Jump to content

Removal instructions for MyBrowser


Recommended Posts

  • Staff

What is MyBrowser?

The Malwarebytes research team has determined that MyBrowser is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by MyBrowser?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did MyBrowser get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove MyBrowser?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of MyBrowser?
  • No, Malwarebytes' Anti-Malware removes MyBrowser completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the MyBrowser hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

and it blocks some of the advertisements the PUP tries to fetch:

protection2.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: MyBrowser 1.0.2V10.09 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com [2015-09-11] C:\Windows\System32\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5 C:\Windows\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user.job C:\Windows\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.job C:\Program Files (x86)\MyBrowser 1.0.2V10.09MyBrowser 1.0.2V10.09 (HKLM-x32\...\MyBrowser 1.0.2V10.09) (Version: 1.36.01.22 - MyBrowser 1.0.2V10.09)Task: {1C08EE77-6E18-4C91-B3FB-0EBD8E3517E4} - System32\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5 => C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.exe [2015-09-11] (MyBrowser 1.0.2V10.09) <==== ATTENTIONTask: {31A2E971-E766-4198-B17E-D0839096830E} - System32\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user => C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.exe [2015-09-11] (MyBrowser 1.0.2V10.09) <==== ATTENTIONTask: {37C88472-20CF-43EC-AB70-8E9F79B8D30E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-08-12] (Microsoft Corporation)Task: C:\Windows\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.job => C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\MyBrowser 1.0.2V10.09       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3.xpi"="9/11/2015 2:22 PM, 445872 bytes, A       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3-4.exe"="9/11/2015 2:22 PM, 1420368 bytes, A       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3-5.exe"="9/11/2015 2:22 PM, 1124944 bytes, A       Adds the file Uninstall.exe"="9/11/2015 2:22 PM, 115280 bytes, A       Adds the file utils.exe"="9/11/2015 2:22 PM, 1862571 bytes, A    In the existing folder C:\Windows\System32\Tasks       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3-5"="9/11/2015 2:22 PM, 5478 bytes, A       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user"="9/11/2015 2:22 PM, 5484 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3-5.job"="9/11/2015 2:22 PM, 2474 bytes, A       Adds the file 051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user.job"="9/11/2015 2:22 PM, 2474 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "74253"="REG_SZ", "MyBrowser 1.0.2V10.09"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "051316a5-2bd3-4d17-ad4e-7337b26215b3-5.job"="REG_BINARY, ................................       "051316a5-2bd3-4d17-ad4e-7337b26215b3-5.job.fp"="REG_DWORD", 783013738       "051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user.job"="REG_BINARY, ................................       "051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user.job.fp"="REG_DWORD", 854512548    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "5defb532440eafdcc6be6529ad0126bbIE"       "Verifier"="REG_SZ", "45493c37188821edc14782f6b1b6511d"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935]       "74253"="REG_SZ", "MyBrowser 1.0.2V10.09"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MyBrowser 1.0.2V10.09]       "CrAppId"="REG_SZ", "74253"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\MyBrowser 1.0.2V10.09\utils.exe"       "DisplayName"="REG_SZ", "MyBrowser 1.0.2V10.09"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "MyBrowser 1.0.2V10.09"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\MyBrowser 1.0.2V10.09\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V10.09\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V10.09\ixiKNjRqaf9NtAZy1DToX5ULLwB1rOVcYyhVhJ4xIzWO4RznEDDU0aoKhG3IkSKb1GVBKLiBretK/NnkB+lWat72DZvushk2uTgeYEXulvKRVX2za+IsB6e32qqJgVgfqlUqZ6c7q/i9PBvSYCrOW74tfo8+yP7hF+wfx2BDTzw=]       "HFlzHozHztBvQ73gNzvNCxd0E0RlSmZvtp745T9DifVQk8+H+MXSz4v3bydsVo28gY1kRpLqtfEN03huk8mlqwlxM9YAvPSJxVEuA72ol7FXxnAYM6oaRUbRq5Pk0oPCER6f+6mNVHz49XGCaIXbZLPuZojkeehM75PDPHJRnW4="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V10.09\MaoTfP1KF7R7r9nFgiE5WbYPniPQZVrY+wOkYDouLPjFA6fXaPu1osAfPBtQAKFkgEuLXANVAKxUi+mJuuXKG7oHsKsC8EIbexadgh1plCWp4Npy2MoVyz2Eu1QJW1ScD2eQk3Vp/9yCp8lS9UAmviFqH30AsvrDUHwqaE0jdM8=]       "i0yTmN+RY1z/47iqV5cM7LPgT+SjGWThL45cdbk6OXXHS3EDUEUMjYzaWjMwKhOGZz5ocK8ehG/2WFM3l+IZRi8QZzxpf/eg3mRx/CqjIExl2uyJ93Twuws4NbzyEwDfzgpn0UZq5s8j0aE7kqrTJHM7w2uU4sXYxah16onIr4o="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "5defb532440eafdcc6be6529ad0126bbIE"       "Verifier"="REG_SZ", "45493c37188821edc14782f6b1b6511d"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "74253"="REG_SZ", "MyBrowser 1.0.2V10.09"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\MyBrowser 1.0.2V10.09]       "74253"="REG_SZ", "MyBrowser 1.0.2V10.09"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 9/11/2015Scan Time: 2:34 PMLogfile: mbamMyBrowser.txtAdministrator: YesVersion: 2.1.8.1057Malware Database: v2015.09.11.05Rootkit Database: v2015.08.16.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 8.1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 349661Time Elapsed: 30 min, 45 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 19PUP.Optional.Downloader, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MyBrowser 1.0.2V10.09, Quarantined, [1d843bf3612aaa8ceb5da3170af7758b], PUP.Optional.HighDefAction, HKLM\SOFTWARE\HighDefAction, Quarantined, [158ce04e3b50d066b764b9de669ed729], PUP.Optional.YorkNewCin, HKLM\SOFTWARE\YorkNewCin, Quarantined, [31701a1448438bab8f3b02bee71db050], PUP.Optional.CinemaPlus, HKLM\SOFTWARE\ARENAHD, Quarantined, [1e838aa489026dc9d55a33522bd98a76], PUP.Optional.CrossRider, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [f6abf33ba5e6cb6b35d2127aca3a23dd], PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\051316a5-2bd3-4d17-ad4e-7337b26215b3-5, Delete-on-Reboot, [673a9a944d3e46f0fc10cebe52b28f71], PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user, Delete-on-Reboot, [762b3cf2aae192a44fbdeaa2ee16fa06], PUP.Optional.HighDefAction, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [831e101ee6a56cca6bb05641758fc53b], PUP.Optional.MyBrowser, HKLM\SOFTWARE\WOW6432NODE\MyBrowser 1.0.2V10.09, Quarantined, [257c6fbfd1ba2a0c39333b6907fdb34d], PUP.Optional.YorkNewCin, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [4f529a946f1c48eee6e4734d5fa56799], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [2a7753db0982082ee41a1c6fa95bbb45], PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [a8f90628c6c59f976bc495f0fd07a45c], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [ffa24ae4c9c28ea8a463335946be45bb], PUP.Optional.HighDefAction, HKCU\SOFTWARE\HighDefAction, Quarantined, [930e84aabbd0db5b78a285123fc5df21], PUP.Optional.YorkNewCin, HKCU\SOFTWARE\YorkNewCin, Quarantined, [bde4d25c88035bdb1dac0cb46e968a76], PUP.Optional.CrossRider, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [1988d15db5d6280e4178d0babc48f808], PUP.Optional.CinemaPlus, HKCU\SOFTWARE\ARENAHD, Quarantined, [6f321c12a0ebda5ca26ec7bec044bf41], PUP.Optional.CrossRider, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [cad744eac5c69b9b87470585b74d0ff1], PUP.Optional.CrossRider, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\MyBrowser 1.0.2V10.09, Quarantined, [475ab87602893df98b45fe8c699b6997], Registry Values: 6PUP.Optional.CinemaPlus, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [1e838aa489026dc9d55a33522bd98a76]PUP.Optional.PCTuner, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [3d64d05e5b300b2b5a097830798b25db]PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [a8f90628c6c59f976bc495f0fd07a45c]PUP.Optional.PCTuner, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [5f429b93860588aee77cc2e6ef15da26]PUP.Optional.CinemaPlus, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [6f321c12a0ebda5ca26ec7bec044bf41]PUP.Optional.PCTuner, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [9d0450dea6e5da5c7fe0fcacbc48d030]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults\preferences, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\userCode, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale\en-US, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.MyBrowser, C:\Program Files (x86)\MyBrowser 1.0.2V10.09, Quarantined, [821f87a76229c86edd2cb3653fc4dd23], Files: 130PUP.Optional.MyBrowser, C:\Users\{username}\Desktop\212.exe, Quarantined, [f5ac0c22dab13ff70894efacbb4a31cf], PUP.Optional.MyBrowser, C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3-4.exe, Quarantined, [445d9a94aeddcc6af8a4c8d374919c64], PUP.Optional.MyBrowser, C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.exe, Quarantined, [4859e24c602b3bfbf4a8811a08fd13ed], PUP.Optional.Downloader, C:\Program Files (x86)\MyBrowser 1.0.2V10.09\Uninstall.exe, Quarantined, [1d843bf3612aaa8ceb5da3170af7758b], PUP.Optional.MyBrowser, C:\Program Files (x86)\MyBrowser 1.0.2V10.09\utils.exe, Quarantined, [21804ae4c1ca85b1dac2dcbf7c89f20e], PUP.Optional.CrossRider, C:\Windows\System32\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5, Quarantined, [3d64d35b96f5af879b2fd2a9cc3836ca], PUP.Optional.CrossRider, C:\Windows\System32\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user, Quarantined, [e6bbd05e088369cd19b166154eb6d030], PUP.Optional.CrossRider, C:\Windows\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5.job, Quarantined, [68392b03711ad56119b24f2c7e8647b9], PUP.Optional.CrossRider, C:\Windows\Tasks\051316a5-2bd3-4d17-ad4e-7337b26215b3-5_user.job, Quarantined, [673a9d91791279bd319a9fdcb2523cc4], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\crossrider_statusbar.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button1.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button2.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button3.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button4.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\button5.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon128.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon16.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon24.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\icon48.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\panelarrow-up.png, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\popup.html, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\skin.css, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\skin\update.css, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome.manifest, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\install.rdf, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\07fc6bf2393ccf1ea56f6b57a1c4d633.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\4f0769c99059e2b198adb8748f9191cf.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\95941ca8712d7623e6bf2e6440fbae24.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\9cdb389c38bc7eba311cf11d769aaf3c.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\a97161f46b9ece8114a167947fc40338.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\b56bea26656db739696e1269d2d18aac.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\background.html, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\browser.xul, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\dialog.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\options.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\options.xul, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\search_dialog.xul, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\0b25e58e919b47ac24478406a34924c3.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\38173ea1fe715992e9c03d359dfab7f1.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\3897c9021abde7c874134cb9d1df9b01.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\44939c3651f445d78828801a9de4ea21.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\47ed6cf87df82aba7b2ea0a9451b40c8.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\523d2cebb77798c40702abe788218a40.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\58822499ccd55817b7d40021e5c81c57.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\6030c05dbf6e7725c599224e9b7453d0.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\6506e5ced8213a4da2ad3140af52575d.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\66bbbe622a18e9daa6e4fdfe15445a0f.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\7b70570e9f77628074519547d4e4d031.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\a2454fcae933d8a3ef0b73e60e5b6836.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\a9064e276af89b33e7298897146d247e.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\b3b4a3730a768c1fea70a17a7c8c26b4.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\b7972941172f13f137af13ec2741c678.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\api\e94c8ce8aa27c1d356c1687325fd95b3.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\cd7287aac0dbe7150b2c4a66187e1914.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\1da23f8e1144f10d7196cd2d2483f4ed.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\1e43ad802f9fec40aa035044f24c73bc.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\2861413ecc4d0552e6b136c6f6fdad31.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\2afed29979f68986fde1c4c567ca8a6a.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\553d493a58bea10242dbab69c59bfb1e.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\5815998f09367310a1d77d6182f56f57.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\99ebace7d925e986b27d7950b856f80f.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\aa3c0f1ec172caf4ec6e07ea3b4695ed.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\b04a6d54147d7f3b93a8f9963faef898.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\ba47ef329ce63ee670198b5ee31e3095.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\c5bc1e6c6fe82db0af2c19f04e49c97c.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\d03011833031e7caf1e43d544c5e16e2.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\d1e976845390e82bdc5e048156b6a3a9.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\d1edd7929329cc8140d6458d86adb6ab.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\d24a643297231bcc7b58ac90a263ef55.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\d6519aa63b30c0a5fc8e37e2328e0069.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\e07d9456450a261a5cb83de8a12bc232.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\e2facfb19f2f4597b295013db0ce8a32.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\e8c17a530038eaf3fa56bed397d4ebaa.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\chrome\content\core\installer.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\defaults\preferences\prefs.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\manifest.xml, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins.json, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\281.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\102.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\104.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\119.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\13.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\14.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\16.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\17.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\178.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\179.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\180.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\184.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\195.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\200.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\220.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\223.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\231.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\232.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\234.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\242.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\246.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\252.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\253.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\273.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\288.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\289.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\300.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\334.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\335.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\339.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\345.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\354.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\356.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\376.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\380.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\385.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\389.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\390.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\391.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\4.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\424.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\47.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\64.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\7.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\78.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\9.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\plugins\91.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\userCode\background.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\extensionData\userCode\extension.js, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com\locale\en-US\translations.dtd, Quarantined, [6a37a787d5b69f9762b21574669e669a], PUP.Optional.MyBrowser, C:\Program Files (x86)\MyBrowser 1.0.2V10.09\051316a5-2bd3-4d17-ad4e-7337b26215b3.xpi, Quarantined, [821f87a76229c86edd2cb3653fc4dd23], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14fbc5fde9b50212b3c1592869e3ab47"), Replaced,[4c5525092a610a2c4e4ad6cab253629e]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.