Jump to content

Removal instructions for CinemaPlus-3.2cV20.05

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is CinemaPlus-3.2cV20.05?

The Malwarebytes research team has determined that CinemaPlus-3.2cV20.05 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by CinemaPlus-3.2cV20.05?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did CinemaPlus-3.2cV20.05 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove CinemaPlus-3.2cV20.05?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of CinemaPlus-3.2cV20.05?
  • No, Malwarebytes' Anti-Malware removes CinemaPlus-3.2cV20.05 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the CinemaPlus-3.2cV20.05 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: CinemaPlus-3.2cV20.05 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com [2015-05-25] () C:\Windows\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5_user.job () C:\Windows\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5.job () C:\Program Files\CinemaPlus-3.2cV20.05CinemaPlus-3.2cV20.05 (HKLM\...\CinemaPlus-3.2cV20.05) (Version: 1.36.01.22 - Cinema PlusV20.05) <==== ATTENTIONTask: {A40176BD-340D-459E-B832-CECEBABA1DF3} - System32\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5 => C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d-5.exe [2015-05-25] (Cinema PlusV20.05) <==== ATTENTIONTask: {E35E27B5-D75A-4E2C-9BC6-2605AB0EAF7D} - System32\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5_user => C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d-5.exe [2015-05-25] (Cinema PlusV20.05) <==== ATTENTIONTask: C:\Windows\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5.job => C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5_user.job => C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d-5.exe <==== ATTENTION
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\CinemaPlus-3.2cV20.05       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d.xpi"="5/25/2015 10:25 AM, 445556 bytes, A       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d-4.exe"="5/25/2015 10:25 AM, 1432656 bytes, A       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d-5.exe"="5/25/2015 10:25 AM, 1038416 bytes, A       Adds the file Uninstall.exe"="5/25/2015 10:25 AM, 117840 bytes, A       Adds the file utils.exe"="5/25/2015 10:25 AM, 1881077 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com       Adds the file chrome.manifest"="5/25/2015 10:25 AM, 618 bytes, A       Adds the file install.rdf"="5/25/2015 10:25 AM, 1295 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d-5"="5/25/2015 10:25 AM, 5478 bytes, A       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d-5_user"="5/25/2015 10:25 AM, 5484 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d-5.job"="5/25/2015 10:25 AM, 2448 bytes, A       Adds the file 690e598e-741d-48b3-a1a3-97770dcbf56d-5_user.job"="5/25/2015 10:25 AM, 2448 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinemaPlus-3.2cV20.05\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinemaPlus-3.2cV20.05\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinemaPlus-3.2cV20.05\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "CinemaPlus-3.2cV20.05"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV20.05]       "CrAppId"="REG_SZ", "72893"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\CinemaPlus-3.2cV20.05\utils.exe"       "DisplayName"="REG_SZ", "CinemaPlus-3.2cV20.05"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Cinema PlusV20.05"       "UninstallString"="REG_SZ", "C:\Program Files\CinemaPlus-3.2cV20.05\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "690e598e-741d-48b3-a1a3-97770dcbf56d-5.job"="REG_BINARY, ................................       "690e598e-741d-48b3-a1a3-97770dcbf56d-5.job.fp"="REG_DWORD", 923076943       "690e598e-741d-48b3-a1a3-97770dcbf56d-5_user.job"="REG_BINARY, ................................       "690e598e-741d-48b3-a1a3-97770dcbf56d-5_user.job.fp"="REG_DWORD", 1356906919    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "CinemaPlus-3.2cV20.05"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema PlusV20.05]       "72893"="REG_SZ", "CinemaPlus-3.2cV20.05"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 5/25/2015Scan Time: 10:35:10 AMLogfile: mbamCinemaPlus32cv20.txtAdministrator: YesVersion: 2.01.6.1022Malware Database: v2015.05.25.02Rootkit Database: v2015.05.24.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 291121Time Elapsed: 3 min, 55 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 13PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinemaPlus-3.2cV20.05, Quarantined, [4c8a8c0bfd8dd561e0d2570dda2cb749], PUP.Optional.CinemaPlus.A, HKLM\SOFTWARE\CinemaPlus-3.2cV20.05, Quarantined, [22b43a5d4545d462183e9a5a47bc827e], PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\HighDefAction, Quarantined, [6b6b2a6d543645f15f4c7cfbd82d8878], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\YorkNewCin, Quarantined, [3e98098ee3a739fd6d492b4c5ea7fe02], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [cb0b5740107a90a62ec4e3fa0003c23e], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, Quarantined, [25b15f38e6a49c9a5135561d29dc748c], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [c80eeaad1d6d89adfc31aa7647bdcc34], PUP.Optional.HighDefAction.A, HKCU\SOFTWARE\HighDefAction, Quarantined, [4393385f91f949ed2882cdaa54b158a8], PUP.Optional.YorkNewCin.A, HKCU\SOFTWARE\YorkNewCin, Quarantined, [d2042a6dc9c17db91d983e39de27e11f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [884ed2c55535ab8bf0c379dc8e777d83], PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD, Quarantined, [716537607b0f46f097ee1a599273936d], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [19bda0f7b4d643f3c3b58d71bf4438c8], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema PlusV20.05, Quarantined, [5a7c781f9ceee452f8dff201eb18c23e], Registry Values: 4PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [25b15f38e6a49c9a5135561d29dc748c]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [aa2ceaadbcce1b1b484920535fa652ae]PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [716537607b0f46f097ee1a599273936d]PUP.Optional.PCTuner.C, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [d006abec1f6b60d6cec1492a8b7a9c64]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Program Files\CinemaPlus-3.2cV20.05, Quarantined, [b91d3265b6d45fd7fe0798343ec5f20e], Files: 131PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\installer.exe, Quarantined, [04d2d8bfaae01a1c6547491229ddb050], PUP.Optional.CrossRider.A, C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d-4.exe, Quarantined, [2bab2f68305a0333b9f3da817195c739], PUP.Optional.CrossRider.A, C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d-5.exe, Quarantined, [b91d6f280c7e04327438c893f115837d], PUP.Optional.CrossRider.A, C:\Program Files\CinemaPlus-3.2cV20.05\Uninstall.exe, Quarantined, [4c8a8c0bfd8dd561e0d2570dda2cb749], PUP.Optional.CrossRider.A, C:\Program Files\CinemaPlus-3.2cV20.05\utils.exe, Quarantined, [dafca9eebbcf72c48d1fda8148beaf51], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5, Quarantined, [f1e58b0cdcae85b179a6fc0d5da7bb45], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5_user, Quarantined, [d501eea9dbafe94def30f316ef156f91], PUP.Optional.CrossRider.T, C:\Windows\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5.job, Quarantined, [9d3942550981a393072c283952b3ec14], PUP.Optional.CrossRider.T, C:\Windows\Tasks\690e598e-741d-48b3-a1a3-97770dcbf56d-5_user.job, Quarantined, [cf076c2b5b2feb4bf63df66b11f415eb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\crossrider_statusbar.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button1.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button2.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button3.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button4.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button5.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon128.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon16.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon24.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon48.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\panelarrow-up.png, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\popup.html, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\skin.css, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\update.css, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome.manifest, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\install.rdf, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\39a56b70c5119c90c475aabe3162b01e.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\54b946d54d7c3f8ec499e763fa9a1455.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\6d557528a7eac9ca93fe6b20125ae224.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\a1e4ee3d942339a20d6bf6708310d975.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\afd6104c713966708880c72d6a3190db.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\background.html, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\browser.xul, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\d604572f097eac85795cc8729369cae4.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\dialog.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.xul, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\search_dialog.xul, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\09c6d57f1da1da6a803f179718b7944e.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\1d12cf2fe0c556d69da655317204ea58.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\1e68d97d8abd9859bd281beef9eec7e4.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\20edd242bb2b54fe29e35b1fa8b27426.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\280d97b673bb12eb4a8b90ef1a13e30b.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\5d098e87d2730078b4325a2fa0e3456b.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\7dd72334d666be76e5d393d5397d72dc.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\9ce5f1638a0995cadad3faf298fe737c.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\a6eeb144f072a3a6e6c8a43371e26aa0.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\cd5918e7edf536cf571240bc7d7333ea.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\d506d978a906f96d9ba76b4fe6ad0242.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e7a25ba8357b188055b0cbbba632471f.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\ead7a75af40369e4c5996a311d8588a6.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\eecd823077cd8972278ff68d64d29074.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\f8bffd11e50d7cb3b50dcc9a37d2a93e.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\fc2009d453a1db44beb7cea000445037.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\a6131ee75ba2a09b8c11425e56ca1493.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\0c68a2388678c5adeab7ff87627c7aac.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1372906ce8046139b7b5d1bb1212a8f2.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1813f8997e3126c4761607ec1be5daf6.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1963b29f00377ee480db13bf4cd8a28e.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1e468f90b9c0d6321913a9f3e247d6ee.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\2abaf46c578ce733276a1d4db931fd34.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\356cb9f23ca0a393c0d17915a9ab4174.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\4b1ed6d9cc5ace5169f86128d0a5cd2d.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\6c3c2805d14da739d6f9ac3dbe85cbf5.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\78fd1b427e89f7664e8e1998204ed3e6.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\897f72cdb8dc7674cb4904eccaa6a7c2.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\9224ace5d9b242bb147330cc08f6340e.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\94883c584ccb97ac8acb6277a85c83ba.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\c997ec00efd100521678c520387e430e.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ccceb3166e5d6f50e75a3307cd5fc14f.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\d85218ed041bee1db4fd7c6e993da9f2.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\eb49cdfb739087e60f42dd10386b2a5a.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ed4116bbc46cb546bdb6d21bca4bba3c.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\f7d82322e865625995c39b5127b9dd21.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\installer.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences\prefs.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\manifest.xml, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins.json, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\263.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\102.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\119.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\13.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\14.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\16.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\17.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\178.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\179.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\180.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\184.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\195.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\200.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\220.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\221.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\223.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\231.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\232.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\234.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\242.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\246.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\252.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\253.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\260.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\262.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\273.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\281.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\288.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\289.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\334.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\335.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\339.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\345.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\354.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\356.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\376.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\380.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\385.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\389.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\390.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\391.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\397.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\4.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\47.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\64.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\7.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\78.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\9.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\91.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\background.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\extension.js, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US\translations.dtd, Quarantined, [e4f21d7a0684ae8855fcfc746c9955ab], PUP.Optional.CrossRider.A, C:\Program Files\CinemaPlus-3.2cV20.05\690e598e-741d-48b3-a1a3-97770dcbf56d.xpi, Quarantined, [b91d3265b6d45fd7fe0798343ec5f20e], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.