Jump to content

Removal instructions for MedPlayerNewVersion

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is MedPlayerNewVersion?

The Malwarebytes research team has determined that MedPlayerNewVersion is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by MedPlayerNewVersion?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did MedPlayerNewVersion get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove MedPlayerNewVersion?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of MedPlayerNewVersion?
  • No, Malwarebytes' Anti-Malware removes MedPlayerNewVersion completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the MedPlayerNewVersion hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found] FF Extension: MedPlayerNewVersion - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com [2015-03-05] C:\Windows\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user.job C:\Windows\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.job () C:\Program Files\MedPlayerNewVersionTask: {6B3BF815-7153-48BA-BA0D-71A37935013E} - System32\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user => C:\Program Files\MedPlayerNewVersion\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.exe [2015-03-05] (PlymedVid) <==== ATTENTIONTask: {6DA90099-5F17-4BDF-AE13-8E7CCFCAECE6} - System32\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5 => C:\Program Files\MedPlayerNewVersion\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.exe [2015-03-05] (PlymedVid) <==== ATTENTION
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\MedPlayerNewVersion       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491.xpi"="3/5/2015 9:28 AM, 365273 bytes, A       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-4.exe"="3/5/2015 9:28 AM, 1346008 bytes, A       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.exe"="3/5/2015 9:28 AM, 1034200 bytes, A       Adds the file Uninstall.exe"="3/5/2015 9:28 AM, 118744 bytes, A       Adds the file UninstallBrw.exe"="3/5/2015 9:28 AM, 1385944 bytes, A       Adds the file utils.exe"="3/5/2015 9:28 AM, 2409684 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5"="3/5/2015 9:28 AM, 5474 bytes, A       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user"="3/5/2015 9:28 AM, 5480 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.job"="3/5/2015 9:28 AM, 2444 bytes, A       Adds the file fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user.job"="3/5/2015 9:28 AM, 2444 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "E6A92458E60C476291284DB33737555AIE"       "Verifier"="REG_SZ", "0c18f658a0069c2c818cf0672ec5c359"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636]       "71819"="REG_SZ", "MedPlayerNewVersion"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\MedPlayerNewVersion\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\MedPlayerNewVersion\JrgJYcLsCexPfwoOKGjbFXyRudKkF7iJN0cHECXDs7qVapN0oLldUeQKBvo/u51dH43t3H+p2K+0CWYGIbvb9Hr5r6lGS6/V0cUYOlJwSjPqNiFtHYxd3z87sNFjmb1L0EgfcS2Nlk2/XbV0VeRzzNJYEh1Oqe9xImMUBY+LINU=]       "S8ZkkK6DgRcWjLeZYqd4vQI4RGDaD20jCgM//M0LZA7RDvCtvAxVVJl0Nc/vREYHmmmE5udqo+47LvG626S7Ho57axZ9ZGv7JMgybSNslVA4Q1KimEeLIhW0h+8kPG7bCYOuchIZvElExgfsYnnc0EZEvpF/JgecqTf1kh32Vn0="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\MedPlayerNewVersion\kQXjZwSfhgPqJCj1WppeIASp0GSehay3HOXPjujUe5Npm4xuf3hYHSAlo5Uv7Qn8B5q3ASO56B0EuNDtEaSbT+4J8jQcdjSxSTSbL+wwOOrQojjZMCSmoJ/MImhnb5qt9v/Tv/Nb98Qc1G6zfftnCiobA4PdOPQc/3LdJNYaVpI=]       "euSuOGl6Ljdy66Dc4X8YqwxT0lWvKNGKJa8KcbW5nsROLIsNST+LCIh0jCzoGR3QqtnlmBJdGQ1q+J/O0vfuztHLacXMVRm0il/rAvpnjCEszAm0+tWiWzk+xpk1dSDYxhGS0lbmogHmaITn4wwXzVd4Xak0xnDcZ52PIbnnWzOXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MedPlayerNewVersion]       "CrAppId"="REG_SZ", "71819"       "CrPublisherId"="REG_SZ", "21636"       "DisplayIcon"="REG_SZ", "C:\Program Files\MedPlayerNewVersion\utils.exe"       "DisplayName"="REG_SZ", "MedPlayerNewVersion"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "PlymedVid"       "UninstallString"="REG_SZ", "C:\Program Files\MedPlayerNewVersion\Uninstall.exe /fcp=1 /runexe='C:\Program Files\MedPlayerNewVersion\UninstallBrw.exe' /url='http://static.gonotiftime.com/notf_sys/index.html' /brwtype='uni' /onerrorexe='C:\Program Files\MedPlayerNewVersion\utils.exe' /crregname='MedPlayerNewVersion' /appid='71819' /srcid='002435' /bic='E6A92458E60C476291284DB33737555AIE' /verifier='0c18f658a0069c2c818cf0672ec5c359' /brwshtoms='15000' /installerversion='1_36_01_22' /statsdomain='http://stats.ourinfoonlinestack.com/utility.gif?' /errorsdomain='http://errors.ourinfoonlinestack.com/utility.gif?' /monetizationdomain='http://logs.ourinfoonlinestack.com/monetization.gif?' "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.job"="REG_BINARY, ................................       "fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.job.fp"="REG_DWORD", 622882686       "fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user.job"="REG_BINARY, ................................       "fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user.job.fp"="REG_DWORD", -349256111    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "E6A92458E60C476291284DB33737555AIE"       "Verifier"="REG_SZ", "0c18f658a0069c2c818cf0672ec5c359"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636]       "71819"="REG_SZ", "MedPlayerNewVersion"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\PlymedVid]       "71819"="REG_SZ", "MedPlayerNewVersion"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 3/5/2015Scan Time: 9:36:12 AMLogfile: mbamEausker.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.03.05.01Rootkit Database: v2015.02.25.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 295803Time Elapsed: 3 min, 30 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 6PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MedPlayerNewVersion, Quarantined, [f6ef8bb6f991c17543a85e42a261f709], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [37ae023f8a0064d285186281768db14f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [ac39ec55e4a60d29ad0ff42524e121df], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [edf8fd44cdbd58dea8921ba2e91ac739], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\PlymedVid, Quarantined, [c124a79a1476b28486685a46c63dd32d], PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MedPlayerNewVersion, Quarantined, [c91cdb66fb8f75c114256e31a2617e82], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\defaults, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\defaults\preferences, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\userCode, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\locale, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\locale\en-US, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlayerNewVersion, Quarantined, [c91cdb66fb8f75c114256e31a2617e82], Files: 116PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Eaukser.exe, Quarantined, [1dc8a1a03d4df046f9b9f90ceb17758b], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlayerNewVersion\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-4.exe, Quarantined, [6580f150b7d39c9ad71eb2626d99e917], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlayerNewVersion\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.exe, Quarantined, [2fb672cf315988aec62f2fe59a6c9868], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlayerNewVersion\UninstallBrw.exe, Quarantined, [e500033e7f0b0d29b243fc1850b631cf], PUP.Optional.CrossRider.A, C:\Program Files\MedPlayerNewVersion\utils.exe, Quarantined, [935296ab62285dd992bec39612eed52b], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5, Quarantined, [1cc93a07aae072c4d51cf4d46d9620e0], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user, Quarantined, [1dc843fe90fa2b0bb73a6f5932d148b8], PUP.Optional.CrossRider.T, C:\Windows\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5.job, Quarantined, [5a8b8db41d6d5bdb7c75061fee17b14f], PUP.Optional.CrossRider.T, C:\Windows\Tasks\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491-5_user.job, Quarantined, [f2f3a1a0beccdb5b47aa53d2e91cf30d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome.manifest, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\install.rdf, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\491a0b4dcc8a78c64bc53a1a4fae716d.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\4f65c90f1a1ddbc45720111fe0ab6484.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\7107bce271921f4d036c93414517075e.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\8071999238f156793ef1c4e9c9c579cc.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\b7457be5b69b652155f6e42620b0530b.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\b9426fc52809ac6e863b1071be11cb32.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\background.html, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\browser.xul, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\dialog.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\options.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\options.xul, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\search_dialog.xul, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\6d9707c8803df3d623a12504f0f3aa38.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\26f5bb335b064e23cfe1f7f1e439a612.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\33172ad3ab4e91c970b67e9e7344b4b5.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\356dc96fde4bd505870a8c6e7d44a984.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\47cb61a7a6995688540dc725cba97bc4.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\4f485969e53f7d4c88b47fafc021cbf0.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\5908c4b7eb4431d79d2951878ee348d7.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\59f724928ca036d6e15bc6fd291c9669.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\5aca9ff60200bdce2e51ee5ae113e1f7.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\a58780738e1ca28ce215a6ed8ad16e18.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\ab81aea29a9cb0f1122e76214256abc0.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\b1d7f9db006021a8e422cce036c1a4e2.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\b3f7ab975f9a84a1e58885fe1637f99c.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\b59ae4504a2036d567b9a057b878c718.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\d12d153e0f4a7b4e0bee72bc7c4e4673.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\api\da1237c3fc59092fd8c178c12ac929e4.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\05a6b4d44f8fc40adff885f0acedfe7d.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\1160f98fbff8e2ee3b232fffc845f0f8.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\17d669062c81849daa2ab165fb1170bc.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\1a799214277dc7ad8e82208abdb5a8d9.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\33ffcec7141c72ca90de0003242a0aa2.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\4110d5b2642e9e32e30e03134e09834d.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\6a7a0ac347bbf0a4cad781780b8a2ae1.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\6bde893eaa1c59b6a240c1380e39a889.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\7463b36c3c3bc21f1a0b0e919eb8aaa8.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\80151772320ffa6cedf9eb9b2476556f.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\9a938e323c4590d818cb6d1acffd075c.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\a436e069857fe2abcda374f2201a9dba.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\a75155a66c1cc4af5028338cd6532c1a.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\a7a65c5da92fdbbd580bacc983caf6d0.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\b156137e644cf2d474bf316984f4aa48.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\b6f796dae5126b982d22e00611e65993.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\bcf01b18775db3260cfa7dd6601e41c7.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\e5b05d158566bfdb1bdd5cc8704144fd.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\e64672e67ca0c8a91a55d9e2abfacc94.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\f518ee77a48ccd071ab959e88c0818aa.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\chrome\content\core\installer.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\defaults\preferences\prefs.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\manifest.xml, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins.json, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\102.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\13.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\14.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\16.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\17.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\180.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\184.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\192.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\193.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\195.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\200.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\220.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\221.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\223.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\242.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\246.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\253.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\262.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\263.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\273.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\281.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\288.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\345.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\354.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\373.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\380.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\4.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\47.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\64.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\7.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\78.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\9.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\plugins\91.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\userCode\background.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\extensionData\userCode\extension.js, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\locale\en-US\translations.dtd, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\button1.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\button2.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\button3.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\button4.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\button5.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\crossrider_statusbar.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\icon128.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\icon16.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\icon24.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\icon48.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\panelarrow-up.png, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\popup.html, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\skin.css, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\f053fe99-813c-4052-acee-4ae11b96924c@gmail.com\skin\update.css, Quarantined, [2abb8bb6cfbb4de955c5a4dfa45f24dc], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlayerNewVersion\fbdbdfc0-bb10-47dc-b85b-2facc9ef8491.xpi, Quarantined, [c91cdb66fb8f75c114256e31a2617e82], PUP.Optional.MediaPlayer.A, C:\Program Files\MedPlayerNewVersion\Uninstall.exe, Quarantined, [c91cdb66fb8f75c114256e31a2617e82], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.