Jump to content

Removal instructions for MedPlLtdEditionv2.3

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is MedPlLtdEditionv2.3?

The Malwarebytes research team has determined that MedPlLtdEditionv2.3 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by MedPlLtdEditionv2.3?

You may see these browser extensions/add-ons:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did MedPlLtdEditionv2.3 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove MedPlLtdEditionv2.3?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of MedPlLtdEditionv2.3?
  • No, Malwarebytes' Anti-Malware removes MedPlLtdEditionv2.3 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the MedPlLtdEditionv2.3 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No signs in a HijackThis log

You may see these entries in a FRST log:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found] FF Extension: MedPlLtdEditionv2.3 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com [2015-02-04] C:\Windows\Tasks\f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user.job C:\Windows\Tasks\f05255b2-2b9a-46c6-88f7-0652b281fb15-5.job () C:\Program Files\MedPlLtdEditionv2.3
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\MedPlLtdEditionv2.3       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15.xpi"="2/4/2015 9:50 AM, 364208 bytes, A       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15-4.exe"="2/4/2015 9:50 AM, 1508312 bytes, A       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15-5.exe"="2/4/2015 9:50 AM, 1149912 bytes, A       Adds the file Uninstall.exe"="2/4/2015 9:50 AM, 120792 bytes, A       Adds the file utils.exe"="2/4/2015 9:50 AM, 2574044 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com       Adds the file chrome.manifest"="2/4/2015 9:49 AM, 642 bytes, A       Adds the file install.rdf"="2/4/2015 9:49 AM, 1307 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\indexedDB\chrome\idb\1998428755bb6del4afn5r4e0t6n5if    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\indexedDB\chrome\idb\648452285bb6dec4nfy5s4a0m6o5cf    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\indexedDB\chrome\idb\85147124b361e947f65m4o0c6c51f    In the existing folder C:\Windows\System32\Tasks       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15-5"="2/4/2015 9:50 AM, 5474 bytes, A       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user"="2/4/2015 9:50 AM, 5480 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15-5.job"="2/4/2015 9:50 AM, 2444 bytes, A       Adds the file f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user.job"="2/4/2015 9:50 AM, 2444 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636]       "67913"="REG_SZ", "MedPlLtdEditionv2.3"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\MedPlLtdEditionv2.3\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\MedPlLtdEditionv2.3\Lhlkzp1EzseGjPypJhX9ef1x8IXji0YiRPePk5kqzn8sxZybMnDlKgi9O2d1jm7Ob0W6+4Dkm0JGGneob4NOreUTwU3Exhnfn+RSFZwSPyVj5ZJr7B6facqQ7B3Ea3EJuktT0x/H+iFFIawaikoM00ZHM+GDFrfmKoxSrbcN1pM=]       "BJvrWxwiuVLlbItLWvVvv/l+OiogtyWEXwHZAAIHypoVUu8vo93J8ke3pc9D6Yd/wI4Mbr3dQh4UxsqGyYmm3Cv4V3SqAjqUtNwZQgTFQ/+yprT6yVUk9XRoyi0zm8YuqJ/t5EJpN+lailloV+a+ppkblW3fP9ezzMAcqRao6oaXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\MedPlLtdEditionv2.3\muL1aIbUjVr4a+vmv1MClZ8heivcELMLZu9Bn+w0aw7dKk9+tMMh+EhsrUNz+JYoW4+ZawoGkzq0rpE2oXnZLaXvGf2M1DD3kmAJABOoJFSCQVjtuLszjMcT2shJZLIHC35wqawCg86CSncHd6BkhfUljDyi2T8uFyReWzkZzVs=]       "tDkLcb0yJkXrm13d1CXxWJSxd9ba0vwAbLyxMpr8oULL+Pcrjb0o/3YZGLwjYKH+2Lj5ozs+nW/HixI0+dhkzec+LTLIRKZPtc4nFJMB1JtUS1Mt0DtvUL7jILFebplEFn8piQfH8EGzPL5z6IosmrGozC4miQSd5uowcCH3TRk="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MedPlLtdEditionv2.3       "CrAppId"="REG_SZ", "67913"       "CrPublisherId"="REG_SZ", "21636"       "DisplayIcon"="REG_SZ", "C:\Program Files\MedPlLtdEditionv2.3\utils.exe"       "DisplayName"="REG_SZ", "MedPlLtdEditionv2.3"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "MedPlayerVent"       "UninstallString"="REG_SZ", "C:\Program Files\MedPlLtdEditionv2.3\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "f05255b2-2b9a-46c6-88f7-0652b281fb15-5.job"="REG_BINARY, ................................       "f05255b2-2b9a-46c6-88f7-0652b281fb15-5.job.fp"="REG_DWORD", -1780599221       "f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user.job"="REG_BINARY, ................................       "f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user.job.fp"="REG_DWORD", 1486672294    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636]       "67913"="REG_SZ", "MedPlLtdEditionv2.3"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\MedPlayerVent]       "67913"="REG_SZ", "MedPlLtdEditionv2.3"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 2/4/2015Scan Time: 9:58:45 AMLogfile: mbamMedPlLtd.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.02.04.04Rootkit Database: v2015.02.03.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 290285Time Elapsed: 4 min, 0 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 5PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MedPlLtdEditionv2.3, Quarantined, [c7ad8e8cbcce1125d69a3e44c73c25db], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [90e4c4564446bf7709a7b30b0300639d], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [650ff525d6b4d36357b6b9dfbe45ea16], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\MedPlayerVent, Quarantined, [95df51c9d8b2de58581b641e788bdb25], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MedPlLtdEditionv2.3, Quarantined, [5c18100a0b7f0630d518d5accc37d62a], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults\preferences, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\userCode, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale\en-US, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlLtdEditionv2.3, Quarantined, [5c18100a0b7f0630d518d5accc37d62a], Files: 116PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\MedPlLtdEditionv2.3.exe, Quarantined, [91e3eb2fa2e8af879d8839c8a65c5ba5], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlLtdEditionv2.3\f05255b2-2b9a-46c6-88f7-0652b281fb15-4.exe, Quarantined, [c9ab36e40f7bf73ff9987d6c09fcda26], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlLtdEditionv2.3\f05255b2-2b9a-46c6-88f7-0652b281fb15-5.exe, Quarantined, [b8bc8595bcced462d5bce504986d9967], PUP.Optional.CrossRider.A, C:\Program Files\MedPlLtdEditionv2.3\utils.exe, Quarantined, [b3c128f262286bcb6edba4b53dc31fe1], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\f05255b2-2b9a-46c6-88f7-0652b281fb15-5, Quarantined, [1e5642d8a1e93303f8fedbc82ed546ba], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user, Quarantined, [1064c6544347dd5908eec6dd18eb31cf], PUP.Optional.CrossRider.T, C:\Windows\Tasks\f05255b2-2b9a-46c6-88f7-0652b281fb15-5.job, Quarantined, [a9cbe33702885adc0056ed147d88b34d], PUP.Optional.CrossRider.T, C:\Windows\Tasks\f05255b2-2b9a-46c6-88f7-0652b281fb15-5_user.job, Quarantined, [6212a4765c2eb97d4313d9289f66f10f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome.manifest, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\install.rdf, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\02b69fcb7eca8efdfdaa26da62ab20d5.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\3798307c9f3d3c2a9b9b303b18cb6191.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\53dafa392f440283bfd210678889e72d.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\736b7cc36dab0164d04f81f230590747.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\75239bad612b4e5e9f4e86adad108659.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\90998beebacd78daef24dce6760b59b0.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\background.html, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\browser.xul, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\dialog.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\options.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\options.xul, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\search_dialog.xul, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\1034115aaec7d85093e7bdf4fc10a528.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\31291103575ecf0d30aeec00d1302593.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\359747dae0d0b249c98ff088f55f8fbf.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\39799c508d95e507e68e31eacfacc3dc.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\42ad0354223460f43c578ba24d8d3acb.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\457f3a6af537ae480048ddbb5503aed5.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\55a4baa6475b274e3a52729615aab8ba.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\6f964046c277ee3833c909997bc6533c.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\71282785fc29c6a2cdae2308d2626473.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\7e9e91c8138e6058ed0741a484ee7f33.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\80194ef6264257aeaab85ab3cb2fd477.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\b83d37bd86b19ce2d9733216f32b8b3e.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\d1ef159c4e861a17c6da86adc5288308.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\dc0600253219dbd5b07ac3a18abf6a77.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\e45af830cfc121313b9a09c6195ed808.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\e5726b6892c46140a71461751a3dcf5a.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\06d77cad723239d5ceaa78010e56d353.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\09759f75857f692e24eb8bbbdd7590b3.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\3e4e5c9007da29cb905e6671add6c1fe.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\4806e435cabe6293b0193927553af011.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\577b9557b154a0d2f60a9d1dad1fa553.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\5aee6c7f5be4cb385f161219ed32f771.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\6747d71d53dff80b0bcabf4a89c87b67.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\692cefedc49be40fcb87e81c1999ee98.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\712dbf4ad021925c48320a49cfbc3755.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\8d264bd018c611c3d7f6c9ff0cb9eaa0.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\9b5d738e353be447ad2f2cc0b89dcbcf.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\a2a2583f6ce5bae5c03022098ccb0f47.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\a6596843ca0c139028419f9aaea2c781.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\ad020bb69af9d135b3a12000e1d3a083.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\b276c80d7fd228212029b7817a9daee8.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\b67886183ad2443c5f6d6b46d99a7ac7.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\be1e59b111499b76e236db40eee24090.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\c0c333911b92948d93dc73567dedbb23.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\cb085e9c97fb8b014c28ef71bca6a240.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\f08f38c91cf505defa1ce71cdd65a5bb.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\installer.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults\preferences\prefs.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\manifest.xml, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins.json, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\102.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\13.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\14.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\16.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\17.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\180.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\184.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\192.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\193.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\195.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\200.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\220.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\221.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\223.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\242.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\246.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\253.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\262.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\263.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\273.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\281.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\288.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\301.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\345.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\354.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\373.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\4.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\47.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\64.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\7.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\78.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\9.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\91.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\userCode\background.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\userCode\extension.js, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale\en-US\translations.dtd, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button1.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button2.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button3.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button4.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button5.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\crossrider_statusbar.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon128.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon16.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon24.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon48.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\panelarrow-up.png, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\popup.html, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\skin.css, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\update.css, Quarantined, [373d64b691f90b2b34924731d52ead53], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlLtdEditionv2.3\f05255b2-2b9a-46c6-88f7-0652b281fb15.xpi, Quarantined, [5c18100a0b7f0630d518d5accc37d62a], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlLtdEditionv2.3\Uninstall.exe, Quarantined, [5c18100a0b7f0630d518d5accc37d62a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14b53cab89fff8e9076cd322f333ea47"), Replaced,[d2a258c2d6b4e4521cc17b7164a1d22e]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.