Jump to content

Removal instructions for Cinem Plus 2.4cV13.07


Recommended Posts

  • Staff

What is Cinem Plus 2.4cV13.07?

The Malwarebytes research team has determined that Cinem Plus 2.4cV13.07 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Cinem Plus 2.4cV13.07?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Cinem Plus 2.4cV13.07 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Cinem Plus 2.4cV13.07?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Cinem Plus 2.4cV13.07?
  • No, Malwarebytes' Anti-Malware removes Cinem Plus 2.4cV13.07 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Cinem Plus 2.4cV13.07 hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: Cinem Plus 2.4cV13.07 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\Extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com [2015-07-21] C:\Windows\System32\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5 C:\Windows\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user.job C:\Windows\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.job C:\Program Files (x86)\Cinem Plus 2.4cV13.07Cinem Plus 2.4cV13.07 (HKLM-x32\...\Cinem Plus 2.4cV13.07) (Version: 1.36.01.22 - Cinema Plus ProV13.07) <==== ATTENTIONTask: {619042FC-707A-4D47-8987-6B2C6E65F6CC} - System32\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user => C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.exe [2015-07-21] (Cinema Plus ProV13.07) <==== ATTENTIONTask: {CD35A5F3-C4B2-469C-9020-CAD33431A362} - System32\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5 => C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.exe [2015-07-21] (Cinema Plus ProV13.07) <==== ATTENTIONTask: C:\Windows\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.job => C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user.job => C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Cinem Plus 2.4cV13.07       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382.xpi"="21/07/2015 09:17, 444665 bytes, A       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382-4.exe"="21/07/2015 09:17, 1477200 bytes, A       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.exe"="21/07/2015 09:17, 1081424 bytes, A       Adds the file Uninstall.exe"="21/07/2015 09:17, 102992 bytes, A       Adds the file utils.exe"="21/07/2015 09:17, 2021321 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com       Adds the file chrome.manifest"="21/07/2015 09:17, 678 bytes, A       Adds the file install.rdf"="21/07/2015 09:17, 1329 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382-5"="21/07/2015 09:18, 5484 bytes, A       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user"="21/07/2015 09:18, 5496 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.job"="21/07/2015 09:17, 2454 bytes, A       Adds the file 4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user.job"="21/07/2015 09:17, 2454 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "74253"="REG_SZ", "Cinem Plus 2.4cV13.07"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.job"="REG_BINARY, ................................       "4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.job.fp"="REG_DWORD", 1108019539       "4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user.job"="REG_BINARY, ................................       "4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user.job.fp"="REG_DWORD", 1787656688    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinem Plus 2.4cV13.07\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinem Plus 2.4cV13.07\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Cinem Plus 2.4cV13.07\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935]       "74253"="REG_SZ", "Cinem Plus 2.4cV13.07"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Cinem Plus 2.4cV13.07]       "CrAppId"="REG_SZ", "74253"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Cinem Plus 2.4cV13.07\utils.exe"       "DisplayName"="REG_SZ", "Cinem Plus 2.4cV13.07"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Cinema Plus ProV13.07"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Cinem Plus 2.4cV13.07\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "74253"="REG_SZ", "Cinem Plus 2.4cV13.07"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema Plus ProV13.07]       "74253"="REG_SZ", "Cinem Plus 2.4cV13.07"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 21/07/2015Scan Time: 09:32Logfile: mbamCinemPlus.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.07.21.01Rootkit Database: v2015.07.17.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 326563Time Elapsed: 4 min, 15 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 17PUP.Optional.Downloader.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Cinem Plus 2.4cV13.07, Quarantined, [5d08984c8ffb290ddbe9d3e69a67b749], PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\HighDefAction, Quarantined, [72f35e864149e452c656405446be4bb5], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\YorkNewCin, Quarantined, [9acb6282d0bab87e6eb97c18c143e21e], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD, Quarantined, [94d113d13a50d660ab52038cbe46837d], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [6bfad90b7a103105bd9d74d27d8613ed], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\Cinem Plus 2.4cV13.07, Quarantined, [66ffa93b3753ab8b84c5d143d1327a86], PUP.Optional.HighDefAction.A, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [2a3b6084107aa49255c7b9db8f758977], PUP.Optional.YorkNewCin.A, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [b4b1b4302c5ead89c26596fe25df2dd3], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [6ff6ac3849415fd729b054b551b2f010], PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [511441a35b2fee487786ccc333d16a96], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [2e37459f45451b1bf1691e287f8445bb], PUP.Optional.HighDefAction.A, HKCU\SOFTWARE\HighDefAction, Quarantined, [4f165b89a5e59e9821fab6deeb1925db], PUP.Optional.YorkNewCin.A, HKCU\SOFTWARE\YorkNewCin, Quarantined, [66ff28bc21694de958ce9301ba4a48b8], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3035cf15bad0de58353c97e048bc0af6], PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD, Quarantined, [9bcad80cd7b3c175d8245e312bd928d8], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [baab756fa7e3191d483b79b01be86d93], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema Plus ProV13.07, Quarantined, [5a0bc91bdab0bb7b491fd54a28dbcb35], Registry Values: 6PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [94d113d13a50d660ab52038cbe46837d]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [b8ad6f753159290d1aee870972924db3]PUP.Optional.CinemaPlus.C, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [511441a35b2fee487786ccc333d16a96]PUP.Optional.PCTuner.C, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [0461edf7c6c43105da2e711f9e66db25]PUP.Optional.CinemaPlus.C, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [9bcad80cd7b3c175d8245e312bd928d8]PUP.Optional.PCTuner.C, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [b3b29e460486d2647f870b85dc28b54b]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults\preferences, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\userCode, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale\en-US, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinem Plus 2.4cV13.07, Quarantined, [baab2cb89ceef4422b81a05ecb3723dd], Files: 130PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\installer.exe, Quarantined, [a4c121c3bbcff541f1c39dc564a1f50b], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382-4.exe, Quarantined, [1550dc0892f8a3938f2595cd30d5cc34], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.exe, Quarantined, [c4a14f95553545f1377d4f132ed7af51], PUP.Optional.Downloader.C, C:\Program Files (x86)\Cinem Plus 2.4cV13.07\Uninstall.exe, Quarantined, [5d08984c8ffb290ddbe9d3e69a67b749], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinem Plus 2.4cV13.07\utils.exe, Quarantined, [ee77ab39ddada98d6d47332fa5603fc1], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5, Quarantined, [5312ecf87317ad89b763c27133d04fb1], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user, Quarantined, [82e364801e6cdb5b71a944ef12f1ee12], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5.job, Quarantined, [ef76479d3654142266a7d5aa54b0b050], PUP.Optional.CrossRider.T, C:\Windows\Tasks\4fbdc786-fab7-41aa-b247-f8d5bdd97382-5_user.job, Quarantined, [b2b3a440fc8ed264c845ec936f951de3], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\crossrider_statusbar.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button1.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button2.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button3.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button4.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button5.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon128.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon16.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon24.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon48.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\panelarrow-up.png, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\popup.html, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\skin.css, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\update.css, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome.manifest, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\install.rdf, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\222cd77f2a8fee9759c6d1855350f7f8.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\4f3b4a8ea49aa8193182916ebc307671.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\8394411dd79c85f996a2915454367e5e.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\98b4a3a0fcd445ab1b1752f2955ebc08.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\background.html, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\browser.xul, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\d7bf68ee167284be774352c4a1eb7e7b.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\dialog.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\fbb11ee9addee4f5466cc3bb08b8aa3a.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\options.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\options.xul, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\search_dialog.xul, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\740a217b64fdf52a674b6bee3ac0d533.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\0d44ac4373dd378c65619c7cec1a23cb.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\1cb31df56f902eaee71ddfbcdaad35df.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\20965eedfc6663b48e21d6ffa9c126bb.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\566f9f3c7a142dbadd591b04abb17404.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\572cede8f8c7d1d5e238945a84b27841.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\58c23b99286f85482de40b61d55e2167.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\5e912064f55eebf69721db994a4556d5.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\73d63704a8d705c8bccc19ca276614c2.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\9357d4bb4f53277dfc75ea271188231e.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\949dcfa9216e2f911bc1a5ee232e3702.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\a737b7bec86c091d7b8447963017d096.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\d6d0318d5f7196a5b0b0423e47fc4123.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\ea0a196d82947d478b4955b50a4fc73a.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\f558c23b528e7450256caa017c37e13b.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\f5da45222584c6df9b6e5d663598b9ec.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\031a3df2f5104813c16cec5199003951.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\216f697bc935197109b289c7a2b305de.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\25caf6cb29280cc45036d29132f82c27.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\31bf512ba78ccc84d489425a1fcf372c.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\3300689b328926ee865244a5ce0eb4d9.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\40bdf22ba17b99ee1954f0245157279a.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\43983880e8079b7a09f286bda7aac2ee.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\45a288250eb0bacc6b8e94061b35f68f.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\5b0f545277c0e93f19fa710e619e4247.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\9aad0723baca54e8436542a92410c7d0.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\9ae0ca9b1569c05530042b3cb9551921.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\a1bdf825fa9a7b9a2bd378615c52568f.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\aa0843a5cb1084b503ae254767eab8b7.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\aa74df8a3ee47b2ce4af644d0bd47154.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\b306cf0d481bf15d1d64b78271cb60c8.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\c1ac0c3b4f5f7e32782eda51e7e5e36d.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\dbff33699512569b61696754b550fe45.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\dd033f1d689b990232008f4b31cd33b2.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\e4f7a23f2c8fffb36551655876b8a8cc.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\ee5d438a37d97611d53ccdf065c9cc60.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\installer.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults\preferences\prefs.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\manifest.xml, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins.json, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\273.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\102.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\104.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\119.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\13.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\14.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\16.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\17.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\178.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\179.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\180.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\184.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\195.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\200.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\220.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\223.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\231.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\232.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\234.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\242.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\246.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\252.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\253.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\281.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\288.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\289.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\300.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\334.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\335.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\339.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\345.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\354.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\356.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\376.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\380.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\385.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\389.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\390.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\391.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\4.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\424.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\47.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\64.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\7.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\78.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\9.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\91.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\userCode\background.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\userCode\extension.js, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale\en-US\translations.dtd, Quarantined, [a1c4e9fb6723d95df7dd90fc7c88bc44], PUP.Optional.CrossRider.A, C:\Program Files (x86)\Cinem Plus 2.4cV13.07\4fbdc786-fab7-41aa-b247-f8d5bdd97382.xpi, Quarantined, [baab2cb89ceef4422b81a05ecb3723dd], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\t59s5t8p.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14eaf7de71e50d551ca67b9674bccd35"), Replaced,[e87d20c49febff37ffac660927de2cd4]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.