Jump to content

Removal instructions for Plus-HD-3.2

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Plus-HD-3.2?

The Malwarebytes research team has determined that Plus-HD-3.2 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Plus-HD-3.2?

You may see these browser add-ons:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Plus-HD-3.2 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Plus-HD-3.2?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Plus-HD-3.2?
  • No, Malwarebytes' Anti-Malware removes Plus-HD-3.2 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Plus-HD-3.2 hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Possible sign in a HijackThis log:

O2 - BHO: CrossriderApp0034330 - {11111111-1111-1111-1111-110311431130} - C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll
You may see these entries in FRST logs:

 BHO: Plus-HD-3.2 -> {11111111-1111-1111-1111-110311431130} -> C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll [2015-07-24] (Plus HD) BHO-x32: Plus-HD-3.2 -> {11111111-1111-1111-1111-110311431130} -> C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll [2015-07-24] (Plus HD) FF Extension: Plus-HD-3.2 - C:\Users\Metallica\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com [2015-07-24] CHR Extension: (Plus-HD-3.2) - C:\Users\Metallica\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek [2015-07-24] C:\Windows\System32\Tasks\Plus-HD-3.2-updater C:\Windows\System32\Tasks\Plus-HD-3.2-codedownloader C:\Windows\System32\Tasks\Plus-HD-3.2-enabler C:\Windows\Tasks\Plus-HD-3.2-firefoxinstaller.job C:\Windows\Tasks\Plus-HD-3.2-chromeinstaller.job C:\Windows\Tasks\Plus-HD-3.2-updater.job C:\Windows\Tasks\Plus-HD-3.2-codedownloader.job C:\Windows\Tasks\Plus-HD-3.2-enabler.job C:\Program Files (x86)\Plus-HD-3.2Plus-HD-3.2 (HKLM-x32\...\Plus-HD-3.2) (Version: 1.33.153.1 - Plus HD) <==== ATTENTIONTask: {3019CBA4-97FD-4BC2-AEB2-11ABC0DB436B} - System32\Tasks\Plus-HD-3.2-enabler => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-enabler.exe [2015-07-24] (Plus HD) <==== ATTENTIONTask: {394BCC2D-159A-4843-840C-1593057E5674} - System32\Tasks\Plus-HD-3.2-firefoxinstaller => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-firefoxinstaller.exe [2015-07-24] (Plus HD) <==== ATTENTIONTask: {7763643F-3D00-4A74-AB66-6933F44642BC} - System32\Tasks\Plus-HD-3.2-codedownloader => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-codedownloader.exe [2015-07-24] (Plus HD) <==== ATTENTIONTask: {9C53C9CB-C5D8-4356-A1DE-9D4C9E299DF8} - System32\Tasks\Plus-HD-3.2-chromeinstaller => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-chromeinstaller.exe [2015-07-24] (Plus HD) <==== ATTENTIONTask: {D949640E-821E-4AD6-B7C7-F0D8C780626B} - System32\Tasks\Plus-HD-3.2-updater => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-updater.exe [2015-07-24] (Plus HD) <==== ATTENTIONTask: C:\Windows\Tasks\Plus-HD-3.2-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-chromeinstaller.exe?/installcrx /agentregpath='Plus-HD-3.2' /extensionfilepath C:\Program Files (x86)\Plus-HD-3.2\34330.crx' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installerfullversion=1.33.153.1 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com <==== ATTENTIONTask: C:\Windows\Tasks\Plus-HD-3.2-codedownloader.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-codedownloader.exeU/reinstallapp /runfrom=task /agentregpath='Plus-HD-3.2' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installerfullversion=1.33.153.1 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /codedownloaddomain=http:/app-static.crossrider.com <==== ATTENTIONTask: C:\Windows\Tasks\Plus-HD-3.2-enabler.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-enabler.exeO/enablebho /agentregpath='Plus-HD-3.2' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com <==== ATTENTIONTask: C:\Windows\Tasks\Plus-HD-3.2-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-firefoxinstaller.exe;/installxpi /agentregpath='Plus-HD-3.2' /extensionfilepath C:\Program Files (x86)\Plus-HD-3.2\34330.xpi' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installerfullversion=1.33.153.1 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com /extensionversion=0.93 /prefsbranch=a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330 /updateurl=https:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/34330.rdf <==== ATTENTIONTask: C:\Windows\Tasks\Plus-HD-3.2-updater.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-updater.exe?/runupdater /agentregpath='Plus-HD-3.2' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http:/stats.syncstatsdata.com <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Plus-HD-3.2       Adds the file 34330.crx"="24/07/2015 08:56, 260444 bytes, A       Adds the file 34330.xpi"="24/07/2015 08:56, 296600 bytes, A       Adds the file background.html"="19/01/2014 14:34, 729 bytes, A       Adds the file Installer.log"="24/07/2015 08:56, 359315 bytes, A       Adds the file Plus-HD-3.2.ico"="19/01/2014 14:34, 9662 bytes, A       Adds the file Plus-HD-3.2-bg.exe"="24/07/2015 08:56, 627048 bytes, A       Adds the file Plus-HD-3.2-bho.dll"="24/07/2015 08:56, 592744 bytes, A       Adds the file Plus-HD-3.2-bho64.dll"="24/07/2015 08:56, 886632 bytes, A       Adds the file Plus-HD-3.2-chromeinstaller.exe"="24/07/2015 08:56, 926568 bytes, A       Adds the file Plus-HD-3.2-codedownloader.exe"="24/07/2015 08:56, 529256 bytes, A       Adds the file Plus-HD-3.2-enabler.exe"="24/07/2015 08:56, 348520 bytes, A       Adds the file Plus-HD-3.2-firefoxinstaller.exe"="24/07/2015 08:56, 891240 bytes, A       Adds the file Plus-HD-3.2-updater.exe"="24/07/2015 08:56, 358760 bytes, A       Adds the file Uninstall.exe"="24/07/2015 08:56, 81768 bytes, A       Adds the file utils.exe"="24/07/2015 08:56, 1294268 bytes, A    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file Plus-HD-3.2-chromeinstaller"="24/07/2015 08:56, 5036 bytes, A       Adds the file Plus-HD-3.2-codedownloader"="24/07/2015 08:56, 4318 bytes, A       Adds the file Plus-HD-3.2-enabler"="24/07/2015 08:56, 4190 bytes, A       Adds the file Plus-HD-3.2-firefoxinstaller"="24/07/2015 08:56, 5164 bytes, A       Adds the file Plus-HD-3.2-updater"="24/07/2015 08:56, 4366 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file Plus-HD-3.2-chromeinstaller.job"="24/07/2015 08:56, 2006 bytes, A       Adds the file Plus-HD-3.2-codedownloader.job"="24/07/2015 08:56, 1288 bytes, A       Adds the file Plus-HD-3.2-enabler.job"="24/07/2015 08:56, 1160 bytes, A       Adds the file Plus-HD-3.2-firefoxinstaller.job"="24/07/2015 08:56, 2134 bytes, A       Adds the file Plus-HD-3.2-updater.job"="24/07/2015 08:56, 1336 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}]       "(Default)"="REG_SZ", "Plus-HD-3.2"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO]       "(Default)"="REG_SZ", "CrossriderApp0034330"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110311431130}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0034330"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO.1]       "(Default)"="REG_SZ", "CrossriderApp0034330"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO.1\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110311431130}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220322432230}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox\CurVer]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox.1]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox.1\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220322432230}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435530}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435530}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435530}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0]       "(Default)"="REG_SZ", "CrossriderApp0034330 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\0\win64]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}]       "(Default)"="REG_SZ", "Plus-HD-3.2"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\ProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\VersionIndependentProgID]       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355435530}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355435530}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355435530}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366436630}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366436630}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366436630}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431130}]       "(Default)"="REG_SZ", "CrossriderApp0034330"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]       "{11111111-1111-1111-1111-110311431130}"="REG_SZ", "1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "Plus-HD-3.2-chromeinstaller.job"="REG_BINARY, ................................       "Plus-HD-3.2-chromeinstaller.job.fp"="REG_DWORD", 622235118       "Plus-HD-3.2-codedownloader.job"="REG_BINARY, ................................       "Plus-HD-3.2-codedownloader.job.fp"="REG_DWORD", -1850897575       "Plus-HD-3.2-enabler.job"="REG_BINARY, ................................       "Plus-HD-3.2-enabler.job.fp"="REG_DWORD", -25830795       "Plus-HD-3.2-firefoxinstaller.job"="REG_BINARY, ................................       "Plus-HD-3.2-firefoxinstaller.job.fp"="REG_DWORD", -698731780       "Plus-HD-3.2-updater.job"="REG_BINARY, ................................       "Plus-HD-3.2-updater.job.fp"="REG_DWORD", 1032880321    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]       "Plus-HD-3.2-bg.exe"="REG_DWORD", 8000    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431130}]       "(Default)"="REG_SZ", "CrossriderApp0034330"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.2]       "CrAppId"="REG_SZ", "34330"       "CrPublisherId"="REG_SZ", "19979"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\utils.exe"       "DisplayName"="REG_SZ", "Plus-HD-3.2"       "DisplayVersion"="REG_SZ", "1.33.153.1"       "Publisher"="REG_SZ", "Plus HD"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Uninstall.exe /fromcontrolpanel=1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Chrome]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Chrome\Profiles]       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Firefox]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Firefox\Profiles]       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\IE]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\IE\Profiles]       "S-1-5-21-612512518-1730918975-1677248042-1002"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Installer]       "BundledChrome"="REG_DWORD", 1       "BundledFirefox"="REG_DWORD", 1       "BundledIe"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "A2558D42D1B241B0A7C0A02CA0FFBE46IE"       "Verifier"="REG_SZ", "51e696db2fda5ba2b9ea38990538d327"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2]       "ActiveAppId"="REG_SZ", "34330"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Code]       "AppJavaScript"="REG_SZ",   { Javascript removed }     [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Debug]       "IsDebuggingPlugins"="REG_DWORD", 0    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Installer]       "CodeDownloadDomain"="REG_SZ", "http://app-static.crossrider.com"       "DefaultBrowser"="REG_SZ", "ff"       "ErrorsDomain"="REG_SZ", "http://errors.srvstatsdata.com"       "FullVersion"="REG_SZ", "1.33.153.1"       "FullVersionForUrl"="REG_SZ", "1_33_153"       "OsName"="REG_SZ", "7"       "Params"="REG_SZ", "{   "source_id" : "000775",   "sub_id" : "0",   "uzid" : "0"}"       "SrcId"="REG_SZ", "000775"       "StatsDomain"="REG_SZ", "http://stats.srvstatsdata.com"       "SubId"="REG_SZ", "0"       "Time"="REG_SZ", "1437720963"       "ZData"="REG_SZ", "0"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Log]       "plus-hd-3.2-bho"="REG_DWORD", 0       "plus-hd-3.2-bho64"="REG_DWORD", 0    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Manifest]       "AddressbarURL"="REG_SZ", "NA"       "BgVersion"="REG_SZ", "16"       "ChangePrevious"="REG_SZ", "false"       "Description"="REG_SZ", "Turn YouTube videos to High Definition by default"       "DisableIe"="REG_SZ", "true"       "EnableSearchIE"="REG_SZ", "false"       "HomePageUrl"="REG_SZ", "NA"       "IsButtonEnabled"="REG_SZ", "false"       "Manifest"="REG_SZ", "NA"       "ModeType"="REG_SZ", "production"       "Name"="REG_SZ", "Plus-HD-3.2"       "PluginsManifestVersion"="REG_SZ", "209"       "PublisherId"="REG_SZ", "19979"       "PublisherName"="REG_SZ", "Plus HD"       "RunInFrame"="REG_SZ", "false"       "SetNewTab"="REG_SZ", "false"       "ThanksUrl"="REG_SZ", "NA"       "UninstallerOfferAction"="REG_SZ", "NA"       "UninstallerOfferUrl"="REG_SZ", "NA"       "UpdateInterval"="REG_DWORD", 360       "Version"="REG_SZ", "232"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Update]       "LastCheck"="REG_DWORD", 1437720966    [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.2]    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Plus HD]       "34330"="REG_SZ", "Plus-HD-3.2"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 24/07/2015Scan Time: 09:16Logfile: mbamPlus-HD-32.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.07.24.03Rootkit Database: v2015.07.22.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 327430Time Elapsed: 4 min, 21 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 44PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344434430}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355435530}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366436630}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355435530}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366436630}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{55555555-5555-5555-5555-550355435530}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{66666666-6666-6666-6666-660366436630}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344434430}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{44444444-4444-4444-4444-440344434430}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.BHO.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.BHO, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.BHO, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.BHO.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.BHO, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.BHO.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220322432230}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.Sandbox.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.Sandbox, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.Sandbox, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.Sandbox, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.Sandbox.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.Sandbox.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220322432230}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{22222222-2222-2222-2222-220322432230}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311431130}\INPROCSERVER32, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.PlusHD.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Plus-HD-3.2, Quarantined, [f3a04b9af595ee48d3a8c5a9f3120af6], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFABB72-9500-4E71-8169-6C9CB8EC0DA0}, Quarantined, [b5de19cccebc82b4031d8312689c8c74], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C1FD4A3-12AA-45B4-BEBD-600DAFC61974}, Quarantined, [dcb7b530612939fddb43b7de2fd510f0], PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-3.2, Quarantined, [bfd4865f8cfe5adcd6ec450f2bd84bb5], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFABB72-9500-4E71-8169-6C9CB8EC0DA0}, Quarantined, [b2e15c89d7b3c37376aa8213e91b51af], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C1FD4A3-12AA-45B4-BEBD-600DAFC61974}, Quarantined, [eea504e11b6fff37c35b3b5a07fd13ed], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [1d76826367231f17c36f65159173de22], PUP.Optional.PlusHD.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-3.2, Quarantined, [8112499cb5d5162035ab12369271916f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Plus HD, Quarantined, [a4ef5b8a4941e94d7bf942ed16ed827e], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFABB72-9500-4E71-8169-6C9CB8EC0DA0}, Quarantined, [2b6864819cee38fee439b7debb496898], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C1FD4A3-12AA-45B4-BEBD-600DAFC61974}, Quarantined, [682b8f56bbcfeb4b03188b0a8c783fc1], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDBC5A36-5A71-415C-883D-C0B0B8814EFE}, Quarantined, [83102abbfa903303001ccec7d4308e72], Registry Values: 7PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1afabb72-9500-4e71-8169-6c9cb8ec0da0}|AppName, Plus-HD-3.2-codedownloader.exe, Quarantined, [b5de19cccebc82b4031d8312689c8c74]PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c1fd4a3-12aa-45b4-bebd-600dafc61974}|AppName, Plus-HD-3.2-bg.exe, Quarantined, [dcb7b530612939fddb43b7de2fd510f0]PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1afabb72-9500-4e71-8169-6c9cb8ec0da0}|AppName, Plus-HD-3.2-codedownloader.exe, Quarantined, [b2e15c89d7b3c37376aa8213e91b51af]PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c1fd4a3-12aa-45b4-bebd-600dafc61974}|AppName, Plus-HD-3.2-bg.exe, Quarantined, [eea504e11b6fff37c35b3b5a07fd13ed]PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1afabb72-9500-4e71-8169-6c9cb8ec0da0}|AppName, Plus-HD-3.2-codedownloader.exe, Quarantined, [2b6864819cee38fee439b7debb496898]PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c1fd4a3-12aa-45b4-bebd-600dafc61974}|AppName, Plus-HD-3.2-bg.exe, Quarantined, [682b8f56bbcfeb4b03188b0a8c783fc1]PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDBC5A36-5A71-415C-883D-C0B0B8814EFE}|AppName, Plus-HD-3.2-enabler.exe-buttonutil.exe, Quarantined, [83102abbfa903303001ccec7d4308e72]Registry Data: 0(No malicious items detected)Folders: 25PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\userCode, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\actions, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\popupResource, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults\preferences, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\userCode, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale\en-US, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], Files: 224PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], PUP.Optional.ScramblePacker.A, C:\Users\{username}\Desktop\Bwztelblkp.exe, Quarantined, [ade6d70efa903df9a055e046b74ae21e], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bg.exe, Quarantined, [c5ce549155356accfb6aa680a65b3dc3], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-chromeinstaller.exe, Quarantined, [464d35b0b5d5d46278ed64c2ea172ed2], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-codedownloader.exe, Quarantined, [6b286382d4b61b1b0a5b35f107fab34d], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-enabler.exe, Quarantined, [6033f8ed444638fef86db27431d07f81], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-firefoxinstaller.exe, Quarantined, [5d360ed7d6b4ba7ce38249dde51cdc24], PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-updater.exe, Quarantined, [831038adbfcb2b0b7ee7b17515eceb15], PUP.Optional.PlusHD.C, C:\Program Files (x86)\Plus-HD-3.2\Uninstall.exe, Quarantined, [f3a04b9af595ee48d3a8c5a9f3120af6], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Plus-HD-3.2\utils.exe, Quarantined, [e9aae104b6d4d6601edae84eee12ed13], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-chromeinstaller.job, Quarantined, [296a4b9a5535d165e6028da8ec17827e], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-codedownloader.job, Quarantined, [246f93524e3c5ed824c4fe37d92a28d8], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-enabler.job, Quarantined, [afe4ffe6fe8c9a9cd612b5805da69b65], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-firefoxinstaller.job, Quarantined, [870c3baa1f6b78be9c4c79bc847f7c84], PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-updater.job, Quarantined, [e4af677eb2d8171fd6128fa6c93ac43c], PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-chromeinstaller, Quarantined, [a3f08164cac0181e7c6dcf666c9731cf], PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-codedownloader, Quarantined, [0e85d510f49669cd70790530cf34f010], PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-enabler, Quarantined, [d6bd2bba3f4b48ee9e4b181d0af9c13f], PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-firefoxinstaller, Quarantined, [94ff974e29618aac47a2b67ff013ef11], PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-updater, Quarantined, [cdc6469f404acb6ba049c273b053de22], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\crossriderManifest.json, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\background.html, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\manifest.json, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\popup.html, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\manifest.xml, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins.json, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\102_dealply_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\103_intext_5_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\104_jollywallet_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\105_corticas_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\119_similar_web_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\123_intext_adv_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\178_revizer_ws_dynamic_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\179_revizer_p_dynamic_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\17_jQuery.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\182_openUrl.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\183_tabsWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\195_icm_convertmedia_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\19_CHAppAPIWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\1_base.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\207_dbWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\21_debug.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\22_resources.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\28_initializer.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\47_resources_background.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\64_appApiMessage.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\72_appApiValidation.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\7_hooks.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\80_CHPopupAppAPI.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\97_resourceApiWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\9_search_engine_hook.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\userCode\background.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\userCode\extension.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\icon128.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\icon16.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\icon48.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\actions\1.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\background.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\main.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\platformVersion.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\chrome.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\cookie.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\message.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\monitor.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\pageAction.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\pageActionBG.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\app_api.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\bg_app_api.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\consts.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\cookie_store.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\crossriderAPI.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\delegate.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\events.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\extensionDataStore.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\installer.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\logFile.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\logging.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\onBGDocumentLoad.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\reports.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\storageWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\updateManager.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\util.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\xhr.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\popupResource\newPopup.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\popupResource\popup.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\crossrider_statusbar.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button1.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button2.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button3.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button4.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button5.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon128.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon16.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon24.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon48.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\panelarrow-up.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\popup.html, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\skin.css, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\update.css, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome.manifest, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\install.rdf, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\background.html, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\baseObject.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\browser.xul, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\dialog.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\main.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\options.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\options.xul, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\platformVersion.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\search_dialog.xul, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\asyncDB.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\background.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\browserAction.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\contextMenu.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\dbManager.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\dom_bg.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\fileManager.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\firefox.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\firefoxNotifications.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\message.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\pageAction.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\request.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\tabs.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\webRequest.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\console.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\consts.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\delegate.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\extensionDataStore.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\folderIOWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\httpObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\IDBWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\installer.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\logFile.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\prefs.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\progressListenerObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\registry.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\reloadObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\reports.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\requestObject.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\searchSettings.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\uninstallObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\updateManager.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\utils.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\xhr.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults\preferences\prefs.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\manifest.xml, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins.json, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\102_dealply_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\105_corticas_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\119_similar_web_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\123_intext_adv_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\195_icm_convertmedia_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\1_base.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\21_debug.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\220_icm_base_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\223_imonomy_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\22_resources.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\231_revizer_ws_dynamic_2_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\178_revizer_ws_dynamic_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\179_revizer_p_dynamic_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\17_jQuery.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\182_openUrl.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\7_hooks.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\98_omniCommands.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\9_search_engine_hook.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\244_engageya_inner_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\246_setup.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\253_pixel_inject.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\260_pricedetect_sidebar_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\262_pops_5_j_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\263_intext_5_j_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\273_aedgency_back_button_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\288_firstoffer_pricecomp_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\289_covus_logos_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\28_initializer.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\345_pluginsVerticals.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\354_categories.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\376_loaderBackup.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\385_jollywallet_new_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\47_resources_background.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\281_ibario_tier3_pops_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\userCode\background.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\userCode\extension.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale\en-US\translations.dtd, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\34330.crx, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\34330.xpi, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\background.html, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\Installer.log, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2.ico, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14ebee286233ad694e54ae95f90320e4"), Replaced,[5043d015cfbb52e422c37ff45baabf41]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.