Jump to content
Sign in to follow this  
Metallica

Removal instructions for Amazon Mini Saver

Recommended Posts

What is Amazon Mini Saver?

The Malwarebytes research team has determined that Amazon Mini Saver is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Amazon Mini Saver?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

and this icon in your browsers too/menu bar:

icons.png

and this entry in your list of installed programs:

warning4.png

How did Amazon Mini Saver get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Amazon Mini Saver?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of Amazon Mini Saver?
  • No, Malwarebytes' Anti-Malware removes Amazon Mini Saver completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Amazon Mini Saver hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0054491 - {11111111-1111-1111-1111-110511441191} - C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll
Alterations made by the installer:

File system details  ---------------------------------------------	Adds the folder C:\Program Files\Amazon Mini Saver	   Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A	   Adds the file 360-54491.crx"="5/31/2014 10:14 AM, 274126 bytes, A	   Adds the file 54491.crx"="5/31/2014 10:14 AM, 272935 bytes, A	   Adds the file 54491.xpi"="5/31/2014 10:14 AM, 461864 bytes, A	   Adds the file Amazon Mini Saver.ico"="5/27/2014 12:40 PM, 9662 bytes, A	   Adds the file Amazon Mini Saver-bg.exe"="5/31/2014 10:14 AM, 641024 bytes, A	   Adds the file Amazon Mini Saver-bho.dll"="5/31/2014 10:14 AM, 571904 bytes, A	   Adds the file Amazon Mini Saver-buttonutil.dll"="5/31/2014 10:14 AM, 388096 bytes, A	   Adds the file Amazon Mini Saver-buttonutil.exe"="5/31/2014 10:14 AM, 273408 bytes, A	   Adds the file Amazon Mini Saver-codedownloader.exe"="5/31/2014 10:14 AM, 505856 bytes, A	   Adds the file Amazon Mini Saver-nova.dll"="5/31/2014 10:14 AM, 117248 bytes, A	   Adds the file Amazon Mini Saver-nova.exe"="5/31/2014 10:14 AM, 588288 bytes, A	   Adds the file Amazon Mini Saver-novainstaller.exe"="5/31/2014 10:14 AM, 505856 bytes, A	   Adds the file background.html"="5/27/2014 12:40 PM, 729 bytes, A	   Adds the file bgNova.html"="5/27/2014 12:40 PM, 729 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-2.exe"="5/31/2014 10:14 AM, 359936 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-3.exe"="5/31/2014 10:14 AM, 1893888 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-4.exe"="5/31/2014 10:14 AM, 834048 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-5.exe"="5/31/2014 10:15 AM, 455680 bytes, A	   Adds the file Uninstall.exe"="5/31/2014 10:14 AM, 79360 bytes, A	   Adds the file utils.exe"="5/31/2014 10:14 AM, 2236503 bytes, A	Adds the folder C:\Users\{username}\AppData\LocalLow\Amazon Mini Saver	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com	   Adds the file chrome.manifest"="5/31/2014 10:14 AM, 732 bytes, A	   Adds the file install.rdf"="5/31/2014 10:14 AM, 1359 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults\preferences	   Adds the file prefs.js"="5/31/2014 10:14 AM, 3992 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData	   Adds the file manifest.xml"="5/31/2014 10:14 AM, 1721 bytes, A	   Adds the file plugins.json"="5/31/2014 10:14 AM, 8862 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale\en-US	   Adds the file translations.dtd"="5/31/2014 10:14 AM, 425 bytes, A	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin	In the existing folder C:\Windows\System32\Tasks	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-1"="5/31/2014 10:14 AM, 4460 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-2"="5/31/2014 10:14 AM, 4416 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-3"="5/31/2014 10:14 AM, 6834 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-4"="5/31/2014 10:14 AM, 5300 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-5"="5/31/2014 10:15 AM, 4534 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-6"="5/31/2014 10:14 AM, 4464 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-7"="5/31/2014 10:14 AM, 4400 bytes, A	In the existing folder C:\Windows\Tasks	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-1.job"="5/31/2014 10:14 AM, 1430 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-2.job"="5/31/2014 10:14 AM, 1386 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-3.job"="5/31/2014 10:14 AM, 3804 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-4.job"="5/31/2014 10:14 AM, 2270 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-5.job"="5/31/2014 10:15 AM, 1504 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-6.job"="5/31/2014 10:14 AM, 1434 bytes, A	   Adds the file db516d24-2066-4307-b472-15a4876ffaab-7.job"="5/31/2014 10:14 AM, 1372 bytes, ARegistry details  ------------------------------------------	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver]	   "ActiveAppId"="REG_SZ", "54491"	   "Amazon Mini Saver-ver"="REG_BINARY, (zero length data)	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Code]	   "AppJavaScript"="REG_SZ", ""	   "BgJavaScript"="REG_SZ", " { javascript removed, full log available on request }"	   "NewTabJavaScript"="REG_SZ", ""	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Firefox]	   "TotalProfiles"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Firefox\Profiles]	   "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\IE]	   "TotalProfiles"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\IE\Profiles]	   "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Installer]	   "Bic"="REG_SZ", "AA928F983D2D45488862B891D1BB5FE6IE"	   "BundledChrome"="REG_DWORD", 1	   "BundledFirefox"="REG_DWORD", 1	   "BundledIe"="REG_DWORD", 1	   "BundledNova"="REG_DWORD", 1	   "CodeDownloadDomain"="REG_SZ", "http://js.clientstatsservice.com"	   "DefaultBrowser"="REG_SZ", "ie"	   "ErrorsDomain"="REG_SZ", "http://errors.clientstatsservice.com"	   "FullVersion"="REG_SZ", "1.34.5.22"	   "FullVersionForUrl"="REG_SZ", "1_34_05_22"	   "OsName"="REG_SZ", "7"	   "Params"="REG_SZ", "{   "source_id" : "001373",   "sub_id" : "0",   "uzid" : "0"}"	   "SrcId"="REG_SZ", "001373"	   "StatsDomain"="REG_SZ", "http://stats.clientstatsservice.com"	   "SubId"="REG_SZ", "0"	   "Time"="REG_SZ", "1401524082"	   "Verifier"="REG_SZ", "ed67a200d9d9d74a84cd1f1098ab03be"	   "ZData"="REG_SZ", "0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Manifest]	   "AddressbarURL"="REG_SZ", "NA"	   "BgVersion"="REG_SZ", "1"	   "ChangePrevious"="REG_SZ", "false"	   "Description"="REG_SZ", "Browse Amazons products and save money"	   "DisableIe"="REG_SZ", "true"	   "EnableSearchIE"="REG_SZ", "false"	   "HomePageUrl"="REG_SZ", "NA"	   "IsButtonEnabled"="REG_SZ", "true"	   "Manifest"="REG_SZ", "NA"	   "ModeType"="REG_SZ", "production"	   "Name"="REG_SZ", "Amazon Mini Saver"	   "PluginsManifestVersion"="REG_SZ", "14"	   "PublisherId"="REG_SZ", "25286"	   "PublisherName"="REG_SZ", "Nero"	   "RunInFrame"="REG_SZ", "true"	   "SetNewTab"="REG_SZ", "false"	   "ThanksUrl"="REG_SZ", "NA"	   "UninstallerOfferAction"="REG_SZ", "NA"	   "UninstallerOfferUrl"="REG_SZ", "NA"	   "UpdateInterval"="REG_DWORD", 360	   "Version"="REG_SZ", "17"	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Plugins]	   "AppPluginList"="REG_SZ", "246,14,78,4,93,102,155,193,223,263,91"	   "BgPluginList"="REG_SZ", "246,4,14,78,251,249,250,93,102,155,193,223,263,91"	   "BrowserEventPluginList"="REG_SZ", "14"	   "NewTabPluginList"="REG_SZ", "14,78,4"	   "OnRequestPluginList"="REG_SZ", "14"	   "PopupPluginList"="REG_SZ", "4,14,78"	[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Update]	   "LastCheck"="REG_DWORD", 1401524093	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}]	   "(Default)"="REG_SZ", "Amazon Mini Saver"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\Implemented Categories]	   "(Default)"="REG_SZ", ""	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]	   "(Default)"="REG_SZ", ""	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\InprocServer32]	   "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll"	   "ThreadingModel"="REG_SZ", "Apartment"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\ProgID]	   "(Default)"="REG_SZ", "CrossriderApp0054491.BHO.1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\Programmable]	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\VersionIndependentProgID]	   "(Default)"="REG_SZ", "CrossriderApp0054491"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}]	   "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\InprocServer32]	   "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll"	   "ThreadingModel"="REG_SZ", "Apartment"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\ProgID]	   "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox.1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\Programmable]	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\VersionIndependentProgID]	   "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO]	   "(Default)"="REG_SZ", "CrossriderApp0054491"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO\CLSID]	   "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511441191}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO\CurVer]	   "(Default)"="REG_SZ", "CrossriderApp0054491"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO.1]	   "(Default)"="REG_SZ", "CrossriderApp0054491"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO.1\CLSID]	   "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511441191}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox]	   "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox\CLSID]	   "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522442291}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox\CurVer]	   "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox.1]	   "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox.1\CLSID]	   "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522442291}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}]	   "(Default)"="REG_SZ", "ICrossriderBHO"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}\ProxyStubClsid]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}\ProxyStubClsid32]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"	   "Version"="REG_SZ", "1.0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}]	   "(Default)"="REG_SZ", "ISandBox"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}\ProxyStubClsid]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}\ProxyStubClsid32]	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}\TypeLib]	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"	   "Version"="REG_SZ", "1.0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0]	   "(Default)"="REG_SZ", "CrossriderApp0054491 Type Library"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0\0\win32]	   "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0\FLAGS]	   "(Default)"="REG_SZ", "0"	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0\HELPDIR]	   "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver"	[HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286]	   "54491"="REG_SZ", "Amazon Mini Saver"	[HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286\Status]	   "Installed"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511441191}]	   "(Default)"="REG_SZ", "CrossriderApp0054491"	   "NoExplorer"="REG_DWORD", 1	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]	   "{11111111-1111-1111-1111-110511441191}"="REG_SZ", "1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Amazon Mini Saver]	   "CrAppId"="REG_SZ", "54491"	   "CrPublisherId"="REG_SZ", "25286"	   "DisplayIcon"="REG_SZ", "C:\Program Files\Amazon Mini Saver\utils.exe"	   "DisplayName"="REG_SZ", "Amazon Mini Saver"	   "DisplayVersion"="REG_SZ", "1.34.5.22"	   "Publisher"="REG_SZ", "Nero"	   "UninstallString"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Uninstall.exe /fcp=1"	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures	   "db516d24-2066-4307-b472-15a4876ffaab-1.job"="REG_BINARY, ................................	   "db516d24-2066-4307-b472-15a4876ffaab-1.job.fp"="REG_DWORD", 729416091	   "db516d24-2066-4307-b472-15a4876ffaab-2.job"="REG_BINARY, ................................	   "db516d24-2066-4307-b472-15a4876ffaab-2.job.fp"="REG_DWORD", -1429918120	   "db516d24-2066-4307-b472-15a4876ffaab-3.job"="REG_BINARY, ................................	   "db516d24-2066-4307-b472-15a4876ffaab-3.job.fp"="REG_DWORD", -352828336	   "db516d24-2066-4307-b472-15a4876ffaab-4.job"="REG_BINARY, ................................	   "db516d24-2066-4307-b472-15a4876ffaab-4.job.fp"="REG_DWORD", 649531374	   "db516d24-2066-4307-b472-15a4876ffaab-5.job"="REG_BINARY, ................................	   "db516d24-2066-4307-b472-15a4876ffaab-5.job.fp"="REG_DWORD", -55435605	   "db516d24-2066-4307-b472-15a4876ffaab-6.job"="REG_BINARY, ................................	   "db516d24-2066-4307-b472-15a4876ffaab-6.job.fp"="REG_DWORD", -1262949490	   "db516d24-2066-4307-b472-15a4876ffaab-7.job"="REG_BINARY, ................................	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver]	   "ActiveAppId"="REG_SZ", "54491"	   "BhoRunningVersion"="REG_SZ", "153"	   "IsBhoEnabled"="REG_DWORD", 1	   "LastSetSearch"="REG_DWORD", 1401524292	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\background]	   "__onDocumentStart_script__"="REG_SZ", ""	   "__onDocumentStart_script_store__"="REG_SZ", ""	   "IsEnabled"="REG_DWORD", 1	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\Code]	   "AppJavaScript"="REG_SZ", ""	   "BgJavaScript"="REG_SZ", ""	   "NewTabJavaScript"="REG_SZ", ""	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\Installer]	   "CodeDownloadDomain"="REG_SZ", "http://js.clientstatsservice.com"	   "DefaultBrowser"="REG_SZ", "ie"	   "ErrorsDomain"="REG_SZ", "http://errors.clientstatsservice.com"	   "FullVersion"="REG_SZ", "1.34.5.22"	   "FullVersionForUrl"="REG_SZ", "1_34_05_22"	   "OsName"="REG_SZ", "7"	   "Params"="REG_SZ", "{   "source_id" : "001373",   "sub_id" : "0",   "uzid" : "0"}"	   "SetSearch"="REG_SZ", "false"	   "SrcId"="REG_SZ", "001373"	   "StatsDomain"="REG_SZ", "http://stats.clientstatsservice.com"	   "SubId"="REG_SZ", "0"	   "Time"="REG_SZ", "1401524082"	   "ZData"="REG_SZ", "0"	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\Log]	   "amazon mini saver-buttonutil"="REG_DWORD", 0
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 5/31/2014Scan Time: 10:28:03 AMLogfile: mbamAmazonMiniSaver.txtAdministrator: YesVersion: 2.00.2.1012Malware Database: v2014.05.31.02Rootkit Database: v2014.05.21.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 225493Time Elapsed: 2 min, 54 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 20PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544444491}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555445591}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566446691}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.BHO.1, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.BHO, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522442291}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.Sandbox.1, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.Sandbox, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511441191}\INPROCSERVER32, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\Amazon Mini Saver, Quarantined, [e8064c0beb90b581ce0f177627db3dc3],PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [8866aaad93e87db90476643b738f6c94],PUP.Optional.AmazonMini.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Amazon Mini Saver, Quarantined, [e00e0f483c3fcc6aaa35b1dc58aa7a86],PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3eb060f74d2ea6904d43ae28a06351af],PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [9d5186d14c2f6fc784f7366908fab14f],PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Nero, Quarantined, [ffef4d0aaccf261097b70bcf818212ee],PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Amazon Mini Saver, Quarantined, [47a71740a8d3e2544011325b8a7813ed],Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults\preferences, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale\en-US, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver, Quarantined, [47a71740a8d3e2544011325b8a7813ed],Files: 132PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Amazon Mini Saver.exe, Quarantined, [7579f562cdaebd795b1a34129b6532ce],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-1.job, Quarantined, [717da9aee59688aefcff2776bc4627d9],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-2.job, Quarantined, [ec020d4a6e0d2a0cd5260b922fd3669a],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-3.job, Quarantined, [e7077cdb83f8eb4b9665dfbee61c9e62],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-4.job, Quarantined, [40ae7bdcd0ab32045aa14f4e58aa9c64],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-5.job, Quarantined, [7f6ff265b9c2d165db20debf3fc35fa1],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-6.job, Quarantined, [f6f83c1b5f1ca98d1ae16e2f40c2649c],PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-7.job, Quarantined, [d915ed6a097243f38b700796c04248b8],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome.manifest, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\install.rdf, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\30007ff9ba1003bb03634d9aab1dca8f.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\70a5e7bef78b21ff4043fda1646c1011.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\background.html, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\browser.xul, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\deebd130b09ca7f6e3eaa72d20c47dd8.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\dialog.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\f1ecaad9e2efcf795f2e525d9194acb5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\f71cb8549e296d7eee45e88e4350d0b6.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\options.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\options.xul, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\search_dialog.xul, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\0df3eaf9cb71ded809c21dcaf2598ec5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\21ca3787d5a57cade52b0a25b13787fe.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\2f402570cbf2c6478afa472870ce5428.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\30ca242fd0e92463a9d0ddc05b81cc29.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\31fe48a21a6d41d69aab54cdd8c2c672.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\38a09ab38b78be5b20a6fd81addcbe45.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\4b5a6b996af49d9118ef5aaa235b26bb.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\4cb07f33fef68cf9e035a8b3ff43e2d5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\754c8a420613094ec21e49c709da472e.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\7ccd8009d35ec3a3f5f608b961623fa9.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\8000a40b27b02efda39a5ce59f6a2d71.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\94f29b1eda2efeac347ffea44c449b78.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\9eded3e1d9e1b0ae9d7f5ff751ce6e70.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\abf93e2e92042b236b7721c22bab9be5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\d8bc5f546a8c784fdc68dbc90cc7934d.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\e3b9a71f468a6c643c5854d3b7a91156.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\7d2fe98ec74beb3fb5a7f01860ede7bf.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\00817a92a304a1e51c003b21781b71fd.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\14ec6c2555bdd234c13cfb794898e805.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\30ecf4b18bbe9ae6485b4d95d8f5f668.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\491aff33dc804f0fc832c07896f54985.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\4b99f768323686114dc471a20b1263d8.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\4eb231d4de169602f4c030c58117bd84.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\72dd5c65151ac0d23dff6c8123b80375.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\7619ccece3ca48a870340a6c2c527375.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\7c37a41e98093d5e549e10cb1d403595.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\8976f2fc1fc298d9bd10f9f614a3eb82.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\8b29d36b5f10e0d83bd1d7fe5857eb23.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\933e20d7ca6365de51e81d19a5932008.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\a864846e6787b6e62e0b58f9d0f52176.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\bbdd52c2b54fa9d9ac44919d29e32291.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\c55395ee8dd10055995f7fa25c684737.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\d12c5bb1348d72d8d929850089d65c9f.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\ec04dee27d6bc97b5f21e71912d94c38.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\ee1cf7dee15c8288c8721a19016087b4.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\f5f88d5205ec989cc6c3f568cc9c25a7.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\installer.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults\preferences\prefs.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\manifest.xml, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins.json, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\1.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\102.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\104.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\13.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\14.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\155.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\16.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\17.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\177.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\182.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\183.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\193.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\207.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\21.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\22.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\220.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\221.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\223.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\246.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\263.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\28.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\4.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\47.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\64.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\7.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\72.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\78.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\9.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\91.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\93.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\98.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode\background.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode\extension.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale\en-US\translations.dtd, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button1.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button2.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button3.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button4.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button5.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\crossrider_statusbar.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon128.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon16.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon24.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon48.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\panelarrow-up.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\popup.html, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\skin.css, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\update.css, Quarantined, [ad41e37480fb2016643197e8b54d9868],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\1293297481.mxaddon, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\360-54491.crx, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\54491.crx, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\54491.xpi, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bg.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-buttonutil.dll, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-buttonutil.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-codedownloader.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-nova.dll, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-nova.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-novainstaller.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver.ico, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\background.html, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\bgNova.html, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-2.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-3.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-4.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-5.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Uninstall.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\utils.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146515d3569bb0cf9a8998adbdfe3106"), Replaced,[27c77bdce7946ec87b58206b84803fc1]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.