Jump to content

Removal instructions for Plus-HD

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Plus-HD?

The Malwarebytes research team has determined that Plus-HD is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Plus-HD?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Plus-HD get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Plus-HD?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Plus-HD?
  • No, Malwarebytes' Anti-Malware removes Plus-HD completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Plus-HD hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: Plus-HD-9.4c - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\Extensions\prestonhull81@yahoo.com [2015-07-09] C:\Windows\System32\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5 C:\Windows\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5_user.job C:\Windows\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5.job C:\Program Files (x86)\Plus-HD-9.4cPlus-HD-9.4c (HKLM-x32\...\Plus-HD-9.4c) (Version: 1.36.01.22 - Plus HD)Task: {2D73549A-A110-4D70-A3FF-4A88C31D223A} - System32\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5 => C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff-5.exe [2015-07-09] (Plus HD) <==== ATTENTIONTask: {45C0FCF5-BC59-4F6F-A785-3A1213E3582F} - System32\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5_user => C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff-5.exe [2015-07-09] (Plus HD) <==== ATTENTIONTask: C:\Windows\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5.job => C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5_user.job => C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Plus-HD-9.4c       Adds the file aa435ac4-7622-404d-a180-7323895766ff.xpi"="09/07/2015 08:47, 375169 bytes, A       Adds the file aa435ac4-7622-404d-a180-7323895766ff-4.exe"="09/07/2015 08:47, 1456640 bytes, A       Adds the file aa435ac4-7622-404d-a180-7323895766ff-5.exe"="09/07/2015 08:47, 1181184 bytes, A       Adds the file Uninstall.exe"="09/07/2015 08:47, 115200 bytes, A       Adds the file utils.exe"="09/07/2015 08:47, 1897419 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com       Adds the file chrome.manifest"="09/07/2015 08:47, 456 bytes, A       Adds the file install.rdf"="09/07/2015 08:47, 1223 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file aa435ac4-7622-404d-a180-7323895766ff-5"="09/07/2015 08:48, 5466 bytes, A       Adds the file aa435ac4-7622-404d-a180-7323895766ff-5_user"="09/07/2015 08:48, 5478 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file aa435ac4-7622-404d-a180-7323895766ff-5.job"="09/07/2015 08:47, 2436 bytes, A       Adds the file aa435ac4-7622-404d-a180-7323895766ff-5_user.job"="09/07/2015 08:47, 2436 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\19979]       "61774"="REG_SZ", "Plus-HD-9.4c"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\19979\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "aa435ac4-7622-404d-a180-7323895766ff-5.job"="REG_BINARY, ................................       "aa435ac4-7622-404d-a180-7323895766ff-5.job.fp"="REG_DWORD", 1794188161       "aa435ac4-7622-404d-a180-7323895766ff-5_user.job"="REG_BINARY, ................................       "aa435ac4-7622-404d-a180-7323895766ff-5_user.job.fp"="REG_DWORD", 1346324762    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\19979]       "61774"="REG_SZ", "Plus-HD-9.4c"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\19979\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-9.4c]       "CrAppId"="REG_SZ", "61774"       "CrPublisherId"="REG_SZ", "19979"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Plus-HD-9.4c\utils.exe"       "DisplayName"="REG_SZ", "Plus-HD-9.4c"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Plus HD"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Plus-HD-9.4c\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-9.4c\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-9.4c\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-9.4c\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\19979]       "61774"="REG_SZ", "Plus-HD-9.4c"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\19979\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Plus HD]       "61774"="REG_SZ", "Plus-HD-9.4c"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 09/07/2015Scan Time: 09:01Logfile: mbamHD-Plus.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.07.09.01Rootkit Database: v2015.07.07.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 325226Time Elapsed: 4 min, 10 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 17PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\HighDefAction, Quarantined, [fdb8cc13cdbdbf77124fabe09f65fa06], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\YorkNewCin, Quarantined, [664fce119cee063048244249947027d9], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, Quarantined, [575e8b54dbaf5bdb99a7fd8ad232fb05], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [20955a858406e650732152ebf40ff40c], PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [4b6a25bad9b1cd69c8993655c14352ae], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-9.4c, Quarantined, [8f264a957416c76f78c3450420e37d83], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [466f756a82083df9650796f5c63e857b], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [b302c619eb9f1f1752b80ef3748f35cb], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [734246993e4c1b1b6ad636519a6a11ef], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [5a5b09d6ccbe0135dbb9390429da6799], PUP.Optional.HighDefAction.A, HKCU\SOFTWARE\HighDefAction, Quarantined, [2c8923bcd1b95ed8065af596ec1843bd], PUP.Optional.YorkNewCin.A, HKCU\SOFTWARE\YorkNewCin, Quarantined, [e3d24d9227630432561565261aea16ea], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [b9fc4a95dfabb5818f1eafbf63a1f010], PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD, Quarantined, [5d589d4295f59e980639c1c615ef22de], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [51645689bcce300607b2aa767390d12f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Plus HD, Quarantined, [08ad934c90fafb3b3aaf8d96946f9769], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Plus-HD-9.4c, Quarantined, [288d776884067db905a56f630ff3b050], Registry Values: 6PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [575e8b54dbaf5bdb99a7fd8ad232fb05]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [fbba8f508cfe0c2a9eadd7b0b252da26]PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [734246993e4c1b1b6ad636519a6a11ef]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [7e37fee1c8c253e3202baadd13f114ec]PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [5d589d4295f59e980639c1c615ef22de]PUP.Optional.PCTuner.C, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [3d78a936d5b5e3538abf96f1b4509a66]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\defaults, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\defaults\preferences, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\userCode, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\locale, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\locale\en-US, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.4c, Quarantined, [288d776884067db905a56f630ff3b050], Files: 122PUP.Optional.HDPlus.A, C:\Users\{username}\Desktop\Euvhvu.exe, Quarantined, [a015e5fa7f0bd066c70e34f02cd519e7], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff-4.exe, Quarantined, [cfe618c7e4a669cd8e471311e21f7b85], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff-5.exe, Quarantined, [10a556897e0ce94d686d37ed27da1ce4], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-9.4c\utils.exe, Quarantined, [ad08c11ebbcfea4c5d78c36142bf1ce4], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5, Quarantined, [feb72db28505b680c0912901b84b956b], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5_user, Quarantined, [06af835ceaa0d85ed47def3bc34057a9], PUP.Optional.CrossRider.T, C:\Windows\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5.job, Quarantined, [83326679a8e2cd6919329bdb26de827e], PUP.Optional.CrossRider.T, C:\Windows\Tasks\aa435ac4-7622-404d-a180-7323895766ff-5_user.job, Quarantined, [2590d708b0dad462480352246d971ce4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\crossrider_statusbar.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\button1.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\button2.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\button3.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\button4.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\button5.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\icon128.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\icon16.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\icon24.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\icon48.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\panelarrow-up.png, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\popup.html, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\skin.css, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\skin\update.css, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome.manifest, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\install.rdf, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\2854520c97eeaedec4ed67d1c9f66f3c.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\3db12f6bf3d35f8fe55f41d560325641.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\51a7003ca036efa2ff78f606f286d542.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\5479649b28f68ef08758e34270e0e580.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\8662f1ede9ae048df86ca5d344174b36.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\background.html, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\browser.xul, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\dialog.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\ee7a4b63e564741bd15b6ad8750f0470.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\options.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\options.xul, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\search_dialog.xul, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\45d67943d37f600569801822028ffa78.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\020077f6dfcb3c3ec0ae2afa826be601.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\065b1a44bd2529d582c06816409240b9.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\0c93ba6bc730325eaf235a1d54697672.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\0f84cbaf294c4829b323fbd1942801bf.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\0fbf568c2e2af13b6f3d519540dfebee.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\22f623c44493eea4186d95e497b409e8.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\3477ffc9233332f03fec5771f982f906.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\3734321e138db0752def079675dcbb41.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\4a7163861baab70c21c44b198b5fa060.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\554abb9ec0216db07378d0b4ae2a756f.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\765e0481d9dae156abacbec8fe48eb07.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\911a1c9e769ddc8e33a8acb09ddfdddc.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\ae1072da3af63078e2686af990409d3b.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\ea6ff3e4b6e40e9426090c8e092d59be.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\api\f3cdb2fc8dc9d5e235850c1742470378.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\91204ae6dd24dcb64be9a0e0ab42b2c4.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\12ac81ceea6975abd717e90ae862b42f.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\2c83cc2efe9589841bf39f6028e67131.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\322f5a95db0cfacb6fca7f64c1e4318d.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\3d7fc6f8c135a4fa3641490d8720ced4.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\3e5385c3111b6d41a1cbbd52f160f836.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\63bed2035ab43363f41e92428252acda.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\67982e08082b97891bb3d3e603446766.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\698473169ce164c85a46337a13cbe8ee.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\6d20a64f79d66af6a49bedfed0e139b7.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\75cd8890172936eacfc2ed56cfc4cb55.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\761f21fc401eb398a91e92df35163ff7.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\8d518d8eb1565d40d4ddd22efefea5ec.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\b26d0dca214d6a6d17c6e8dfb1ada37d.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\c72cbefb1fde703d031208d92c57b9fb.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\d1cf9d84a28c59fd3799cb4f4e930c07.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\db0a170366ce51ffd012a83b29098d09.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\f4f67cae075a1051c374cf4ae3e875ab.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\f51db316cf814406c92c0170d523cc0d.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\ff44fb34f48a19b3b7f6e2b945f37e83.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\chrome\content\core\installer.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\defaults\preferences\prefs.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\manifest.xml, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins.json, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\102.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\119.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\13.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\14.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\16.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\17.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\178.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\179.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\180.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\184.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\192.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\195.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\200.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\220.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\223.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\231.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\232.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\242.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\246.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\253.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\262.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\263.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\273.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\281.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\288.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\335.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\345.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\354.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\376.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\380.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\385.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\390.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\391.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\4.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\47.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\64.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\7.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\78.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\9.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\plugins\91.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\userCode\background.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\extensionData\userCode\extension.js, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\prestonhull81@yahoo.com\locale\en-US\translations.dtd, Quarantined, [348159865238a294759f6b1961a36d93], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.4c\aa435ac4-7622-404d-a180-7323895766ff.xpi, Quarantined, [288d776884067db905a56f630ff3b050], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-9.4c\Uninstall.exe, Quarantined, [288d776884067db905a56f630ff3b050], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.