Jump to content

Removal instructions for PC Helper

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is PC Helper?

The Malwarebytes research team has determined that PC Helper is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by PC Helper?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning2.png

and this entry in your list of installed programs:

warning4.png

How did PC Helper get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove PC Helper?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

But it is advisable to run the uninsatll from Add/Remove Software first. (see screenshot above)

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of PC Helper?
  • No, Malwarebytes' Anti-Malware removes PC Helper completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the PC Helper hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: PC Helper - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com [2015-07-27] C:\Windows\System32\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5 C:\Windows\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user.job C:\Windows\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.job C:\Program Files (x86)\PC HelperPC Helper (HKLM-x32\...\PC Helper) (Version: 1.36.01.22 - Joseph CM) <==== ATTENTIONTask: {9100CB02-15E6-49EB-BBA3-903466E100A2} - System32\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user => C:\Program Files (x86)\PC Helper\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.exe [2015-07-27] (Joseph CM) <==== ATTENTIONTask: {CC552815-FA08-4A42-ABD5-FB1179A00C54} - System32\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5 => C:\Program Files (x86)\PC Helper\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.exe [2015-07-27] (Joseph CM) <==== ATTENTIONTask: C:\Windows\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.job => C:\Program Files (x86)\PC Helper\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user.job => C:\Program Files (x86)\PC Helper\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\PC Helper       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4.xpi"="27/07/2015 08:58, 393079 bytes, A       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4-4.exe"="27/07/2015 08:58, 1319424 bytes, A       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.exe"="27/07/2015 08:58, 1192448 bytes, A       Adds the file Uninstall.exe"="27/07/2015 08:58, 120832 bytes, A       Adds the file utils.exe"="27/07/2015 08:58, 2002243 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com       Adds the file chrome.manifest"="27/07/2015 08:58, 570 bytes, A       Adds the file install.rdf"="27/07/2015 08:58, 1279 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5"="27/07/2015 08:58, 5460 bytes, A       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user"="27/07/2015 08:58, 5472 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.job"="27/07/2015 08:58, 2430 bytes, A       Adds the file 35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user.job"="27/07/2015 08:58, 2430 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\3874]       "65119"="REG_SZ", "PC Helper"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\3874\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.job"="REG_BINARY, ................................       "35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.job.fp"="REG_DWORD", 1088739119       "35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user.job"="REG_BINARY, ................................       "35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user.job.fp"="REG_DWORD", -1398262880    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\3874]       "65119"="REG_SZ", "PC Helper"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\3874\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PC Helper]       "CrAppId"="REG_SZ", "65119"       "CrPublisherId"="REG_SZ", "3874"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\PC Helper\utils.exe"       "DisplayName"="REG_SZ", "PC Helper"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Joseph CM"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\PC Helper\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PC Helper\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PC Helper\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PC Helper\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\3874]       "65119"="REG_SZ", "PC Helper"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\3874\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Joseph CM]       "65119"="REG_SZ", "PC Helper"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 27/07/2015Scan Time: 09:05Logfile: mbamPCHelper.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.07.27.01Rootkit Database: v2015.07.22.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 327588Time Elapsed: 4 min, 14 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 6PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, Quarantined, [3786d115662484b299f12921d82b3cc4], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [beff8e585634e4525ab29b7362a154ac], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\3874, Quarantined, [8b32e0069eec65d19af0a8a219eae41c], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [427b9155cfbb87afd6cafa810ff5817f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\3874, Quarantined, [65581dc945450c2ab00530fd43c0b64a], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Joseph CM, Quarantined, [219cac3a93f746f074f56e159b692ad6], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 13PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\defaults, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\defaults\preferences, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\userCode, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\locale, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\locale\en-US, Quarantined, [932af5f1147690a601fe5c3400043cc4], Files: 123PUP.Optional.PCHelper.A, C:\Users\{username}\Desktop\Qkujujjh.exe, Quarantined, [e1dc7373206aea4cd7e1bfa5c8391be5], PUP.Optional.PCHelper.A, C:\Program Files (x86)\PC Helper\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-4.exe, Quarantined, [2e8f9f4796f4e74f3e7a590bf1107c84], PUP.Optional.PCHelper.A, C:\Program Files (x86)\PC Helper\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.exe, Quarantined, [11ac42a4078370c68a2eda8a51b06d93], PUP.Optional.PCHelper.A, C:\Program Files (x86)\PC Helper\utils.exe, Quarantined, [3489f6f03d4ddf57c0f8293b4eb3629e], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5, Quarantined, [5b62eff78505e650da70e7506a99758b], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user, Quarantined, [56674d998109181e202ae84f689b05fb], PUP.Optional.CrossRider.T, C:\Windows\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5.job, Quarantined, [16a7b2344149a88ec17a93f0b64e3cc4], PUP.Optional.CrossRider.T, C:\Windows\Tasks\35f5c4ac-5d43-436a-bb4c-b6987d694cd4-5_user.job, Quarantined, [17a6638396f4aa8c42f9ccb7d62ec739], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\crossrider_statusbar.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\button1.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\button2.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\button3.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\button4.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\button5.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\icon128.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\icon16.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\icon24.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\icon48.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\panelarrow-up.png, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\popup.html, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\skin.css, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\skin\update.css, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome.manifest, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\install.rdf, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\28cd9e79b13db6f4bd783113a18a2255.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\3f55b82930a671b2266d2895943a9d88.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\513d6e32387ca211035425cc7765cf22.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\9a859d8f6dcc03e3b9c5ba1c67ac90ca.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\background.html, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\browser.xul, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\ca3b994a55369dafcee2068238d4de3c.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\d160b35772ab11d966b2eb99d8d6d729.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\dialog.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\options.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\options.xul, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\search_dialog.xul, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\034bb6e5e55e1bb9ebf01f6044c04402.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\0352ca443c54468a82ce3077581f5496.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\0980001711cd2398dd3a22f5797175ae.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\13cff5f2076379c4bb08d04d15820fcb.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\2528b792bdcefc3670ce244779a34442.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\3fcf991da70fd720a95ebac13a2dad93.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\44fb7ad63d9bc7ca6897de810d9509ed.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\6f63065d012aee7c6d23059e1eb863a9.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\6f91b7b9a488f620fa0bce50f491afe0.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\7d9fc5575819808102dee96b67a40d5a.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\88e50e1c06fc61186951efaeb07d0a6f.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\89d83efcd9ca279f9aa25da184d44d85.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\a9541ed3f1adaf36251c19ad46df7321.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\bf0d0fe7c48ee0c17dece6148b91a269.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\d562c3da5b8350920ce3a83f2b27af66.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\api\e8772245e9215e27a9eca7dee52fdd6f.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\4f2c6d23df3911a16ef02d0a9f758898.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\0adebd47268fb2a1c5eac68afa15ea05.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\0d2b8f19f38a41aabcf9798fc7c9d37b.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\287de745595f1f9edf29eecc5c53eba2.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\291b7f8f31c3594c58c662742ceb7a16.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\2dee54a6c833e8ca048eb36836f30be5.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\36ecd93e46cadeb0d5de3af47d1d4f82.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\39749301cdc8557ad9831506b35196b1.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\47d27f2ed2024b27a01d3bff0ae47d4b.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\49a56f59378290072dc9841652c7af66.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\57d9f513fa46ada138a8cf013afee3ee.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\68dcceeda61530a9c69a5a6e7618d099.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\7179d3e02c3fd28d2a299056c8b42354.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\852be542bfafeebe7091eb976aa6a21c.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\abe3092de400bf593fac80e0eb898041.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\ada81e2e5be6a01d9598b604b7d44410.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\b372d9679a84e6d1c28291cdc3ede8fd.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\bfc1310d8b673cb899368b73bfbe8443.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\d83a0a29631566125dc7304ec6264da2.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\ed20c2262e7e08e0ae7ce27b0a738cc5.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\chrome\content\core\installer.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\defaults\preferences\prefs.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\manifest.xml, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins.json, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\253.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\1.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\102.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\13.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\14.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\16.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\17.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\177.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\178.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\179.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\180.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\182.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\183.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\195.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\200.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\207.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\21.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\22.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\220.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\223.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\234.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\246.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\273.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\28.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\281.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\288.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\345.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\354.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\376.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\380.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\385.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\390.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\391.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\4.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\47.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\64.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\7.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\72.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\78.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\9.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\91.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\plugins\98.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\userCode\background.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\extensionData\userCode\extension.js, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\12125cc4-2ae8-4eb5-ad47-52d72d8d101b@gmail.com\locale\en-US\translations.dtd, Quarantined, [932af5f1147690a601fe5c3400043cc4], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14ece4f8ec5fc3c6d5bd9de67c844386"), Replaced,[a01ddb0b34561b1b1ce83244de27b050]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.