Jump to content
Sign in to follow this  
Metallica

Removal instructions for CinPlusHQVid

Recommended Posts

What is CinPlusHQVid?

 

The Malwarebytes research team has determined that CinPlusHQVid is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

 

How do I know if my computer is affected by CinPlusHQVid?

 

You may see these browser extensions/add-ons:

 

warning1.png

 

warning2.png

warning3.png

 

and this entry in your list of installed programs:

 

warning4.png

 

 

How did CinPlusHQVid get on my computer?

 

Browser hijackers use different methods for distributing themselves. This particular one was offered as a video enhancing browser extension.

 

How do I remove CinPlusHQVid?

 

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of CinPlusHQVid?
  • If you are using Opera, you may have to remove the Extension manually under Opera > Extensions click the x behind CinPlusHQVid and click OK in the prompt to confirm.
  • If you are using Chrome, this hijacker alters the shortcuts for Chrome on your desktop, in the taskbar and in the Startmenu Programs. Read here how to clean your shortcuts.
How would the full version of Malwarebytes Anti-Malware help protect me?

 

We hope our application and this guide have helped you eradicate this hijacker.  

 

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the CinPlusHQVid hijacker.  It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

 

 

protection1.png

 

Technical details for experts

 

Signs in a HijackThis log:

 

O2 - BHO: CrossriderApp0064141 - {11111111-1111-1111-1111-110611411141} - C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-bho.dll
 

Alterations made by the installer:

 

File system details  ---------------------------------------------    Adds the folder C:\Program Files\CinPlusHQVid-2.5c       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6.crx"="10/18/2014 10:14 AM, 319802 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6.xpi"="10/18/2014 10:14 AM, 361601 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-11.exe"="10/18/2014 10:14 AM, 1923960 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-2.exe"="10/18/2014 10:14 AM, 902008 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-4.exe"="10/18/2014 10:14 AM, 1471352 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-5.exe"="10/18/2014 10:15 AM, 978296 bytes, A       Adds the file 1293297481.mxaddon"="8/14/2014 6:46 PM, 44330 bytes, A       Adds the file 881b3174-16db-4037-a995-b1cb21804a02.exe"="10/18/2014 10:14 AM, 32120 bytes, A       Adds the file 93a7f182-7d25-40c5-85d0-ffc2add5b1f3.exe"="10/18/2014 10:14 AM, 343416 bytes, A       Adds the file background.html"="9/12/2014 6:54 AM, 729 bytes, A       Adds the file c12f99ea-6ba3-4f51-8b84-52d6b99c825d.crx"="10/18/2014 10:14 AM, 321003 bytes, A       Adds the file CinPlusHQVid-2.5c.ico"="9/12/2014 6:54 AM, 9662 bytes, A       Adds the file CinPlusHQVid-2.5c-bg.exe"="10/18/2014 10:14 AM, 570232 bytes, A       Adds the file CinPlusHQVid-2.5c-bho.dll"="10/18/2014 10:14 AM, 550776 bytes, A       Adds the file CinPlusHQVid-2.5c-codedownloader.exe"="10/18/2014 10:14 AM, 1075576 bytes, A       Adds the file Interop.IWshRuntimeLibrary.dll"="10/18/2014 10:14 AM, 53624 bytes, A       Adds the file Newtonsoft.Json.dll"="10/18/2014 10:14 AM, 495480 bytes, A       Adds the file SuperSocket.ClientEngine.Common.dll"="10/18/2014 10:14 AM, 23416 bytes, A       Adds the file SuperSocket.ClientEngine.Core.dll"="10/18/2014 10:14 AM, 26488 bytes, A       Adds the file SuperSocket.ClientEngine.Protocol.dll"="10/18/2014 10:14 AM, 19832 bytes, A       Adds the file Uninstall.exe"="10/18/2014 10:14 AM, 102264 bytes, A       Adds the file utils.exe"="10/18/2014 10:14 AM, 2688570 bytes, A       Adds the file WebSocket4Net.dll"="10/18/2014 10:14 AM, 64376 bytes, A    In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch       Alters the file Google Chrome.lnk    In the existing folder C:\Users\{username}\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar       Alters the file Google Chrome.lnk    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin    Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\pldeppocfnbnopadlkalkhefdhglkijd\1.26.33_0    Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\pldeppocfnbnopadlkalkhefdhglkijd\1.26.33_0\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\pldeppocfnbnopadlkalkhefdhglkijd\1.26.33_0\icons    Adds the folder C:\Users\{username}\AppData\Roaming\Opera Software\Opera Stable\Extensions\pldeppocfnbnopadlkalkhefdhglkijd\1.26.33_0\js    In the existing folder C:\Users\Public\Desktop       Alters the file Google Chrome.lnk    In the existing folder C:\Windows\System32\Tasks       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-1"="10/18/2014 10:14 AM, 5802 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-11"="10/18/2014 10:14 AM, 7520 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-2"="10/18/2014 10:14 AM, 5134 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-5"="10/18/2014 10:14 AM, 5470 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-5_user"="10/18/2014 10:15 AM, 5476 bytes, A       Adds the file 881b3174-16db-4037-a995-b1cb21804a02"="10/18/2014 10:14 AM, 3670 bytes, A       Adds the file 93a7f182-7d25-40c5-85d0-ffc2add5b1f3"="10/18/2014 10:14 AM, 4480 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-1.job"="10/18/2014 10:14 AM, 2772 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-11.job"="10/18/2014 10:14 AM, 4490 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-2.job"="10/18/2014 10:14 AM, 2104 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-5.job"="10/18/2014 10:14 AM, 2440 bytes, A       Adds the file 0197b0b9-9d0f-467f-964b-21c6984aafb6-5_user.job"="10/18/2014 10:15 AM, 2440 bytes, A       Adds the file 881b3174-16db-4037-a995-b1cb21804a02.job"="10/18/2014 10:14 AM, 634 bytes, A       Adds the file 93a7f182-7d25-40c5-85d0-ffc2add5b1f3.job"="10/18/2014 10:14 AM, 1450 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\f7Jqubx/MYXDqB6CuAxVvV07EqqiNq5A+B+/7Nj+NeWC6rkyvcuh0L3HoLEjDZIjwFbG7TeiI9psoB2nJQIUiBqWo18q13OYIOpMd/WvNtl2bz0FVn1gQ0LTNG4i+SOpABXujErYGD1hG+uSzOM5Y6h2/kRtQPqjzZX6tRJ+T/0=]       "Ng94IPc1kMag0NoWjgGDcpTolmIXuIz2vZiJ2UHhRyWU5pXouhFEYdWi3tOjZv5QzGw1AKdOwZ/Eqc6pEpt4azip+66viKhfiXzJq78CcmywJVCxKu+sX0sB/MSCPiKuYESjfHkDjDUSjrLUAgrz8Kocu0LTyrIuc0RLeBxju9Y="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\Firefox]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\Firefox\Profiles]       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\IE]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\IE\Profiles]       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\Installer]       "BundledAddCh"="REG_DWORD", 1       "BundledFirefox"="REG_DWORD", 1       "BundledIe"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\TF0kh/FJyd+Iz1aR8MmEhH5hJzBSZD8c6ozJTHzLx/f+gCbGNsEvPXvucS7FdnvhXFkIVgL+qiXJwFquDVEpjHNZOIXBI3aXX7jaDts8y5Myk27v3UQsbe7mgF0yivsF2iV62VdQOX9b0mWzgfw+5T6MTwY2z9hBg0Wd01eQIgo=]       "ByqByXs5S0ixmjsP7GWDVjssND96viKEqbGy24rHHTlkPckzZtinMv8ozYP+69kp0jdzQI7yBki6Z4UqjGxfFKNcgy4sQwg6vKkPUjei0z9dTf1FS5TEEKzq5phkYJOasIwAhVKsaLuFqXCfHP4FnVf89zDB4ZilHActjo6F97Y="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlusHQVid-2.5c\Yn7+61qCKeXGF+sad99RazXKaKNxgOB6jOvlQX3/L4GJaS8hbQkDBzh7UYkLoXE9S/XoP8yl9KJfdPTNJTY0E02JnXwHyPIS8ogyH+zkPZoOVQKvt1uR0mqGB+d8lZQQ0zWltBBo+erBa5Q4OsZeygkAoHsfFpIWemvG0FMX0Go=]       "KJ6mDZakznQwzDHLKIts5z+jWHCQB2KrxO/DXTzb+CUtdIvvrUu4OlkS6gHN5hi6pvzXgNJz5hG13WJWjpT/Ue5RC71KX/+DTdUf432ZPyojxojLdsZ1vkTgP+Xbxj9vu3mOuobWXP/GoPVOnyVk6ZSHCuObWXBYLyUxBIVS1Rk="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}]       "(Default)"="REG_SZ", "CinPlusHQVid-2.5c"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0064141.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644414441}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611411141}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0064141"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622412241}]       "(Default)"="REG_SZ", "CrossriderApp0064141.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622412241}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622412241}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0064141.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622412241}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622412241}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644414441}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622412241}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0064141.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.BHO]       "(Default)"="REG_SZ", "CrossriderApp0064141"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.BHO\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110611411141}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.BHO\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0064141"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.BHO.1]       "(Default)"="REG_SZ", "CrossriderApp0064141"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.BHO.1\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110611411141}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.Sandbox]       "(Default)"="REG_SZ", "CrossriderApp0064141.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.Sandbox\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220622412241}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.Sandbox\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0064141.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.Sandbox.1]       "(Default)"="REG_SZ", "CrossriderApp0064141.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0064141.Sandbox.1\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220622412241}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655415541}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655415541}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655415541}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655415541}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644414441}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666416641}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666416641}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666416641}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666416641}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644414441}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644414441}\1.0]       "(Default)"="REG_SZ", "CrossriderApp0064141 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644414441}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-bho.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644414441}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644414441}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\CinPlusHQVid-2.5c"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "64141"="REG_SZ", "CinPlusHQVid-2.5c"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]       "CinPlusHQVid-2.5c-bg.exe"="REG_DWORD", 8000    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611411141}]       "(Default)"="REG_SZ", "CrossriderApp0064141"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]       "{11111111-1111-1111-1111-110611411141}"="REG_SZ", "1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinPlusHQVid-2.5c]       "CrAppId"="REG_SZ", "64141"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\CinPlusHQVid-2.5c\utils.exe"       "DisplayName"="REG_SZ", "CinPlusHQVid-2.5c"       "DisplayVersion"="REG_SZ", "1.35.3.9"       "Publisher"="REG_SZ", "CinemaHQVid Plus"       "UninstallString"="REG_SZ", "C:\Program Files\CinPlusHQVid-2.5c\Uninstall.exe /fcp=1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "0197b0b9-9d0f-467f-964b-21c6984aafb6-1.job"="REG_BINARY, ................................       "0197b0b9-9d0f-467f-964b-21c6984aafb6-1.job.fp"="REG_DWORD", -954382916       "0197b0b9-9d0f-467f-964b-21c6984aafb6-11.job"="REG_BINARY, ...................:............       "0197b0b9-9d0f-467f-964b-21c6984aafb6-11.job.fp"="REG_DWORD", 1686116627       "0197b0b9-9d0f-467f-964b-21c6984aafb6-2.job"="REG_BINARY, ................................       "0197b0b9-9d0f-467f-964b-21c6984aafb6-2.job.fp"="REG_DWORD", 1496687943       "0197b0b9-9d0f-467f-964b-21c6984aafb6-5.job"="REG_BINARY, ................................       "0197b0b9-9d0f-467f-964b-21c6984aafb6-5.job.fp"="REG_DWORD", -1923409004       "0197b0b9-9d0f-467f-964b-21c6984aafb6-5_user.job"="REG_BINARY, ...............n................       "0197b0b9-9d0f-467f-964b-21c6984aafb6-5_user.job.fp"="REG_DWORD", -1831725905       "881b3174-16db-4037-a995-b1cb21804a02.job"="REG_BINARY, ................................       "881b3174-16db-4037-a995-b1cb21804a02.job.fp"="REG_DWORD", 302650248       "93a7f182-7d25-40c5-85d0-ffc2add5b1f3.job"="REG_BINARY, ................................       "93a7f182-7d25-40c5-85d0-ffc2add5b1f3.job.fp"="REG_DWORD", 701598627    [HKEY_CURRENT_USER\Software\AppDataLow\Software\CinPlusHQVid-2.5c]       "ActiveAppId"="REG_SZ", "64141"       "BhoRunningVersion"="REG_SZ", "154"       "IsBhoEnabled"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\CinPlusHQVid-2.5c\Background]       " { javascript removed, full log available on request } "    [HKEY_CURRENT_USER\Software\AppDataLow\Software\CinPlusHQVid-2.5c\Debug]       "DebuggedAppUrl"="REG_SZ", "file://C:\Users\{username}\Documents\debug.js"       "DebuggedBgUrl"="REG_SZ", "file://C:\Users\{username}\Documents\bg_debug.js"       "DebuggedNewTabUrl"="REG_SZ", "file://C:\Users\{username}\Documents\new_debug.js"       "IsDebuggingPlugins"="REG_DWORD", 0       "IsDebugMode"="REG_DWORD", 0    [HKEY_CURRENT_USER\Software\AppDataLow\Software\CinPlusHQVid-2.5c\Installer]       "AdditionalInfo"="REG_SZ", "{"asw":[67108864, -1073733563, 0],"browser_name":"ie"}"       "CodeDownloadDomain"="REG_SZ", "http://js.newclientgenservice.com"       "CodeDownloadFbDomain"="REG_SZ", "http://js.clientdemocloud.com"       "DefaultBrowser"="REG_SZ", "ie"       "ErrorsDomain"="REG_SZ", "http://errors.newclientgenservice.com"       "FullVersion"="REG_SZ", "1.35.3.9"       "FullVersionForUrl"="REG_SZ", "1_35_09_03"       "OsName"="REG_SZ", "7"       "Params"="REG_SZ", "{   "source_id" : "002168",   "sub_id" : "0",   "uzid" : "0"}"       "SrcId"="REG_SZ", "002168"       "StatsDomain"="REG_SZ", "http://stats.newclientgenservice.com"       "SubId"="REG_SZ", "0"       "Time"="REG_SZ", "1413620059"       "ZData"="REG_SZ", "0"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\CinPlusHQVid-2.5c\Manifest]       "AddressbarURL"="REG_SZ", "NA"       "BgVersion"="REG_SZ", "1"       "ChangePrevious"="REG_SZ", "false"       "Description"="REG_SZ", "Lights out for YouTube"       "DisableIe"="REG_SZ", "true"       "EnableSearchIE"="REG_SZ", "false"       "HomePageUrl"="REG_SZ", "NA"       "IsButtonEnabled"="REG_SZ", "false"       "Manifest"="REG_SZ", "NA"       "ModeType"="REG_SZ", "production"       "Name"="REG_SZ", "CinPlus-2.5c"       "PluginsManifestVersion"="REG_SZ", "38"       "PublisherId"="REG_SZ", "30935"       "PublisherName"="REG_SZ", "Cinema Plus"       "RunInFrame"="REG_SZ", "false"       "SetNewTab"="REG_SZ", "false"       "ThanksUrl"="REG_SZ", "NA"       "UninstallerOfferAction"="REG_SZ", "NA"       "UninstallerOfferUrl"="REG_SZ", "NA"       "UpdateInterval"="REG_DWORD", 360       "Version"="REG_SZ", "44"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\CinPlusHQVid-2.5c\Update]       "LastCheck"="REG_DWORD", 1413620092    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "9C8869B7F1684B089A7DA37B059BDC84IE"       "Verifier"="REG_SZ", "f30243ac37ce5130d43594b0e90093bf"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]       "64141"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]       "64141"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "64141"="REG_SZ", "CinPlusHQVid-2.5c"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\CinemaHQVid Plus]       "64141"="REG_SZ", "CinPlusHQVid-2.5c"    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611411141}]       "Flags"="REG_DWORD", 1024
 

Malwarebytes Anti-Malware log:

 

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 10/18/2014Scan Time: 10:19:54 AMLogfile: mbamCinPLusHQVid.txtAdministrator: YesVersion: 2.00.3.1025Malware Database: v2014.10.18.03Rootkit Database: v2014.10.17.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 270405Time Elapsed: 3 min, 29 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 2PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\93a7f182-7d25-40c5-85d0-ffc2add5b1f3.exe, 2116, Delete-on-Reboot, [171470a6d7a56ec82c2e715232cf29d7]PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\881b3174-16db-4037-a995-b1cb21804a02.exe, 3992, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f]Modules: 6PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\Interop.IWshRuntimeLibrary.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\Newtonsoft.Json.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\SuperSocket.ClientEngine.Common.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\SuperSocket.ClientEngine.Core.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\SuperSocket.ClientEngine.Protocol.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\WebSocket4Net.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], Registry Keys: 36PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611411141}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644414441}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655415541}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666416641}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0064141.BHO.1, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611411141}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0064141.BHO, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110611411141}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110611411141}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622412241}, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0064141.Sandbox.1, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0064141.Sandbox, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611411141}\INPROCSERVER32, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\CinPlusHQVid-2.5c, Quarantined, [eb400e083745181e96c62df0bc476e92], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\GLOBALUPDATE\UPDATE, Quarantined, [e44727ef4735ef4774f44dddd72cff01], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [191224f2106cce68c7a81233f21158a8], PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=10, Quarantined, [a586987eef8d8aaca94f2a6039cb51af], PUP.Optional.GlobalUpdate.A, HKLM\SOFTWARE\MOZILLAPLUGINS\@staging.google.com/globalUpdate Update;version=4, Quarantined, [210af71f621a69cd9663d4b6798b639d], PUP.Optional.CinemaHQ.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CinPlusHQVid-2.5c, Quarantined, [fe2d41d5d0acb87e78e677a6a45f9967], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [35f6b660b4c845f1d25b16667f85a957], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [3eed7b9b790351e55ec8908eb64da25e], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\CinemaHQVid Plus, Quarantined, [ce5dee282d4fb086a6aaf1291fe4a15f], PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdate, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\globalUpdatem, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\GOOGLEUPDATE.EXE, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.OneClickCtrl.10, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{5645E0E7-FC12-43BF-A6E4-F9751942B298}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\globalUpdate.Update3WebControl.4, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\CLASSES\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.CinemaHQ.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinPlusHQVid-2.5c, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], Registry Values: 1PUP.Optional.GlobalUpdate.T, HKLM\SOFTWARE\GLOBALUPDATE\UPDATE|path, C:\Program Files\globalUpdate\Update\GoogleUpdate.exe, Quarantined, [e44727ef4735ef4774f44dddd72cff01]Registry Data: 0(No malicious items detected)Folders: 21PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Download, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Install, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Offline, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\Offline\{1EA28BB4-A8D8-4A3E-9BD5-6DA66C4DD131}, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\defaults, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\defaults\preferences, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\userCode, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\locale, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\locale\en-US, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], Files: 177PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\93a7f182-7d25-40c5-85d0-ffc2add5b1f3.exe, Delete-on-Reboot, [171470a6d7a56ec82c2e715232cf29d7], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-bho.dll, Quarantined, [4cdfe43258246dc92e2cf5ce18e99868], PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\CinPlusHQVid-2.5c.exe, Quarantined, [8d9efb1b83f99c9a132068e4be4202fe], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\0197b0b9-9d0f-467f-964b-21c6984aafb6-11.exe, Quarantined, [bf6cf5218bf1290db2a8774ceb169769], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\0197b0b9-9d0f-467f-964b-21c6984aafb6-2.exe, Quarantined, [53d854c27a02d56195c5af1450b1f907], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\0197b0b9-9d0f-467f-964b-21c6984aafb6-4.exe, Quarantined, [0d1e3cdaaeced75f86d4c6fdbc4554ac], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\0197b0b9-9d0f-467f-964b-21c6984aafb6-5.exe, Quarantined, [f13a35e116669b9bd288bf049b66ca36], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-bg.exe, Quarantined, [ea418492fb81e3533b1f576c4cb548b8], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c-codedownloader.exe, Quarantined, [6fbc888ec3b966d084d69a294bb6a759], PUP.Optional.CrossRider.A, C:\Program Files\CinPlusHQVid-2.5c\utils.exe, Quarantined, [0b2051c5710b84b22c07a0ac15eba65a], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-1, Quarantined, [53d817ff0f6d360085de71b934cfe51b], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-11, Quarantined, [30fb17ff0973ee48ca9948e2d92a659b], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-2, Quarantined, [84a70b0bf18b40f6a3c034f6cf3452ae], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-5, Quarantined, [5ecdb85ede9e7eb8bca7df4b35ce8779], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-5_user, Quarantined, [86a5c1551963d66072f1f931d72c29d7], PUP.Optional.CrossRider.T, C:\Windows\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-1.job, Quarantined, [b07baa6cd6a60b2bf6981f69956f817f], PUP.Optional.CrossRider.T, C:\Windows\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-11.job, Quarantined, [2a01cb4b8bf136006f1f7d0bcf35b749], PUP.Optional.CrossRider.T, C:\Windows\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-2.job, Quarantined, [bb70c056c7b551e56925f692e22245bb], PUP.Optional.CrossRider.T, C:\Windows\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-5.job, Quarantined, [032841d5b1cbd0663559e0a88b79d729], PUP.Optional.CrossRider.T, C:\Windows\Tasks\0197b0b9-9d0f-467f-964b-21c6984aafb6-5_user.job, Quarantined, [e94264b21a62c96dd2bc4147b3517888], PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job, Quarantined, [df4c27ef93e9c76f772de5a3bd474bb5], PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore, Quarantined, [f13ade38285459ddd0d54147bf45ee12], PUP.Optional.GlobalUpdate.A, C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job, Quarantined, [d358c155daa238fe0b9bf39517edce32], PUP.Optional.GlobalUpdate.A, C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA, Quarantined, [250667af17659a9ce0c7b9cf70940bf5], PUP.Optional.CrossRider.A, C:\Windows\Tasks\881b3174-16db-4037-a995-b1cb21804a02.job, Quarantined, [7dae8690027aa1955b9bb2d86e964ab6], PUP.Optional.CrossRider.A, C:\Windows\Tasks\93a7f182-7d25-40c5-85d0-ffc2add5b1f3.job, Quarantined, [2605e82ed8a4c076dc1a9feb13f141bf], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\881b3174-16db-4037-a995-b1cb21804a02, Quarantined, [200b39ddbac294a2f8ff2f5bd72d649c], PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93a7f182-7d25-40c5-85d0-ffc2add5b1f3, Quarantined, [f239a2744834f640ee09f199e024e11f], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\GoogleUpdate.exe, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\goopdate.dll, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\goopdateres_en.dll, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\psmachine.dll, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.T, C:\Program Files\globalUpdate\Update\1.3.25.0\psuser.dll, Quarantined, [88a376a0d5a7e74f3bd4fa0c4cb76b95], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\GoogleCrashHandler.exe, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\GoogleUpdate.exe, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\GoogleUpdateBroker.exe, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\GoogleUpdateHelper.msi, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\GoogleUpdateOnDemand.exe, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\goopdate.dll, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\goopdateres_en.dll, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\npGoogleUpdate4.dll, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\psmachine.dll, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.GlobalUpdate.A, C:\Users\{username}\AppData\Local\Temp\comh.482616\psuser.dll, Quarantined, [b576d2444e2ec274b774ff075ca7fc04], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome.manifest, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\install.rdf, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\178ec94222df7a42f55039ebedcd8baa.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\40b65195f7eedfafeed3293f544cdc18.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\44c041554b8d172601c7e1b887b3db7c.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\503c12b55068dc58ee3c3f936c7099b7.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\9b753a19a2f7be0a5582ba6d09e351e5.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\background.html, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\browser.xul, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\d3857015b646d73bab18e4390d54bfa7.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\dialog.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\options.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\options.xul, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\search_dialog.xul, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\0b711fa27eb4e31cf35fbbb76d8d00e8.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\22d5bc66fec09ae4446830c819c73d11.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\34f45f8c5bd9352023efca8eff6135fa.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\393066836b9d77b78a5957c63df5988e.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\7143b648a41ea202842f26058f98b862.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\7ad158841f902bb425658c037e7dbad3.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\7eda1a785b4e9419e93fdde2513fc88f.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\88246dc689ec81476702ce0079af68cd.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\9ff86e2c22837b59395f4cf02d65aa46.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\a0aa8ad7c2f05e9bc0d263864f8cc67c.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\a2b22f390f454ca8c7f4757e3ced0740.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\bdddfb96b10939b8171aab3f420fdf50.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\c2bc413c9cb299cb40a71d032c58b5bf.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\ce420c013a4e87da626edb9b17cb3e95.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\d8ed7ca16990d930c66cab8a4477f8ee.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\api\f82bcae5128ba93fca32705f7aa34417.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\92b9fc459fd45cf452702146fc650de9.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\01c43190c73e0d05ed648c33a227e334.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\0b1f1ff3b661350464e95973d44ff963.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\124312edd55ae04fc3d1a240a62875e9.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\24fdbce01c31f6c764050d9bf1508120.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\29f9879663752b879a80e047e8532e5d.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\493e30e129ec9981c8c465c00539cbdc.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\66cc9b582414a756ee91a661283a6ee6.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\6a299d88828ab75ad7d6a4fdf59e9dd6.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\90368ac95341d9c3fd2b4fd673b09a2f.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\9f748f614c069edef86d9ae0153a514c.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\a02641b15f7dd9bdc750f0449bd1393d.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\a4fa6d79229b5405a1fb1b80a158405e.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\a5afbbd70aea036e70233ef9c05ac0b3.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\a62e49c716236e78ef1b99efd20e3c9c.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\bf2bc84cf045284d79f8dfd5fa741c98.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\c214739bf20c8e22988c81573af85c25.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\d375f49a125fc8cf84528942749c1fe6.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\e727633c0fc3bbce6df0e2887555122a.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\f9c63f69fc6e2a49f81522a27299f44f.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\chrome\content\core\installer.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\defaults\preferences\prefs.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\manifest.xml, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins.json, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\246.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\102.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\104.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\119.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\123.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\13.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\14.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\16.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\17.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\178.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\179.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\180.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\184.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\189.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\195.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\217.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\220.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\221.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\223.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\231.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\232.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\242.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\262.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\263.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\268.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\273.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\275.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\281.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\286.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\288.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\289.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\291.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\300.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\302.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\4.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\47.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\64.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\7.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\78.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\9.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\91.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\plugins\93.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\userCode\background.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\extensionData\userCode\extension.js, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\locale\en-US\translations.dtd, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\button1.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\button2.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\button3.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\button4.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\button5.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\crossrider_statusbar.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\icon128.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\icon16.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\icon24.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\icon48.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\panelarrow-up.png, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\popup.html, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\skin.css, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\BGKGT66124770@ZYFBNPM50498512.com\skin\update.css, Quarantined, [48e3de382c5071c55ba31ff2fa09c53b], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\0197b0b9-9d0f-467f-964b-21c6984aafb6.crx, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\0197b0b9-9d0f-467f-964b-21c6984aafb6.xpi, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\1293297481.mxaddon, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\881b3174-16db-4037-a995-b1cb21804a02.exe, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\background.html, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\c12f99ea-6ba3-4f51-8b84-52d6b99c825d.crx, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\CinPlusHQVid-2.5c.ico, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\Interop.IWshRuntimeLibrary.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\Newtonsoft.Json.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\SuperSocket.ClientEngine.Common.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\SuperSocket.ClientEngine.Core.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\SuperSocket.ClientEngine.Protocol.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\Uninstall.exe, Quarantined, [c06b55c1fe7ed1659360b16246bdf10f], PUP.Optional.CinemaHQ.A, C:\Program Files\CinPlusHQVid-2.5c\WebSocket4Net.dll, Delete-on-Reboot, [c06b55c1fe7ed1659360b16246bdf10f], Physical Sectors: 0(No malicious items detected)(end)
 

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.