Jump to content

Removal instructions for Cinema Video Pro

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Cinema Video Pro?

The Malwarebytes research team has determined that Cinema Video Pro is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Cinema Video Pro?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Cinema Video Pro get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Cinema Video Pro?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Cinema Video Pro?
  • No, Malwarebytes' Anti-Malware removes Cinema Video Pro completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Cinema Video Pro hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: Cinema Video Pro 1.4V23.07 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\Extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com [2015-07-23] C:\Windows\System32\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5 C:\Windows\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5_user.job C:\Windows\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5.job C:\Program Files (x86)\Cinema Video Pro 1.4V23.07Cinema Video Pro 1.4V23.07 (HKLM-x32\...\Cinema Video Pro 1.4V23.07) (Version: 1.36.01.22 - Cinema ProV23.07) <==== ATTENTIONTask: {6B176D14-A7E3-43F3-B8D5-C2F68460BABA} - System32\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5_user => C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d-5.exe [2015-07-23] (Cinema ProV23.07) <==== ATTENTIONTask: {B7DBC400-3635-4F49-863B-6ADB2F5F9557} - System32\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5 => C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d-5.exe [2015-07-23] (Cinema ProV23.07) <==== ATTENTIONTask: C:\Windows\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5.job => C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5_user.job => C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Cinema Video Pro 1.4V23.07       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d.xpi"="23/07/2015 08:14, 391514 bytes, A       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d-4.exe"="23/07/2015 08:14, 1305168 bytes, A       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d-5.exe"="23/07/2015 08:14, 1052240 bytes, A       Adds the file Uninstall.exe"="23/07/2015 08:14, 122448 bytes, A       Adds the file utils.exe"="23/07/2015 08:14, 2018461 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com       Adds the file chrome.manifest"="23/07/2015 08:14, 570 bytes, A       Adds the file install.rdf"="23/07/2015 08:14, 1280 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d-5"="23/07/2015 08:14, 5494 bytes, A       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d-5_user"="23/07/2015 08:14, 5506 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d-5.job"="23/07/2015 08:14, 2464 bytes, A       Adds the file 72d91d9c-affd-4e90-8057-e2925506428d-5_user.job"="23/07/2015 08:14, 2464 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "65781"="REG_SZ", "Cinema Video Pro 1.4V23.07"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "72d91d9c-affd-4e90-8057-e2925506428d-5.job"="REG_BINARY, ................................       "72d91d9c-affd-4e90-8057-e2925506428d-5.job.fp"="REG_DWORD", 1091263871       "72d91d9c-affd-4e90-8057-e2925506428d-5_user.job"="REG_BINARY, ................................       "72d91d9c-affd-4e90-8057-e2925506428d-5_user.job.fp"="REG_DWORD", 1492504047    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinema Video Pro 1.4V23.07\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinema Video Pro 1.4V23.07\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinema Video Pro 1.4V23.07\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935]       "65781"="REG_SZ", "Cinema Video Pro 1.4V23.07"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cinema Video Pro 1.4V23.07]       "CrAppId"="REG_SZ", "65781"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\utils.exe"       "DisplayName"="REG_SZ", "Cinema Video Pro 1.4V23.07"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Cinema ProV23.07"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "65781"="REG_SZ", "Cinema Video Pro 1.4V23.07"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema ProV23.07]       "65781"="REG_SZ", "Cinema Video Pro 1.4V23.07"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 23/07/2015Scan Time: 08:26Logfile: mbamCinemaVideoPro.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.07.22.07Rootkit Database: v2015.07.22.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 326962Time Elapsed: 3 min, 56 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 17PUP.Optional.Downloader.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Cinema Video Pro 1.4V23.07, Quarantined, [bc1344a0b2d89b9b80a0506abe43ee12], PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\HighDefAction, Quarantined, [4788ce16a2e85ed821d4e1b4e51fc13f], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\YorkNewCin, Quarantined, [e1ee32b2eaa090a6f50b841232d246ba], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, Quarantined, [18b7f1f3cbbfcc6a8a4c870ae420ad53], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [5c73ca1ad7b3c96dd3640c3cce359868], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\Cinema Video Pro 1.4V23.07, Quarantined, [a52a33b1a9e15fd7052fc65eba49f010], PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [b916945098f271c515e0b0e5838127d9], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [5d722db7d8b2191d55ab1a7c16ee1be5], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [c10e72720189a6909e1960ab27dc817f], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [428d9252038705317e58e4add23238c8], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [557a6c783f4b84b2a1962d1b46bdbc44], PUP.Optional.HighDefAction.A, HKCU\SOFTWARE\HighDefAction, Quarantined, [a728eff50a80d462a450d8bd1ee6fa06], PUP.Optional.YorkNewCin.A, HKCU\SOFTWARE\YorkNewCin, Quarantined, [f9d6f5ef6525cf6709f69bfa1ee6f60a], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [8946fce8becc03334b0382f7788c60a0], PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD, Quarantined, [28a75d874446999ddcf908890cf8d729], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [f5da92523e4c6acc451c48e330d3bc44], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema ProV23.07, Quarantined, [438c42a2abdf4beb143227fa42c17c84], Registry Values: 6PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [18b7f1f3cbbfcc6a8a4c870ae420ad53]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [dcf37a6ac9c144f2d40ddfb20df7ae52]PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [428d9252038705317e58e4add23238c8]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [745bf6ee6129a5915c8596fb6a9add23]PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [28a75d874446999ddcf908890cf8d729]PUP.Optional.PCTuner.C, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [f1de657feaa064d24699cbc6877d7a86]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\defaults, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\defaults\preferences, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\userCode, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\locale, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\locale\en-US, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinema Video Pro 1.4V23.07, Quarantined, [f7d8aa3a206a80b6221ab93cfd0501ff], Files: 131PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Jmbgrzzqv.exe, Quarantined, [745bd70d7b0fb08606fda0c6b74e857b], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d-4.exe, Quarantined, [646b27bd7c0ea88efe05b4b2b0550df3], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d-5.exe, Quarantined, [2ba415cf95f5b77fe41f5b0bd92c966a], PUP.Optional.Downloader.C, C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\Uninstall.exe, Quarantined, [bc1344a0b2d89b9b80a0506abe43ee12], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\utils.exe, Quarantined, [a9265c88adddc4726381033612ee39c7], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5, Quarantined, [c8071dc7c0cab581c92e39fb63a05fa1], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5_user, Quarantined, [8e414a9a8802330303f4d163d42f946c], PUP.Optional.CrossRider.T, C:\Windows\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5.job, Quarantined, [18b74e96820860d674750a7655afb54b], PUP.Optional.CrossRider.T, C:\Windows\Tasks\72d91d9c-affd-4e90-8057-e2925506428d-5_user.job, Quarantined, [903f17cdd8b2ec4a84654e32857fb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\crossrider_statusbar.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\button1.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\button2.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\button3.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\button4.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\button5.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\icon128.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\icon16.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\icon24.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\icon48.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\panelarrow-up.png, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\popup.html, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\skin.css, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\skin\update.css, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome.manifest, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\install.rdf, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\54ca31d273d7056584d86b8268f8d5bf.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\5626b44aa7449dda5ed2f0a579790701.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\background.html, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\browser.xul, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\c95151c12e799240c1517196496b1d25.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\dialog.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\e954cc69622ecfa267d797688afd353a.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\f2fabf1036cdb8fabb9a84ae00d55f34.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\f327d1093f06187447b99f72de87d25d.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\options.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\options.xul, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\search_dialog.xul, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\0edffd609982eac9e12fe4e63420e4d9.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\21b076062e5cb5726153ca13a18e2154.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\2c591d85e86fc82908923270f5e202eb.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\32e95a362b15f802cb49dd78dfc510b2.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\37b266fe140ce4e8dde1a8fd93b1b875.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\6243b5c06c6c1c34ace0b3334a1e09b4.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\674efbab2f7cc5d6dffa60d2abfac41c.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\720340cd5b48e101e6d7bd0511c9c61f.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\75e4c6b557acd1524bd933199bdc9333.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\87e7f2daa9f8c6b00c9f36748cf0d626.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\ae4f0b348abfd6ae5e3c9d4941792318.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\bfa9aab4db84ad10226208a276f8c998.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\c168e99a6fbb531075a4a06e146b9699.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\cfa3ec916c29f5f36b451944878a19d7.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\fae5641f163deaaa739becdc79c2eee9.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\api\fba43118944ed1895235eac433647c38.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\075c53f576d55f4971cef3b5fb4420f7.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\0790214133654576af587c21067a4d71.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\133e9effb304b98e9cca96103e370020.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\1e628562f1fb9d61f9a5cbf03e42cb59.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\3e9e5d3797d29353d9786e0b37fcf8d8.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\4605de83c64e243ae4d7a3f88944dcd5.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\4c5061a261bf5a91d6756fcff005fc2c.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\5881e8c48dcf1bd53e99ab56753ef016.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\65973a7fae1c877ed61e79c996b2c808.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\69f43f608c646fee85924cf7bc26d09f.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\7105dd69f0f93edd28278117ae235e46.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\8048759dc0d5baccebd975ef1a442998.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\94edf22698945d2ad5445f18429f2396.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\953c836cc152f8beb356be93e5ce93c8.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\9b098a1b721f23b59db41f9fbe05e414.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\a434ea15e7054cc501a129ea51c9e6e4.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\c4dcb3587ddd8c3ec11aec5830c1c4fb.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\d8e3d247b3f1dd3d79d74d0d591b0321.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\e25398a3b76d7401099d5438f5b8ccd4.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\e42f831b972bf2696d6063b4d5bb24ef.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\chrome\content\core\installer.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\defaults\preferences\prefs.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\manifest.xml, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins.json, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\263.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\102.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\104.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\119.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\13.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\14.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\16.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\17.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\178.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\179.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\180.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\184.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\195.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\200.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\220.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\223.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\231.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\232.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\234.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\242.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\246.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\252.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\253.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\262.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\273.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\281.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\288.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\289.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\307.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\335.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\339.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\345.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\354.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\356.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\376.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\380.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\385.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\389.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\390.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\391.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\4.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\424.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\47.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\64.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\7.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\78.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\9.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\plugins\91.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\userCode\background.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\extensionData\userCode\extension.js, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\23fb8bb3-ac21-4230-bbfa-49b94968bc63@gmail.com\locale\en-US\translations.dtd, Quarantined, [dcf3e103acde93a34a63b7d78e764db3], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinema Video Pro 1.4V23.07\72d91d9c-affd-4e90-8057-e2925506428d.xpi, Quarantined, [f7d8aa3a206a80b6221ab93cfd0501ff], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14eb98f438c51ab43039b8e382fffe28"), Replaced,[9c3330b4414976c01434df939d68b64a]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.