Jump to content
Sign in to follow this  
Metallica

Removal instructions for HQ video Pro 3

Recommended Posts

What is HQ video Pro 3?

The Malwarebytes research team has determined that HQ video Pro 3 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by HQ video Pro 3?

You may see this Firefox extension:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did HQ video Pro 3 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove HQ video Pro 3?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of HQ video Pro 3?
  • No, Malwarebytes' Anti-Malware removes HQ video Pro 3 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HQ video Pro 3 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log:

You may see these entries in FRST logs:

 FF Extension: HQ Video Pro 3.1cV25.03 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com [2015-03-25] () C:\Windows\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user.job () C:\Windows\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.job () C:\Program Files\HQ Video Pro 3.1cV25.03Task: {8B4F067C-392C-4E15-8B48-5DAEE997FD7C} - System32\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user => C:\Program Files\HQ Video Pro 3.1cV25.03\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.exe [2015-03-25] (HQ VideoV25.03) <==== ATTENTIONTask: {FFA8DFDC-6E9F-4053-A229-FF386657AA4F} - System32\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5 => C:\Program Files\HQ Video Pro 3.1cV25.03\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.exe [2015-03-25] (HQ VideoV25.03) <==== ATTENTION
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\HQ Video Pro 3.1cV25.03       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2.xpi"="3/25/2015 1:46 PM, 447233 bytes, A       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2-4.exe"="3/25/2015 1:46 PM, 1544192 bytes, A       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.exe"="3/25/2015 1:46 PM, 1188864 bytes, A       Adds the file Uninstall.exe"="3/25/2015 1:46 PM, 119296 bytes, A       Adds the file utils.exe"="3/25/2015 1:46 PM, 2355701 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com       Adds the file chrome.manifest"="3/25/2015 1:46 PM, 570 bytes, A       Adds the file install.rdf"="3/25/2015 1:46 PM, 1274 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2-5"="3/25/2015 1:46 PM, 5482 bytes, A       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user"="3/25/2015 1:46 PM, 5488 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.job"="3/25/2015 1:46 PM, 2452 bytes, A       Adds the file 19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user.job"="3/25/2015 1:46 PM, 2452 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "36C700C2AD644B08A365D0227CD2A526IE"       "Verifier"="REG_SZ", "a1c9d60a98ca8153bb8e80c0b5e6b470"    [HKEY_LOCAL_MACHINE\SOFTWARE\HQ Video Pro 3.1cV25.03\FnTL3Gp1egKy3o8n2slHuWeO2AulBYI1Sov/633K0KuqEKknCxmPNYxKMMSebkgk/AVmaLY84Jr0K+SIeuYehN2MYJIxJPos/IKv9QmUEbtycOq6jNChcl1ZVVfQrBiohKEIUwiyeEWgpx67MYnDlVEd6rSL5ldrj5giDdnYETY=]       "BqRFxoXxqAC59xlFv21GlOrW5a640Uy/K8mkUTEFtx+bVSTkzoAUNVn5zrJEw5+cSwtJURmVFxcHVIOAn30Rxy8UZvUXhxjDrqInrBx77eWH0O/92BYv6vX2I3S2o9VG6DmCOiyFsbTH9vc8O8l+F/l7Dwsupk1Herniio5Zh9s="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HQ Video Pro 3.1cV25.03\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HQ Video Pro 3.1cV25.03\Y6a+8jGnYeQSEQNSv5sRhN8UVIJBOBV9DHn1WyNi61U3G2mPMh3ZjT5mJP7FltDEhdnodY90njh8euDzj4JuXGYyt7BPV8E9u09SPZkoA1GhInUGHIC7gmV1WmRaFNd4gBCfoUD7cVQfDu78NKAQA5WD3d4bLWu3aJgim9/Lz1o=]       "nexvoWK+UrLEP//PMitSwInQbUQlPJJbCniA802SqIJUYa1Mk1GVWdqzMAWz7I7Z3lDqE6isHintjDb+ONFRQjBSOtU4YpCCH2Mk84DO3EsRPGKC+yF8yATCC+4e/w7IgRLZpDmJNiaopLzX3hP0fZbC4AHr71271bJEbRvOCJCXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "72891"="REG_SZ", "HQ Video Pro 3.1cV25.03"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQ Video Pro 3.1cV25.03]       "CrAppId"="REG_SZ", "72891"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\HQ Video Pro 3.1cV25.03\utils.exe"       "DisplayName"="REG_SZ", "HQ Video Pro 3.1cV25.03"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "HQ VideoV25.03"       "UninstallString"="REG_SZ", "C:\Program Files\HQ Video Pro 3.1cV25.03\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.job"="REG_BINARY, ................................       "19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.job.fp"="REG_DWORD", 287423839       "19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user.job"="REG_BINARY, ................................       "19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user.job.fp"="REG_DWORD", -1064275302    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "36C700C2AD644B08A365D0227CD2A526IE"       "Verifier"="REG_SZ", "a1c9d60a98ca8153bb8e80c0b5e6b470"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "72891"="REG_SZ", "HQ Video Pro 3.1cV25.03"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\HQ VideoV25.03]       "72891"="REG_SZ", "HQ Video Pro 3.1cV25.03"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 3/25/2015Scan Time: 1:58:25 PMLogfile: mbamHQVideoPro.txtAdministrator: YesVersion: 2.01.0.1004Malware Database: v2015.03.25.04Rootkit Database: v2015.02.25.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 297575Time Elapsed: 4 min, 28 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 6PUP.Optional.CrossRider.A, HKLM\SOFTWARE\HQ Video Pro 3.1cV25.03, Quarantined, [e9cf6ddc48423df93659c2f933d03ec2], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [9e1ac881b7d32b0b61cd07f3887b4db3], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [befa35141e6c40f6ca7ad25efe07e818], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [605818316d1d3afca2654b89cb382dd3], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HQ VideoV25.03, Quarantined, [bbfdae9b1e6c10262d6c3b8d13f0d12f], PUP.Optional.HQVideoPro.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HQ Video Pro 3.1cV25.03, Quarantined, [892f6cdd4f3b46f087c0337604ff0af6], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\defaults, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\defaults\preferences, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\userCode, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\locale, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\locale\en-US, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.HQVideoPro.A, C:\Program Files\HQ Video Pro 3.1cV25.03, Quarantined, [892f6cdd4f3b46f087c0337604ff0af6], Files: 134PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\setup.exe, Quarantined, [bff9a2a7f3972115db6dd815877a649c], PUP.Optional.HQVideoPro.A, C:\Program Files\HQ Video Pro 3.1cV25.03\19c010e8-43ee-4851-8da0-6f04db1ee0b2-4.exe, Quarantined, [dbddef5a94f6d5615afded42c244b24e], PUP.Optional.HQVideoPro.A, C:\Program Files\HQ Video Pro 3.1cV25.03\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.exe, Quarantined, [85333a0f1476c07697c0ab84788eb44c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\crossrider_statusbar.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\button1.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\button2.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\button3.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\button4.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\button5.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\icon128.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\icon16.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\icon24.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\icon48.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\panelarrow-up.png, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\popup.html, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\skin.css, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\skin\update.css, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome.manifest, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\install.rdf, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\0bf3a84498a4a65ddb2f09f00ebf5a47.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\1329636901adbff9a5de404526e21873.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\2dba1ccce17bcdd5654a813b85a7f524.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\background.html, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\browser.xul, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\c066f85ac73a16aafc88b04d1375ae6a.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\dc0e8c77fc36e0245ee6abc220ab0902.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\dialog.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\eb5ce15d0f44a1c51882f682ece50cba.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\options.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\options.xul, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\search_dialog.xul, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\0fecac4074c42dd104e9c107e8e78d74.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\23e61cb5c8ee3a10ddd3e9875953321b.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\4f55f184f0e58128f8420cea96041dfe.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\5e7e802fdd58024183a71101c5e72e7e.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\61c530a17f2bcffd41c951baad557580.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\6786bce63a95481273beddd723c5059d.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\8a3d333f7871080f0ec165d5224db38a.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\a1971e31f72da958f131fd80695f01f7.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\aa51c7393864796e6123e5d41b607955.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\b331cb2a016690ea5de7f4d67a8498c1.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\bc69accc8c15bfc2dcd0e7895cd018ae.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\bccadfb24e85178b308ba8010dbb39e2.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\c123cf2e06f9254e2d0ce459e4d36ec9.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\da2ff27d66ee8cab65c2f41dd51fdc01.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\e0c43f1bc143e74ea550b24d1a2212d6.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\api\e5248eb1ec17890021290ea5107be34f.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\00df32c45ded5b0461d8329e1a9185c4.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\0682a66640e160c8684ce629898f99d8.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\24c1aa30f7f8de869e60ebc1de3afe42.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\3ae522ff209abcd90d14646024d3b5a9.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\5268421b8bab3e2d2e7f3865f741e020.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\568893d1e78010ab5b65075208e7e1e8.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\5b92ae86b1cf61bf6bde76ed66604a8d.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\5d96affbfaf6229b20bda370b8fa2c88.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\6abefaeefd0505b642737c78b751701f.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\8294e580fe2ac8ca345d9746a58e0b32.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\83e9f5b6cb8e30a992b103a2de82fc0f.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\90cab35233384ea0113966c3289c0bbb.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\a2b70ff57b0e9941b9c006a55cec0edf.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\b5494b4c904ae7827d2dcfd28bc63667.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\bdeb26eeecd324dc8bf4b82067e1ad9c.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\cbb8f1a01eb884b7cff8ab4ff6943c47.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\d1690d48f67d812fa41ff290703154cb.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\da38a150e8ba1d67c228efd7448da3c1.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\f530e93bfe1056a66bd8ad4b96c5601f.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\f9952fd056d01f2a855e028c9ba5c86f.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\chrome\content\core\installer.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\defaults\preferences\prefs.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\manifest.xml, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins.json, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\273.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\102.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\119.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\123.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\13.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\14.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\16.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\17.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\178.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\179.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\180.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\184.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\195.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\200.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\220.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\221.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\223.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\231.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\232.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\234.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\242.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\246.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\252.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\253.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\260.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\262.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\263.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\264.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\281.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\288.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\289.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\334.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\335.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\339.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\345.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\354.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\356.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\375.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\376.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\380.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\385.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\389.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\390.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\391.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\4.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\47.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\64.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\7.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\78.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\9.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\91.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\plugins\93.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\userCode\background.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\extensionData\userCode\extension.js, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\9a4b84ac-6dd1-4865-96ed-b6c74b96d097@gmail.com\locale\en-US\translations.dtd, Quarantined, [ceea78d1b4d65cdac652d6dced166c94], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5, Quarantined, [595fd574c2c8f244d6b1617ef70cbf41], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user, Quarantined, [c4f4d67304862511ed9a36a952b1b947], PUP.Optional.CrossRider.T, C:\Windows\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5.job, Quarantined, [467275d4dab0c670581fd3695baafc04], PUP.Optional.CrossRider.T, C:\Windows\Tasks\19c010e8-43ee-4851-8da0-6f04db1ee0b2-5_user.job, Quarantined, [dfd9cb7eadddc472f7801428bf468a76], PUP.Optional.HQVideoPro.A, C:\Program Files\HQ Video Pro 3.1cV25.03\19c010e8-43ee-4851-8da0-6f04db1ee0b2.xpi, Quarantined, [892f6cdd4f3b46f087c0337604ff0af6], PUP.Optional.HQVideoPro.A, C:\Program Files\HQ Video Pro 3.1cV25.03\Uninstall.exe, Quarantined, [892f6cdd4f3b46f087c0337604ff0af6], PUP.Optional.HQVideoPro.A, C:\Program Files\HQ Video Pro 3.1cV25.03\utils.exe, Quarantined, [892f6cdd4f3b46f087c0337604ff0af6], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.