Jump to content

Removal instructions for Plus_HD_1.3V02.09

Metallica
 Share

Recommended Posts

  • Staff
Metallica

Metallica

Posted
  • Staff
Posted

What is Plus_HD_1.3V02.09?

The Malwarebytes research team has determined that Plus_HD_1.3V02.09 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Plus_HD_1.3V02.09?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Plus_HD_1.3V02.09 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Plus_HD_1.3V02.09?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Plus_HD_1.3V02.09?
  • No, Malwarebytes' Anti-Malware removes Plus_HD_1.3V02.09 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Plus_HD_1.3V02.09 hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

protection1.png

and it stops the connections the browser hijacker tries to make:

protection2.png

Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: Plus_HD_1.3V02.09 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com [2015-10-22] [not signed] C:\Windows\System32\Tasks\406af796-49cb-4964-88f3-071c458e8506-5 C:\Windows\Tasks\406af796-49cb-4964-88f3-071c458e8506-5_user.job C:\Windows\Tasks\406af796-49cb-4964-88f3-071c458e8506-5.job C:\Program Files (x86)\Plus_HD_1.3V02.09Plus_HD_1.3V02.09 (HKLM-x32\...\Plus_HD_1.3V02.09) (Version: 1.36.01.22 - Video HDV02.09)Task: {499A8637-807C-4A22-8370-E882CA256358} - System32\Tasks\406af796-49cb-4964-88f3-071c458e8506-5_user => C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506-5.exe [2015-10-22] (Video HDV02.09) <==== ATTENTIONTask: {4DBC19AA-EBEE-4D73-B59F-4B3C924D10C8} - System32\Tasks\406af796-49cb-4964-88f3-071c458e8506-5 => C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506-5.exe [2015-10-22] (Video HDV02.09) <==== ATTENTIONTask: C:\Windows\Tasks\406af796-49cb-4964-88f3-071c458e8506-5.job => C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506-5.exe <==== ATTENTIONTask: C:\Windows\Tasks\406af796-49cb-4964-88f3-071c458e8506-5_user.job => C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506-5.exe <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)---------------------------------------------------    Adds the folder C:\Program Files (x86)\Plus_HD_1.3V02.09       Adds the file 406af796-49cb-4964-88f3-071c458e8506.xpi"="22/10/2015 09:33, 445384 bytes, A       Adds the file 406af796-49cb-4964-88f3-071c458e8506-4.exe"="22/10/2015 09:33, 1321040 bytes, A       Adds the file 406af796-49cb-4964-88f3-071c458e8506-5.exe"="22/10/2015 09:33, 1195600 bytes, A       Adds the file Uninstall.exe"="22/10/2015 09:33, 118352 bytes, A       Adds the file utils.exe"="22/10/2015 09:33, 2021842 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com       Adds the file chrome.manifest"="22/10/2015 09:33, 618 bytes, A       Adds the file install.rdf"="22/10/2015 09:33, 1289 bytes, A    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin    In the existing folder C:\Windows\System32\Tasks       Adds the file 406af796-49cb-4964-88f3-071c458e8506-5"="22/10/2015 09:33, 5476 bytes, A       Adds the file 406af796-49cb-4964-88f3-071c458e8506-5_user"="22/10/2015 09:33, 5488 bytes, A    In the existing folder C:\Windows\Tasks       Adds the file 406af796-49cb-4964-88f3-071c458e8506-5.job"="22/10/2015 09:33, 2446 bytes, A       Adds the file 406af796-49cb-4964-88f3-071c458e8506-5_user.job"="22/10/2015 09:33, 2446 bytes, ARegistry details [View: All details] (Selection)------------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "Plus_HD_1.3V02.09"    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]       "406af796-49cb-4964-88f3-071c458e8506-5.job"="REG_BINARY, ................................       "406af796-49cb-4964-88f3-071c458e8506-5.job.fp"="REG_DWORD", 1061274800       "406af796-49cb-4964-88f3-071c458e8506-5_user.job"="REG_BINARY, ................................       "406af796-49cb-4964-88f3-071c458e8506-5_user.job.fp"="REG_DWORD", -451285376    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "Plus_HD_1.3V02.09"    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus_HD_1.3V02.09]       "CrAppId"="REG_SZ", "72893"       "CrPublisherId"="REG_SZ", "30935"       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Plus_HD_1.3V02.09\utils.exe"       "DisplayName"="REG_SZ", "Plus_HD_1.3V02.09"       "DisplayVersion"="REG_SZ", "1.36.01.22"       "Publisher"="REG_SZ", "Video HDV02.09"       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Plus_HD_1.3V02.09\Uninstall.exe /fcp=1  "    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus_HD_1.3V02.09\accz1T9yecQICLFqs7Bo/kiDiLd2mRmqJ4a0TBJm2cCttLxf0B1zOXV22WrxrlAAZC6RPjvlN5wM4fs/9f5Shp/RyNJQH49oF9xO08uTbBpb9TEab9KYidHUlnEDutDdjOfC36SYTBwu/3AKYcvgxAN42jvIcjs1ENYdPuv0bTg=]       "n5qExiS2YeKOjhICpRoU4nP8p+M5li4yNngoX50bN/CTavNFfndeN9pRhvwzD1TpAxZR7RPXh8vgpEFHcbB3EDtmkJsxqeMBKYGFgw5gZaG+KKqzzeBXjkIecz3UmW/obUsak9ooTyuSkwfjirH85DV8X+GOqfysqHaGr3pGO6w="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus_HD_1.3V02.09\cM0INLOYK5P8MkFkk1tsjBU4T9l3WPd/Qgdxsyh2E0T/BsAwH/k4Rj2EECZZt1ciMemylkjG3679hOmWo6NEywfKpo/9YrXZCYGVNTvY7cBYRPGBhDBiKpic6/3P93C+AESPcnUsFgZIIiEY8QMd5WwgJUrF70ZzuCeStu2ai+o=]       "DY60/WIjKrT37w6bupJIdS0/U9hv6nGuXt66KOEjZWnFhb2BC7E8nVALLvLF2lHR7KhvussUyYUip4LyWQu6tIe8sjJ8KfnHNntrqP5UpggHuZd/zMIApAJdgg3+VfwthwSq7zqkyzX04ZwsNZuoz1AOBkLBkwS2vRj40ye3pWI="="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus_HD_1.3V02.09\Installer]       "BundledFirefox"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_LOCAL_MACHINE\SOFTWARE\YorkNewCin]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]       "Bic"="REG_SZ", "2f2bc621a7c304774b7408716c3e8213IE"       "Verifier"="REG_SZ", "6ef6eac254a7632839836d3cb24698df"    [HKEY_CURRENT_USER\Software\ArenaHD]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\HighDefAction]       "value"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]       "72893"="REG_SZ", "Plus_HD_1.3V02.09"    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]       "Installed"="REG_DWORD", 1    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Video HDV02.09]       "72893"="REG_SZ", "Plus_HD_1.3V02.09"    [HKEY_CURRENT_USER\Software\YorkNewCin]       "value"="REG_DWORD", 1
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 22/10/2015Scan Time: 09:39Logfile: mbamHD_Plus.txtAdministrator: YesVersion: 2.2.0.1020Malware Database: v2015.10.22.01Rootkit Database: v2015.10.16.01License: PremiumMalware Protection: DisabledMalicious Website Protection: EnabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x64File System: NTFSUser: {username}Scan Type: Threat ScanResult: CompletedObjects Scanned: 304000Time Elapsed: 5 min, 9 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: EnabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 0(No malicious items detected)Modules: 0(No malicious items detected)Registry Keys: 19PUP.Optional.Downloader, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Plus_HD_1.3V02.09, Quarantined, [8e6bc6938902a294d73c1634c43ddf21], PUP.Optional.HighDefAction, HKLM\SOFTWARE\HighDefAction, Quarantined, [689193c6c5c653e3a5b097cc34cf09f7], PUP.Optional.YorkNewCin, HKLM\SOFTWARE\YorkNewCin, Quarantined, [19e05efbcbc091a5fe05deaec1422cd4], PUP.Optional.CinemaPlus, HKLM\SOFTWARE\ARENAHD, Quarantined, [f9004a0f3754033357677fd210f302fe], PUP.Optional.CrossRider, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [a8515cfdb3d89d9991db92c6c34051af], PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\406af796-49cb-4964-88f3-071c458e8506-5, Delete-on-Reboot, [a356f7629af1c274274aa1b711f2e31d], PUP.Optional.CrossRider, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\406af796-49cb-4964-88f3-071c458e8506-5_user, Delete-on-Reboot, [d227c792ef9c21155819bc9c23e033cd], PUP.Optional.HighDefAction, HKLM\SOFTWARE\WOW6432NODE\HighDefAction, Quarantined, [8574fc5d0c7f6dc9a8add58e000347b9], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\Plus_HD_1.3V02.09, Quarantined, [0bee4b0e3e4dd66073e89cbc847f4fb1], PUP.Optional.YorkNewCin, HKLM\SOFTWARE\WOW6432NODE\YorkNewCin, Quarantined, [8079ec6d642790a62dd60884da294db3], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [ae4b6ced99f252e4c49ff86055aeaf51], PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\ARENAHD, Quarantined, [8d6cb1a8c9c2a88e536be1705da67090], PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [5f9a99c06d1ef244373582d67192639d], PUP.Optional.HighDefAction, HKCU\SOFTWARE\HighDefAction, Quarantined, [4aaf1d3c315a2313f85cd58e42c1c838], PUP.Optional.YorkNewCin, HKCU\SOFTWARE\YorkNewCin, Quarantined, [fffac8917417ff37669ca3e9a2616f91], PUP.Optional.CrossRider, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [25d499c0fc8fe45264d976e143c07f81], PUP.Optional.CinemaPlus, HKCU\SOFTWARE\ARENAHD, Quarantined, [aa4fd3865833c86eb9e638197d86b848], PUP.Optional.CrossRider, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [f207401969227db982cf5afdea198878], PUP.Optional.CrossRider, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Video HDV02.09, Quarantined, [9e5b3425dab175c1460dfb5c778c37c9], Registry Values: 6PUP.Optional.CinemaPlus, HKLM\SOFTWARE\ARENAHD|value, 1, Quarantined, [f9004a0f3754033357677fd210f302fe]PUP.Optional.PCTuner, HKLM\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [62972633078494a229ef2351dc27d32d]PUP.Optional.CinemaPlus, HKLM\SOFTWARE\WOW6432NODE\ARENAHD|value, 1, Quarantined, [8d6cb1a8c9c2a88e536be1705da67090]PUP.Optional.PCTuner, HKLM\SOFTWARE\WOW6432NODE\HIGHDEFACTION|value, 1, Quarantined, [926788d169223bfbe92fea8a877c7888]PUP.Optional.CinemaPlus, HKCU\SOFTWARE\ARENAHD|value, 1, Quarantined, [aa4fd3865833c86eb9e638197d86b848]PUP.Optional.PCTuner, HKCU\SOFTWARE\HIGHDEFACTION|value, 1, Quarantined, [8b6ef861a6e5261053c11d5706fd49b7]Registry Data: 0(No malicious items detected)Folders: 14PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Program Files (x86)\Plus_HD_1.3V02.09, Quarantined, [48b1ef6a1774ed4991a870dc867c5aa6], Files: 132PUP.Optional.CrossRider, C:\Users\{username}\Desktop\2691022.exe, Quarantined, [db1ef2675f2c8fa76d94c28ab15342be], PUP.Optional.CrossRider, C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506-4.exe, Quarantined, [f108ba9fe0abd95d9c65014bfe0603fd], PUP.Optional.CrossRider, C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506-5.exe, Quarantined, [b84175e4b0db49ede21f93b99a6a03fd], PUP.Optional.Downloader, C:\Program Files (x86)\Plus_HD_1.3V02.09\Uninstall.exe, Quarantined, [8e6bc6938902a294d73c1634c43ddf21], PUP.Optional.CrossRider, C:\Program Files (x86)\Plus_HD_1.3V02.09\utils.exe, Quarantined, [6e8b6dec8a0167cf02ff3d0f34d031cf], PUP.Optional.CrossRider, C:\Windows\System32\Tasks\406af796-49cb-4964-88f3-071c458e8506-5, Quarantined, [fdfca9b0a9e261d59ae8113741c27e82], PUP.Optional.CrossRider, C:\Windows\System32\Tasks\406af796-49cb-4964-88f3-071c458e8506-5_user, Quarantined, [ea0fff5aa2e9eb4b750d2028867df50b], PUP.Optional.CrossRider, C:\Windows\Tasks\406af796-49cb-4964-88f3-071c458e8506-5.job, Quarantined, [19e05603eba0c76fa8dbf45493701ae6], PUP.Optional.CrossRider, C:\Windows\Tasks\406af796-49cb-4964-88f3-071c458e8506-5_user.job, Quarantined, [4dac6dec830890a6dea5ab9d20e3bb45], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\crossrider_statusbar.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button1.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button2.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button3.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button4.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\button5.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon128.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon16.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon24.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\icon48.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\panelarrow-up.png, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\popup.html, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\skin.css, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\skin\update.css, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome.manifest, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\install.rdf, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\2ca640ceb8967b5a6cdb7e8a1a710665.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\4f6a1740724c3abbf80c01fb8920162c.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\80062ab344326e9478db8c09b79cd548.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\b5f9404e37aba19a6d72f310318e404b.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\background.html, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\browser.xul, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\dialog.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\e9aee1c0d9cd850e8b7ad9e3a956d44c.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\fd2f18147fcb6c8ccd11d93f49122c73.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\options.xul, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\search_dialog.xul, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\039b876aa56daf96da249d0e1957ffdd.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\0899e5fceb188deb778bf4c17027ed67.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\223d815c09034da5391b557bc7e9ef28.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\2df1574b849a8fb4c622f04713afeed4.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3275d68ff07ddb197f40f1868059f969.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3a27f035092f90682900fe7ae35845d8.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\3a7daf12df616f86da50ad56191ef11d.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\4dbb1c65ee96a43477689b8e340c94bf.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\51117b6cd9b734636cc96039000f5ed0.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\933688649620b75478f7b7f910634df9.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\bb37cdb02cffa9648223c806b4ec2f73.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\bee2e0bc23153286d96127a18672d8d5.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\db57a5315fbb875f9789e1c110e90b90.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e63c963d3da67ee01f0569167d0a90f9.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e89aa89751f8fd601adabc7e982f10b9.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\api\e9a01afd6ffe3de8e13554a394249415.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\00f4c08369bf9de76b0790caf260265d.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\03a1f2e64f90eb64aaf0a210d5f2444d.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\069e5589460aef56de341cc18c0b20a5.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\1b6a58747088d05cb4a052a5418f2750.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\2cb4a224a560a282a4848bc0108f8c3c.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\5fd2f06b05607aa24441ca93333a4767.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\63f33f5e284736dd53e613733003a725.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\7c85acbb5668390b8d0388800dbe0762.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\832b7a752d542f6b9ff5bc4cd7fee080.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\8dc730888289fab04f90e976dec9fc44.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\a63dcb0138e385f9dd79d6373ce7fc15.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\aeeae6b53405b465fc406cb587a179ce.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\afaab6e0f022b02207a694d6bb3c7423.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\c8ce3351d76fdd9d36adc0df6ba90fa3.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\d1cead771c2ce8403a9a2a43c5bccd69.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\d303c16cfdb4bffe16c764c497bf64ca.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\d94a3e079d354e396edbca5548fa603a.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\d993c6cea4e0c438d9b1f448fe1d1c84.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\f8308f9789a2af215515e6ed71218cb4.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\ff6a99eeda2535d952cbcaf825987c47.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\chrome\content\core\installer.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\defaults\preferences\prefs.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\manifest.xml, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins.json, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\273.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\102.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\119.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\13.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\14.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\16.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\17.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\178.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\179.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\180.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\184.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\195.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\200.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\220.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\223.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\231.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\232.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\234.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\242.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\246.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\252.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\253.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\262.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\263.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\281.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\288.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\289.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\300.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\311.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\335.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\339.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\345.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\354.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\356.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\376.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\380.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\385.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\389.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\390.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\391.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\4.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\419.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\424.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\47.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\64.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\7.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\78.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\9.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\plugins\91.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\background.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\extensionData\userCode\extension.js, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com\locale\en-US\translations.dtd, Quarantined, [18e1e871513a36006b2e193c07fc14ec], PUP.Optional.CrossRider, C:\Program Files (x86)\Plus_HD_1.3V02.09\406af796-49cb-4964-88f3-071c458e8506.xpi, Quarantined, [48b1ef6a1774ed4991a870dc867c5aa6], PUP.Optional.CrossRider, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "1508e7a943e1926ca473d251bcafbd5f"), Replaced,[f405ec6da0ebf4423376ef639e66eb15]Physical Sectors: 0(No malicious items detected)(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
Link to post
Share on other sites
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.