Jump to content

Removal instructions for CinemaP-1.9c

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is CinemaP-1.9c?

The Malwarebytes research team has determined that CinemaP-1.9c is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by CinemaP-1.9c?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did CinemaP-1.9c get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove CinemaP-1.9c?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of CinemaP-1.9c?
  • No, Malwarebytes' Anti-Malware removes CinemaP-1.9c completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the CinemaP-1.9c hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found] FF Extension: CinemaP-1.9cV14.03 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com [2015-03-14] () C:\Windows\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user.job () C:\Windows\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.job () C:\Program Files\CinemaP-1.9cV14.03 (Aglvzng & co.) C:\Users\{username}\Desktop\Qxpmyanyucqk.exeCinemaP-1.9cV14.03 (HKLM\...\CinemaP-1.9cV14.03) (Version: 1.36.01.22 - Cinema PlusV14.03) <==== ATTENTIONTask: {39405D02-DC70-483C-9094-84097E8A7FC0} - System32\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user => C:\Program Files\CinemaP-1.9cV14.03\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.exe [2015-03-14] (Cinema PlusV14.03) <==== ATTENTIONTask: {8D4A16B4-81E2-4EA6-A9BF-6229629E3360} - System32\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5 => C:\Program Files\CinemaP-1.9cV14.03\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.exe [2015-03-14] (Cinema PlusV14.03) <==== ATTENTION
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\CinemaP-1.9cV14.03       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a.xpi"="3/14/2015 7:46 AM, 448575 bytes, A       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a-4.exe"="3/14/2015 7:46 AM, 1311744 bytes, A       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.exe"="3/14/2015 7:46 AM, 1102848 bytes, A       Adds the file Uninstall.exe"="3/14/2015 7:46 AM, 99328 bytes, A       Adds the file utils.exe"="3/14/2015 7:46 AM, 2383784 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a-5"="3/14/2015 7:46 AM, 5472 bytes, A       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user"="3/14/2015 7:46 AM, 5478 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.job"="3/14/2015 7:46 AM, 2442 bytes, A       Adds the file 02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user.job"="3/14/2015 7:46 AM, 2442 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "11830FEA87E0451988F6AD994989874AIE"       "Verifier"="REG_SZ", "1771fede26e537d40899edbc61a77619"    [HKEY_LOCAL_MACHINE\SOFTWARE\CinemaP-1.9cV14.03\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinemaP-1.9cV14.03\QWannDfelEoiRrOtoP6u7o7SYD3LPzGDTzIw392RmLE5ip+CwDtd0WcGYtJS9cZ+3ZPf6JP5KSo2DRN+oApB9C4va5FVH6N/qaYOe7mwbnWiLty5Etn1abc47hnQWgP5Cpexkc7TUAs+VpImBzU8o0lG053cR4NVrJ0m+G/ZIPY=]       "GMdLLpwNR1jdLIPFKl4PQXrov0UJkTLCRUGWXGzEo6nP88KyqjcAXpQShsmHRjmOQ2ZFMiwmei0RB4D3I7FgKm/Ggi2Aw9Jx8nlp0wqHpgFWPAjCA2rdKRD1kpJ8UGk54rsYo45WjrS53LcclunsvFOJREiVzsqrQS/MdjJtwSWXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\CinemaP-1.9cV14.03\W5GI1s+brUeTpBsn4m6enIqFBo/9G/FYGcHczO8j4sSWgK55/NCBAqrgWb1cJyCc353IiKx9AyzB6KmwLtBsHL58EslTOQERsLbc7hBMtRUpUxieYETFjuKW4IcdSUoIksGPc7qJjmXx4urjA6Ai+IY1k4pgYcfj4XYCAmsTaIU=]       "lIjwpKFZuPEftGTTqkTy55X9W/8msvOaD/ntLlFIcBcrfmw6bq28TMhzGfQg6LTUTyZvCNwr3jwhG3emkUVS/QbjPk9Q7ORQVqkKqtpjM7xibjqrizN3ix+/tvb0GIh/+a9wwPW3T1mKx2NTn326PsPUjWpaMH4xE2MT8Fwo3XM="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "71387"="REG_SZ", "CinemaP-1.9cV14.03"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.9cV14.03]       "CrAppId"="REG_SZ", "71387"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\CinemaP-1.9cV14.03\utils.exe"       "DisplayName"="REG_SZ", "CinemaP-1.9cV14.03"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Cinema PlusV14.03"       "UninstallString"="REG_SZ", "C:\Program Files\CinemaP-1.9cV14.03\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.job"="REG_BINARY, ................................       "02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.job.fp"="REG_DWORD", 847398588       "02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user.job"="REG_BINARY, ................................       "02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user.job.fp"="REG_DWORD", -1758020456    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "11830FEA87E0451988F6AD994989874AIE"       "Verifier"="REG_SZ", "1771fede26e537d40899edbc61a77619"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "71387"="REG_SZ", "CinemaP-1.9cV14.03"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema PlusV14.03]       "71387"="REG_SZ", "CinemaP-1.9cV14.03"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 3/14/2015Scan Time: 7:58:18 AMLogfile: mbamCinemaP19.txtAdministrator: YesVersion: 2.01.0.1004Malware Database: v2015.03.14.01Rootkit Database: v2015.02.25.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 294046Time Elapsed: 3 min, 47 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 6PUP.Optional.Cinema.A, HKLM\SOFTWARE\CinemaP-1.9cV14.03, Quarantined, [6603e75e41492b0b9e51b71331d26898], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [b4b5ec59d7b3cb6b8cddc72761a253ad], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [5f0a063f1c6ed363344e52d28085659b], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [501948fd98f2c86efb0d8048fd066a96], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema PlusV14.03, Quarantined, [e78246ff0288a88e8f0adae2f70c7f81], PUP.Optional.Cinema.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\CinemaP-1.9cV14.03, Quarantined, [c5a4d66f0684f83edacc226da261ca36], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults\preferences, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale\en-US, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV14.03, Quarantined, [c5a4d66f0684f83edacc226da261ca36], Files: 141PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Qxpmyanyucqk.exe, Quarantined, [185149fc4f3b8ea85dc25597778abc44], PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV14.03\02f4e997-c9a3-4da3-89bf-26ad3355f87a-4.exe, Quarantined, [f0794cf97218989e789ed04b09fd649c], PUP.Optional.CrossRider.A, C:\Program Files\CinemaP-1.9cV14.03\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.exe, Quarantined, [a4c59ea71e6ca5919f77fb20f0167a86], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5, Quarantined, [81e80342ee9c72c445799241c83bdd23], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user, Quarantined, [c2a714311c6e68cecef0b81b35ceb947], PUP.Optional.CrossRider.T, C:\Windows\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5.job, Quarantined, [9acf4ef71476f14560557fb16a9ba55b], PUP.Optional.CrossRider.T, C:\Windows\Tasks\02f4e997-c9a3-4da3-89bf-26ad3355f87a-5_user.job, Quarantined, [d297f2532a60ae88c7eea18fec19c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome.manifest, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\install.rdf, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\180410258c8c2563fb10fdd5f3fddc78.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\2969f22a7e5899ada6779e9edb15a74c.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\2fb00c3254b1d84f13a0929a778c928b.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\661a7631c6d09c0293f88ed850fd1a72.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\aeb932353b3248656e85ae2ed0a1aae1.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\background.html, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\bf40cef565e61f86e929e6b83b6e1d55.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\browser.xul, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\dialog.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\options.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\options.xul, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\search_dialog.xul, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\1e1006b4955bdea63c698ba8aa684b02.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\1f02fdb47ebb8595aa56c5ed9c1bafd3.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\385d624d1648df2f7144cfca534699d6.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\7b69066d3aace668547876ba1e56fd1b.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\7bf65164ecc8a70fd3aac84178910ac6.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\8b3605129308d7f3f2aa5c39a5f912e9.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\91dcf6d3110aa1e4257295ee1449f39f.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\9263c4511042a385c676d1b48f8b4534.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\9cacc9b3a225b81b2446e8a0d84b7863.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\a098b47ef97248aeb3fe310fc7825d3d.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\b6165a31d8cef97f705689737fbda91c.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\bf9575ca046e0fa1d3c80e03b72938da.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\c15e2a4c5c18544ddf5c0526a986d91d.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\c6b53b1a2f5ddb7eaeef7a23c4534108.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\d4de49a99e7000b65af43321c189a105.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\d83da7b810202a17383ec912476bb573.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\888fcbb9cfe63ca08c26c587ce56b67b.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\0456e4d92f9b1c6a1cc67d19af100560.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\0b02e44e902a6acc9208b65796e19b04.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\0d69190d1aacc1a79d366b42c068ba20.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\10f59ff4012e9dbde325d63364376731.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\122b3c97164c0a3cf74b1293302045ac.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\1a06f7abe152139b931124f2ed0a3930.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\26c7a9fb221bd183b8a68d2bea2fa43f.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\2fddcbe84c37026f198d0cd9725dea4a.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\3eda3a5a337dde4bbd9bfb8cf07eb3d1.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\423b2cb2ee846e68364f0ddfeab6c72e.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\4a32cf2cab5313a7701dbcd0d12bc5cb.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\64876549e2350a5887a6dde0b83c536a.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\93e8d58372ce01e49cfbb2c4df11273a.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\aca221fa3e51cbfd1cc88bf2548cd298.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\c2ec4dd9be5f10b2b60e351173664d0c.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\c608c9b3c8b9e07d884dab877b4f355d.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\c93021d4b997fdcbb30fdce0e72b1232.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\d65623d2155b24c97c3650fbe835526d.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\db8758a71a546707960a42ec1c553943.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\installer.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults\preferences\prefs.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\manifest.xml, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins.json, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\286.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\102.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\119.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\123.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\13.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\14.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\16.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\17.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\178.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\179.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\180.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\184.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\191.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\195.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\200.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\217.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\220.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\221.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\223.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\231.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\232.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\234.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\242.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\246.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\252.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\253.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\260.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\262.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\263.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\273.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\281.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\288.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\289.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\290.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\300.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\334.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\335.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\339.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\342.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\344.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\345.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\354.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\356.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\375.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\379.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\380.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\385.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\388.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\389.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\390.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\391.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\4.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\47.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\64.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\7.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\78.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\9.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\91.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\93.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode\background.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode\extension.js, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale\en-US\translations.dtd, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button1.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button2.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button3.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button4.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button5.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\crossrider_statusbar.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon128.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon16.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon24.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon48.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\panelarrow-up.png, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\popup.html, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\skin.css, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\update.css, Quarantined, [d396f25395f56accd6cfccbe788b3ec2], PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV14.03\02f4e997-c9a3-4da3-89bf-26ad3355f87a.xpi, Quarantined, [c5a4d66f0684f83edacc226da261ca36], PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV14.03\Uninstall.exe, Quarantined, [c5a4d66f0684f83edacc226da261ca36], PUP.Optional.Cinema.A, C:\Program Files\CinemaP-1.9cV14.03\utils.exe, Quarantined, [c5a4d66f0684f83edacc226da261ca36], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.