Jump to content

Removal instructions for SavePass1.1

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is SavePass1.1?

The Malwarebytes research team has determined that SavePass1.1 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by SavePass1.1?

You may see this Firefox add-on:

warning1.png

warning2.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did SavePass1.1 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove SavePass1.1?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of SavePass1.1?
  • No, Malwarebytes' Anti-Malware removes SavePass1.1 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the SavePass1.1 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No signs in a HijackThis log

You may see these entries in a FRST log:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found] FF Extension: SavePass 1.1 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com [2015-02-13] () C:\Windows\Tasks\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user.job () C:\Windows\Tasks\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.job () C:\Program Files\SavePass 1.1
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\SavePass 1.1       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf.xpi"="2/13/2015 10:31 AM, 365507 bytes, A       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-4.exe"="2/13/2015 10:31 AM, 1530328 bytes, A       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.exe"="2/13/2015 10:31 AM, 1171928 bytes, A       Adds the file Uninstall.exe"="2/13/2015 10:31 AM, 125400 bytes, A       Adds the file utils.exe"="2/13/2015 10:31 AM, 2610429 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com       Adds the file chrome.manifest"="2/13/2015 10:31 AM, 570 bytes, A       Adds the file install.rdf"="2/13/2015 10:31 AM, 1239 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\defaults\preferences    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\userCode    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\locale\en-US    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5"="2/13/2015 10:31 AM, 5460 bytes, A       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user"="2/13/2015 10:31 AM, 5466 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.job"="2/13/2015 10:31 AM, 2430 bytes, A       Adds the file ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user.job"="2/13/2015 10:31 AM, 2430 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "FBCE185C954F45EB8452B881DFFB125BIE"       "Verifier"="REG_SZ", "032528433d707ab14e5073ad802f98df"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\29777]       "69829"="REG_SZ", "SavePass 1.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\29777\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SavePass 1.1]       "CrAppId"="REG_SZ", "69829"       "CrPublisherId"="REG_SZ", "29777"       "DisplayIcon"="REG_SZ", "C:\Program Files\SavePass 1.1\utils.exe"       "DisplayName"="REG_SZ", "SavePass 1.1"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "OB"       "UninstallString"="REG_SZ", "C:\Program Files\SavePass 1.1\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.job"="REG_BINARY, ................................       "ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.job.fp"="REG_DWORD", 1401031995       "ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user.job"="REG_BINARY, ................................       "ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user.job.fp"="REG_DWORD", 1507501044    [HKEY_LOCAL_MACHINE\SOFTWARE\SavePass 1.1\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\SavePass 1.1\oAIfkELJdCRHYJlfCE08GQubvFroZh8d7errqz2/pEwhp3UWCkWceTXKCrJDmXxqgxf2GfvKXrLNDxffivYzzeuYOsh16c772B571J4j8YprHopR1ZCjjsUTENUoy2f7aVtj+fPC/qHOn1PWdwB64XdmozEwlP/Q5zQCtT4a84I=]       "WRLJ66l5yG1UQNCJlaKHAvTRb/IpkQCbe4SrIj2lr3F+JDWRPuqr0tAexnNw9w5Q+vXIgMFNzD1avfl+cJrlo3fDamYuOcOiVgyMWxnF/57MrpwZCC1ZWrVEICPKNch+YC6gql+/k4L/eaXpa4rs1dZIPfUQDy9ybmF1FJ33tnU="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\SavePass 1.1\VpFTutaZChbLt11mHawv8flDxAsXxmiQ0sgnXYkYhCsIJjwLbY80eSjluw/dBNBai6A8Dd67M+YuHlVChHRRevDixbZJDYvvFcpBbetah/qbVfVAX4Eeml9K75IMa2cO1Dl2MUeEtquBwI6prJY1PbssAMmNjCk4PCsUEOYBqxw=]       "d0Hm/K+mgqbEzRXfZjgRXLpcSZMRQNl5EraiyDuUgM1nyiHoikdFTOdLI2WxwNxcsEe4szB/Nlg1LA5iq0a9iPuCyPb08Z18O03aat/IKCR5BAfQwTRc0Gc/iL+Hou9A6+J3roz5b3TbgqBgsEd9xRpPiQLNrazCwV9xNfhmcWOXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "FBCE185C954F45EB8452B881DFFB125BIE"       "Verifier"="REG_SZ", "032528433d707ab14e5073ad802f98df"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\29777]       "69829"="REG_SZ", "SavePass 1.1"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\29777\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\OB]       "69829"="REG_SZ", "SavePass 1.1"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 2/13/2015Scan Time: 10:42:26 AMLogfile: mbamSavePass1.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.02.13.02Rootkit Database: v2015.02.03.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 291585Time Elapsed: 3 min, 33 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 6PUP.Optional.SavePass.A, HKLM\SOFTWARE\SavePass 1.1, Quarantined, [54a2fe1fafdbea4cbc71971340c34fb1], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\29777, Quarantined, [2ec83de0dfabd95d83dc6a60ea197888], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [ac4a50cde2a859ddd4be50b0e520e020], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\29777, Quarantined, [d422839a62284de9638aa30027dca858], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\OB, Quarantined, [619563ba1575fc3a6329bdd20003d927], PUP.Optional.SavePass.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SavePass 1.1, Quarantined, [55a1df3ef6946ec82d5fb3bffe054ab6], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\defaults, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\defaults\preferences, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\userCode, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\locale, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\locale\en-US, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.SavePass.A, C:\Program Files\SavePass 1.1, Quarantined, [55a1df3ef6946ec82d5fb3bffe054ab6], Files: 116PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\installer.exe, Quarantined, [0ee8b16c1872d46291e75aa8c240b24e], PUP.Optional.SavePass.A, C:\Program Files\SavePass 1.1\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-4.exe, Quarantined, [08ee8a93aedcd066ebc355beef13e719], PUP.Optional.SavePass.A, C:\Program Files\SavePass 1.1\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.exe, Quarantined, [ea0c9588c3c742f43876040fe121738d], PUP.Optional.CrossRider.A, C:\Program Files\SavePass 1.1\utils.exe, Quarantined, [24d2b26bf694f93d64e31e3bf60a26da], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5, Quarantined, [807655c8d7b378be6944bcf3a55ec43c], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user, Quarantined, [e1151d00cbbff83e46676e415aa97b85], PUP.Optional.CrossRider.T, C:\Windows\Tasks\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5.job, Quarantined, [a353d8457c0e2a0c517a1fed9c69c33d], PUP.Optional.CrossRider.T, C:\Windows\Tasks\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf-5_user.job, Quarantined, [e90d36e77218f640f5d6c745cc399967], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome.manifest, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\install.rdf, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\1ca45afd350cf8f796cff008db8e7b29.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\226bbea256e6e24d823e7b6d656248af.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\2916b0333da9eb0ab4972fd2d8b60191.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\5775ba76ce9f68064a51fcc76f4904b2.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\9a9815febbe1915b4cfabab46ca47830.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\background.html, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\bed0ba369136d1bb49fa28767525cf0f.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\browser.xul, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\dialog.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\options.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\options.xul, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\search_dialog.xul, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\07caac516e38111f5c7523d5ad6a5638.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\1a063336fd539b1afcd064a31fdc6a00.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\1af3f63b835fe6321b488159480c52bb.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\1e492d9d6599cbcb4d458dbd4e2cca75.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\29f8ab549c830c8a1abd7e79ed57da96.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\2c1f40b5dd4f212d04cd736ec274fe3f.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\37ca619636903f54937916fbdab2b4bc.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\46d2d514ea5f54016374e6f2764a8b0e.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\506c98cf3e4c64275e4a4eaedc7218b8.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\600b5730b5b5ecee3cb46a2c454e7ec5.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\642fe02335ed340c9c90f7c5deab3686.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\7126574dae3d5f52599ba98faf7252b4.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\ab0883fd13bf7828f990ce533c20290e.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\bc34a13621040a13800b0dc76d8007c7.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\c0a6c3db7d9517e421fd909e3af145ad.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\api\e4b63d68e97fed5573756dfb22012a63.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\0c65de80d52fc9a6bd746b499835a44d.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\10005a83297dee8d2435ca2d7c8c2b8c.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\2c28dfa4537262e930c6d78f873b23c9.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\35ef5e87c71003bc885bb86e16db3b22.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\377385eea6d4dde2d113074d98691143.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\3f3b06d686c5107c0a10938f7057458d.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\424bb2e92ffdee662378ea592452921c.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\7e2dcbefd92015c5093cf64f1352caf6.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\9c058bb001aff2fa39e8dda87a21d367.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\a0f082bd35acbec52fabe8f9b3f74716.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\a1cb2ef4036b40d8ca2c85ad39271f5e.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\ac6ea97eeec59d751e5992578119acdc.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\bb92e8a708b2bdb4f4694d87490c92d1.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\bcbb32d857772a23959510ce4627bff6.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\befba2d3444a8f6114609a6c25462a24.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\c7a8ef2dafd147e88583c229e4bad145.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\cd2d4e1123ca9c580523ced9c62f19c3.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\d92143dbcb98e2cf73650790f7126372.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\ea991ed191d56b17de6036f6548f7ea5.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\f88c7de058633fa1b67bd4fc59b31fcf.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\chrome\content\core\installer.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\defaults\preferences\prefs.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\manifest.xml, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins.json, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\102.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\13.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\14.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\16.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\17.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\180.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\192.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\195.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\200.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\220.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\223.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\242.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\246.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\253.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\262.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\263.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\281.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\288.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\301.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\334.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\345.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\350.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\354.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\355.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\373.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\374.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\4.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\47.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\64.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\7.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\78.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\9.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\plugins\91.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\userCode\background.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\extensionData\userCode\extension.js, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\locale\en-US\translations.dtd, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\button1.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\button2.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\button3.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\button4.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\button5.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\crossrider_statusbar.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\icon128.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\icon16.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\icon24.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\icon48.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\panelarrow-up.png, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\popup.html, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\skin.css, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com\skin\update.css, Quarantined, [6c8af22b4c3ed85ebbf1d89839cad52b], PUP.Optional.SavePass.A, C:\Program Files\SavePass 1.1\ef7378cb-c2b1-4f9c-9903-06f9fc5c9bbf.xpi, Quarantined, [55a1df3ef6946ec82d5fb3bffe054ab6], PUP.Optional.SavePass.A, C:\Program Files\SavePass 1.1\Uninstall.exe, Quarantined, [55a1df3ef6946ec82d5fb3bffe054ab6], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14b824c67ddce804dad828ab519b2b3f"), Replaced,[fff71a0385055bdb5a081bdf9f669769]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.