Jump to content

Removal instructions for Cinemax Video

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Cinemax Video?
 
The Malwarebytes research team has determined that Cinemax Video is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.
 
How do I know if my computer is affected by Cinemax Video?
 
You may see this Firefox add-on:
 
warning1.png
 
these tasks in your Task Scheduler: 
 
warning3.png
 
and this entry in your list of installed programs:
 
warning4.png
 
How did Cinemax Video get on my computer?
 
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
 
How do I remove Cinemax Video?
 
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.

Is there anything else I need to do to get rid of Cinemax Video?

  • No, Malwarebytes' Anti-Malware removes Cinemax Video completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.

How would the full version of Malwarebytes Anti-Malware help protect me?
 
We hope our application and this guide have helped you eradicate this hijacker. 
 
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Cinemax Video hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.
 


protection1.png

 
Technical details for experts
 
No visible signs in a HijackThis log
 
You may see these entries in FRST logs: 
 

 FF Extension: Cinemax Video 1.9cV07.10 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com [2015-10-13] C:\Windows\System32\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5 C:\Windows\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5_user.job C:\Windows\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5.job C:\Program Files (x86)\Cinemax Video 1.9cV07.10 Task: {70172129-55BD-4F5A-8F19-8C7D48876AEC} - System32\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5_user => C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855-5.exe [2015-10-13] (Cinema VideoV07.10) <==== ATTENTIONTask: {C6DFF732-CA80-4BF1-B277-B14C3B5C9282} - System32\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5 => C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855-5.exe [2015-10-13] (Cinema VideoV07.10) <==== ATTENTIONTask: C:\Windows\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5.job => C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5_user.job => C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855-5.exe <==== ATTENTION

 
Alterations made by the installer:
 

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Cinemax Video 1.9cV07.10       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855.xpi"="13/10/2015 11:20, 445270 bytes, A       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855-4.exe"="13/10/2015 11:20, 1388624 bytes, A       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855-5.exe"="13/10/2015 11:20, 1143376 bytes, A       Adds the file Uninstall.exe"="13/10/2015 11:20, 123984 bytes, A       Adds the file utils.exe"="13/10/2015 11:20, 2077400 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com       Adds the file chrome.manifest"="13/10/2015 11:20, 618 bytes, A       Adds the file install.rdf"="13/10/2015 11:20, 1300 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855-5"="13/10/2015 11:20, 5490 bytes, A       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855-5_user"="13/10/2015 11:20, 5502 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855-5.job"="13/10/2015 11:20, 2460 bytes, A       Adds the file 367b6771-2ec6-42a8-adbc-9575137f9855-5_user.job"="13/10/2015 11:20, 2460 bytes, A Registry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "Cinemax Video 1.9cV07.10"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "367b6771-2ec6-42a8-adbc-9575137f9855-5.job"="REG_BINARY, ................................       "367b6771-2ec6-42a8-adbc-9575137f9855-5.job.fp"="REG_DWORD", -896480287       "367b6771-2ec6-42a8-adbc-9575137f9855-5_user.job"="REG_BINARY, ................................       "367b6771-2ec6-42a8-adbc-9575137f9855-5_user.job.fp"="REG_DWORD", -1425612894    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinemax Video 1.9cV07.10\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinemax Video 1.9cV07.10\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinemax Video 1.9cV07.10\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "Cinemax Video 1.9cV07.10"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cinemax Video 1.9cV07.10]       "CrAppId"="REG_SZ", "72893"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Cinemax Video 1.9cV07.10\utils.exe"       "DisplayName"="REG_SZ", "Cinemax Video 1.9cV07.10"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Cinema VideoV07.10"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Cinemax Video 1.9cV07.10\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "Cinemax Video 1.9cV07.10"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema VideoV07.10]       "72893"="REG_SZ", "Cinemax Video 1.9cV07.10"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1 

 
Malwarebytes Anti-Malware log:
 

Malwarebytes Anti-Malwarewww.malwarebytes.org Scan Date: 13/10/2015Scan Time: 11:27Logfile: mbamCinemaxVideo.txtAdministrator: Yes Version: 2.2.0.1020Malware Database: v2015.10.13.02Rootkit Database: v2015.10.06.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: Disabled OS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username} Scan Type: Threat ScanResult: CompletedObjects Scanned: 336816Time Elapsed: 5 min, 0 sec Memory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: Enabled Processes: 0(No malicious items detected) Modules: 0(No malicious items detected) Registry Keys: 19PUP.Optional.Downloader, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Cinemax Video 1.9cV07.10, Quarantined, [bdb976e0d1ba86b0bc596e52659cec14], PUP.Optional.HighDefAction, HKLM\SOFTWARE\HighDefAction, Quarantined, [64129abc1d6e102681e61f98a65eea16], PUP.Optional.YorkNewCin, HKLM\SOFTWARE\YorkNewCin, Quarantined, [98de9abce5a6da5c5a9bcb15b74d30d0], PUP.Optional.CinemaPlus, HKLM\SOFTWARE\ARENAHD, Quarantined, [225400567e0df442c5c0a203fa0a6f91], PUP.Optional.CrossRider, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [9fd790c675164ee879e4208cc63ebe42], PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\367b6771-2ec6-42a8-adbc-9575137f9855-5, Delete-on-Reboot, [a8cef95de8a3e94d66fceac215ef05fb], PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\367b6771-2ec6-42a8-adbc-9575137f9855-5_user, Delete-on-Reboot, [e19521350883c3735a089616cc38e917], PUP.Optional.CinemaxVideo, HKLM\SOFTWARE\WOW6432NODE\Cinemax Video 1.9cV07.10, Quarantined, [1f57421493f852e4508a73327b896898], PUP.Optional.HighDefAction, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [0e68a8ae7615d462590e2c8b51b31be5], PUP.Optional.YorkNewCin, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [96e05afcfc8f52e4e213855bb252a65a], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [81f583d38a014aecc98b703cfb0911ef], PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [166076e05932bd793253e8bd0ff59e62], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [7afc77df5437bd7905586b41ef1539c7], PUP.Optional.HighDefAction, HKCU\SOFTWARE\HighDefAction, Quarantined, [36405006e0ab32043f279b1c33d1eb15], PUP.Optional.YorkNewCin, HKCU\SOFTWARE\YorkNewCin, Quarantined, [f680e6700c7f16208d67cc14a85cfd03], PUP.Optional.CrossRider, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [2155afa7a1ea51e50906f5b631d3ec14], PUP.Optional.CinemaPlus, HKCU\SOFTWARE\ARENAHD, Quarantined, [beb8144214777fb7bcaa11944eb6a45c], PUP.Optional.CrossRider, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [b9bdd28496f5082ec95be6c58183db25], PUP.Optional.CrossRider, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema VideoV07.10, Quarantined, [057131253358e056d74fd2d950b439c7],  Registry Values: 6PUP.Optional.CinemaPlus, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [225400567e0df442c5c0a203fa0a6f91]PUP.Optional.PCTuner, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [6b0b272feba0f83e43616c5c63a1a858]PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [166076e05932bd793253e8bd0ff59e62]PUP.Optional.PCTuner, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [6b0ba1b57e0d93a3acf87652689cff01]PUP.Optional.CinemaPlus, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [beb8144214777fb7bcaa11944eb6a45c]PUP.Optional.PCTuner, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [e98d93c33e4d3105198728a084800ef2] Registry Data: 0(No malicious items detected) Folders: 14PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CinemaxVideo, C:\Program Files (x86)\Cinemax Video 1.9cV07.10, Quarantined, [5f1797bfa7e4c86e5a665dc3f70c7f81],  Files: 130PUP.Optional.CinemaxVideo, C:\Users\{username}\Desktop\setup.exe, Quarantined, [e492074f5f2ca492a981388dba4b17e9], PUP.Optional.CinemaxVideo, C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855-4.exe, Quarantined, [7ff7aea8b1dab482ab7f438227ded927], PUP.Optional.CinemaxVideo, C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855-5.exe, Quarantined, [22540056414abd79939760656e974eb2], PUP.Optional.Downloader, C:\Program Files (x86)\Cinemax Video 1.9cV07.10\Uninstall.exe, Quarantined, [bdb976e0d1ba86b0bc596e52659cec14], PUP.Optional.CinemaxVideo, C:\Program Files (x86)\Cinemax Video 1.9cV07.10\utils.exe, Quarantined, [79fd2135484305312bffb4114bba7d83], PUP.Optional.CrossRider, C:\Windows\System32\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5, Quarantined, [25510650dcafdf572100aaf2c63ee917], PUP.Optional.CrossRider, C:\Windows\System32\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5_user, Quarantined, [c5b1292dfd8e0e2877aa405cf1130cf4], PUP.Optional.CrossRider, C:\Windows\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5.job, Quarantined, [304679dddead83b332f0b5e721e37e82], PUP.Optional.CrossRider, C:\Windows\Tasks\367b6771-2ec6-42a8-adbc-9575137f9855-5_user.job, Quarantined, [383edd790784f24423ff663625df8e72], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\crossrider_statusbar.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button1.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button2.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button3.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button4.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button5.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon128.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon16.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon24.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon48.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\panelarrow-up.png, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\popup.html, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\skin.css, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\update.css, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome.manifest, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\install.rdf, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\7c2211b9dc61835ad0f6407b38ff1732.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\7dc692a11b4eb5ebedb25b847ea46f3c.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\9b5b39a67f1dc7e2f534525e62e94213.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\background.html, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\browser.xul, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\d53b3892a90f1f299f32b3a5538ee67b.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\dialog.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\f372b1aaa7e9e4f95f80c7c4f633d8e2.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\fae3e98f729ff2d94ba1a9aaae165277.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.xul, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\search_dialog.xul, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\95d792d0908c1fc6f0388daac2586aee.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\117068e342f234b03b54ef23011b6fe7.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3691c615cc5a683eb7a5937dc7b00993.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3b0067fc5176014d0454a6ab23b47e46.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\4edf07da7c606691a5c9de0e16441fc5.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\628e764fc0b90496a01e3c0c7cd8f8db.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\719f44426026acd804e0694e5e04c95b.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\80b38d02818e2c69c46ee9a36f17e1c7.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\80d13d145a7ad4d735d83cb0162ea989.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\99f3938dca7f3baba27cfd8638d8e0e7.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\b46bcfc6729a0a35c47e2703ed20f84d.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\bee30ff786192c8c03f31b3194949c55.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\cf546f25909cee1a42f4d6ee4caa2c77.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\d9473f068fd63333c72d5d7c7c90037a.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e963f67590349b3cc3cec9941e872ff8.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\ec4af7e6ebc23f9cd542529f5b3c5199.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\23f746da9f3a27ada6890c680a829c41.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\2b0276214da6cb43ce417a44e49743fc.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\2ee5a2056dffaf67c7d52bdff794f406.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\32ef40f4ed2dae7c0d5e84b63d30123a.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\3874192f1ccc291d13f8c26abaae94f3.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\3d75613ffd53046ecac7af3aeaf6e432.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\40e5c49912e042aeb034ebd19eacde7c.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\57a8da7a438f57929f88d089b5e22a6a.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\5a67636a013cf34002c9460907613f73.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\5d5d4d8b6a863e2f3c01e2d8d7a748bd.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\721de3524f148e3b3d72c4d6c45fb438.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\89b862f9ee5e0ad5663414bdd86da30e.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\a7230a6ba9c2f179b7b962812bc013c7.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\a7cf78df598199c9ef27e3a4ea515fb8.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\af77528f8e8cbf8459e9e129e6fb5b66.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\b1e3181b5e32b7e824855fbf307a173e.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\b29d8348e4f0277c6f3fb74fb3611f5e.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\db55f9c60df49cd191fe02bd176e4b32.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\dbd481a64a7ef505769ec74385fa19b5.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\dddc02920126bb277353b1920dd78a3a.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\installer.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences\prefs.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\manifest.xml, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins.json, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\273.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\102.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\119.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\13.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\14.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\16.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\17.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\178.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\179.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\180.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\184.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\195.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\200.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\220.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\223.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\231.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\232.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\234.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\242.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\246.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\252.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\253.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\262.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\263.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\281.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\288.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\300.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\311.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\335.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\339.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\345.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\354.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\356.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\376.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\380.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\385.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\390.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\391.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\4.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\419.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\424.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\47.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\64.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\7.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\78.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\9.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\91.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\background.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\extension.js, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US\translations.dtd, Quarantined, [d3a3f85e444750e628426f3a47bda15f], PUP.Optional.CinemaxVideo, C:\Program Files (x86)\Cinemax Video 1.9cV07.10\367b6771-2ec6-42a8-adbc-9575137f9855.xpi, Quarantined, [5f1797bfa7e4c86e5a665dc3f70c7f81], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "150608452bad8886c3de2fb171c12942"), Replaced,[a8ce7dd93259ae88558ea02a41c401ff] Physical Sectors: 0(No malicious items detected)  (end)

 
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention

Save yourself the hassle and get protected.

Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.