Jump to content

Removal instructions for HDtubeV1.6


Recommended Posts

  • Staff

What is HDtubeV1.6?

The Malwarebytes research team has determined that HDtubeV1.6 is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by HDtubeV1.6?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

and this entry in your list of installed programs:

warning4.png

How did HDtubeV1.6 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was offered as a video enhancing browser extension.

How do I remove HDtubeV1.6?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of HDtubeV1.6?
  • No, Malwarebytes' Anti-Malware removes HDtubeV1.6 completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HDtubeV1.6 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0059564 - {11111111-1111-1111-1111-110511951164} - C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\HDtubeV1.6       Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A       Adds the file 360-59564.crx"="6/30/2014 9:45 AM, 285968 bytes, A       Adds the file 59564.xpi"="6/30/2014 9:45 AM, 472708 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7.crx"="6/30/2014 9:45 AM, 284773 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.exe"="6/30/2014 9:45 AM, 1946472 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.exe"="6/30/2014 9:45 AM, 388968 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.exe"="6/30/2014 9:45 AM, 872808 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.exe"="6/30/2014 9:46 AM, 483688 bytes, A       Adds the file background.html"="6/25/2014 7:01 AM, 729 bytes, A       Adds the file HDtubeV1.6.ico"="6/25/2014 7:01 AM, 9662 bytes, A       Adds the file HDtubeV1.6-bg.exe"="6/30/2014 9:45 AM, 596840 bytes, A       Adds the file HDtubeV1.6-bho.dll"="6/30/2014 9:45 AM, 577384 bytes, A       Adds the file HDtubeV1.6-codedownloader.exe"="6/30/2014 9:45 AM, 545640 bytes, A       Adds the file Uninstall.exe"="6/30/2014 9:45 AM, 105832 bytes, A       Adds the file utils.exe"="6/30/2014 9:45 AM, 2280370 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\defaults\preferences       Adds the file prefs.js"="6/30/2014 9:45 AM, 3977 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData       Adds the file manifest.xml"="6/30/2014 9:45 AM, 1711 bytes, A       Adds the file plugins.json"="6/30/2014 9:45 AM, 13332 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\userCode    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\locale\en-US       Adds the file translations.dtd"="6/30/2014 9:45 AM, 425 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-1"="6/30/2014 9:45 AM, 4576 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-11"="6/30/2014 9:45 AM, 6830 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-2"="6/30/2014 9:45 AM, 4378 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-4"="6/30/2014 9:45 AM, 5238 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5"="6/30/2014 9:46 AM, 4472 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user"="6/30/2014 9:46 AM, 4492 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job"="6/30/2014 9:45 AM, 1546 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job"="6/30/2014 9:45 AM, 3800 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job"="6/30/2014 9:45 AM, 1348 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job"="6/30/2014 9:45 AM, 2208 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job"="6/30/2014 9:46 AM, 1442 bytes, A       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user.job"="6/30/2014 9:46 AM, 1456 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}]       "(Default)"="REG_SZ", "HDtubeV1.6"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0059564.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0059564"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}]       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO]       "(Default)"="REG_SZ", "CrossriderApp0059564"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511951164}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0059564"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO.1]       "(Default)"="REG_SZ", "CrossriderApp0059564"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO.1\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511951164}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox]       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522952264}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox.1]       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox.1\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522952264}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0]       "(Default)"="REG_SZ", "CrossriderApp0059564 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6"    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\Firefox]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\Firefox\Profiles]       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\IE]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\IE\Profiles]       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\Installer]       "BundledAddCh"="REG_DWORD", 1       "BundledFirefox"="REG_DWORD", 1       "BundledIe"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\19979]       "59564"="REG_SZ", "HDtubeV1.6"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\19979\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951164}       "(Default)"="REG_SZ", "CrossriderApp0059564"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]       "{11111111-1111-1111-1111-110511951164}"="REG_SZ", "1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDtubeV1.6]       "CrAppId"="REG_SZ", "59564"       "CrPublisherId"="REG_SZ", "19979"       "DisplayIcon"="REG_SZ", "C:\Program Files\HDtubeV1.6\utils.exe"       "DisplayName"="REG_SZ", "HDtubeV1.6"       "DisplayVersion"="REG_SZ", "1.34.6.10"       "Publisher"="REG_SZ", "HDTube"       "UninstallString"="REG_SZ", "C:\Program Files\HDtubeV1.6\Uninstall.exe /fcp=1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job"="REG_BINARY, ................................       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job.fp"="REG_DWORD", 1170458839       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job"="REG_BINARY, ................................       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job.fp"="REG_DWORD", 1027380523       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job"="REG_BINARY, ................................       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job.fp"="REG_DWORD", -1084882610       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job"="REG_BINARY, ................................       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job.fp"="REG_DWORD", 215824598       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job"="REG_BINARY, ................................       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job.fp"="REG_DWORD", 901819135       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user.job"="REG_BINARY, ................................       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user.job.fp"="REG_DWORD", 873375177    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "EFD41030918E41DEBCBB72FD72C808B3IE"       "Verifier"="REG_SZ", "fd3b8112c892fbce94f5e4319ce36e4c"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]       "59564"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]       "59564"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDtubeV1.6]       "ActiveAppId"="REG_SZ", "59564"       "BhoRunningVersion"="REG_SZ", "153"       "IsBhoEnabled"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDtubeV1.6\Background]       " { javascript removed, full log available on request } "     [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDtubeV1.6\Update]       "LastCheck"="REG_DWORD", 1404114358    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\19979]       "59564"="REG_SZ", "HDtubeV1.6"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\19979\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\HDTube]       "59564"="REG_SZ", "HDtubeV1.6"    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511951164}]       "Flags"="REG_DWORD", 1024       "VerCache"="REG_BINARY, ......................
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 6/30/2014Scan Time: 9:51:05 AMLogfile: mbamHDtube.txtAdministrator: YesVersion: 2.00.2.1012Malware Database: v2014.06.30.04Rootkit Database: v2014.06.23.02License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 234938Time Elapsed: 3 min, 16 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 20PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544954464}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555955564}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566956664}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.BHO.1, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.BHO, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522952264}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.Sandbox.1, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.Sandbox, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951164}\INPROCSERVER32, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\HDtubeV1.6, Quarantined, [198328564d2e64d20a86beef30d2c23e], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [c4d8a4dab1ca52e488fdcafb62a006fa], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [217bdf9f601b88ae8a00c636b64dfb05], PUP.Optional.HDPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDtubeV1.6, Quarantined, [d5c75e20afcc55e1b6dcdfce7989f808], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [5c40b1cd225950e61f67c500aa58f30d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HDTube, Quarantined, [d5c71569fe7d4ee85a39b6f7c141e020], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HDtubeV1.6, Quarantined, [c0dc532b601b181e682184286999a45c], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\defaults, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\defaults\preferences, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\userCode, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\locale, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\locale\en-US, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6, Quarantined, [c0dc532b601b181e682184286999a45c], Files: 153PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\HDtubeV1.6.exe, Quarantined, [2478ef8f017ad06612e40f300df3b54b], PUP.Optional.InstallCore, C:\Users\{username}\Downloads\googleupdatersetup.exe, Quarantined, [7e1e106eadce191d8d9799e78f7540c0], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-1, Quarantined, [0e8ef985bdbe1f1789158c2325ddb848], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-2, Quarantined, [47553a44d8a375c1148a03acdc268080], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-4, Quarantined, [3b61e995740756e0d7c7e0cf778ba15f], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-5, Quarantined, [5e3ef38b4833dd59c6d8dbd415ed25db], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-11, Quarantined, [9efe0b73b7c4a98d653a16991fe33bc5], PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job, Quarantined, [9b01027cfa81132325ea6251dd252dd3], PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job, Quarantined, [0d8fed91aecd0e28ad5ec30152b03bc5], PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job, Quarantined, [0f8d7b03205beb4b0efd20a4d52dab55], PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job, Quarantined, [acf0740a0e6db77f7c8fd7ed17ebe31d], PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job, Quarantined, [44580d71df9c14220407477d32d08b75], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome.manifest, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\install.rdf, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\13f869df2bef91e54d1419ef961e7621.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\1f6dd0c9ac63d95a4ab75d00bb7449aa.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\4f6ffa2ef199ae56ce8053a5d157a4fc.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\874bee05f1e0d2cab641c7284d081d23.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\b23f4ee8872da60ae3f60c49e263a5c1.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\background.html, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\browser.xul, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\dialog.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\options.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\options.xul, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\search_dialog.xul, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\0602413d1540afafcfa26d22c54850a5.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\0a001a5a344bb5986cbd35b9ee3ef545.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\0f7a2ed0a71d81c8c83e2ef8ede6ff92.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\1c1b255d37845ad0621308092fb7f264.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\272889d8cb13d5b6c3b049728bc430fc.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\39a1e2ead805957a3866d3cdaf5365a0.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\47d5ddf137fa67f224ad13324992e5be.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\97fa8f90b0e9d14b1998ff70dc8d5fc7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\99f1e26ed15704f41a2f7f17e6815ad0.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\ac708b096387c577246f88ffdfa42dda.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\b096b8d41beb445203cf172ead133b69.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\bc77f814515d670b17dd568f566328a7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\c0389b8711142d104c7ba2b0a0d82eb8.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\c2dcf42ab3af6f2419f8692e2b2cb0df.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\d2ff241f5749b445bd5a556e847ffbbd.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\api\d5a7daeaba90efc16e0c2c0bb9063ec8.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\011efa20c4841f4910eecdd68bb14c14.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\05aaefe13cf7d5bbbcbdf31ad6a25157.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\1149a77a25bdae467fd2d65c159a8133.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\2485a5178046cfc4ad36de1190b3c824.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\2e6c86a1d6416a08ba223cf1546f0c93.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\3cf072c5dbae58d347a8c3b2a9b65c52.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\5d1aae1f8af76631affc28dda0a53440.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\5e17fd481336abd852cc6030d12512cd.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\63fc89599d5a6bbf3cd14379d56f9f1e.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\65a92ca0f2b64e31371e9b6851183a91.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\9b947e3fa900a05dc098846cb2dabf2f.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\adbad22d057b6b7ed696224f7b88466e.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\bb195a40e9df778e281e790021c4b5b7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\cab1cb5180cd9d810da35df475d88ca1.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\cc7ba9f4f47472e78aa8b0ee2e490b15.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\cf7dc26f240f175738468c8a32d9b37b.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\daf01adecb082906ca27ce88486034b8.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\e2d9615909e317f82ad7f4ec6b6b5eef.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\e663215935358a0a1756698f8af0370f.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\f45a0066547d5922211c95c3bdfea680.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\core\installer.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\defaults\preferences\prefs.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\manifest.xml, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins.json, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\231.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\1.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\102.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\103.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\104.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\119.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\123.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\13.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\14.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\155.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\16.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\17.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\177.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\178.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\179.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\180.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\182.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\183.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\184.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\191.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\194.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\195.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\207.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\21.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\22.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\220.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\221.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\223.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\232.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\242.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\244.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\246.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\259.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\262.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\263.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\268.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\273.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\275.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\277.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\278.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\28.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\280.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\281.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\286.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\4.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\47.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\64.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\72.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\78.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\9.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\91.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\93.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\plugins\98.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\userCode\background.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\extensionData\userCode\extension.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\locale\en-US\translations.dtd, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\button1.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\button2.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\button3.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\button4.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\button5.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\crossrider_statusbar.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\icon128.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\icon16.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\icon24.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\icon48.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\panelarrow-up.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\popup.html, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\skin.css, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd5399c4b726@5c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\skin\update.css, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\1293297481.mxaddon, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\360-59564.crx, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\59564.xpi, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7.crx, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\background.html, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6-bg.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6-codedownloader.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6.ico, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\Uninstall.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\utils.exe, Quarantined, [c0dc532b601b181e682184286999a45c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146ebc00a3bae5bfd84b6e30e6946e3d"), Replaced,[3d5ff08e26556bcb56d4af0b1fe558a8]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.