Jump to content

Removal instructions for CinPlus 3.1pV20.02

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is CinPlus 3.1pV20.02?

The Malwarebytes research team has determined that CinPlus 3.1pV20.02 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by CinPlus 3.1pV20.02?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did CinPlus 3.1pV20.02 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove CinPlus 3.1pV20.02?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of CinPlus 3.1pV20.02?
  • No, Malwarebytes' Anti-Malware removes CinPlus 3.1pV20.02 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the CinPlus 3.1pV20.02 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in a FRST log:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found] FF Extension: CinPlus 3.1pV20.02 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\OIBMBKA115048682@HYKFIU97176590.com [2015-02-21] () C:\Windows\Tasks\00b79af6-7f53-4435-a653-2bdf00f069b1-5_user.job () C:\Windows\Tasks\00b79af6-7f53-4435-a653-2bdf00f069b1-5.job () C:\Program Files\CinPlus 3.1pV20.02 (Gjiwhkciw & co.) C:\Downloads\PlusHD-VN-U-Installer.exe
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\CinPlus 3.1pV20.02       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1.xpi"="2/21/2015 10:21 AM, 446774 bytes, A       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1-4.exe"="2/21/2015 10:21 AM, 1325008 bytes, A       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1-5.exe"="2/21/2015 10:22 AM, 1011664 bytes, A       Adds the file Uninstall.exe"="2/21/2015 10:21 AM, 119760 bytes, A       Adds the file UninstallBrw.exe"="2/21/2015 10:21 AM, 1348560 bytes, A       Adds the file utils.exe"="2/21/2015 10:21 AM, 2425223 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com       Adds the file chrome.manifest"="2/21/2015 10:22 AM, 528 bytes, A       Adds the file install.rdf"="2/21/2015 10:22 AM, 1248 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\indexedDB\chrome    In the existing folder C:\Windows\System32\Tasks       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1-5"="2/21/2015 10:22 AM, 5472 bytes, A       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1-5_user"="2/21/2015 10:22 AM, 5478 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1-5.job"="2/21/2015 10:22 AM, 2442 bytes, A       Adds the file 00b79af6-7f53-4435-a653-2bdf00f069b1-5_user.job"="2/21/2015 10:22 AM, 2442 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2750B5CBD14348DAAC02476752FA315DIE"       "Verifier"="REG_SZ", "8a28c39f4a638288d6648fb1872a609f"    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlus 3.1pV20.02\I+rlg8yKklHlJyjfGTSuQnpoZMlzt6rrM3cTXuMcMDloS6WbaFkWWmeC3YljbUIYkgGJZ1c4d2UHYy1sw1QmBa29s/InWRIpnuI1jk7wydfFSAy5rws+elhz0i9NZ7PMMyKSpO3GFv6K0ZaIONnbSwy4ilnRxPsVyUELkI0fz6s=]       "MNYqGbigykREGCgw9xPyZ7AXU9IBCVMg8skDgf7110O3p+rqQ2AWImtFRTEqv82/DXh5/T2ABaT6TAIyya6fVQR0n6ftNKspPoPl6wMKKHAaYWGuOf3Z2Y+Tyw0Oj/sU5MODs8HZJdthiPEMrG1DC6U6WWVJq0Ww175Iy6pKgwGXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlus 3.1pV20.02\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlus 3.1pV20.02\lIifougD0fCvV+IQc/vyWSeGshx6vR1UhRfi0XB1Iud+KYfv5p5bcY9afejePUPRprwxvLa1ux1wrG3vnz1AHsYwZ6vn5W29+1UnVQYgsf5jLV69tmdtv66x8oZSgDWN2d0iBIKmokD5Y5bH+jjfeqdbzQV15Y/kH3LH+lXpC8w=]       "FRQT2RdEp2t/+fsTl/IVDRgzhFivM4PwL+ebAiBM4V40W04QLFQxghuoaqQ0dZNlnishvW+PH0HKx/ZS6vpkzNs08BvCIVpwZQ+wsOcrl7N9IJOM9te91QRXuNQRoERVK6uF0rB6pMQ7iHZ9IWYIShMz+6yoqKW3CxgCxptcO7A="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "69065"="REG_SZ", "CinPlus 3.1pV20.02"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinPlus 3.1pV20.02]       "CrAppId"="REG_SZ", "69065"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\CinPlus 3.1pV20.02\utils.exe"       "DisplayName"="REG_SZ", "CinPlus 3.1pV20.02"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "CinPlus 3.1pV20.02"       "UninstallString"="REG_SZ", "C:\Program Files\CinPlus 3.1pV20.02\Uninstall.exe /fcp=1 /runexe='C:\Program Files\CinPlus 3.1pV20.02\UninstallBrw.exe' /url='http://static.gonotiftime.com/notf_sys/index.html' /brwtype='uni' /onerrorexe='C:\Program Files\CinPlus 3.1pV20.02\utils.exe' /crregname='CinPlus 3.1pV20.02' /appid='69065' /srcid='002245' /bic='2750B5CBD14348DAAC02476752FA315DIE' /verifier='8a28c39f4a638288d6648fb1872a609f' /brwshtoms='15000' /installerversion='1_36_01_22' /statsdomain='http://stats.ourgenstatsstorage.com/utility.gif?' /errorsdomain='http://errors.ourgenstatsstorage.com/utility.gif?' /monetizationdomain='http://logs.ourgenstatsstorage.com/monetization.gif?' "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "00b79af6-7f53-4435-a653-2bdf00f069b1-5.job"="REG_BINARY, ................................       "00b79af6-7f53-4435-a653-2bdf00f069b1-5.job.fp"="REG_DWORD", -1697665095       "00b79af6-7f53-4435-a653-2bdf00f069b1-5_user.job"="REG_BINARY, .............................M..       "00b79af6-7f53-4435-a653-2bdf00f069b1-5_user.job.fp"="REG_DWORD", 1878763226    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2750B5CBD14348DAAC02476752FA315DIE"       "Verifier"="REG_SZ", "8a28c39f4a638288d6648fb1872a609f"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "69065"="REG_SZ", "CinPlus 3.1pV20.02"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\CinPlus 3.1pV20.02]       "69065"="REG_SZ", "CinPlus 3.1pV20.02"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 2/21/2015Scan Time: 10:33:00 AMLogfile: mbamCinPlus31.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.02.21.03Rootkit Database: v2015.02.20.01License: PremiumMalware Protection: EnabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 293115Time Elapsed: 3 min, 39 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 6PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\CinPlus 3.1pV20.02, Quarantined, [ab6c4dd449413cfa52b9634a5ba8aa56], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [65b2d24fbbcfd066b65b00d492719d63], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [e6310b164e3c74c2d169f7134cb94db3], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [dc3b6fb2305a290d8917a706ad568878], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\CinPlus 3.1pV20.02, Quarantined, [4fc8120f8a0035019795e7bb6b98c53b], PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinPlus 3.1pV20.02, Quarantined, [e631ff225634dd59db0e1a6563a0d32d], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults\preferences, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale\en-US, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus 3.1pV20.02, Quarantined, [e631ff225634dd59db0e1a6563a0d32d], Files: 142PUP.Optional.Cinema.A, C:\Program Files\CinPlus 3.1pV20.02\00b79af6-7f53-4435-a653-2bdf00f069b1-4.exe, Quarantined, [f7205cc555353105c3acd8fb48b9718f], PUP.Optional.Cinema.A, C:\Program Files\CinPlus 3.1pV20.02\00b79af6-7f53-4435-a653-2bdf00f069b1-5.exe, Quarantined, [928525fcdab070c6b4bb7a59d52c41bf], PUP.Optional.Cinema.A, C:\Program Files\CinPlus 3.1pV20.02\UninstallBrw.exe, Quarantined, [d44398899bef05311659844fd031f40c], PUP.Optional.CrossRider.A, C:\Program Files\CinPlus 3.1pV20.02\utils.exe, Quarantined, [170074ad5337b97dafc519334bb5a15f], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\00b79af6-7f53-4435-a653-2bdf00f069b1-5, Quarantined, [c94e938e6426c373fd637c3d48bb4db3], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\00b79af6-7f53-4435-a653-2bdf00f069b1-5_user, Quarantined, [58bffa27bdcdc274c898e2d77b88dd23], PUP.Optional.CrossRider.T, C:\Windows\Tasks\00b79af6-7f53-4435-a653-2bdf00f069b1-5.job, Quarantined, [69aeaa7727632412a7cb57bf45c019e7], PUP.Optional.CrossRider.T, C:\Windows\Tasks\00b79af6-7f53-4435-a653-2bdf00f069b1-5_user.job, Quarantined, [5abd120f1575fe38a1d11006bd481fe1], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome.manifest, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\install.rdf, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\0d5382cd07d2f483ed47495f698f6edc.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\79903f6cb25d7c05af79e2a2020e5d37.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\b0bdc26c363c89ccdc59396ce9610d13.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\background.html, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\bf9d247229f00c864336a9e2eaac5a96.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\browser.xul, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\dialog.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\e9d7ec8b5a3b7bf324d8b1a1e8b06681.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\f06a69ebab6a10e09f96b466e8ac8e28.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\options.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\options.xul, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\search_dialog.xul, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\07d9510aebea467c79ee355714937780.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\0f7cd7ccaf16f806c5d04dda62741f71.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\134011326dd38ee03e60c720ca4a8611.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\24dd0bb213fd1ec4f374c2592a9c7fba.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\335343dfd5ed751b348cb4f4429ce1fa.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\466dde634db8d1e238d54039b898fe83.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\4713b670825c5eb3d99eacee73c1a118.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\5ba8ee70206af33a2eb3b158bf913776.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\68ff52ee629266afdd061de4514998db.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\70ef04acb2a995d21ec9adea2537faf0.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\918f96041a9f97f623a6aa5ce17b2eeb.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\9566877090b5d026cda97278c878949c.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\98c783b3aa6fa0db0f2e4d0294993945.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\a732a6217ff3b484f121304c21b1c091.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\a87acaa2e498ce563fa037e95b59d7f4.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\ad26128c4bbe1a47ad2e51642552fcf9.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\0358cc0a7b913a429a29588e59e74d9d.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\063a4abfe73f0b163d74229ad342d228.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\16f6a18cb94ab13d4bf3d369c7b91b61.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\35c4d9a41478c385b7ab02d829d108f2.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\3ff4f004ef3d5393c9941ac23bd77449.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\59b7348d798a466ad515e1385c2e4a74.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\5ca0b70a4641ee4434c3850938b484c6.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\67ff8a3359cc294ba3b3b51665d12796.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\75e0792d371a7d337de77ce701ef81d7.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\830c72b814c2b91b0a5db615e1214036.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\866ebcc4b6501340911a361badc9cc0a.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\87d5f94a4b4cd81e76e463da3ca99db1.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\92fd77be83a39c698b3e7bd4858b72c1.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\95bdf26463214678a4c57fc710ce78c8.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\963f8a3df0e8871df20fa7ee594e1d5a.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\9902d8e2ea608ff3ee16511659613389.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\9ad710930b7ec411c6bed511ab25e314.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\bf84983df2d757461247a185a56e876b.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\ce67ca2a506aed8279e2fb94c7dca937.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\f2f1643cd28036d6262cb9dd9eb812dd.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\installer.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults\preferences\prefs.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\manifest.xml, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins.json, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\253.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\102.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\104.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\119.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\123.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\124.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\13.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\14.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\16.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\17.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\178.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\179.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\180.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\184.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\191.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\195.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\200.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\213.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\217.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\220.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\221.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\223.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\230.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\231.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\232.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\233.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\234.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\242.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\246.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\252.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\260.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\262.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\263.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\264.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\273.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\281.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\286.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\288.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\289.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\290.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\300.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\334.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\335.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\337.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\342.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\344.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\345.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\354.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\356.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\377.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\380.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\4.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\47.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\64.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\7.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\78.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\9.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\91.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\93.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode\background.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode\extension.js, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale\en-US\translations.dtd, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button1.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button2.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button3.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button4.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button5.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\crossrider_statusbar.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon128.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon16.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon24.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon48.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\panelarrow-up.png, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\popup.html, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\skin.css, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\update.css, Quarantined, [f6213fe2d7b36ec8456df28253b0cc34], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus 3.1pV20.02\00b79af6-7f53-4435-a653-2bdf00f069b1.xpi, Quarantined, [e631ff225634dd59db0e1a6563a0d32d], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus 3.1pV20.02\Uninstall.exe, Quarantined, [e631ff225634dd59db0e1a6563a0d32d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14bab7313cb4cb4800245731898f5529"), Replaced,[fb1c5dc45a3020166e97aa5c1beba759]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.