Jump to content

Removal instructions for App Lid

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is App Lid?

The Malwarebytes research team has determined that App Lid is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by App Lid?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did App Lid get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove App Lid?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of App Lid?
  • No, Malwarebytes' Anti-Malware removes App Lid completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the App Lid hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: App Lid - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com [2015-07-28] C:\Windows\System32\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5 C:\Windows\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5_user.job C:\Windows\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5.job C:\Program Files (x86)\App LidApp Lid (HKLM-x32\...\App Lid) (Version: 1.36.01.22 - Lid) <==== ATTENTIONTask: {4383E2AD-EFA7-4633-B868-3D83F09E93AC} - System32\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5 => C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b-5.exe [2015-07-28] (Lid) <==== ATTENTIONTask: {9851EC95-AFC2-444C-B479-BD2A10259111} - System32\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5_user => C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b-5.exe [2015-07-28] (Lid) <==== ATTENTIONTask: C:\Windows\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5.job => C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5_user.job => C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\App Lid       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b.xpi"="28/07/2015 16:38, 413253 bytes, A       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b-4.exe"="28/07/2015 16:38, 1497600 bytes, A       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b-5.exe"="28/07/2015 16:38, 1215488 bytes, A       Adds the file Uninstall.exe"="28/07/2015 16:38, 118272 bytes, A       Adds the file utils.exe"="28/07/2015 16:38, 2001799 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com       Adds the file chrome.manifest"="28/07/2015 16:38, 630 bytes, A       Adds the file install.rdf"="28/07/2015 16:38, 1459 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b-5"="28/07/2015 16:38, 5456 bytes, A       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b-5_user"="28/07/2015 16:38, 5468 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b-5.job"="28/07/2015 16:38, 2426 bytes, A       Adds the file b4013d75-a74e-4566-9e2b-580ee38a600b-5_user.job"="28/07/2015 16:38, 2426 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286]       "65743"="REG_SZ", "App Lid"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "b4013d75-a74e-4566-9e2b-580ee38a600b-5.job"="REG_BINARY, ................................       "b4013d75-a74e-4566-9e2b-580ee38a600b-5.job.fp"="REG_DWORD", -1170516968       "b4013d75-a74e-4566-9e2b-580ee38a600b-5_user.job"="REG_BINARY, ................................       "b4013d75-a74e-4566-9e2b-580ee38a600b-5_user.job.fp"="REG_DWORD", 389394873    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\App Lid\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\App Lid\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\App Lid\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286]       "65743"="REG_SZ", "App Lid"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\25286\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\App Lid]       "CrAppId"="REG_SZ", "65743"       "CrPublisherId"="REG_SZ", "25286"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\App Lid\utils.exe"       "DisplayName"="REG_SZ", "App Lid"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Lid"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\App Lid\Uninstall.exe /fcp=1  "    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\25286]       "65743"="REG_SZ", "App Lid"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\25286\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Lid]       "65743"="REG_SZ", "App Lid"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 28/07/2015Scan Time: 16:48Logfile: mbamAppLid.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.07.28.03Rootkit Database: v2015.07.22.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 327829Time Elapsed: 4 min, 20 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 8PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [59caab3c0d7d86b0812696b52fd41be5], PUP.Optional.AppLid.A, HKLM\SOFTWARE\WOW6432NODE\App Lid, Quarantined, [e04328bf6a2051e5d45a5ec938cbec14], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [bb68c7201b6ff73f49e3b659aa59d62a], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [ff2410d74446e6505f48d873986b09f7], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [2bf807e01e6cdb5b17a5a6d67e8658a8], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [24ff7b6cb2d8ba7c2ba9af7fed1642be], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Lid, Quarantined, [9d86ae39d2b847effe339196d033d42c], PUP.Optional.AppLid.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\App Lid, Quarantined, [4cd7dd0a6228de5811635a9e26dc4fb1], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\defaults, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\defaults\preferences, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\userCode, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\locale, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\locale\en-US, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.AppLid.A, C:\Program Files (x86)\App Lid, Quarantined, [4cd7dd0a6228de5811635a9e26dc4fb1], Files: 127PUP.Optional.AppLid.A, C:\Users\{username}\Desktop\bnmtzmifed.exe, Quarantined, [e83bbc2beaa0dc5a31ac321aca372dd3], PUP.Optional.AppLid.A, C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b-4.exe, Quarantined, [46ddc5224842b4828855f55746bbb14f], PUP.Optional.AppLid.A, C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b-5.exe, Quarantined, [49daecfbafdb7fb7c01d6ae2c33e748c], PUP.Optional.AppLid.A, C:\Program Files (x86)\App Lid\utils.exe, Quarantined, [220102e58efcbf77409d7ad2956c9a66], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5, Quarantined, [69baa047553552e46dfc3800bf44be42], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5_user, Quarantined, [170cd1168ffbed494128b88024df18e8], PUP.Optional.CrossRider.T, C:\Windows\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5.job, Quarantined, [d152c12699f1eb4b62f5add759ab649c], PUP.Optional.CrossRider.T, C:\Windows\Tasks\b4013d75-a74e-4566-9e2b-580ee38a600b-5_user.job, Quarantined, [ab780ed9bdcd142267f05e26a85c8b75], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\crossrider_statusbar.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\button1.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\button2.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\button3.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\button4.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\button5.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\icon128.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\icon16.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\icon24.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\icon48.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\panelarrow-up.png, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\popup.html, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\skin.css, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\skin\update.css, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome.manifest, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\install.rdf, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\5b5f65ed1778878b53479817cde4d567.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\8179ce9c406cd7bde13a2af8e90d43b1.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\a79d43f92a9633c00416a16ee30302b8.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\background.html, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\bc630e1f41024a768445f611d659ac0e.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\browser.xul, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\cd427f7e464467e106781fb3e1e15252.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\dialog.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\e96c42a3ee7d70fb49ab4b0cd3e07286.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\options.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\options.xul, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\search_dialog.xul, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\00fd117e3720fc75635b17989b1febdb.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\0d1d5164de5e74fdf6d17467f7ed22c4.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\6367c288bb97876f7c36df9c05a336f1.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\65615678bc21ed260ef52ac5885deedb.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\704fd0ce35503a6167356692fb360abe.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\81ce6b86ccb87f475fc34a1272aa5d13.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\85aa05f84a92033e2a4ae460b5fa22fb.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\863d94912876ccec106a264d129aeb44.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\940a283ae50ae39c1afead8d556df76b.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\a88dd9eeba677df24d88fb7201dc6bd7.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\ac681a4af1fb55ad5796f4a3c91ad5ea.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\e0312edf7fb28abca8fdb5ce7270327d.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\e2e7488116153512cac70164b4a86c6c.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\e86c69cb8e86c6d2532b8a2f7c83d27c.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\fe1e90666461c7da650078bccf4ebbe6.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\api\ff91e13e456d1e35724c0ecd3465d511.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\7df4fc45e69dd1ce5201d7d85e455de9.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\001beb50315cc18aeafc10926366d728.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\17c1d761c2e53cd8283dcb8e4a4c6e72.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\1d706fe89b89105d0c1176ce611d8b60.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\3760d70d76920eb0424b92397b20111c.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\3b5ba486635dabcd085f9fd424d93dc5.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\4e6acd276e64352851b7febb1a01d254.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\5557d221944a9ddcee551d9d62b8dcce.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\5a247fb23a9c27d27404347b7fc8b30c.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\5c391fcae4b249ba662d22a3a4dca349.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\6be5712bf91f1c09f3b1b11a5d5beea9.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\77d230cff2fc7aff26c2d5a7d14fca93.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\981932af477af48eae8f136db3a3ea31.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\a6e8b4e8623dc358a23c4d3101fa9855.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\abb2133536ed7f1a945ab0849c7c1078.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\c0962d6cae1852379aab0a7da9b3ed9d.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\cdea95c171b0b24e8c3e652696709080.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\d1dea05c07d38f13598471c154df3c11.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\e394407b9baf0b9836a01c5d6ffabae2.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\f2514f556177934b1fa17e4e0b0f8a12.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\chrome\content\core\installer.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\defaults\preferences\prefs.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\manifest.xml, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins.json, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\253.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\1.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\102.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\13.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\14.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\16.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\17.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\177.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\180.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\182.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\183.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\184.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\193.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\195.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\200.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\207.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\21.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\22.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\220.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\223.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\242.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\246.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\252.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\255.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\28.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\281.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\288.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\339.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\345.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\354.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\376.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\379.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\385.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\390.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\391.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\4.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\47.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\64.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\7.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\72.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\78.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\9.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\91.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\plugins\98.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\userCode\background.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\extensionData\userCode\extension.js, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d9676068985d4d81bb390a@7be93ab3c8e144f694a0509d5.com\locale\en-US\translations.dtd, Quarantined, [0122757222688da92fec5b37798b8e72], PUP.Optional.AppLid.A, C:\Program Files (x86)\App Lid\b4013d75-a74e-4566-9e2b-580ee38a600b.xpi, Quarantined, [4cd7dd0a6228de5811635a9e26dc4fb1], PUP.Optional.AppLid.A, C:\Program Files (x86)\App Lid\Uninstall.exe, Quarantined, [4cd7dd0a6228de5811635a9e26dc4fb1], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14ed51d9bd889406f3bacf7fc53fc331"), Replaced,[5ec58f583d4d48ee13a661165da83cc4]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.