Jump to content

Removal instructions for Webby


Recommended Posts

  • Staff

What is Webby?

The Malwarebytes research team has determined that Webby is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Webby?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Webby get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Webby?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Webby?
  • No, Malwarebytes' Anti-Malware removes Webby completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Webby hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: iWebar - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com [2015-05-22] () C:\Windows\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user.job () C:\Windows\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.job () C:\Program Files\iWebariWebar (HKLM\...\iWebar) (Version: 1.36.01.22 - Webby) <==== ATTENTIONTask: {AA403E78-3C93-458C-9D75-05DDD84AF705} - System32\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5 => C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.exe [2015-05-22] (Webby) <==== ATTENTIONTask: {DC15B202-42D8-4157-9F65-6CA996FD129C} - System32\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user => C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.exe [2015-05-22] (Webby) <==== ATTENTIONTask: C:\Windows\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.job => C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user.job => C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files\iWebar       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68.xpi"="5/22/2015 2:36 PM, 397203 bytes, A       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68-4.exe"="5/22/2015 2:36 PM, 1328128 bytes, A       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.exe"="5/22/2015 2:36 PM, 1192960 bytes, A       Adds the file Uninstall.exe"="5/22/2015 2:36 PM, 115712 bytes, A       Adds the file utils.exe"="5/22/2015 2:36 PM, 1928343 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68-5"="5/22/2015 2:36 PM, 5448 bytes, A       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user"="5/22/2015 2:36 PM, 5454 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.job"="5/22/2015 2:36 PM, 2418 bytes, A       Adds the file 20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user.job"="5/22/2015 2:36 PM, 2418 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ"", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ"", "4704d091642d168879ad647182ff110a"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21836]       "70121"="REG_SZ"", "iWebar"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21836\Status]       "Installed"="REG_DWORD"", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\iWebar\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD"", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\iWebar\Installer]       "BundledFirefox"="REG_DWORD"", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\iWebar\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD"", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iWebar]       "CrAppId"="REG_SZ"", "70121"       "CrPublisherId"="REG_SZ"", "21836"       "DisplayIcon"="REG_SZ"", "C:\Program Files\iWebar\utils.exe"       "DisplayName"="REG_SZ"", "iWebar"       "DisplayVersion"="REG_SZ"", "1.36.01.22"       "Publisher"="REG_SZ"", "Webby"       "UninstallString"="REG_SZ"", "C:\Program Files\iWebar\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.job"="REG_BINARY, ................................       "20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.job.fp"="REG_DWORD"", 1668307366       "20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user.job"="REG_BINARY, ................................       "20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user.job.fp"="REG_DWORD"", 808016650    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ"", "8655ebc447297b398088e5f1933333c9IE"       "Verifier"="REG_SZ"", "4704d091642d168879ad647182ff110a"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21836]       "70121"="REG_SZ"", "iWebar"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21836\Status]       "Installed"="REG_DWORD"", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Webby]       "70121"="REG_SZ"", "iWebar"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 5/22/2015Scan Time: 2:43:19 PMLogfile: mbamWebby.txtAdministrator: YesVersion: 2.01.6.1022Malware Database: v2015.05.22.02Rootkit Database: v2015.05.16.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 290811Time Elapsed: 5 min, 55 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 7PUP.Optional.iWebar.A, HKLM\SOFTWARE\iWebar, Quarantined, [adfdd1c5ddadf83e8d105e8b7093a65a], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3674dbbb3c4ee84e4a12b626a95ae41c], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, Quarantined, [c0ea4b4bc8c2fe38207a75a948bc9f61], PUP.Optional.iWebar.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\iWebar, Quarantined, [901ae6b02367b185336f39b0b74c50b0], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [c4e6d6c0682242f4041ce07450b5619f], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21836, Quarantined, [ddcd52449dedc07635afa25aa85b7d83], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Webby, Quarantined, [fcaebdd9c2c88caaebb81ccdc34005fb], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\defaults, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\defaults\preferences, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\userCode, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\locale, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\locale\en-US, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.iWebar.A, C:\Program Files\iWebar, Quarantined, [bdedb3e30e7cec4afd031db739ca748c], Files: 121PUP.Optional.iWebar.A, C:\Users\{username}\Desktop\iWeBar.exe, Quarantined, [8a2072246723ad89ced878c50bf72ad6], PUP.Optional.iWebar.A, C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68-4.exe, Quarantined, [7139237321698ea8545265d854ae7090], PUP.Optional.iWebar.A, C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.exe, Quarantined, [67437c1aa8e2072f990d1b2240c2748c], PUP.Optional.iWebar.A, C:\Program Files\iWebar\utils.exe, Quarantined, [b6f4bdd9a8e2c76fe6c074c915ed05fb], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5, Quarantined, [6545c9cddab05ed86e1db552e02413ed], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user, Quarantined, [d8d21581434768ce513aa760a262f20e], PUP.Optional.CrossRider.T, C:\Windows\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5.job, Quarantined, [e3c7bbdbf991f83e435d7fe0fe074bb5], PUP.Optional.CrossRider.T, C:\Windows\Tasks\20d0c8d3-542b-4360-b6f0-fd9837f88b68-5_user.job, Quarantined, [e7c3752115759c9a406076e9c1447789], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\crossrider_statusbar.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\button1.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\button2.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\button3.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\button4.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\button5.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\icon128.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\icon16.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\icon24.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\icon48.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\panelarrow-up.png, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\popup.html, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\skin.css, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\skin\update.css, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome.manifest, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\install.rdf, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\8e90d1c865c25ffb044e2a7870e9af73.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\abe1800b0a9dacb69db8ba8770e95c71.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\background.html, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\bfe3bb57fb7d593118dc3e2d7149eb94.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\browser.xul, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\c7ca985c1045427131320786a6ffe755.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\d9cdbca8cf163c3ae38777a3c274d552.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\df44c2b84da00e486fbf0fc3b459c6b2.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\dialog.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\options.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\options.xul, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\search_dialog.xul, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\258e8b81f3637b8163db4e43cd3593ad.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\4d0c2dd47c3fb76b7469bc7fd69ffce9.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\4d8d2621fa6ff32b61858fdd979c237b.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\635635a1fd89f0f352015e7e7056ab8b.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\7a30de25de1a41df15bb5d92bac0de2a.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\94220354e8a79a1abead46df220a6f89.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\9a391a3f13a881e63f9411155eb3d134.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\a580e939cb874ef7460f8563b417a147.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\a82b127cbc1a18659e225fe417bc000a.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\ad52976f074cd9d07becd6d8132e0989.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\b5a60a1fd2714238daa2f058a1a0b33c.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\ba4523294f46be90a08e19d1ede6fc54.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\cd9da99454f614b3064a1b5b04d3d0b6.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\cfd1245635673cb7c5910c2a92e36d13.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\d696392704b43af88c61d4ab865b1e48.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\api\fd6652c664985d374e01523cb2904197.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\58f68c5bfdabf9ee2b183dd7eb9b278c.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\03220bedd27e055b78cf970c0ee84c2f.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\13fc6c5b80c25426d77ad596e3e4afd7.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\196d2161ea49dc7c6389559ce9496839.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\1accc065787048d37c6c9f31e6735153.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\237bd37fdb4a245e66c8c9fd2f5dfefe.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\26c4a41ff040a1b9d919343510d40a48.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\2bde88dcf8288fce4fa85597f74136f1.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\35b60bae617946ad80ba12e61b23f40f.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\5686416727b6187af8cdbfbd594f8759.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\58ea4392fabea62bfdf6a0a36d10a47f.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\5b08bf795988acdfdc930c62b45f2823.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\5e33f22d9d1a99c124497ab03fe57038.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\87f45ecf6c01c32bb9fa6f7429d19fc8.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\8930ad901afa3b5d8a352a77f404f3bd.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\90dcff6fca36ba87111107caa717ed3f.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\9ac3ab51bb35868b11a6adc7861341f9.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\a5a1dba9904529743c3ad53cbd258afc.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\b8d47686b8415f78dc314d5f7e162b81.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\c9915ff8398aae5faebd69656667e48c.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\chrome\content\core\installer.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\defaults\preferences\prefs.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\manifest.xml, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins.json, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\1.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\102.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\13.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\14.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\16.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\17.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\177.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\180.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\182.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\183.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\184.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\195.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\200.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\207.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\21.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\22.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\220.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\223.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\242.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\246.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\253.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\28.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\288.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\290.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\345.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\354.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\376.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\385.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\391.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\399.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\4.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\47.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\64.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\7.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\72.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\78.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\9.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\91.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\plugins\98.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\userCode\background.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\extensionData\userCode\extension.js, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com\locale\en-US\translations.dtd, Quarantined, [00aae3b35634a88e615d85e92cd96898], PUP.Optional.iWebar.A, C:\Program Files\iWebar\20d0c8d3-542b-4360-b6f0-fd9837f88b68.xpi, Quarantined, [bdedb3e30e7cec4afd031db739ca748c], PUP.Optional.iWebar.A, C:\Program Files\iWebar\Uninstall.exe, Quarantined, [bdedb3e30e7cec4afd031db739ca748c], Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.