Jump to content

Removal instructions for Lights Cinema


Recommended Posts

  • Staff

What is Lights Cinema?

The Malwarebytes research team has determined that Lights Cinema is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Lights Cinema?

You may see this Firefox extensions:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Lights Cinema get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Lights Cinema?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Lights Cinema?
  • No, Malwarebytes' Anti-Malware removes Lights Cinema completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Lights Cinema hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found] FF Extension: Lights Cinema 1.3betaV04.04 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com [2015-04-12] () C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job () C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job () C:\Program Files\Lights Cinema 1.3betaV04.04Lights Cinema 1.3betaV04.04 (HKLM\...\Lights Cinema 1.3betaV04.04) (Version: 1.36.01.22 - Cinema PlusV04.04)Task: {44947133-BF34-4BE8-8987-9BC3D222FA96} - System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5 => C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe [2015-04-12] (Cinema PlusV04.04) <==== ATTENTIONTask: {87EFA06C-DFDC-413D-BC5C-94399C12ACB1} - System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user => C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe [2015-04-12] (Cinema PlusV04.04) <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files\Lights Cinema 1.3betaV04.04       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782.xpi"="4/12/2015 10:30 AM, 395295 bytes, A       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-4.exe"="4/12/2015 10:30 AM, 1531904 bytes, A       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe"="4/12/2015 10:31 AM, 1164800 bytes, A       Adds the file Uninstall.exe"="4/12/2015 10:30 AM, 105984 bytes, A       Adds the file utils.exe"="4/12/2015 10:30 AM, 2241020 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5"="4/12/2015 10:31 AM, 5490 bytes, A       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user"="4/12/2015 10:31 AM, 5496 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job"="4/12/2015 10:31 AM, 2460 bytes, A       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job"="4/12/2015 10:31 AM, 2460 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "71387"="REG_SZ", "Lights Cinema 1.3betaV04.04"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Lights Cinema 1.3betaV04.04\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Lights Cinema 1.3betaV04.04\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Lights Cinema 1.3betaV04.04\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lights Cinema 1.3betaV04.04]       "CrAppId"="REG_SZ", "71387"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files\Lights Cinema 1.3betaV04.04\utils.exe"       "DisplayName"="REG_SZ", "Lights Cinema 1.3betaV04.04"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Cinema PlusV04.04"       "UninstallString"="REG_SZ", "C:\Program Files\Lights Cinema 1.3betaV04.04\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job"="REG_BINARY, ................................       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job.fp"="REG_DWORD", 1262598109       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job"="REG_BINARY, ................................       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job.fp"="REG_DWORD", -1038303828    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "71387"="REG_SZ", "Lights Cinema 1.3betaV04.04"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema PlusV04.04]       "71387"="REG_SZ", "Lights Cinema 1.3betaV04.04"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 4/12/2015Scan Time: 10:39:34 AMLogfile: MBAMLightsCinema.txtAdministrator: YesVersion: 2.01.0.1004Malware Database: v2015.04.11.08Rootkit Database: v2015.03.31.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 290090Time Elapsed: 4 min, 18 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 7PUP.Optional.LightsCinema.A, HKLM\SOFTWARE\Lights Cinema 1.3betaV04.04, Quarantined, [401455169eec60d66f7cd0f32cd749b7], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [43113d2e0e7cef47f32f709332d2956b], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [a2b2b7b42c5ec67001e21028867f768a], PUP.Optional.GlobalUpdate.C, HKCU\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, Quarantined, [e56fabc092f87cba01dac7f691723ac6], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [fb595c0f2b5fe35370cd1dc259aab050], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema PlusV04.04, Quarantined, [0153501b2b5f7eb8ee2701d355ae51af], PUP.Optional.LightsCinema.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Lights Cinema 1.3betaV04.04, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], Registry Values: 2PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\GLOBALUPDATE\UPDATEDEV|AuCheckPeriodMs, 21600000, Quarantined, [cf850f5c533769cd68da3f7e6b98d729]PUP.Optional.GlobalUpdate.C, HKCU\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, Quarantined, [e56fabc092f87cba01dac7f691723ac6]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults\preferences, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale\en-US, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.LightsCinema.A, C:\Program Files\Lights Cinema 1.3betaV04.04, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], Files: 136PUP.Optional.CrossRider, C:\Users\{username}\Desktop\Arihajdjr.exe, Quarantined, [8fc5d596d5b537ff30554c9705fc56aa], PUP.Optional.CrossRider.A, C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-4.exe, Quarantined, [a5af76f57d0d8ea88c234be8749220e0], PUP.Optional.CrossRider.A, C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe, Quarantined, [ce8693d8c8c2d462f1be38fbe422b749], PUP.Optional.CrossRider.A, C:\Program Files\Lights Cinema 1.3betaV04.04\utils.exe, Quarantined, [a1b35714cbbffc3ab7f8a98a3bcb4db3], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5, Quarantined, [a6ae1358018977bf15466f7b9f642bd5], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user, Quarantined, [6fe53e2d632782b4154677736c97c43c], PUP.Optional.CrossRider.T, C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job, Quarantined, [b4a0c3a8fa90c76fe9d1f4507095a15f], PUP.Optional.CrossRider.T, C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job, Quarantined, [db791952c4c648eecded8cb81de845bb], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\crossrider_statusbar.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button1.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button2.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button3.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button4.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button5.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon128.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon16.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon24.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon48.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\panelarrow-up.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\popup.html, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\skin.css, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\update.css, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome.manifest, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\install.rdf, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\0a1024373dee83e5bb65be67883dcbbc.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\0e4ea7d0acd445a6f777a7b4c0956857.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\15f92d29678a4c69009742baf2ba1eae.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\1bb0dd8be92955c94fd5f353b339e519.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\background.html, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\browser.xul, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\dialog.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\e4cbeacd46dbc84e6a3170639e05c86e.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\eaa35fe4ae19d60b5e50e3348b934132.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\options.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\options.xul, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\search_dialog.xul, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\83560a4a0a429da1176fdf03227bb78f.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\000b05c24375ef936dd170d3ca6dabca.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\0a5023d35f91ca1351568a6c49dbcf99.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\1340cc9c07c5a130bf588570f8dd0952.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\465ac0389d07de2cdfcf626517f15a3f.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\46e617fe2f42902b14e628578d91e4ad.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\7e354f077f1060e41d223e429a6c74ee.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\7fa4b475b0c3b492371f2fdd31dfb7b8.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\828fac603a08239c054a0046587faae1.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\8508f4f2cf4bb44d04c3499afc2925a2.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\9a67c6d844a3ffffcac1b6e7e44ec498.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\bfdbc65c514c222d20b0a4b13a5dc553.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\cba142ea14448c73cf844ae0befa36d1.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\ccbb5647576c9eb14a709d5a5abcac9d.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\f746b865119e75e0c2cd3d48558bc167.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\f75b17999cff0bd67c05c5320293988c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\76cb473505b781577c34f78ef852edda.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\16ecfe388b06d12e4fe4324bd058327c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\1dd518f8d486efbda499e5c97cf33719.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\2088ad542e8875a24ff219eabe86f83b.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\3559d4cbcf3a41ca9fef0188418c408c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\404e9295f3729fad0a73c3ebef7efc14.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\534580e6ef40903e6cc0ecfd51b645d6.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\5b829fd38e662cc6c3d66965aa4bf159.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\639ccf3549de43ce0a531375c2086637.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\73321ce29165b69fcaad9ce2c66db9ea.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\76caa8629b04bfc77a6483f8566d41fa.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\78815854113320f2c2582bfb6b06d822.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\8a1909d5e8d274eb285cd67a342ab782.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\97f18ff39d170b6ea46005d3bf4a8be9.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\9b88e59a225f650f828704526e444fa2.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\a03b08d0eb30ee5d2104d30da5b2fdf4.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\a8f5b75f923c81fc82673c8c7764172c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\c2a32b71c73bc636815075b48e57537c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\ecb3d2d4d3f91e2b82f03d2d7be183d4.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\f89db11aecb58da5174caa4001150257.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\installer.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults\preferences\prefs.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\manifest.xml, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins.json, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\289.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\102.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\119.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\123.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\13.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\14.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\16.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\17.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\178.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\179.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\180.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\184.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\195.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\200.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\220.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\221.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\223.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\231.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\232.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\234.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\242.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\246.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\252.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\253.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\260.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\262.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\263.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\273.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\281.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\288.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\290.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\334.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\335.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\339.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\344.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\345.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\354.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\356.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\375.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\376.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\379.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\380.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\385.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\389.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\390.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\391.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\4.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\47.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\64.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\7.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\78.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\9.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\91.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\93.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode\background.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode\extension.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale\en-US\translations.dtd, Quarantined, [85cf284392f843f33e61a1b3f21319e7], PUP.Optional.LightsCinema.A, C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782.xpi, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], PUP.Optional.LightsCinema.A, C:\Program Files\Lights Cinema 1.3betaV04.04\Uninstall.exe, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.