Jump to content

Removal instructions for SuperPlusRadio


Recommended Posts

  • Staff

What is SuperPlusRadio?

The Malwarebytes research team has determined that SuperPlusRadio is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by SuperPlusRadio?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did SuperPlusRadio get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove SuperPlusRadio?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of SuperPlusRadio?
  • No, Malwarebytes' Anti-Malware removes SuperPlusRadio completely.
  • This PUP creates some scheduled tasks. You can read here how to remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the SuperPlusRadio hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: 7e9d578d51bf4e8fa5c15114a698874d0067977 - {11111111-1111-1111-1111-110611791177} - C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bho.dll
You may see these entries in a FRST log:

 BHO: SuperPlusRadio v2.1 -> {11111111-1111-1111-1111-110611791177} -> C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bho.dll (RadioCanyonv2) FF Extension: SuperPlusRadio v2.1 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com [2015-01-21] () C:\Windows\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1.job () C:\Windows\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user.job () C:\Windows\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.job () C:\Program Files\SuperPlusRadio v2.1
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\SuperPlusRadio v2.1       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e.xpi"="1/21/2015 1:08 PM, 397046 bytes, A       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-4.exe"="1/21/2015 1:08 PM, 1370592 bytes, A       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.exe"="1/21/2015 1:08 PM, 1055712 bytes, A       Adds the file background.html"="1/16/2015 2:22 PM, 729 bytes, A       Adds the file SuperPlusRadio v2.1.ico"="1/16/2015 2:23 PM, 9662 bytes, A       Adds the file SuperPlusRadio v2.1-bg.exe"="1/21/2015 1:08 PM, 723424 bytes, A       Adds the file SuperPlusRadio v2.1-bho.dll"="1/21/2015 1:08 PM, 631264 bytes, A       Adds the file SuperPlusRadio v2.1-buttonutil.dll"="1/21/2015 1:08 PM, 370656 bytes, A       Adds the file SuperPlusRadio v2.1-buttonutil.exe"="1/21/2015 1:08 PM, 312288 bytes, A       Adds the file SuperPlusRadio v2.1-codedownloader.exe"="1/21/2015 1:08 PM, 1018336 bytes, A       Adds the file Uninstall.exe"="1/21/2015 1:08 PM, 122848 bytes, A       Adds the file utils.exe"="1/21/2015 1:08 PM, 2800797 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com       Adds the file chrome.manifest"="1/21/2015 1:08 PM, 702 bytes, A       Adds the file install.rdf"="1/21/2015 1:08 PM, 1321 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1"="1/21/2015 1:08 PM, 6154 bytes, A       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5"="1/21/2015 1:08 PM, 5474 bytes, A       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user"="1/21/2015 1:08 PM, 5480 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1.job"="1/21/2015 1:08 PM, 3124 bytes, A       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.job"="1/21/2015 1:08 PM, 2444 bytes, A       Adds the file a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user.job"="1/21/2015 1:08 PM, 2444 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8014575E08154554AF4280E2B99619F3IE"       "Verifier"="REG_SZ", "accfad142e06271136844b95db2ded81"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110611791177}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO\CurVer]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO.1]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO.1\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110611791177}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220622792277}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox\CurVer]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox.1]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox.1\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220622792277}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}]       "(Default)"="REG_SZ", "SuperPlusRadio v2.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\ProgID]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644794477}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611791177}\VersionIndependentProgID]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622792277}]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622792277}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622792277}\ProgID]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622792277}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622792277}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644794477}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622792277}\VersionIndependentProgID]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655795577}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655795577}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655795577}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655795577}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644794477}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666796677}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666796677}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666796677}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666796677}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644794477}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644794477}\1.0]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644794477}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bho.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644794477}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644794477}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\SuperPlusRadio v2.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\13641]       "67977"="REG_SZ", "SuperPlusRadio v2.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\13641\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]       "SuperPlusRadio v2.1-bg.exe"="REG_DWORD", 8000    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611791177}]       "(Default)"="REG_SZ", "7e9d578d51bf4e8fa5c15114a698874d0067977"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SuperPlusRadio v2.1]       "CrAppId"="REG_SZ", "67977"       "CrPublisherId"="REG_SZ", "13641"       "DisplayIcon"="REG_SZ", "C:\Program Files\SuperPlusRadio v2.1\utils.exe"       "DisplayName"="REG_SZ", "SuperPlusRadio v2.1"       "DisplayVersion"="REG_SZ", "1.36.01.08"       "Publisher"="REG_SZ", "RadioCanyonv2"       "UninstallString"="REG_SZ", "C:\Program Files\SuperPlusRadio v2.1\Uninstall.exe /fcp=1 "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1.job"="REG_BINARY, ................................       "a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1.job.fp"="REG_DWORD", -1579205340       "a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.job"="REG_BINARY, ................................       "a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.job.fp"="REG_DWORD", -1893096365       "a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user.job"="REG_BINARY, ................................       "a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user.job.fp"="REG_DWORD", -1391120301    [HKEY_LOCAL_MACHINE\SOFTWARE\SuperPlusRadio v2.1\DA2mkg0/cLvElsQE1v0m4GqWj6fVa6ZbO/Nvw+4CEoDRb5WdpUeboIbpvTTB44hQlmAw6S2yx/Q9il2SVgiourESjXgRgpf7wsp9hPWA/Z+eAyBZ9akt4mWmaEzL+LHNuTImx6GxUiFChVCozEsdJFEC7t3cyTJPG8PnXUBI7LI=]       "lqTfG1zeE3cTfCJwWxojpMd8apougXr9J5qjH4BIdvZolCp3kqhSWBeQFwxTVv1Bpvdo+9XWLpRKEhIHf2ygV/g1xQFPTzyZ2oMb9Qhhuv0JAsj4JinhQF5Z9C9KG5ERGG95Ai5obbzJgDuHtTw41TW4cvu5vlArfOds1dsoZUaXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\SuperPlusRadio v2.1\IE]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\SuperPlusRadio v2.1\IE\Profiles]       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\SuperPlusRadio v2.1\Installer]       "BundledFirefox"="REG_DWORD", 1       "BundledIe"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\SuperPlusRadio v2.1\N/C8ZEY0XA9ZpZIFTS0haa5ZChjiZ4qjcWv9nDPLV1ckSqO8hn4SAhFTiSGHbUQFAdSHpWv+bcdSPWVEbSG60zDI8y6SAFNnVsv0tTyU359RduHzBZRKjHEseMfNFiHhopiSyS+sNIu3VCxTrJmnq+vmdEint8IUiQY7i0VRCMI=]       "GkGr8Cw/wi5aKrNS0Nw85ho0dqksS1zZukxbu/wNxXiayW1ons909qdGiASFEvdIUvAl4UFVQt1qFG6gbTLQi41DJQNx6t3tCUr8QLIE7VDGz6BG5z7Jn05GG44gMrOR2ztGxu9Heofj5Dw6C9OpggLxMMy/989LWxmP9n/OtPA="="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8014575E08154554AF4280E2B99619F3IE"       "Verifier"="REG_SZ", "accfad142e06271136844b95db2ded81"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\Button]       "67977"="REG_DWORD", 1       "Index"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]       "67977"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]       "67977"="REG_SZ", ""    [HKEY_CURRENT_USER\Software\AppDataLow\Software\SuperPlusRadio v2.1]       "ActiveAppId"="REG_SZ", "67977"       "BhoRunningVersion"="REG_SZ", "154"       "IsBhoEnabled"="REG_DWORD", 1       "LastSetSearch"="REG_DWORD", 1421842141    [HKEY_CURRENT_USER\Software\AppDataLow\Software\SuperPlusRadio v2.1\background]       " { Javascript removed. Full log available on request } "    [HKEY_CURRENT_USER\Software\AppDataLow\Software\SuperPlusRadio v2.1\Update]       "LastCheck"="REG_DWORD", 1421842119    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\13641]       "67977"="REG_SZ", "SuperPlusRadio v2.1"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\13641\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\RadioCanyonv2]       "67977"="REG_SZ", "SuperPlusRadio v2.1"    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions]       "{11111111-1111-1111-1111-110611791177}"="REG_BINARY, ............    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611791177}]       "Flags"="REG_DWORD", 1024       "VerCache"="REG_BINARY, ......................
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 1/21/2015Scan Time: 1:17:11 PMLogfile: mbamSuperPlusRadio.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.01.21.06Rootkit Database: v2015.01.14.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 289714Time Elapsed: 4 min, 9 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 20PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611791177}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644794477}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655795577}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666796677}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO.1, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611791177}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\7e9d578d51bf4e8fa5c15114a698874d0067977.BHO, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110611791177}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110611791177}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622792277}, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox.1, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\7e9d578d51bf4e8fa5c15114a698874d0067977.Sandbox, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611791177}\INPROCSERVER32, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\SuperPlusRadio v2.1, Quarantined, [769454a6d2b78fa790d44b299172827e], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\13641, Quarantined, [ac5ea35788015bdb6aef634cc04317e9], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [ea20a1592c5d1422b9032bbaee16d42c], PUP.Optional.SuperPlusRadio.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\SuperPlusRadio v2.1, Quarantined, [d1390dedb2d7350112547cf8877cfa06], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\13641, Quarantined, [cb3f31c9a7e266d0ec91870144bff40c], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\RadioCanyonv2, Quarantined, [ab5fd02a088177bf92d51c583cc7847c], PUP.Optional.SuperPlusRadio.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SuperPlusRadio v2.1, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\defaults, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\defaults\preferences, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\userCode, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\locale, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\locale\en-US, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], Files: 133PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bho.dll, Quarantined, [050512e85d2c85b10b90ab633fc3f907], PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\SuperPlusRadio v2.1.exe, Quarantined, [c248827823663ff791bb11ece31eba46], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-4.exe, Quarantined, [11f9c43624652016dfbcd638dc26c040], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.exe, Quarantined, [fc0ea555622735014b50dd317a88e41c], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-bg.exe, Quarantined, [d6345f9b1d6c21156c2f8787d32f10f0], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-buttonutil.exe, Quarantined, [58b23dbd7910bd79d7c456b87b87e31d], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-codedownloader.exe, Quarantined, [9872f604f2972c0a7c1f8a846e94be42], PUP.Optional.CrossRider.A, C:\Program Files\SuperPlusRadio v2.1\utils.exe, Quarantined, [709a0eec0a7f76c0314d0351f20ecd33], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1, Quarantined, [8882c931cdbc0d292c65e2b2798a6898], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5, Quarantined, [8f7b38c22b5ec472c7cab0e4e71c51af], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user, Quarantined, [6e9c54a634552a0c93feddb7ec173ec2], PUP.Optional.CrossRider.T, C:\Windows\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-1.job, Quarantined, [fd0d52a8ed9c4fe7ce3d1bd7c4404db3], PUP.Optional.CrossRider.T, C:\Windows\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5.job, Quarantined, [55b5fdfd9dec0333b754faf8a16359a7], PUP.Optional.CrossRider.T, C:\Windows\Tasks\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e-5_user.job, Quarantined, [8d7d926889008bab1bf042b0ec18aa56], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome.manifest, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\install.rdf, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\02aac8132c11c2ade5b7a4e26d813d56.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\134cfdf64bd3497c4d991f0acde0d8c0.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\213a48fcdca4ed406c795fd244baea75.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\2259e95eec3238d8f66ad061ec3ac7ed.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\6f6ee843e017d5851e3b5a5007d34e24.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\9dade831d67863946311cad2559edada.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\background.html, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\browser.xul, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\dialog.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\options.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\options.xul, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\search_dialog.xul, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\8cb6bc8bf807cb83e21ae2a9985f5bdc.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\1569ce8e527a0819074abdb259b196af.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\2ab18672fc46dbe324d7138c949a4219.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\2b077b2f1fcfc02c6bef464ec86c9f4d.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\32a94bde43ffb1641d4894dc0e05c3fd.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\38543e91cad9c44ff4c117740177cf53.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\4310f4d0e36f20cd2e939e41dc18b5c5.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\75366d0a6526dfea069f59686b932854.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\77fd96906571824be7fd2e9ed1aeb5fa.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\9eaca75b4ff13cf77103dedafb1bc798.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\a3ca1dc2ef262a5e01feb3ae19c0b80d.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\af7196bbfd46cd3a9726e30f6f948b2e.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\ca3f79b024a9e43a494d78a3561d1c94.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\d2ca6eaa494e446bd2ea7ac3a739013c.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\e250505dd2e4634e7243526a07da8710.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\api\e25e3bda25db8d2800eacb678430fb64.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\0ccf79d4a487bee6c35979cd6fee9201.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\0f807b91ed6c6d771e4aa9d9eb016e48.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\1652387b5bdcab9d420460a10fef89ab.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\3c5612bf0c30875580324526e95ac893.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\4950208c73ce29cd47f3335f4e82fe3c.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\67585a556f7da1ea03364b88436d7595.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\76c49802efeee1ad3213eea07e9e99e5.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\78ec430704a8b33bc0beb006688ee685.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\7ab809ccb2c373488b7f63a9b04463d0.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\882510889ec6a5703e39c9a4a2436511.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\8eda943c804a6ec4895c6e47aa3bf342.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\935e8f5b046194fc7882b92c4b26f7c8.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\a544990364436827174d5eccc48dc27d.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\a5a944b069a472e04314967eac0dca77.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\b2a66c2a2ecc88c22d41dd50e9774d53.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\c65661e89c7ef53a8eb43001b6985c36.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\cf626f1a1d1479b92081bd8074d03ece.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\d28f1160fd851e33a9b6f2635d3531c7.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\d8421f45de982631d90ecca85c287d1e.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\fe683282c74bdc61d6fbce723668ed48.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\chrome\content\core\installer.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\defaults\preferences\prefs.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\manifest.xml, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins.json, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\1.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\102.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\13.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\14.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\16.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\17.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\177.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\180.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\182.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\183.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\184.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\192.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\195.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\200.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\207.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\21.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\22.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\220.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\223.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\242.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\246.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\253.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\262.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\263.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\273.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\28.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\281.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\289.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\301.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\345.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\354.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\4.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\47.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\64.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\7.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\72.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\78.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\9.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\91.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\93.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\plugins\98.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\userCode\background.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\extensionData\userCode\extension.js, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\locale\en-US\translations.dtd, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\button1.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\button2.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\button3.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\button4.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\button5.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\crossrider_statusbar.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\icon128.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\icon16.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\icon24.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\icon48.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\panelarrow-up.png, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\popup.html, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\skin.css, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\15e4983dcabc4fb695007d519f551@fc04b380cf4e4a16aeb63aa224928b.com\skin\update.css, Quarantined, [709ac337e5a43df9532e3d332ad9fe02], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\a1f6c74d-73ac-4ff9-ac8a-eb8e6e36000e.xpi, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\background.html, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1-buttonutil.dll, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\SuperPlusRadio v2.1.ico, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], PUP.Optional.SuperPlusRadio.A, C:\Program Files\SuperPlusRadio v2.1\Uninstall.exe, Quarantined, [3ad07882f79284b2e9d489ea49ba837d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14b0c6949688b34c1aef214a6a2293b9"), Replaced,[96745e9c8cfd84b2597ebc1d778e4db3]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.