Jump to content

Removal instructions for Easy Deals 1.2

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Easy Deals 1.2?

The Malwarebytes research team has determined that Easy Deals 1.2 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Easy Deals 1.2?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Easy Deals 1.2 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Easy Deals 1.2?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Easy Deals 1.2?
  • No, Malwarebytes' Anti-Malware removes Easy Deals 1.2 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Easy Deals 1.2 hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: Easy Deals 1.2 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com [2015-08-08] C:\Windows\System32\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5 C:\Windows\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user.job C:\Windows\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.job C:\Program Files (x86)\Easy Deals 1.2Easy Deals 1.2 (HKLM-x32\...\Easy Deals 1.2) (Version: 1.36.01.22 - Adassistent) <==== ATTENTIONTask: {0BEA8A78-4E1A-4A5A-B010-ECA86525CACB} - System32\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5 => C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.exe [2015-08-08] (Adassistent) <==== ATTENTIONTask: {9D18573A-6032-4F24-9C57-B636D9836641} - System32\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user => C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.exe [2015-08-08] (Adassistent) <==== ATTENTIONTask: C:\Windows\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.job => C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user.job => C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.exe <==== ATTENTION
Alterations made by the installer:

 

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Easy Deals 1.2       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a.xpi"="08/08/2015 14:34, 506013 bytes, A       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-4.exe"="08/08/2015 14:34, 1492992 bytes, A       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.exe"="08/08/2015 14:34, 1212416 bytes, A       Adds the file Uninstall.exe"="08/08/2015 14:34, 116224 bytes, A       Adds the file utils.exe"="08/08/2015 14:34, 1973476 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\defaults\preferences       Adds the file prefs.js"="08/08/2015 14:34, 3581 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5"="08/08/2015 14:34, 5470 bytes, A       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user"="08/08/2015 14:34, 5482 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.job"="08/08/2015 14:34, 2440 bytes, A       Adds the file 906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user.job"="08/08/2015 14:34, 2440 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\23325]       "64699"="REG_SZ", "Easy Deals 1.2"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\23325\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.job"="REG_BINARY, ................................       "906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.job.fp"="REG_DWORD", -448683220       "906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user.job"="REG_BINARY, ................................       "906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user.job.fp"="REG_DWORD", -452898563    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Easy Deals 1.2    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Easy Deals 1.2\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Easy Deals 1.2\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Easy Deals 1.2\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\23325]       "64699"="REG_SZ", "Easy Deals 1.2"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\23325\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Easy Deals 1.2]       "CrAppId"="REG_SZ", "64699"       "CrPublisherId"="REG_SZ", "23325"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Easy Deals 1.2\utils.exe"       "DisplayName"="REG_SZ", "Easy Deals 1.2"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Adassistent"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Easy Deals 1.2\Uninstall.exe /fcp=1  "    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\23325]       "64699"="REG_SZ", "Easy Deals 1.2"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\23325\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Adassistent]       "64699"="REG_SZ", "Easy Deals 1.2"
Malwarebytes Anti-Malware log:

 

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 08/08/2015Scan Time: 14:44Logfile: mbamEasyDeals12.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.08.08.01Rootkit Database: v2015.08.06.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 329577Time Elapsed: 4 min, 6 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 10PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\23325, Quarantined, [c69baf57c4c752e4252d5cfa8b78e020], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5, Delete-on-Reboot, [263bdd293d4e73c39157060e0bf802fe], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user, Delete-on-Reboot, [e37e14f26427d363876145cf27dc0bf5], PUP.Optional.EasyDeals.A, HKLM\SOFTWARE\WOW6432NODE\Easy Deals 1.2, Quarantined, [4b16788ec1cafb3b90b53f526b99ff01], PUP.Optional.CrossRider.C, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [f76af3136e1d77bf8d64d94055ae5da3], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\23325, Quarantined, [8bd620e65e2d64d2252df660986b3bc5], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [d28f5caa741777bf4b07e2a4e321c739], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\23325, Quarantined, [9bc6db2b0f7c52e4f2982f0ae51e1fe1], PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Adassistent, Quarantined, [9fc2778f4c3f092da081b5a16a99bf41], PUP.Optional.EasyDeals.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Easy Deals 1.2, Quarantined, [c49d2fd7d2b9ca6cbf32ea10a161b14f], Registry Values: 0(No malicious items detected)Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\defaults, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\defaults\preferences, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\userCode, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\locale, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\locale\en-US, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.EasyDeals.A, C:\Program Files (x86)\Easy Deals 1.2, Quarantined, [c49d2fd7d2b9ca6cbf32ea10a161b14f], Files: 119PUP.Optional.EasyDeals.A, C:\Users\{username}\Desktop\Setup.exe, Quarantined, [f76a0cfacdbe4de9cdb7c7644bb6f40c], PUP.Optional.EasyDeals.A, C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-4.exe, Quarantined, [9ac730d6bbd00432cfb5909b28d9d42c], PUP.Optional.EasyDeals.A, C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.exe, Quarantined, [c59cef17ee9d2e08ee9671bab74a52ae], PUP.Optional.EasyDeals.A, C:\Program Files (x86)\Easy Deals 1.2\utils.exe, Quarantined, [84dd02046d1e221453319f8c2cd57c84], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5, Quarantined, [66fba165206b0135a975d073d72c6c94], PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user, Quarantined, [81e055b17a1112241fffbc87a85b04fc], PUP.Optional.CrossRider.T, C:\Windows\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5.job, Quarantined, [6cf59f677318a393d118e8a564a006fa], PUP.Optional.CrossRider.T, C:\Windows\Tasks\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a-5_user.job, Quarantined, [a4bdac5a107b50e677720c81e12320e0], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\crossrider_statusbar.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\button1.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\button2.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\button3.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\button4.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\button5.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\icon128.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\icon16.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\icon24.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\icon48.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\panelarrow-up.png, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\popup.html, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\skin.css, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\skin\update.css, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome.manifest, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\install.rdf, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\2968e059791a8e8d5129c7938647e50a.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\59e53f73f93918dc79c5009be85d0f1c.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\6d81b272ae38a8fd2adbdf775ee35775.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\7411d7a5241bf21bc18668557dabfb94.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\9074e21a9914d953689a733283738b80.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\background.html, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\browser.xul, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\daf6fa2c41ce663b844485c702576eb8.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\dialog.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\options.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\options.xul, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\search_dialog.xul, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\6b87b199dd75126453f8b07fd84c3ab7.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\00ac301a8e72fb1158238d74b563585e.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\033f19cae2128aa8a826b958ec1007cb.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\0d4c49ee9d236fc99583a82a3ad7a684.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\24c44bb61ccf5a84a286d99adc26afdb.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\3181037502b940af681185e9e5ce422a.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\324dffdb90b1e36920633a8ca7a412cf.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\45f7e1610cf04ae626717bbd74522163.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\5e878cd7d37a5d19b219b57225e1bf9f.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\82916d407993bf84ae47eb57b2b41277.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\96f1c8eb63af8f5acf711fbea7d70638.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\aa6d68d2af576b7794b6626f6a139cc5.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\aef872f3a2503822fc7b0185de043396.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\b5b2112c55f0b8416de2756583419cbd.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\f1455d6fffe45d27b459d944916514bf.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\api\f6d080661c6332174641fd5b42fdb0cc.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\8d1662882fb78478ba0fc2bf5e89096a.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\00703909484924151ccee743480bdaa0.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\00c3225625e1ee688cfce5fd02105821.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\087e3d9c9bd706573801175c257b8f5a.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\08f3258e79db99f5d187e9fe1d84dc60.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\0b732631f4c612a0433e9434bdee7766.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\1a80ef8708963ff2acf189477e49bb04.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\246d29a4f9e9369cd3f415b0713689b4.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\56181c94590bb3c7774860ff62c05758.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\5de4ecd0d387ed8888b20b796a3ce4d1.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\7499d99bac3e0be8b98774489e574319.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\8c31c6e4648d2aa07d4d5efcbaaa6431.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\8de84afae514718d9c4087f2a3e88c5d.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\a8cb0b5145fb0c39cfc6246cbbed87f6.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\b8e5aceab73a0374ef4a77e7f526ca69.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\c5382c35cae6466c8719b61aecd9e889.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\d5a74eede25b7f4ea40e772bc35735d0.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\e5e3109c0024f51473b4983b00f30d12.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\e68d47cc3bae76e9a87eb866ee5409d2.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\f19e9f7df54feadd2df38ac977825295.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\chrome\content\core\installer.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\defaults\preferences\prefs.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\manifest.xml, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins.json, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\102.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\13.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\14.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\16.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\17.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\180.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\184.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\192.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\193.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\195.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\200.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\220.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\223.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\230.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\233.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\242.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\246.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\253.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\263.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\273.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\288.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\289.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\345.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\354.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\359.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\376.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\385.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\390.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\391.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\4.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\47.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\64.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\7.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\78.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\9.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\plugins\91.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\userCode\background.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\extensionData\userCode\extension.js, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\1c021e811b224beba7ca0a1c@13f4ea57cb304bae95228b2f9e68.com\locale\en-US\translations.dtd, Quarantined, [431ec93d008ba591efbab1ea9e66f40c], PUP.Optional.EasyDeals.A, C:\Program Files (x86)\Easy Deals 1.2\906ae050-c0d4-4fa5-a8cc-d1c88cfc913a.xpi, Quarantined, [c49d2fd7d2b9ca6cbf32ea10a161b14f], PUP.Optional.EasyDeals.A, C:\Program Files (x86)\Easy Deals 1.2\Uninstall.exe, Quarantined, [c49d2fd7d2b9ca6cbf32ea10a161b14f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14f0d51c944369b8142f26dce0ad8101"), Replaced,[de83cc3aa9e22b0bdec4a5e18e773dc3]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.