Removal instructions for OMG Music Plus

Content is republished with permission from Malwarebytes.

What is OMG Music Plus?

The Malwarebytes research team has determined that OMG Music Plus is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is effected by OMG Music Plus?

You may see these browser extensions/add-ons:

Posted Image

and this entry in your list of installed programs:

Posted Image

How did OMG Music Plus get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove OMG Music Plus?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You will need Malwarebytes Anti-Malware version 2.00 (beta) or newer to disable the Chrome and Firefox extensions.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-consumer.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan now.
When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
Reboot your computer if prompted.

Is there anything else I need to do to get rid of OMG Music Plus?

The Firefox extension can now safely be removed. Open the "Extensions" tab under "Add-ons" and click "Remove" and "Restart" to complete the removal.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the OMG Music Plus rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

Posted Image

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0049182 - {11111111-1111-1111-1111-110411911182} - C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll

Alterations made by the installer:


File system details  
---------------------------------------------
	Adds the folder C:\Program Files\OMG Music Plus
	   Adds the file 49182.xpi"="3/16/2014 1:18 PM, 283903 bytes, A
	   Adds the file background.html"="2/10/2014 3:08 PM, 729 bytes, A
	   Adds the file Installer.log"="3/16/2014 1:18 PM, 215471 bytes, A
	   Adds the file OMG Music Plus.ico"="2/10/2014 3:08 PM, 9662 bytes, A
	   Adds the file OMG Music Plus-bg.exe"="3/16/2014 1:18 PM, 773120 bytes, A
	   Adds the file OMG Music Plus-bho.dll"="3/16/2014 1:18 PM, 677888 bytes, A
	   Adds the file OMG Music Plus-buttonutil.dll"="3/16/2014 1:18 PM, 428544 bytes, A
	   Adds the file OMG Music Plus-buttonutil.exe"="3/16/2014 1:18 PM, 331264 bytes, A
	   Adds the file OMG Music Plus-codedownloader.exe"="3/16/2014 1:18 PM, 553984 bytes, A
	   Adds the file OMG Music Plus-enabler.exe"="3/16/2014 1:18 PM, 405504 bytes, A
	   Adds the file OMG Music Plus-firefoxinstaller.exe"="3/16/2014 1:18 PM, 932352 bytes, A
	   Adds the file OMG Music Plus-helper.exe"="3/16/2014 1:18 PM, 331776 bytes, A
	   Adds the file OMG Music Plus-updater.exe"="3/16/2014 1:18 PM, 379392 bytes, A
	   Adds the file Uninstall.exe"="3/16/2014 1:18 PM, 77312 bytes, A
	   Adds the file utils.exe"="3/16/2014 1:18 PM, 1171595 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com
	   Adds the file chrome.manifest"="3/16/2014 1:18 PM, 732 bytes, A
	   Adds the file install.rdf"="3/16/2014 1:18 PM, 1345 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content
	   Adds the file api.js"="3/16/2014 1:18 PM, 18742 bytes, A
	   Adds the file background.html"="3/16/2014 1:18 PM, 2001 bytes, A
	   Adds the file baseObject.js"="3/16/2014 1:18 PM, 19 bytes, A
	   Adds the file browser.xul"="3/16/2014 1:18 PM, 4819 bytes, A
	   Adds the file dialog.js"="3/16/2014 1:18 PM, 1343 bytes, A
	   Adds the file ffCoreFilesIndex.txt"="3/16/2014 1:18 PM, 1052 bytes, A
	   Adds the file main.js"="3/16/2014 1:18 PM, 18750 bytes, A
	   Adds the file options.js"="3/16/2014 1:18 PM, 1931 bytes, A
	   Adds the file options.xul"="3/16/2014 1:18 PM, 1913 bytes, A
	   Adds the file platformVersion.js"="3/16/2014 1:18 PM, 612 bytes, A
	   Adds the file search_dialog.xul"="3/16/2014 1:18 PM, 2457 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api
	   Adds the file asyncDB.js"="3/16/2014 1:18 PM, 4805 bytes, A
	   Adds the file background.js"="3/16/2014 1:18 PM, 1336 bytes, A
	   Adds the file browserAction.js"="3/16/2014 1:18 PM, 8906 bytes, A
	   Adds the file contextMenu.js"="3/16/2014 1:18 PM, 5359 bytes, A
	   Adds the file dbManager.js"="3/16/2014 1:18 PM, 10097 bytes, A
	   Adds the file dom_bg.js"="3/16/2014 1:18 PM, 2505 bytes, A
	   Adds the file fileManager.js"="3/16/2014 1:18 PM, 943 bytes, A
	   Adds the file firefox.js"="3/16/2014 1:18 PM, 353 bytes, A
	   Adds the file firefoxNotifications.js"="3/16/2014 1:18 PM, 1116 bytes, A
	   Adds the file firefoxOmnibox.js"="3/16/2014 1:18 PM, 1515 bytes, A
	   Adds the file message.js"="3/16/2014 1:18 PM, 4935 bytes, A
	   Adds the file pageAction.js"="3/16/2014 1:18 PM, 11257 bytes, A
	   Adds the file request.js"="3/16/2014 1:18 PM, 2314 bytes, A
	   Adds the file tabs.js"="3/16/2014 1:18 PM, 3628 bytes, A
	   Adds the file webRequest.js"="3/16/2014 1:18 PM, 3801 bytes, A
	   Adds the file windowsMessagingHandler.js"="3/16/2014 1:18 PM, 960 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core
	   Adds the file addressBarChangeObserver.js"="3/16/2014 1:18 PM, 130 bytes, A
	   Adds the file console.js"="3/16/2014 1:18 PM, 1753 bytes, A
	   Adds the file consts.js"="3/16/2014 1:18 PM, 2356 bytes, A
	   Adds the file delegate.js"="3/16/2014 1:18 PM, 2180 bytes, A
	   Adds the file extensionDataStore.js"="3/16/2014 1:18 PM, 8607 bytes, A
	   Adds the file folderIOWrapper.js"="3/16/2014 1:18 PM, 3526 bytes, A
	   Adds the file httpObserver.js"="3/16/2014 1:18 PM, 2561 bytes, A
	   Adds the file IDBWrapper.js"="3/16/2014 1:18 PM, 4191 bytes, A
	   Adds the file installer.js"="3/16/2014 1:18 PM, 1320 bytes, A
	   Adds the file logFile.js"="3/16/2014 1:18 PM, 1562 bytes, A
	   Adds the file prefs.js"="3/16/2014 1:18 PM, 1649 bytes, A
	   Adds the file progressListenerObserver.js"="3/16/2014 1:18 PM, 1368 bytes, A
	   Adds the file registry.js"="3/16/2014 1:18 PM, 1158 bytes, A
	   Adds the file reloadObserver.js"="3/16/2014 1:18 PM, 1527 bytes, A
	   Adds the file reports.js"="3/16/2014 1:18 PM, 3869 bytes, A
	   Adds the file requestObject.js"="3/16/2014 1:18 PM, 1261 bytes, A
	   Adds the file searchSettings.js"="3/16/2014 1:18 PM, 3426 bytes, A
	   Adds the file uninstallObserver.js"="3/16/2014 1:18 PM, 2372 bytes, A
	   Adds the file updateManager.js"="3/16/2014 1:18 PM, 11288 bytes, A
	   Adds the file utils.js"="3/16/2014 1:18 PM, 18554 bytes, A
	   Adds the file xhr.js"="3/16/2014 1:18 PM, 2852 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences
	   Adds the file prefs.js"="3/16/2014 1:18 PM, 3972 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData
	   Adds the file manifest.xml"="3/16/2014 1:21 PM, 1701 bytes, A
	   Adds the file plugins.json"="3/16/2014 1:21 PM, 11799 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins
	   Adds the file 1_base.js"="3/16/2014 1:18 PM, 6908 bytes, A
	   Adds the file 102_dealply_m.js"="3/16/2014 1:18 PM, 2201 bytes, A
	   Adds the file 103_intext_5_m.js"="3/16/2014 1:21 PM, 2294 bytes, A
	   Adds the file 104_jollywallet_m.js"="3/16/2014 1:18 PM, 1450 bytes, A
	   Adds the file 13_CrossriderAppUtils.js"="3/16/2014 1:18 PM, 7056 bytes, A
	   Adds the file 14_CrossriderUtils.js"="3/16/2014 1:18 PM, 20810 bytes, A
	   Adds the file 16_FFAppAPIWrapper.js"="3/16/2014 1:18 PM, 16158 bytes, A
	   Adds the file 17_jQuery.js"="3/16/2014 1:18 PM, 79982 bytes, A
	   Adds the file 177_crossriderDashboard.js"="3/16/2014 1:18 PM, 30419 bytes, A
	   Adds the file 182_openUrl.js"="3/16/2014 1:18 PM, 14301 bytes, A
	   Adds the file 183_tabsWrapper.js"="3/16/2014 1:18 PM, 2555 bytes, A
	   Adds the file 191_ciuvo_m.js"="3/16/2014 1:18 PM, 1106 bytes, A
	   Adds the file 207_dbWrapper.js"="3/16/2014 1:18 PM, 1661 bytes, A
	   Adds the file 21_debug.js"="3/16/2014 1:18 PM, 3676 bytes, A
	   Adds the file 22_resources.js"="3/16/2014 1:18 PM, 9082 bytes, A
	   Adds the file 245_engageya_overlay_m.js"="3/16/2014 1:21 PM, 475 bytes, A
	   Adds the file 246_setup.js"="3/16/2014 1:21 PM, 1840 bytes, A
	   Adds the file 28_initializer.js"="3/16/2014 1:18 PM, 664 bytes, A
	   Adds the file 4_jquery_1_7_1.js"="3/16/2014 1:18 PM, 94180 bytes, A
	   Adds the file 47_resources_background.js"="3/16/2014 1:18 PM, 7720 bytes, A
	   Adds the file 64_appApiMessage.js"="3/16/2014 1:18 PM, 2332 bytes, A
	   Adds the file 72_appApiValidation.js"="3/16/2014 1:21 PM, 46060 bytes, A
	   Adds the file 78_CrossriderInfo.js"="3/16/2014 1:18 PM, 3321 bytes, A
	   Adds the file 91_monetizationLoader.js.js"="3/16/2014 1:21 PM, 145065 bytes, A
	   Adds the file 93_superfish_no_coupons_m.js"="3/16/2014 1:18 PM, 775 bytes, A
	   Adds the file 98_omniCommands.js"="3/16/2014 1:18 PM, 1936 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode
	   Adds the file background.js"="3/16/2014 1:18 PM, 1515 bytes, A
	   Adds the file extension.js"="3/16/2014 1:21 PM, 383 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US
	   Adds the file translations.dtd"="3/16/2014 1:18 PM, 425 bytes, A
	Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin
	   Adds the file button1.png"="3/16/2014 1:18 PM, 1351 bytes, A
	   Adds the file button2.png"="3/16/2014 1:18 PM, 1361 bytes, A
	   Adds the file button3.png"="3/16/2014 1:18 PM, 1361 bytes, A
	   Adds the file button4.png"="3/16/2014 1:18 PM, 1361 bytes, A
	   Adds the file button5.png"="3/16/2014 1:18 PM, 1361 bytes, A
	   Adds the file crossrider_statusbar.png"="3/16/2014 1:18 PM, 1361 bytes, A
	   Adds the file icon128.png"="3/16/2014 1:18 PM, 4438 bytes, A
	   Adds the file icon16.png"="3/16/2014 1:18 PM, 1351 bytes, A
	   Adds the file icon24.png"="3/16/2014 1:18 PM, 2660 bytes, A
	   Adds the file icon48.png"="3/16/2014 1:18 PM, 3716 bytes, A
	   Adds the file panelarrow-up.png"="3/16/2014 1:18 PM, 917 bytes, A
	   Adds the file popup.html"="3/16/2014 1:18 PM, 349 bytes, A
	   Adds the file skin.css"="3/16/2014 1:18 PM, 990 bytes, A
	   Adds the file update.css"="3/16/2014 1:18 PM, 140 bytes, A
	In the existing folder C:\Windows\System32\Tasks
	   Adds the file OMG Music Plus-codedownloader"="3/16/2014 1:18 PM, 4498 bytes, A
	   Adds the file OMG Music Plus-enabler"="3/16/2014 1:18 PM, 4392 bytes, A
	   Adds the file OMG Music Plus-firefoxinstaller"="3/16/2014 1:18 PM, 5326 bytes, A
	   Adds the file OMG Music Plus-updater"="3/16/2014 1:18 PM, 4558 bytes, A
	In the existing folder C:\Windows\Tasks
	   Adds the file OMG Music Plus-codedownloader.job"="3/16/2014 1:18 PM, 1468 bytes, A
	   Adds the file OMG Music Plus-enabler.job"="3/16/2014 1:18 PM, 1362 bytes, A
	   Adds the file OMG Music Plus-firefoxinstaller.job"="3/16/2014 1:18 PM, 2296 bytes, A
	   Adds the file OMG Music Plus-updater.job"="3/16/2014 1:18 PM, 1528 bytes, A

Registry details  
------------------------------------------
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}]
	   "(Default)"="REG_SZ", "OMG Music Plus"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Implemented Categories]
	   "(Default)"="REG_SZ", ""
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
	   "(Default)"="REG_SZ", ""
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\InprocServer32]
	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll"
	   "ThreadingModel"="REG_SZ", "Apartment"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\ProgID]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.BHO.1"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Programmable]
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\TypeLib]
	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\VersionIndependentProgID]
	   "(Default)"="REG_SZ", "CrossriderApp0049182"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\InprocServer32]
	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll"
	   "ThreadingModel"="REG_SZ", "Apartment"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\ProgID]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox.1"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\Programmable]
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\TypeLib]
	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\VersionIndependentProgID]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO]
	   "(Default)"="REG_SZ", "CrossriderApp0049182"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO\CLSID]
	   "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110411911182}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO\CurVer]
	   "(Default)"="REG_SZ", "CrossriderApp0049182"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO.1]
	   "(Default)"="REG_SZ", "CrossriderApp0049182"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO.1\CLSID]
	   "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110411911182}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox\CLSID]
	   "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220422912282}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox\CurVer]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox.1]
	   "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox.1\CLSID]
	   "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220422912282}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}]
	   "(Default)"="REG_SZ", "ICrossriderBHO"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\ProxyStubClsid]
	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\ProxyStubClsid32]
	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\TypeLib]
	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"
	   "Version"="REG_SZ", "1.0"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}]
	   "(Default)"="REG_SZ", "ISandBox"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\ProxyStubClsid]
	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\ProxyStubClsid32]
	   "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\TypeLib]
	   "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}"
	   "Version"="REG_SZ", "1.0"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0]
	   "(Default)"="REG_SZ", "CrossriderApp0049182 Type Library"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\0\win32]
	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\FLAGS]
	   "(Default)"="REG_SZ", "0"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\HELPDIR]
	   "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411911182}]
	   "(Default)"="REG_SZ", "CrossriderApp0049182"
	   "NoExplorer"="REG_DWORD", 1
	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
	   "{11111111-1111-1111-1111-110411911182}"="REG_SZ", "1"
	[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OMG Music Plus]
	   "CrAppId"="REG_SZ", "49182"
	   "CrPublisherId"="REG_SZ", "5526"
	   "DisplayIcon"="REG_SZ", "C:\Program Files\OMG Music Plus\utils.exe"
	   "DisplayName"="REG_SZ", "OMG Music Plus"
	   "DisplayVersion"="REG_SZ", "1.34.1.29"
	   "Publisher"="REG_SZ", "Bundlore LTD"
	   "UninstallString"="REG_SZ", "C:\Program Files\OMG Music Plus\Uninstall.exe /fromcontrolpanel=1"
	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Firefox]
	   "TotalProfiles"="REG_DWORD", 1
	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Firefox\Profiles]
	   "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1
	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\IE]
	   "TotalProfiles"="REG_DWORD", 1
	[HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Installer]
	   "BundledFirefox"="REG_DWORD", 1
	   "BundledIe"="REG_DWORD", 1
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
	   "Bic"="REG_SZ", "F4F5096D5934430D803D464022014ED6IE"
	   "Verifier"="REG_SZ", "094540c5d4d623d3ddf38dcdfed2671f"
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\Button]
	   "49182"="REG_DWORD", 1
	   "Index"="REG_DWORD", 1
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]
	   "49182"="REG_SZ", ""
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]
	   "49182"="REG_SZ", ""
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus]
	   "ActiveAppId"="REG_SZ", "49182"
	   "BhoRunningVersion"="REG_SZ", "153"
	   "IsBhoEnabled"="REG_DWORD", 1
	   "LastSetSearch"="REG_DWORD", 1394972459
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\background]
	   "__onDocumentStart_script__"="REG_SZ", ""
	   "__onDocumentStart_script_store__"="REG_SZ", ""
	   "IsEnabled"="REG_DWORD", 1
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\Code]
	   "AppJavaScript"="REG_SZ", "{javascript removed, full log available by request} "
	[HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\Update]
	   "LastCheck"="REG_DWORD", 1394972310
	[HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Bundlore LTD]
	   "49182"="REG_SZ", "OMG Music Plus"
	[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411911182}\iexplore]
	   "Count"="REG_DWORD", 4
	   "Flags"="REG_DWORD", 0
	   "LoadTimeArray"="REG_BINARY, ....................
	   "NavTimeArray"="REG_BINARY, ....................
	   "Time"="REG_BINARY, ........
	   "Type"="REG_DWORD", 3

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 3/16/2014
Scan Time: 1:26:32 PM
Logfile: mbamOMGusic.txt
Administrator: Yes

Version: 2.00.0.1000
Malware Database: v2014.03.16.02
Rootkit Database: v2014.02.20.01
License: Trial
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 201640
Time Elapsed: 2 min, 48 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 18
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444914482}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455915582}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466916682}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.BHO.1, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.BHO, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220422912282}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.Sandbox.1, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.Sandbox, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411911182}\INPROCSERVER32, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\OMG Music Plus, Quarantined, [d9191be86e0df14534f00f8bcf330bf5],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [f8fab053d7a4a88ebff36e6009fa39c7],
PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\OMG Music Plus, Quarantined, [7082f3103843fd39b86a1981b34fb050],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Bundlore LTD, Quarantined, [33bf22e184f71d192473a1fd36ccf20e],
PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OMG Music Plus, Quarantined, [48aae122afcccc6a7b677d1957abf10f],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 14
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin, Quarantined, [777b00031467251119376730f80a37c9],

Files: 118
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2],
PUP.Optional.OMGMusicPlus.A, C:\Users\{username}\Desktop\Nvwngyuuiux.exe, Quarantined, [bf331de614676fc735da594f68996a96],
PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-codedownloader.job, Quarantined, [92603fc4daa11b1b879ac2d81fe3e41c],
PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-enabler.job, Quarantined, [f3fff80b7b0047efac75c1d9659d6b95],
PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-firefoxinstaller.job, Quarantined, [fdf518eb6f0c56e051d048523dc530d0],
PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-updater.job, Quarantined, [15dd788b6813bc7a8e933c5e1de52cd4],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\49182.xpi, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\background.html, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\Installer.log, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-bg.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-buttonutil.dll, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-buttonutil.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-codedownloader.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-enabler.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-firefoxinstaller.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-helper.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-updater.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus.ico, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\Uninstall.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\utils.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome.manifest, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\install.rdf, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\background.html, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\baseObject.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\browser.xul, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\dialog.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\main.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\options.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\options.xul, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\platformVersion.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\search_dialog.xul, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\asyncDB.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\background.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\browserAction.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\contextMenu.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\dbManager.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\dom_bg.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\fileManager.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefox.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefoxNotifications.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\message.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\pageAction.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\request.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\tabs.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\webRequest.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\console.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\consts.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\delegate.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\extensionDataStore.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\folderIOWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\httpObserver.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\IDBWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\installer.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\logFile.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\prefs.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\progressListenerObserver.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\registry.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\reloadObserver.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\reports.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\requestObject.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\searchSettings.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\uninstallObserver.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\updateManager.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\utils.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\xhr.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences\prefs.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\manifest.xml, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins.json, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\102_dealply_m.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\17_jQuery.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\182_openUrl.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\191_ciuvo_m.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\1_base.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\21_debug.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\22_resources.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\245_engageya_overlay_m.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\246_setup.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\28_initializer.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\47_resources_background.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\98_omniCommands.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode\background.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode\extension.js, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US\translations.dtd, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button1.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button2.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button3.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button4.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button5.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\crossrider_statusbar.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon128.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon16.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon24.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon48.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\panelarrow-up.png, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\popup.html, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\skin.css, Quarantined, [777b00031467251119376730f80a37c9],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\update.css, Quarantined, [777b00031467251119376730f80a37c9],
PUP.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "144cad6cd11e5259ebb287b85bd2e06e")<img src='http://www.geekstogo.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />, Replaced,[cc26f2115823bd79fe05a3bd8381936d]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.adc77187f1ad74b198787a0a5cc10343fe6264eef24574fa2bea4bd6135e1199dcom49182.49182.internaldb.Resources_meta.value", "%7B%22browserbutton.png%22%3A%7B%22id%22%3A482036Replaced,[d919798a285320161af598c80ff57e82]C%22ver%22%3A1Replaced,[d919798a285320161af598c80ff57e82]C%22status%22%3A1Replaced,[d919798a285320161af598c80ff57e82]C%22name%22%3A%22browserbutton.png%22Replaced,[d919798a285320161af598c80ff57e82]C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/49182/482036%22%7D%7D")<img src='http://www.geekstogo.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />, %5

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 16 March 2014 - 08:00 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us