Jump to content

Removal instructions for VisualBee


Recommended Posts

  • Staff

What is VisualBee?

The Malwarebytes research team has determined that VisualBee is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by VisualBee?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did VisualBee get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove VisualBee?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

But we do advise to use the Uninstall from Add/Remove Software in your Control Panel (see screenshot above) first.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of VisualBee?
  • No, together with the uninstaller, Malwarebytes' Anti-Malware removes VisualBee completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the VisualBee hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 () C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job () C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5.job () C:\Program Files\Information FF Extension: No Name - C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com [2015-04-23]Information (HKLM\...\Information) (Version: 1.36.01.22 - VisualBee)Task: {AC32A81C-75CA-437F-9AB5-1413643DE102} - System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5 => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe [2015-04-23] (VisualBee) <==== ATTENTIONTask: {AC9A81AF-E451-40A1-B4DC-CE62E00B168B} - System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe [2015-04-23] (VisualBee) <==== ATTENTIONTask: C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5.job => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe <==== ATTENTION
Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\Information       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2.xpi"="4/23/2015 10:44 AM, 393090 bytes, A       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-4.exe"="4/23/2015 10:44 AM, 1273344 bytes, A       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe"="4/23/2015 10:44 AM, 1014784 bytes, A       Adds the file Uninstall.exe"="4/23/2015 10:44 AM, 115712 bytes, A       Adds the file utils.exe"="4/23/2015 10:44 AM, 1849998 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5"="4/23/2015 10:44 AM, 5458 bytes, A       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5_user"="4/23/2015 10:44 AM, 5464 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5.job"="4/23/2015 10:44 AM, 2428 bytes, A       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job"="4/23/2015 10:44 AM, 2428 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_LOCAL_MACHINE\SOFTWARE\Information    [HKEY_LOCAL_MACHINE\SOFTWARE\Information\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Information\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Information\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21409]       "50368"="REG_SZ", "Information"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21409\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Information]       "CrAppId"="REG_SZ", "50368"       "CrPublisherId"="REG_SZ", "21409"       "DisplayIcon"="REG_SZ", "C:\Program Files\Information\utils.exe"       "DisplayName"="REG_SZ", "Information"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "VisualBee"       "UninstallString"="REG_SZ", "C:\Program Files\Information\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "2dd8035f-c232-46ba-a649-bf88af80cca2-5.job"="REG_BINARY, ................................       "2dd8035f-c232-46ba-a649-bf88af80cca2-5.job.fp"="REG_DWORD", 650851903       "2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job"="REG_BINARY, .'..............................       "2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job.fp"="REG_DWORD", -466726888    [HKEY_USERS\.DEFAULT\Software\Opera Software       "ATTEMPTS        REG_SZ, "51" ==> REG_SZ, "52"    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21409       "50368"="REG_SZ", "Information"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21409\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\VisualBee]       "50368"="REG_SZ", "Information"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 4/23/2015Scan Time: 10:55:58 AMLogfile: MBAMVisualBee.txtAdministrator: YesVersion: 2.01.0.1004Malware Database: v2015.04.23.02Rootkit Database: v2015.04.21.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 286157Time Elapsed: 4 min, 0 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 5PUP.Optional.CrossRider.C, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [5ba3135c98f231059d4d3889877c57a9], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21409, Quarantined, [e41a7ef14a4050e65434f41145bf09f7], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [fd014d22e9a179bd84a7e5567293dc24], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21409, Quarantined, [9d61aac51e6c50e618eb3aa9fd062ed2], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\VisualBee, Quarantined, [88769ed1c4c6b87e54f5b252d52fb44c], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 13PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults\preferences, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\userCode, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale\en-US, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], Files: 121PUP.Optional.Information.A, C:\Users\{username}\Desktop\VisualBee.exe, Quarantined, [39c5eb848efce94d49f9e0bdc839f010], PUP.Optional.Information.A, C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-4.exe, Quarantined, [8d71d49b94f6e15574ceabf2d62b50b0], PUP.Optional.Information.A, C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe, Quarantined, [24da94db2d5d57df95ada5f8fd043dc3], PUP.Optional.Information.A, C:\Program Files\Information\utils.exe, Quarantined, [946a0966008a0d297ec41885d42d946c], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5, Quarantined, [06f82649fd8da19595429c51e122d927], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user, Quarantined, [30cecda2335771c517c0ce1f649fd22e], PUP.Optional.CrossRider.T, C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5.job, Quarantined, [08f6125da2e8db5b507a8db909fcd12f], PUP.Optional.CrossRider.T, C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job, Quarantined, [a559c4abd5b5a88ea02a73d3a75ee719], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\crossrider_statusbar.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button1.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button2.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button3.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button4.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button5.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon128.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon16.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon24.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon48.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\panelarrow-up.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\popup.html, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\skin.css, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\update.css, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome.manifest, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\install.rdf, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\3bc392fcdaaf3e709711d74ec002fe13.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\6af56984f704fd2f6e2a583f9c1c9a9d.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\8177fcb43ac8aa528440197a1ea59187.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\9e41110748dd329122fea0fe554579ef.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\b80aa331870fd2afc2a3bd0615537fd6.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\background.html, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\browser.xul, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\da31a5664809f9d542b889e1df5ce890.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\dialog.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\options.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\options.xul, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\search_dialog.xul, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\874104ca34bcd35f439ccb0e204d5b70.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\09d2b21decd02275836b4651e661b982.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\0c796e0c0abc4257b4b5a5b48b90cefe.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\2bd7ca36ec5b42c7c4750eec13498935.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\2dd830d6492b4c712ce2f4cfe0270be6.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\4a7f4b7bb54be9419b4aba3f4e3d15c4.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\4b84e73ac3e07a5aedd9eb999348682c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\552263e656ea35860ad578910b7da420.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\6d3cc87df9f640a73341e14e29d3631a.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\901b41d96e52b6dffceccba2a6520b6a.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\9f524633f0904c1f52dfb1f9d9c6a6ef.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\ae3923a142065e880b59f076fbea5ccb.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\b270dd6248ad2bf45b5cff4ff9a3e469.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\b84eddabaa74360ea5cad547da81b82e.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\ecddd8e222f6704a239ec64eb936ff3c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\eeb9c26356ea2f665e08adce3bc9b1c4.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\a07a218f2925d6202f79d5d9811684ca.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\09b8b5e72e05abea3907e2a0781dde56.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\0f03ae1e7f9f52f61c93af4d68256ec1.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\1f5425fbb02f38bb5a151dcd3a83edf6.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\2f1221113e94bd9d7ea797e947000b43.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\354d2c035af4cdfda0fb57efa794105c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\43d85c95da65abec16b5347cdd14c8d5.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\4440d35dc6de29306fd8279ad95bb83f.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\81842831daf484f5da66df0636f8cf0c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\93fd89c061730ff71eada4082e2dec79.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\9d3b1cbf4ff1fcabc26188c5320d1fe3.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\a4b4e229f95d0dd8fb430ef1df3692c1.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\b4909696abf2daab9daa67203d1ae823.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\b4c4fd0d0ac396e6efd35b332d48a4b9.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\bd0b9841c8206394aba99345994d14ad.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\bd2852942672a73ad396fc9dda3807f1.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\c12dd957fa87a136b47d00f83f2732a9.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\cd416a8ddac6e09f605861d8132f886c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\e32fae616d5421a0149305861f92cc0d.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\fa2f05785feb2993eeecdb25516e5705.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\installer.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults\preferences\prefs.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\manifest.xml, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins.json, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\102.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\13.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\14.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\16.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\17.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\180.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\184.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\192.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\193.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\195.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\211.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\220.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\221.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\223.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\226.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\230.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\233.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\242.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\244.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\246.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\253.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\260.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\273.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\281.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\288.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\289.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\32.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\345.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\354.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\376.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\385.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\390.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\391.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\4.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\47.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\5.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\64.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\7.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\78.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\9.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\91.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\userCode\background.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\userCode\extension.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale\en-US\translations.dtd, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.