A       Adds the file 52466.xpi"="3/19/2014 7:51 AM, 279074 bytes, A       Adds the file background.html"="3/10/2014 2:02 PM, 729 bytes, A       Adds the file FLV Player Addon.ico"="3/10/2014 2:02 PM, 15086 bytes, A       Adds the file FLV Player Addon-bg.exe"="3/19/2014 7:52 AM, 811008 bytes, A       Adds the file FLV Player Addon-bho.dll"="3/19/2014 7:52 AM, 687616 bytes, A       Adds the file FLV Player Addon-buttonutil.dll"="3/19/2014 7:52 AM, 425984 bytes, A       Adds the file FLV Player Addon-buttonutil.exe"="3/19/2014 7:52 AM, 343552 bytes, A       Adds the file FLV Player Addon-chromeinstaller.exe"="3/19/2014 7:51 AM, 2051584 bytes, A       Adds the file FLV Player Addon-codedownloader.exe"="3/19/2014 7:51 AM, 567296 bytes, A       Adds the file FLV Player Addon-enabler.exe"="3/19/2014 7:52 AM, 407040 bytes, A       Adds the file FLV Player Addon-firefoxinstaller.exe"="3/19/2014 7:51 AM, 958464 bytes, A       Adds the file FLV Player Addon-helper.exe"="3/19/2014 7:52 AM, 340992 bytes, A       Adds the file FLV Player Addon-updater.exe"="3/19/2014 7:52 AM, 391680 bytes, A       Adds the file Installer.log"="3/19/2014 7:52 AM, 225690 bytes, A       Adds the file Uninstall.exe"="3/19/2014 7:51 AM, 77312 bytes, A       Adds the file utils.exe"="3/19/2014 7:51 AM, 2294058 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_lgonpmchaeokedifbjenbcnjcdefdceg_0       Adds the file 1"="3/19/2014 8:03 AM, 25600 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0       Adds the file background.html"="3/19/2014 7:51 AM, 1705 bytes, A       Adds the file chromeCoreFilesIndex.txt"="3/19/2014 7:51 AM, 853 bytes, A       Adds the file crossriderManifest.json"="3/19/2014 7:51 AM, 516 bytes, A       Adds the file manifest.json"="3/19/2014 7:51 AM, 1235 bytes, A       Adds the file popup.html"="3/19/2014 7:51 AM, 139 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData       Adds the file manifest.xml"="3/19/2014 7:51 AM, 1705 bytes, A       Adds the file plugins.json"="3/19/2014 7:51 AM, 5591 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins       Adds the file 1_base.js"="3/19/2014 7:51 AM, 6908 bytes, A       Adds the file 13_CrossriderAppUtils.js"="3/19/2014 7:51 AM, 7135 bytes, A       Adds the file 14_CrossriderUtils.js"="3/19/2014 7:51 AM, 20888 bytes, A       Adds the file 17_jQuery.js"="3/19/2014 7:51 AM, 79982 bytes, A       Adds the file 177_crossriderDashboard.js"="3/19/2014 7:51 AM, 31232 bytes, A       Adds the file 182_openUrl.js"="3/19/2014 7:51 AM, 14301 bytes, A       Adds the file 183_tabsWrapper.js"="3/19/2014 7:51 AM, 2555 bytes, A       Adds the file 19_CHAppAPIWrapper.js"="3/19/2014 7:51 AM, 7137 bytes, A       Adds the file 207_dbWrapper.js"="3/19/2014 7:51 AM, 1661 bytes, A       Adds the file 21_debug.js"="3/19/2014 7:51 AM, 3676 bytes, A       Adds the file 22_resources.js"="3/19/2014 7:51 AM, 9082 bytes, A       Adds the file 246_setup.js"="3/19/2014 7:51 AM, 1958 bytes, A       Adds the file 28_initializer.js"="3/19/2014 7:51 AM, 664 bytes, A       Adds the file 4_jquery_1_7_1.js"="3/19/2014 7:51 AM, 94180 bytes, A       Adds the file 47_resources_background.js"="3/19/2014 7:51 AM, 7720 bytes, A       Adds the file 64_appApiMessage.js"="3/19/2014 7:51 AM, 2332 bytes, A       Adds the file 72_appApiValidation.js"="3/19/2014 7:51 AM, 46200 bytes, A       Adds the file 78_CrossriderInfo.js"="3/19/2014 7:51 AM, 3321 bytes, A       Adds the file 80_CHPopupAppAPI.js"="3/19/2014 7:51 AM, 194 bytes, A       Adds the file 91_monetizationLoader.js.js"="3/19/2014 7:51 AM, 145213 bytes, A       Adds the file 97_resourceApiWrapper.js"="3/19/2014 7:51 AM, 3299 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\userCode       Adds the file background.js"="3/19/2014 7:51 AM, 578 bytes, A       Adds the file extension.js"="3/19/2014 7:51 AM, 1 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons       Adds the file icon128.png"="3/19/2014 7:51 AM, 3167 bytes, A       Adds the file icon16.png"="3/19/2014 7:51 AM, 1223 bytes, A       Adds the file icon48.png"="3/19/2014 7:51 AM, 3861 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons\actions       Adds the file 1.png"="3/19/2014 7:51 AM, 1223 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js       Adds the file background.js"="3/19/2014 7:51 AM, 34135 bytes, A       Adds the file main.js"="3/19/2014 7:51 AM, 8452 bytes, A       Adds the file platformVersion.js"="3/19/2014 7:51 AM, 408 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api       Adds the file chrome.js"="3/19/2014 7:51 AM, 11499 bytes, A       Adds the file cookie.js"="3/19/2014 7:51 AM, 11743 bytes, A       Adds the file message.js"="3/19/2014 7:51 AM, 3346 bytes, A       Adds the file monitor.js"="3/19/2014 7:51 AM, 2039 bytes, A       Adds the file pageAction.js"="3/19/2014 7:51 AM, 1737 bytes, A       Adds the file pageActionBG.js"="3/19/2014 7:51 AM, 2519 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib       Adds the file app_api.js"="3/19/2014 7:51 AM, 6697 bytes, A       Adds the file bg_app_api.js"="3/19/2014 7:51 AM, 4685 bytes, A       Adds the file consts.js"="3/19/2014 7:51 AM, 335 bytes, A       Adds the file cookie_store.js"="3/19/2014 7:51 AM, 5905 bytes, A       Adds the file crossriderAPI.js"="3/19/2014 7:51 AM, 11366 bytes, A       Adds the file delegate.js"="3/19/2014 7:51 AM, 2002 bytes, A       Adds the file events.js"="3/19/2014 7:51 AM, 5757 bytes, A       Adds the file extensionDataStore.js"="3/19/2014 7:51 AM, 6656 bytes, A       Adds the file installer.js"="3/19/2014 7:51 AM, 779 bytes, A       Adds the file logFile.js"="3/19/2014 7:51 AM, 775 bytes, A       Adds the file logging.js"="3/19/2014 7:51 AM, 944 bytes, A       Adds the file onBGDocumentLoad.js"="3/19/2014 7:51 AM, 480 bytes, A       Adds the file reports.js"="3/19/2014 7:51 AM, 4929 bytes, A       Adds the file storageWrapper.js"="3/19/2014 7:51 AM, 903 bytes, A       Adds the file updateManager.js"="3/19/2014 7:51 AM, 8205 bytes, A       Adds the file util.js"="3/19/2014 7:51 AM, 5142 bytes, A       Adds the file xhr.js"="3/19/2014 7:51 AM, 2699 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\popupResource       Adds the file newPopup.js"="3/19/2014 7:51 AM, 40 bytes, A       Adds the file popup.js"="3/19/2014 7:51 AM, 45 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgonpmchaeokedifbjenbcnjcdefdceg       Adds the file 000003.log"="3/19/2014 8:04 AM, 1192135 bytes, A       Adds the file CURRENT"="3/19/2014 8:03 AM, 16 bytes, A       Adds the file LOCK"="3/19/2014 8:03 AM, 0 bytes, A       Adds the file LOG"="3/19/2014 8:03 AM, 47 bytes, A       Adds the file MANIFEST-000002"="3/19/2014 8:03 AM, 50 bytes, A    Adds the folder C:\Users\{username}\AppData\LocalLow\FLV Player Addon       Adds the file DTFProxyToServerSect_bCrossriderApp0052466_p6448.dat"="3/19/2014 8:03 AM, 316 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com       Adds the file chrome.manifest"="3/19/2014 7:51 AM, 732 bytes, A       Adds the file install.rdf"="3/19/2014 7:51 AM, 1345 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content       Adds the file api.js"="3/19/2014 7:51 AM, 18796 bytes, A       Adds the file background.html"="3/19/2014 7:51 AM, 2001 bytes, A       Adds the file baseObject.js"="3/19/2014 7:51 AM, 19 bytes, A       Adds the file browser.xul"="3/19/2014 7:51 AM, 4823 bytes, A       Adds the file dialog.js"="3/19/2014 7:51 AM, 1343 bytes, A       Adds the file ffCoreFilesIndex.txt"="3/19/2014 7:51 AM, 1052 bytes, A       Adds the file main.js"="3/19/2014 7:51 AM, 18750 bytes, A       Adds the file options.js"="3/19/2014 7:51 AM, 1931 bytes, A       Adds the file options.xul"="3/19/2014 7:51 AM, 1913 bytes, A       Adds the file platformVersion.js"="3/19/2014 7:51 AM, 612 bytes, A       Adds the file search_dialog.xul"="3/19/2014 7:51 AM, 2457 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api       Adds the file asyncDB.js"="3/19/2014 7:51 AM, 4805 bytes, A       Adds the file background.js"="3/19/2014 7:51 AM, 1336 bytes, A       Adds the file browserAction.js"="3/19/2014 7:51 AM, 8906 bytes, A       Adds the file contextMenu.js"="3/19/2014 7:51 AM, 5359 bytes, A       Adds the file dbManager.js"="3/19/2014 7:51 AM, 10097 bytes, A       Adds the file dom_bg.js"="3/19/2014 7:51 AM, 2505 bytes, A       Adds the file fileManager.js"="3/19/2014 7:51 AM, 943 bytes, A       Adds the file firefox.js"="3/19/2014 7:51 AM, 353 bytes, A       Adds the file firefoxNotifications.js"="3/19/2014 7:51 AM, 1116 bytes, A       Adds the file firefoxOmnibox.js"="3/19/2014 7:51 AM, 1515 bytes, A       Adds the file message.js"="3/19/2014 7:51 AM, 5210 bytes, A       Adds the file pageAction.js"="3/19/2014 7:51 AM, 11257 bytes, A       Adds the file request.js"="3/19/2014 7:51 AM, 2314 bytes, A       Adds the file tabs.js"="3/19/2014 7:51 AM, 3628 bytes, A       Adds the file webRequest.js"="3/19/2014 7:51 AM, 5806 bytes, A       Adds the file windowsMessagingHandler.js"="3/19/2014 7:51 AM, 960 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core       Adds the file addressBarChangeObserver.js"="3/19/2014 7:51 AM, 130 bytes, A       Adds the file console.js"="3/19/2014 7:51 AM, 1753 bytes, A       Adds the file consts.js"="3/19/2014 7:51 AM, 2356 bytes, A       Adds the file delegate.js"="3/19/2014 7:51 AM, 2180 bytes, A       Adds the file extensionDataStore.js"="3/19/2014 7:51 AM, 10309 bytes, A       Adds the file folderIOWrapper.js"="3/19/2014 7:51 AM, 3526 bytes, A       Adds the file httpObserver.js"="3/19/2014 7:51 AM, 2561 bytes, A       Adds the file IDBWrapper.js"="3/19/2014 7:51 AM, 4191 bytes, A       Adds the file installer.js"="3/19/2014 7:51 AM, 1319 bytes, A       Adds the file logFile.js"="3/19/2014 7:51 AM, 1562 bytes, A       Adds the file prefs.js"="3/19/2014 7:51 AM, 1649 bytes, A       Adds the file progressListenerObserver.js"="3/19/2014 7:51 AM, 1368 bytes, A       Adds the file registry.js"="3/19/2014 7:51 AM, 1158 bytes, A       Adds the file reloadObserver.js"="3/19/2014 7:51 AM, 1527 bytes, A       Adds the file reports.js"="3/19/2014 7:51 AM, 3869 bytes, A       Adds the file requestObject.js"="3/19/2014 7:51 AM, 1261 bytes, A       Adds the file searchSettings.js"="3/19/2014 7:51 AM, 3426 bytes, A       Adds the file uninstallObserver.js"="3/19/2014 7:51 AM, 2372 bytes, A       Adds the file updateManager.js"="3/19/2014 7:51 AM, 11480 bytes, A       Adds the file utils.js"="3/19/2014 7:51 AM, 18554 bytes, A       Adds the file xhr.js"="3/19/2014 7:51 AM, 2852 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\defaults\preferences       Adds the file prefs.js"="3/19/2014 7:51 AM, 3977 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData       Adds the file manifest.xml"="3/19/2014 8:02 AM, 1702 bytes, A       Adds the file plugins.json"="3/19/2014 8:02 AM, 11958 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins       Adds the file 1_base.js"="3/19/2014 7:51 AM, 6908 bytes, A       Adds the file 13_CrossriderAppUtils.js"="3/19/2014 7:51 AM, 7135 bytes, A       Adds the file 14_CrossriderUtils.js"="3/19/2014 7:51 AM, 20888 bytes, A       Adds the file 16_FFAppAPIWrapper.js"="3/19/2014 7:51 AM, 16158 bytes, A       Adds the file 17_jQuery.js"="3/19/2014 7:51 AM, 79982 bytes, A       Adds the file 177_crossriderDashboard.js"="3/19/2014 7:51 AM, 31232 bytes, A       Adds the file 182_openUrl.js"="3/19/2014 7:51 AM, 14301 bytes, A       Adds the file 183_tabsWrapper.js"="3/19/2014 7:51 AM, 2555 bytes, A       Adds the file 207_dbWrapper.js"="3/19/2014 7:51 AM, 1661 bytes, A       Adds the file 21_debug.js"="3/19/2014 7:51 AM, 3676 bytes, A       Adds the file 22_resources.js"="3/19/2014 7:51 AM, 9082 bytes, A       Adds the file 226_set_campaign_id_m.js"="3/19/2014 8:02 AM, 398 bytes, A       Adds the file 246_setup.js"="3/19/2014 8:02 AM, 1840 bytes, A       Adds the file 28_initializer.js"="3/19/2014 7:51 AM, 664 bytes, A       Adds the file 4_jquery_1_7_1.js"="3/19/2014 7:51 AM, 94180 bytes, A       Adds the file 47_resources_background.js"="3/19/2014 7:51 AM, 7720 bytes, A       Adds the file 64_appApiMessage.js"="3/19/2014 7:51 AM, 2332 bytes, A       Adds the file 72_appApiValidation.js"="3/19/2014 7:51 AM, 46200 bytes, A       Adds the file 78_CrossriderInfo.js"="3/19/2014 7:51 AM, 3321 bytes, A       Adds the file 91_monetizationLoader.js.js"="3/19/2014 8:02 AM, 145054 bytes, A       Adds the file 98_omniCommands.js"="3/19/2014 7:51 AM, 1936 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\userCode       Adds the file background.js"="3/19/2014 8:02 AM, 619 bytes, A       Adds the file extension.js"="3/19/2014 8:02 AM, 3 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\locale\en-US       Adds the file translations.dtd"="3/19/2014 7:51 AM, 425 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin       Adds the file button1.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file button2.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file button3.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file button4.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file button5.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file crossrider_statusbar.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file icon128.png"="3/19/2014 7:51 AM, 3167 bytes, A       Adds the file icon16.png"="3/19/2014 7:51 AM, 1223 bytes, A       Adds the file icon24.png"="3/19/2014 7:51 AM, 1361 bytes, A       Adds the file icon48.png"="3/19/2014 7:51 AM, 3861 bytes, A       Adds the file panelarrow-up.png"="3/19/2014 7:51 AM, 917 bytes, A       Adds the file popup.html"="3/19/2014 8:02 AM, 305 bytes, A       Adds the file skin.css"="3/19/2014 7:51 AM, 990 bytes, A       Adds the file update.css"="3/19/2014 7:51 AM, 140 bytes, A    In the existing folder C:\Windows\System32\Tasks       Adds the file FLV Player Addon-chromeinstaller"="3/19/2014 7:51 AM, 6144 bytes, A       Adds the file FLV Player Addon-codedownloader"="3/19/2014 7:52 AM, 4522 bytes, A       Adds the file FLV Player Addon-enabler"="3/19/2014 7:52 AM, 4402 bytes, A       Adds the file FLV Player Addon-firefoxinstaller"="3/19/2014 7:51 AM, 5338 bytes, A       Adds the file FLV Player Addon-updater"="3/19/2014 7:52 AM, 4568 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file FLV Player Addon-chromeinstaller.job"="3/19/2014 7:51 AM, 3114 bytes, A       Adds the file FLV Player Addon-codedownloader.job"="3/19/2014 7:52 AM, 1492 bytes, A       Adds the file FLV Player Addon-enabler.job"="3/19/2014 7:52 AM, 1372 bytes, A       Adds the file FLV Player Addon-firefoxinstaller.job"="3/19/2014 7:51 AM, 2308 bytes, A       Adds the file FLV Player Addon-updater.job"="3/19/2014 7:52 AM, 1538 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}]       "(Default)"="REG_SZ", "FLV Player Addon"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\FLV Player Addon\FLV Player Addon-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0052466.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544244466}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511241166}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0052466"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522242266}]       "(Default)"="REG_SZ", "CrossriderApp0052466.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522242266}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\FLV Player Addon\FLV Player Addon-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522242266}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0052466.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522242266}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522242266}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544244466}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522242266}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0052466.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.BHO]       "(Default)"="REG_SZ", "CrossriderApp0052466"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.BHO\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511241166}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.BHO\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0052466"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.BHO.1       "(Default)"="REG_SZ", "CrossriderApp0052466"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.BHO.1\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511241166}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.Sandbox]       "(Default)"="REG_SZ", "CrossriderApp0052466.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.Sandbox\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522242266}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.Sandbox\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0052466.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.Sandbox.1       "(Default)"="REG_SZ", "CrossriderApp0052466.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0052466.Sandbox.1\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522242266}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555245566}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555245566}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555245566}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555245566}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544244466}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566246666}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566246666}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566246666}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566246666}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544244466}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544244466}\1.0]       "(Default)"="REG_SZ", "CrossriderApp0052466 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544244466}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\FLV Player Addon\FLV Player Addon-bho.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544244466}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544244466}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\FLV Player Addon"    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\Chrome]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\Chrome-Profiles]       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\Firefox]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\Firefox\Profiles]       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\IE]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\IE\Profiles]       "{userID}"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\FLV Player Addon\Installer]       "BundledChrome"="REG_DWORD", 1       "BundledFirefox"="REG_DWORD", 1       "BundledIe"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286]       "52466"="REG_SZ", "FLV Player Addon"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511241166}]       "(Default)"="REG_SZ", "CrossriderApp0052466"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders       (-)(REG VAL) C:\Config.Msi\"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player Addon]       "CrAppId"="REG_SZ", "52466"       "CrPublisherId"="REG_SZ", "25286"       "DisplayIcon"="REG_SZ", "C:\Program Files\FLV Player Addon\utils.exe"       "DisplayName"="REG_SZ", "FLV Player Addon"       "DisplayVersion"="REG_SZ", "1.34.3.6"       "Publisher"="REG_SZ", "Nero"       "UninstallString"="REG_SZ", "C:\Program Files\FLV Player Addon\Uninstall.exe /fromcontrolpanel=1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "FLV Player Addon-chromeinstaller.job"="REG_BINARY, ................................       "FLV Player Addon-chromeinstaller.job.fp"="REG_DWORD", 1006793732       "FLV Player Addon-codedownloader.job"="REG_BINARY, ................................       "FLV Player Addon-codedownloader.job.fp"="REG_DWORD", -1600005133       "FLV Player Addon-enabler.job"="REG_BINARY, ................................       "FLV Player Addon-enabler.job.fp"="REG_DWORD", 1273011655       "FLV Player Addon-firefoxinstaller.job"="REG_BINARY, ................................       "FLV Player Addon-firefoxinstaller.job.fp"="REG_DWORD", -2122348413       "FLV Player Addon-updater.job"="REG_BINARY, ................................       "FLV Player Addon-updater.job.fp"="REG_DWORD", -406586072    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "A966729BA27C4812B41BB16B8443B652IE"       "Verifier"="REG_SZ", "bbd8f666525a9c1c182d989fc5512c5d"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\Button]       "52466"="REG_DWORD", 1       "Index"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]       "52466"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]       "52466"="REG_SZ", "{ javascript removed, full log available on rw\equest }"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Nero]       "52466"="REG_SZ", "FLV Player Addon"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions]       "{11111111-1111-1111-1111-110511241166}"="REG_BINARY, ............
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 3/19/2014Scan Time: 8:10:00 AMLogfile: mbamFLV.txtAdministrator: YesVersion: 2.00.0.1000Malware Database: v2014.03.19.02Rootkit Database: v2014.03.18.01License: TrialMalware Protection: DisabledMalicious Website Protection: DisabledChameleon: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 202298Time Elapsed: 3 min, 30 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledShuriken: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 1PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-buttonutil.dll, Delete-on-Reboot, [28f60401df9c5bdb4bf8039a659d768a], Registry Keys: 20PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511241166}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544244466}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555245566}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566246666}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0052466.BHO.1, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511241166}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0052466.BHO, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511241166}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511241166}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522242266}, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0052466.Sandbox.1, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0052466.Sandbox, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511241166}\INPROCSERVER32, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\FLV Player Addon, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, HKLM\SOFTWARE\FLV Player Addon, Quarantined, [b16d34d181fac37387c0910cdc26df21], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [f529907588f3c472d52e8d11ca38936d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [130b2ed79fdc22145e1f3c96f310aa56], PUP.Optional.FLVPlayerAddon.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\FLV Player Addon, Quarantined, [e83604019ae144f2c4813d6048ba31cf], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [42dc5baa5e1d0b2bc8395b4325dd20e0], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Nero, Quarantined, [f42ae12432492c0a9bafbc1afb083dc3], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 25PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon, Delete-on-Reboot, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\userCode, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons\actions, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\popupResource, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\defaults, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\defaults\preferences, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\userCode, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\locale, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\locale\en-US, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], Files: 178PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-bho.dll, Quarantined, [44da1de886f5f343be8ffcae50b1fc04], PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\FLV Plugin addon.exe, Quarantined, [27f7c93c0d6e39fd4ef18020b1503fc1], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\background.html, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\52466.crx, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\52466.xpi, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-bg.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-buttonutil.dll, Delete-on-Reboot, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-buttonutil.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-chromeinstaller.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-codedownloader.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-enabler.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-firefoxinstaller.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-helper.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon-updater.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\FLV Player Addon.ico, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\Installer.log, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\Uninstall.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Program Files\FLV Player Addon\utils.exe, Quarantined, [28f60401df9c5bdb4bf8039a659d768a], PUP.Optional.FLVPlayerAddon.A, C:\Windows\Tasks\FLV Player Addon-chromeinstaller.job, Quarantined, [5dc148bdd2a95bdba0a4d0cd15eda65a], PUP.Optional.FLVPlayerAddon.A, C:\Windows\Tasks\FLV Player Addon-codedownloader.job, Quarantined, [ea346d98c0bbc472034147567e8406fa], PUP.Optional.FLVPlayerAddon.A, C:\Windows\Tasks\FLV Player Addon-enabler.job, Quarantined, [0e107e873a416bcb24202e6f2dd53dc3], PUP.Optional.FLVPlayerAddon.A, C:\Windows\Tasks\FLV Player Addon-firefoxinstaller.job, Quarantined, [8e9006ff9cdf61d576ce2974ed15f010], PUP.Optional.FLVPlayerAddon.A, C:\Windows\Tasks\FLV Player Addon-updater.job, Quarantined, [9886ce374b305adcb78d7f1e16ec31cf], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\background.html, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\chromeCoreFilesIndex.txt, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\crossriderManifest.json, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\manifest.json, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\popup.html, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\manifest.xml, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins.json, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\28_initializer.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\17_jQuery.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\182_openUrl.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\183_tabsWrapper.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\19_CHAppAPIWrapper.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\1_base.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\207_dbWrapper.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\21_debug.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\22_resources.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\246_setup.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\47_resources_background.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\64_appApiMessage.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\72_appApiValidation.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\80_CHPopupAppAPI.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\plugins\97_resourceApiWrapper.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\userCode\background.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\extensionData\userCode\extension.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons\icon128.png, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons\icon16.png, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons\icon48.png, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\icons\actions\1.png, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\background.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\main.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\platformVersion.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api\chrome.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api\cookie.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api\message.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api\monitor.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api\pageAction.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\api\pageActionBG.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\app_api.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\bg_app_api.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\consts.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\cookie_store.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\crossriderAPI.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\delegate.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\events.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\extensionDataStore.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\installer.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\logFile.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\logging.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\onBGDocumentLoad.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\reports.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\storageWrapper.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\updateManager.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\util.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\xhr.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\popupResource\newPopup.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgonpmchaeokedifbjenbcnjcdefdceg\1.26.35_0\js\lib\popupResource\popup.js, Quarantined, [d04e8f7697e43ef870a9cfcbe220d12f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome.manifest, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\install.rdf, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\background.html, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\baseObject.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\browser.xul, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\dialog.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\main.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\options.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\options.xul, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\platformVersion.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\search_dialog.xul, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\asyncDB.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\background.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\browserAction.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\contextMenu.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\dbManager.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\dom_bg.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\fileManager.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\firefox.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\firefoxNotifications.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\message.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\pageAction.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\request.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\tabs.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\webRequest.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\console.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\consts.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\delegate.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\extensionDataStore.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\folderIOWrapper.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\httpObserver.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\IDBWrapper.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\installer.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\logFile.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\prefs.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\progressListenerObserver.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\registry.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\reloadObserver.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\reports.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\requestObject.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\searchSettings.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\uninstallObserver.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\updateManager.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\utils.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\chrome\content\core\xhr.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\defaults\preferences\prefs.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\manifest.xml, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins.json, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\17_jQuery.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\182_openUrl.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\1_base.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\21_debug.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\226_set_campaign_id_m.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\22_resources.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\246_setup.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\28_initializer.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\47_resources_background.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\plugins\98_omniCommands.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\userCode\background.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\extensionData\userCode\extension.js, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\locale\en-US\translations.dtd, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\button1.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\button2.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\button3.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\button4.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\button5.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\crossrider_statusbar.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\icon128.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\icon16.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\icon24.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\icon48.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\panelarrow-up.png, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\popup.html, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\skin.css, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc59fc10-5a26-4311-af8d-bf9b600a7b9c@080e29b9-9bee-4caa-b38c-4958c5aa2376.com\skin\update.css, Quarantined, [75a9d431f289ee488dbdbcde36cc0af6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "144d9259acd71bd868943dda87b0bce7"), Replaced,[45d9d62fadcec67037828ed1877d926e]PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.adc59fc105a264311af8dbf9b600a7b9c080e29b99bee4caab38c4958c5aa2376com52466.52466.internaldb.Resources_meta.value", "%7B%22iframe.html%22%3A%7B%22id%22%3A538570Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22ver%22%3A18Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22status%22%3A1Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22name%22%3A%22iframe.html%22Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/52466/538570%22%7DReplaced,[1905b352f18ae45201c4baa52bd932ce]C%2219x19.jpg%22%3A%7B%22id%22%3A550082Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22ver%22%3A11Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22status%22%3A1Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22name%22%3A%2219x19.jpg%22Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/52466/550082%22%7DReplaced,[1905b352f18ae45201c4baa52bd932ce]C%2219x19.png%22%3A%7B%22id%22%3A550083Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22ver%22%3A12Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22status%22%3A1Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22name%22%3A%2219x19.png%22Replaced,[1905b352f18ae45201c4baa52bd932ce]C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/52466/550083%22%7D%7D"), %5Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.