Jump to content
Sign in to follow this  
Metallica

Removal instructions for CinPlus_d2.3V28.04

Recommended Posts

What is CinPlus_d2.3V28.04?

The Malwarebytes research team has determined that CinPlus_d2.3V28.04 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by CinPlus_d2.3V28.04?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did CinPlus_d2.3V28.04 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove CinPlus_d2.3V28.04?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of CinPlus_d2.3V28.04?
  • No, Malwarebytes' Anti-Malware removes CinPlus_d2.3V28.04 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the CinPlus_d2.3V28.04 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in a FRST log:

 FF Extension: CinPlus_d2.3V28.04 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\AVJYFVOD75109374@HCDE39471360.com [2015-04-30] () C:\Windows\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user.job () C:\Windows\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.job () C:\Program Files\CinPlus_d2.3V28.04CinPlus_d2.3V28.04 (HKLM\...\CinPlus_d2.3V28.04) (Version: 1.36.01.22 - CinPlus_d2.3V28.04) <==== ATTENTIONTask: {6FDE41D5-5D9E-4083-B381-ED603D4EF229} - System32\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user => C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.exe [2015-04-30] (CinPlus_d2.3V28.04) <==== ATTENTIONTask: {BB383DE3-D483-4146-8C3A-586C57388F5B} - System32\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5 => C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.exe [2015-04-30] (CinPlus_d2.3V28.04) <==== ATTENTIONTask: C:\Windows\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.job => C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user.job => C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.exe <==== ATTENTION
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\CinPlus_d2.3V28.04       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2.xpi"="4/30/2015 9:32 AM, 447481 bytes, A       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-4.exe"="4/30/2015 9:32 AM, 1489488 bytes, A       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.exe"="4/30/2015 9:32 AM, 1210448 bytes, A       Adds the file Uninstall.exe"="4/30/2015 9:32 AM, 120912 bytes, A       Adds the file utils.exe"="4/30/2015 9:32 AM, 1994525 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com       Adds the file chrome.manifest"="4/30/2015 9:32 AM, 516 bytes, A       Adds the file install.rdf"="4/30/2015 9:32 AM, 1242 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5"="4/30/2015 9:32 AM, 5472 bytes, A       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user"="4/30/2015 9:32 AM, 5478 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.job"="4/30/2015 9:32 AM, 2442 bytes, A       Adds the file bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user.job"="4/30/2015 9:32 AM, 2442 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlus_d2.3V28.04\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlus_d2.3V28.04\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinPlus_d2.3V28.04\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "72895"="REG_SZ", "CinPlus_d2.3V28.04"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinPlus_d2.3V28.04]       "CrAppId"="REG_SZ", "72895"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\CinPlus_d2.3V28.04\utils.exe"       "DisplayName"="REG_SZ", "CinPlus_d2.3V28.04"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "CinPlus_d2.3V28.04"       "UninstallString"="REG_SZ", "C:\Program Files\CinPlus_d2.3V28.04\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.job"="REG_BINARY, ................................       "bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.job.fp"="REG_DWORD", -1386487367       "bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user.job"="REG_BINARY, ................................       "bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user.job.fp"="REG_DWORD", 559710639    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "72895"="REG_SZ", "CinPlus_d2.3V28.04"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\CinPlus_d2.3V28.04]       "72895"="REG_SZ", "CinPlus_d2.3V28.04"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 4/30/2015Scan Time: 9:41:53 AMLogfile: mbamCinPlus_d23.txtAdministrator: YesVersion: 2.01.0.1004Malware Database: v2015.04.30.02Rootkit Database: v2015.04.21.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 287268Time Elapsed: 6 min, 34 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 10PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\CinPlus_d2.3V28.04, Quarantined, [9b1f066ca8e257dfcec806caf50e6898], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [b703c7ab4842fd397012b31519ea46ba], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, Quarantined, [36846210355582b453135c037095f40c], PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION, Quarantined, [8238bcb63258dd597cf6c29dea1bef11], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [9a2098dacdbd2511e1d8eb20f80c6997], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3c7e4d25dbaf65d13c19f54c2dd86a96], PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD, Quarantined, [a01a3042a6e43df9c5a03c23ed187b85], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [a416c7abe5a543f3abb24d9c55aec53b], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\CinPlus_d2.3V28.04, Quarantined, [6555fa786129ca6cf6908e5026dd916f], PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinPlus_d2.3V28.04, Quarantined, [d2e8640e76147db9bddf0db6db286f91], Registry Values: 4PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [36846210355582b453135c037095f40c]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [8238bcb63258dd597cf6c29dea1bef11]PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [a01a3042a6e43df9c5a03c23ed187b85]PUP.Optional.PCTuner.C, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [c7f3b4beb7d39b9b1060cc931aeb9a66]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\defaults, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\defaults\preferences, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\userCode, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\locale, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\locale\en-US, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus_d2.3V28.04, Quarantined, [d2e8640e76147db9bddf0db6db286f91], Files: 134PUP.Optional.CrossRider, C:\Users\{username}\Desktop\PlusHD-VN-U-Installer.exe, Quarantined, [e9d171019cee1d199e4ecd169b668080], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-4.exe, Quarantined, [ba00b8ba7812ef47e3472c1bcc3a3fc1], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.exe, Quarantined, [269499d99ded90a6cf5b94b339cdc937], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus_d2.3V28.04\utils.exe, Quarantined, [972342303951de583af0a99e38cee11f], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5, Quarantined, [c2f87200ec9e171ffb1e688c59aac23e], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user, Quarantined, [09b14e241f6b082eb267c2321fe41ee2], PUP.Optional.CrossRider.T, C:\Windows\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5.job, Quarantined, [2b8f7200dbaf171fb63e8fbd52b3d927], PUP.Optional.CrossRider.T, C:\Windows\Tasks\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2-5_user.job, Quarantined, [328897dbfb8fa78fbd37fc504bbadf21], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\crossrider_statusbar.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\button1.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\button2.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\button3.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\button4.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\button5.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\icon128.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\icon16.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\icon24.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\icon48.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\panelarrow-up.png, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\popup.html, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\skin.css, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\skin\update.css, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome.manifest, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\install.rdf, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\05687db035d6796c7b1749e58153babc.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\6beb906c34c52cadea50e79f63423f94.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\981f54b60ea91a87210a6b70132cbbaa.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\9f99cb40b000d20b618a7d988440c6b6.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\b3808873935e3befaf1a6fe6d2e68e31.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\background.html, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\bc2f38eac4b05e5160b9fd723bfbbbff.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\browser.xul, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\dialog.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\options.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\options.xul, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\search_dialog.xul, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\6e8b2393916c5dd101b56c591ebf8b0f.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\026bb73394f600713c7795c39b43b225.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\0e6f12f3c3e98da7a8a219dfa29bd95f.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\1a72f37a5d9a7622eab6cf3efef1816d.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\251f44bf1e65e3d03161df394b1dbb53.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\339f2bd8d0b611f3eb665a93196e1a2f.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\4eeeaeda4edbbc8ecac33ca21b2064bb.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\654d90497cef4e370519e93df97cb8f0.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\6591b5f0216731bf02f43acebbd6f444.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\824ee91d30a12bb786c2d74c6d5cd112.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\928011571da7681129997a005dcafbed.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\adccd264ff1ec38e3ef82aa97c5998d9.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\b620b15438c5f38b96e00d99b933fad0.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\bc073d661778599565afc6131bbfbe2d.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\d0f2c205ae306c13a8a7d4fc862f7047.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\api\ddb6b50c0ba520d62df58b19e2fc07e3.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\601e30be0b376a791f4b3cb1c4f234c8.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\07943cf5d5074586379cce738cdcb2c1.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\0a6fd8862b10e2d6865c47b9698b2b39.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\191818d0375a355091a3af3b33f7f5ad.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\1cac3306775280caab7db6cafd8395d3.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\3c78cccf73cb892958f943383de17174.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\3dfafa10b01d720c67fd990f9b232db5.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\486da716ffd2123553d89b8ce4ae91a5.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\4e043115576d9541935ad43638de372b.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\52e4199957a0d06679e810c91a45aa15.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\5448e2ad2d7ad1fd7c1bb9fc433cba44.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\70952a1146e71891ad0e76dca843d221.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\8f153e5ac08e7d2f49bb792d6b6cb767.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\ab03dfac9be5016b43ff65dbbdae4214.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\c5cabc5abfdda53b2703823ddb59a5a1.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\d842f6db44c51c5a327e1de5d1271094.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\e2da76cfac979218b1d7e5680338b80f.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\ecc889b27bd0e062087791bcfec06e43.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\f0d13c5799cde157e471be38b7ce8337.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\fb28d9ecb371fd883caf42f5929607de.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\chrome\content\core\installer.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\defaults\preferences\prefs.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\manifest.xml, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins.json, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\281.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\102.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\119.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\13.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\14.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\16.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\17.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\178.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\179.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\180.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\184.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\195.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\200.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\220.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\221.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\223.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\231.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\232.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\234.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\242.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\246.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\252.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\253.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\260.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\262.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\263.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\273.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\288.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\289.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\290.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\334.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\335.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\339.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\345.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\354.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\356.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\376.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\377.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\379.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\380.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\385.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\389.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\390.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\391.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\4.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\47.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\64.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\7.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\78.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\9.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\91.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\plugins\93.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\userCode\background.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\extensionData\userCode\extension.js, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\AVJYFVOD75109374@HCDE39471360.com\locale\en-US\translations.dtd, Quarantined, [3288c1b1553538fe80a6025a49bc07f9], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus_d2.3V28.04\bd3fdd2e-90ab-4c5f-95c3-5477a1c044f2.xpi, Quarantined, [d2e8640e76147db9bddf0db6db286f91], PUP.Optional.CinemaPlus.A, C:\Program Files\CinPlus_d2.3V28.04\Uninstall.exe, Quarantined, [d2e8640e76147db9bddf0db6db286f91], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.

Share this post


Link to post
Share on other sites
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.