Jump to content

Removal instructions for TornPlusTV


Recommended Posts

  • Staff

What is TornPlusTV?

The Malwarebytes research team has determined that TornPlusTV is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by TornPlusTV?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did TornPlusTV get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove TornPlusTV?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of TornPlusTV?
  • No, Malwarebytes' Anti-Malware removes TornPlusTV completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the TornPlusTV hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: 6bd34e315cba4997ad71181b65e074a50070001 - {11111111-1111-1111-1111-110711001101} - C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bho.dll
You may see these entries in a FRST log:

 BHO: TornPlusTV_version1.11 -> {11111111-1111-1111-1111-110711001101} -> C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bho.dll (Qwerty) FF Extension: TornPlusTV_version1.11 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\TFCHON21586705@RMYX65127936.com [2015-01-22] () C:\Windows\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-1.job () C:\Windows\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-5_user.job () C:\Windows\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-5.job () C:\Program Files\TornPlusTV_version1.11
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\TornPlusTV_version1.11       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae.xpi"="1/22/2015 2:28 PM, 416322 bytes, A       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-4.exe"="1/22/2015 2:28 PM, 1335264 bytes, A       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-5.exe"="1/22/2015 2:28 PM, 1118176 bytes, A       Adds the file background.html"="1/18/2015 1:41 AM, 729 bytes, A       Adds the file TornPlusTV_version1.11.ico"="1/18/2015 1:41 AM, 9662 bytes, A       Adds the file TornPlusTV_version1.11-bg.exe"="1/22/2015 2:28 PM, 538592 bytes, A       Adds the file TornPlusTV_version1.11-bho.dll"="1/22/2015 2:28 PM, 696800 bytes, A       Adds the file TornPlusTV_version1.11-buttonutil.dll"="1/22/2015 2:28 PM, 340960 bytes, A       Adds the file TornPlusTV_version1.11-buttonutil.exe"="1/22/2015 2:28 PM, 287200 bytes, A       Adds the file TornPlusTV_version1.11-codedownloader.exe"="1/22/2015 2:28 PM, 983520 bytes, A       Adds the file Uninstall.exe"="1/22/2015 2:28 PM, 119264 bytes, A       Adds the file utils.exe"="1/22/2015 2:28 PM, 2851818 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com       Adds the file chrome.manifest"="1/22/2015 2:28 PM, 504 bytes, A       Adds the file install.rdf"="1/22/2015 2:28 PM, 1299 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-1"="1/22/2015 2:28 PM, 6166 bytes, A       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-5"="1/22/2015 2:28 PM, 5480 bytes, A       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-5_user"="1/22/2015 2:28 PM, 5486 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-1.job"="1/22/2015 2:28 PM, 3136 bytes, A       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-5.job"="1/22/2015 2:28 PM, 2450 bytes, A       Adds the file 43c45160-6b86-42f6-a844-75fa972793ae-5_user.job"="1/22/2015 2:28 PM, 2450 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "846F0077B0964B4889C9021199C8ECD9IE"       "Verifier"="REG_SZ", "ab0654ee5105a27ad4835dd7ddce5bba"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.BHO]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.BHO\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110711001101}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.BHO\CurVer]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.BHO.1]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.BHO.1\CLSID]       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110711001101}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.Sandbox]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.Sandbox\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220722002201}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.Sandbox\CurVer]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.Sandbox.1]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6bd34e315cba4997ad71181b65e074a50070001.Sandbox.1\CLSID]       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220722002201}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}]       "(Default)"="REG_SZ", "TornPlusTV_version1.11"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\Implemented Categories]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]       "(Default)"="REG_SZ", ""    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\ProgID]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.BHO.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440744004401}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110711001101}\VersionIndependentProgID]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220722002201}]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220722002201}\InprocServer32]       "(Default)"="REG_SZ", "C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bho.dll"       "ThreadingModel"="REG_SZ", "Apartment"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220722002201}\ProgID]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.Sandbox.1"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220722002201}\Programmable]    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220722002201}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440744004401}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220722002201}\VersionIndependentProgID]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001.Sandbox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550755005501}]       "(Default)"="REG_SZ", "ICrossriderBHO"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550755005501}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550755005501}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550755005501}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440744004401}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660766006601}]       "(Default)"="REG_SZ", "ISandBox"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660766006601}\ProxyStubClsid]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660766006601}\ProxyStubClsid32]       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660766006601}\TypeLib]       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440744004401}"       "Version"="REG_SZ", "1.0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440744004401}\1.0]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001 Type Library"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440744004401}\1.0\0\win32]       "(Default)"="REG_SZ", "C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bho.dll"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440744004401}\1.0\FLAGS]       "(Default)"="REG_SZ", "0"    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440744004401}\1.0\HELPDIR]       "(Default)"="REG_SZ", "C:\Program Files\TornPlusTV_version1.11"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\3874]       "70001"="REG_SZ", "TornPlusTV_version1.11"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\3874\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]       "TornPlusTV_version1.11-bg.exe"="REG_DWORD", 8000    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110711001101}]       "(Default)"="REG_SZ", "6bd34e315cba4997ad71181b65e074a50070001"       "NoExplorer"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TornPlusTV_version1.11]       "CrAppId"="REG_SZ", "70001"       "CrPublisherId"="REG_SZ", "3874"       "DisplayIcon"="REG_SZ", "C:\Program Files\TornPlusTV_version1.11\utils.exe"       "DisplayName"="REG_SZ", "TornPlusTV_version1.11"       "DisplayVersion"="REG_SZ", "1.36.01.08"       "Publisher"="REG_SZ", "Qwerty"       "UninstallString"="REG_SZ", "C:\Program Files\TornPlusTV_version1.11\Uninstall.exe /fcp=1 "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "43c45160-6b86-42f6-a844-75fa972793ae-1.job"="REG_BINARY, ................................       "43c45160-6b86-42f6-a844-75fa972793ae-1.job.fp"="REG_DWORD", 12150182       "43c45160-6b86-42f6-a844-75fa972793ae-5.job"="REG_BINARY, ................................       "43c45160-6b86-42f6-a844-75fa972793ae-5.job.fp"="REG_DWORD", -890662810       "43c45160-6b86-42f6-a844-75fa972793ae-5_user.job"="REG_BINARY, ................................       "43c45160-6b86-42f6-a844-75fa972793ae-5_user.job.fp"="REG_DWORD", 1573159584    [HKEY_LOCAL_MACHINE\SOFTWARE\TornPlusTV_version1.11\DjDrj+sEfPsgHsU9vyr5Vm49hbxNlbLFv8UOvjUfch7L+1oH2rUQJSg73Har9MkThQat4mf/GWfw7XYNGWiqLTA/pKtFxR5qkhpbDJLzPBJKDqaNKvFfU3mbG/4X2+bB1VC5eQD5+BYlsnydzl4Rd5HZjuOtYYUlZz3MaL2vvv8=]       "dP7mqQ2wNde9k86nWGPE020OJLVZyvX1daL+A/ZquKmhxtiz0Xc5kdty/pIDdZbPxfw7XCfJ/2/DAGcvWqqTJY4GQg17S09y2ChoE7tBPAooRmVRQW8wU3ZusExZFfnFiJ+eAurMmBFMMXZB/AJ7HILsxdwkD/tQ1WWEG7C0vWaXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\TornPlusTV_version1.11\G9GbuY1xwkHwMHUUORvkdP4Ovpi07naNNNQvtF1ESRQoSpXztaabJ1q4fQ9ZudTdIF/qbVBv69XHLxYJoVUlG6+uFN73oP2EEUBzSBbG2WaTSATaUmC2se51kwtfiOvKEPui+ILxb3bEzdJnpaa3vSjCQDydnkBpvFhV/zodqpE=]       "eHR5VfoT3tqPzULckNpVzM6oBIyBdSbOyMDoSAwNRMyclv38SbboGDvchX4sIf5GNKnifTtKbWyxTJl9lOrMAXLGVlzB0xbmM9jglmeOmXjAxhHKwkWhk7N9IDa8HPsaGv6pwwXgCQOkXAenEK0neTyzdPli85nidP10y2JraOo="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\TornPlusTV_version1.11\IE]       "TotalProfiles"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\TornPlusTV_version1.11\IE\Profiles]       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\TornPlusTV_version1.11\Installer]       "BundledFirefox"="REG_DWORD", 1       "BundledIe"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "846F0077B0964B4889C9021199C8ECD9IE"       "Verifier"="REG_SZ", "ab0654ee5105a27ad4835dd7ddce5bba"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\TornPlusTV_version1.11]       "ActiveAppId"="REG_SZ", "70001"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\TornPlusTV_version1.11\Code]       " { JavaScript removed. Full log available on request } "    [HKEY_CURRENT_USER\Software\AppDataLow\Software\TornPlusTV_version1.11\Update]       "LastCheck"="REG_DWORD", 1421933301    [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\TornPlusTV_version1.11]    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\3874]       "70001"="REG_SZ", "TornPlusTV_version1.11"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\3874\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Qwerty]       "70001"="REG_SZ", "TornPlusTV_version1.11"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 1/22/2015Scan Time: 2:36:35 PMLogfile: mbamTornPlusTV.txtAdministrator: YesVersion: 2.00.4.1028Malware Database: v2015.01.22.07Rootkit Database: v2015.01.14.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 289952Time Elapsed: 4 min, 19 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 20PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110711001101}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440744004401}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550755005501}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660766006601}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\6bd34e315cba4997ad71181b65e074a50070001.BHO.1, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110711001101}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\6bd34e315cba4997ad71181b65e074a50070001.BHO, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110711001101}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110711001101}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220722002201}, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\6bd34e315cba4997ad71181b65e074a50070001.Sandbox.1, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\6bd34e315cba4997ad71181b65e074a50070001.Sandbox, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110711001101}\INPROCSERVER32, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.TornTV.A, HKLM\SOFTWARE\TornPlusTV_version1.11, Quarantined, [d09f6a90a7e278becefd017dc73c47b9], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, Quarantined, [1d52ee0cb0d9a09692e6238d5da67f81], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3a35fbffea9f93a331aaac3aca3a09f7], PUP.Optional.TornTV.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\TornPlusTV_version1.11, Quarantined, [600f11e9d4b589ad834ac9b5dc27a35d], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, Quarantined, [145b24d686035dd98a144b3ecd360df3], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Qwerty, Quarantined, [72fd8a70f5946acce2a8e89611f26b95], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\TornPlusTV_version1.11, Quarantined, [ff70f802d5b450e640a4541608fb6898], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\defaults, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\defaults\preferences, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\userCode, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\locale, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\locale\en-US, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11, Quarantined, [ff70f802d5b450e640a4541608fb6898], Files: 137PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bho.dll, Quarantined, [214ee713c1c82412f365dcf88b7ad12f], PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\TornPlusTV_version1.11.exe, Quarantined, [125d5d9df69389ad591c7588f20ffe02], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\43c45160-6b86-42f6-a844-75fa972793ae-4.exe, Quarantined, [a9c65e9c27621d193d1b19bb61a4be42], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\43c45160-6b86-42f6-a844-75fa972793ae-5.exe, Quarantined, [80ef75853e4b9b9b461224b0a263768a], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-bg.exe, Quarantined, [135cf90109802412d781409445c043bd], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-buttonutil.exe, Quarantined, [e18edf1b4247d95d7ddb9a3a23e27b85], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-codedownloader.exe, Quarantined, [e38cdc1ee8a1191de078be16b94c37c9], PUP.Optional.CrossRider, C:\Program Files\TornPlusTV_version1.11\utils.exe, Quarantined, [5d12f3078ffa63d330d35af206fa3ac6], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-1, Quarantined, [cba445b5acdd82b4d5dcb5e0768d5ea2], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-5, Quarantined, [0c630af0abde82b4436e365f8a797789], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-5_user, Quarantined, [b1be906a4e3b1d1902afc2d37f84ec14], PUP.Optional.CrossRider.T, C:\Windows\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-1.job, Quarantined, [9cd352a888016fc75ccd0ae9de265da3], PUP.Optional.CrossRider.T, C:\Windows\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-5.job, Quarantined, [c6a9f307a0e993a388a1bd3651b325db], PUP.Optional.CrossRider.T, C:\Windows\Tasks\43c45160-6b86-42f6-a844-75fa972793ae-5_user.job, Quarantined, [86e9b347395096a036f39a596e9633cd], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome.manifest, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\install.rdf, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\029646a8d73c00b6ba22dd46624626ab.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\2d0127685e3408ecbae3e9ec76e4146f.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\899a1897c003e4512c1a22b0e5817090.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\8ba05ad135b2ce3c1bcb073906eb4757.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\b8e8f2b50a2fcaea3a16f51163ecb2e3.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\background.html, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\browser.xul, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\d7a2177b8a209865a417a44a83785fed.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\dialog.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\options.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\options.xul, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\search_dialog.xul, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\04655600d36d9d795db6c0dbb5b03f19.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\1a3c63917e73e793bade35dc0c4a425a.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\2787e78f7faa4ff7f8cd478bcf342d72.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\287b6634bdab2e86b45aa30ff46195fb.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\2eafb01968f31e0a5cd81dde3383d626.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\36847ae3ba087700378a4a641af25ebe.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\3a8f006adc4d935b28ebe15c720ef9f5.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\480bae163c1c55f677ee7beaa444c5df.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\488987a4c96854432d2f258789e961f1.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\67eb04dfada35e472d2fc3524cd3ac7f.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\73db915e80b34e9a2aff9fd692efc888.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\9971c4cbc7f5bb279d08c9c66cc4fd0c.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\b6c7557d19404dc6c72b6cba8b257fa2.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\b9a8c077ec4bb0b6eb7bb9608cf37550.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\d8a3c3b5b92e2799ab6984e67e4e682d.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\api\f7f69d48abeae25739498854b6f7a8dd.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\11dcff3aa10a648eb430ec7d6ff09075.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\23be4286778494f0a4fa493d3c625b53.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\301a24b55e7b3a6a12f88dccb229a01e.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\34f0766ec165635971c78d2fd9f19aed.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\4bb695283ee541471cc1badaf302db3c.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\583b3f71972f2755e022b49805af957e.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\5d32c0405ec332282cb7e29774bb8090.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\7aa616de1e356914aca827e5efbce39d.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\96e2897ed47db0742cd15b72a9ad5354.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\a4a91bbe7cffd2b92e7fafbdd05e20ea.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\bc52f84509ac0baafde69f4ecafeaf24.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\c21e00e408735dc705a61bf9500acd41.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\d1858770e9299f8e2252946ceed56de1.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\d3245bd7f1dfaed619c2fdd886037e1d.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\e08d228cdbad72eec613c88243434821.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\ec4698f9ad6e339c069382281dca448b.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\f0266790de6b678a1901bac6b11061b6.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\f0f574dec6610b308ffe33f48e65294e.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\f26f4b3dcdab72acefb930fe3341c260.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\ff87a58d28a9c3f8e40ea062f676a795.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\chrome\content\core\installer.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\defaults\preferences\prefs.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\manifest.xml, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins.json, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\223.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\1.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\1000020.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\1000025.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\1000030.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\102.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\104.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\123.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\13.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\14.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\16.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\17.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\177.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\178.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\179.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\180.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\182.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\183.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\195.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\207.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\21.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\22.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\220.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\221.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\234.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\246.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\253.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\262.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\263.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\273.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\28.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\281.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\301.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\339.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\345.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\354.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\4.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\47.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\64.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\7.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\72.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\78.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\9.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\91.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\93.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\plugins\98.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\userCode\background.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\extensionData\userCode\extension.js, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\locale\en-US\translations.dtd, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\button1.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\button2.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\button3.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\button4.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\button5.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\crossrider_statusbar.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\icon128.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\icon16.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\icon24.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\icon48.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\panelarrow-up.png, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\popup.html, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\skin.css, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\TFCHON21586705@RMYX65127936.com\skin\update.css, Quarantined, [ff7033c7fc8d0e28696a88d5e81b8d73], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\43c45160-6b86-42f6-a844-75fa972793ae.xpi, Quarantined, [ff70f802d5b450e640a4541608fb6898], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\background.html, Quarantined, [ff70f802d5b450e640a4541608fb6898], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11-buttonutil.dll, Quarantined, [ff70f802d5b450e640a4541608fb6898], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\TornPlusTV_version1.11.ico, Quarantined, [ff70f802d5b450e640a4541608fb6898], PUP.Optional.CrossRider.A, C:\Program Files\TornPlusTV_version1.11\Uninstall.exe, Quarantined, [ff70f802d5b450e640a4541608fb6898], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.