What is Pro12?
The Malwarebytes research team has determined that Pro12 is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is affected by Pro12?
You may see these browser extensions/add-ons:



and this entry in your list of installed programs:

How did Pro12 get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove Pro12?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-version.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan now.
- When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
- Reboot your computer if prompted.
- The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Pro12 listing. Then confirm removal.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Pro12 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
Signs in a HijackThis log:
O2 - BHO: CrossriderApp0054253 - {11111111-1111-1111-1111-110511421153} - C:\Program Files\pro12\pro12-bho.dllAlterations made by the installer:
File system details --------------------------------------------- Adds the folder C:\Program Files\pro12 Adds the file 1293297481.mxaddon"="5/8/2014 2:19 PM, 37690 bytes, A Adds the file 360-54253.crx"="5/25/2014 10:41 AM, 287598 bytes, A Adds the file 54253.crx"="5/25/2014 10:41 AM, 286385 bytes, A Adds the file 54253.xpi"="5/25/2014 10:41 AM, 476025 bytes, A Adds the file background.html"="5/20/2014 9:13 PM, 729 bytes, A Adds the file bgNova.html"="5/20/2014 9:13 PM, 729 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-2.exe"="5/25/2014 10:41 AM, 365416 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-3.exe"="5/25/2014 10:41 AM, 1902952 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-4.exe"="5/25/2014 10:41 AM, 839528 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-5.exe"="5/25/2014 10:41 AM, 309096 bytes, A Adds the file pro12.ico"="5/20/2014 9:13 PM, 9662 bytes, A Adds the file pro12-bg.exe"="5/25/2014 10:41 AM, 563048 bytes, A Adds the file pro12-bho.dll"="5/25/2014 10:41 AM, 543592 bytes, A Adds the file pro12-codedownloader.exe"="5/25/2014 10:41 AM, 514408 bytes, A Adds the file pro12-nova.dll"="5/25/2014 10:41 AM, 121192 bytes, A Adds the file pro12-nova.exe"="5/25/2014 10:41 AM, 594280 bytes, A Adds the file pro12-novainstaller.exe"="5/25/2014 10:41 AM, 514408 bytes, A Adds the file Uninstall.exe"="5/25/2014 10:41 AM, 84328 bytes, A Adds the file utils.exe"="5/25/2014 10:41 AM, 2165537 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0 Adds the file background.html"="5/25/2014 10:41 AM, 1705 bytes, A Adds the file chromeCoreFilesIndex.txt"="5/25/2014 10:41 AM, 853 bytes, A Adds the file crossriderManifest.json"="5/25/2014 10:41 AM, 531 bytes, A Adds the file manifest.json"="5/25/2014 10:41 AM, 1096 bytes, A Adds the file popup.html"="5/25/2014 10:41 AM, 139 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData Adds the file manifest.xml"="5/25/2014 10:41 AM, 1703 bytes, A Adds the file plugins.json"="5/25/2014 10:41 AM, 11605 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\userCode Adds the file background.js"="5/25/2014 10:41 AM, 429 bytes, A Adds the file extension.js"="5/25/2014 10:41 AM, 1 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons Adds the file icon128.png"="5/25/2014 10:41 AM, 18583 bytes, A Adds the file icon16.png"="5/25/2014 10:41 AM, 1317 bytes, A Adds the file icon48.png"="5/25/2014 10:41 AM, 3954 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons\actions Adds the file 1.png"="5/25/2014 10:41 AM, 1223 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js Adds the file background.js"="5/25/2014 10:41 AM, 35096 bytes, A Adds the file main.js"="5/25/2014 10:41 AM, 8491 bytes, A Adds the file platformVersion.js"="5/25/2014 10:41 AM, 409 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api Adds the file chrome.js"="5/25/2014 10:41 AM, 11499 bytes, A Adds the file cookie.js"="5/25/2014 10:41 AM, 11743 bytes, A Adds the file message.js"="5/25/2014 10:41 AM, 3346 bytes, A Adds the file monitor.js"="5/25/2014 10:41 AM, 2039 bytes, A Adds the file pageAction.js"="5/25/2014 10:41 AM, 1737 bytes, A Adds the file pageActionBG.js"="5/25/2014 10:41 AM, 2519 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\popupResource Adds the file newPopup.js"="5/25/2014 10:41 AM, 40 bytes, A Adds the file popup.js"="5/25/2014 10:41 AM, 45 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\2a[email protected]ee81de1.com Adds the file chrome.manifest"="5/25/2014 10:41 AM, 732 bytes, A Adds the file install.rdf"="5/25/2014 10:41 AM, 1336 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\defaults\preferences Adds the file prefs.js"="5/25/2014 10:41 AM, 3992 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData Adds the file manifest.xml"="5/25/2014 10:41 AM, 1700 bytes, A Adds the file plugins.json"="5/25/2014 10:41 AM, 11378 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\userCode Adds the file background.js"="5/25/2014 10:41 AM, 429 bytes, A Adds the file extension.js"="5/25/2014 10:41 AM, 1 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\locale\en-US Adds the file translations.dtd"="5/25/2014 10:41 AM, 425 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin In the existing folder C:\Windows\System32\Tasks Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-1"="5/25/2014 10:41 AM, 4382 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-2"="5/25/2014 10:41 AM, 4380 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-3"="5/25/2014 10:41 AM, 6474 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-4"="5/25/2014 10:41 AM, 5164 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-5"="5/25/2014 10:41 AM, 4492 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-6"="5/25/2014 10:41 AM, 4390 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-7"="5/25/2014 10:41 AM, 4320 bytes, A Adds the file globalUpdateUpdateTaskMachineCore"="5/25/2014 10:41 AM, 3660 bytes, A Adds the file globalUpdateUpdateTaskMachineUA"="5/25/2014 10:41 AM, 3914 bytes, A In the existing folder C:\Windows\Tasks Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-1.job"="5/25/2014 10:41 AM, 1352 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-2.job"="5/25/2014 10:41 AM, 1350 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-3.job"="5/25/2014 10:41 AM, 3444 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-4.job"="5/25/2014 10:41 AM, 2134 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-5.job"="5/25/2014 10:41 AM, 1462 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-6.job"="5/25/2014 10:41 AM, 1360 bytes, A Adds the file ee812f5f-566f-49a4-87f2-dd9b7332a862-7.job"="5/25/2014 10:41 AM, 1292 bytes, A Adds the file globalUpdateUpdateTaskMachineCore.job"="5/25/2014 10:41 AM, 912 bytes, A Adds the file globalUpdateUpdateTaskMachineUA.job"="5/25/2014 10:41 AM, 916 bytes, A Registry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}] "(Default)"="REG_SZ", "pro12" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\Implemented Categories] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\pro12\pro12-bho.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\ProgID] "(Default)"="REG_SZ", "CrossriderApp0054253.BHO.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\VersionIndependentProgID] "(Default)"="REG_SZ", "CrossriderApp0054253" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}] "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\pro12\pro12-bho.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\ProgID] "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\VersionIndependentProgID] "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO] "(Default)"="REG_SZ", "CrossriderApp0054253" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO\CLSID] "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511421153}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO\CurVer] "(Default)"="REG_SZ", "CrossriderApp0054253" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO.1] "(Default)"="REG_SZ", "CrossriderApp0054253" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO.1\CLSID] "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511421153}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox] "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox\CLSID] "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522422253}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox\CurVer] "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox.1] "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox.1\CLSID] "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522422253}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}] "(Default)"="REG_SZ", "ICrossriderBHO" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}] "(Default)"="REG_SZ", "ISandBox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0] "(Default)"="REG_SZ", "CrossriderApp0054253 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files\pro12\pro12-bho.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\pro12" [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636] "54253"="REG_SZ", "pro12" [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636\Status] "Installed"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421153}] "(Default)"="REG_SZ", "CrossriderApp0054253" "NoExplorer"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{11111111-1111-1111-1111-110511421153}"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\pro12] "CrAppId"="REG_SZ", "54253" "CrPublisherId"="REG_SZ", "21636" "DisplayIcon"="REG_SZ", "C:\Program Files\pro12\utils.exe" "DisplayName"="REG_SZ", "pro12" "DisplayVersion"="REG_SZ", "1.34.5.12" "Publisher"="REG_SZ", "Freeven" "UninstallString"="REG_SZ", "C:\Program Files\pro12\Uninstall.exe /fcp=1" [HKEY_LOCAL_MACHINE\SOFTWARE\pro12] "ActiveAppId"="REG_SZ", "54253" "pro12-ver"="REG_BINARY, (zero length data) [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Chrome] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Chrome-Profiles] "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Code] "AppJavaScript"="REG_SZ", "" "BgJavaScript"="REG_SZ", " { javascript removed, full log available by request } " "NewTabJavaScript"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Debug] "IsDebuggingPlugins"="REG_DWORD", 0 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\ErrorLists-crchromeinstaller] "post_for_sign_Invalid HTTP(S) status code"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Firefox] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Firefox\Profiles] "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\IE] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\IE\Profiles] "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Installer] "Bic"="REG_SZ", "6313D588662A41AEABF725A569E9F0CFIE" "BundledChrome"="REG_DWORD", 1 "BundledFirefox"="REG_DWORD", 1 "BundledIe"="REG_DWORD", 1 "BundledNova"="REG_DWORD", 1 "CodeDownloadDomain"="REG_SZ", "http://js.clientstatsservice.com" "DefaultBrowser"="REG_SZ", "ie" "ErrorsDomain"="REG_SZ", "http://errors.clientstatsservice.com" "FullVersion"="REG_SZ", "1.34.5.12" "FullVersionForUrl"="REG_SZ", "1_34_05_12" "OsName"="REG_SZ", "7" "Params"="REG_SZ", "{ "source_id":"001361", "sub_id" : "0", "uzid": "0"}" "SrcId"="REG_SZ", "001361" "StatsDomain"="REG_SZ", "http://stats.clientstatsservice.com" "SubId"="REG_SZ", "0" "Time"="REG_SZ", "1401007262" "Verifier"="REG_SZ", "b5ca845e40d63e23b6a37259b223d872" "ZData"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Manifest] "AddressbarURL"="REG_SZ", "NA" "BgVersion"="REG_SZ", "1" "ChangePrevious"="REG_SZ", "false" "Description"="REG_SZ", "Feven Shopping Companion" "DisableIe"="REG_SZ", "true" "EnableSearchIE"="REG_SZ", "false" "HomePageUrl"="REG_SZ", "NA" "IsButtonEnabled"="REG_SZ", "false" "Manifest"="REG_SZ", "NA" "ModeType"="REG_SZ", "production" "Name"="REG_SZ", "Freeven pro 1.2" "PluginsManifestVersion"="REG_SZ", "27" "PublisherId"="REG_SZ", "21636" "PublisherName"="REG_SZ", "Freeven" "RunInFrame"="REG_SZ", "false" "SetNewTab"="REG_SZ", "false" "ThanksUrl"="REG_SZ", "NA" "UninstallerOfferAction"="REG_SZ", "NA" "UninstallerOfferUrl"="REG_SZ", "NA" "UpdateInterval"="REG_DWORD", 360 "Version"="REG_SZ", "32" [HKEY_LOCAL_MACHINE\SOFTWARE\pro12\Plugins] "AppPluginList"="REG_SZ", "246,14,78,4,93,102,155,180,184,191,223,230,233,242,244,253,91" "BgPluginList"="REG_SZ", "246,4,14,78,251,249,250,93,102,155,180,184,191,223,230,233,242,244,253,91" "BrowserEventPluginList"="REG_SZ", "14" "NewTabPluginList"="REG_SZ", "14,78,4" "OnRequestPluginList"="REG_SZ", "14" "PopupPluginList"="REG_SZ", "4,14,78" [HKEY_CURRENT_USER\Software\AppDataLow\Software\pro12\Update] "LastCheck"="REG_DWORD", 1401007277 [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636] "54253"="REG_SZ", "pro12" [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636\Status] "Installed"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Freeven] "54253"="REG_SZ", "pro12"Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 5/25/2014 Scan Time: 10:54:57 AM Logfile: mbamPro12.txt Administrator: Yes Version: 2.00.1.1004 Malware Database: v2014.05.25.01 Rootkit Database: v2014.05.21.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Chameleon: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Malwarebytes Scan Type: Threat Scan Result: Completed Objects Scanned: 223214 Time Elapsed: 6 min, 21 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Shuriken: Enabled PUP: Enabled PUM: Enabled Processes: 1 PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-nova.exe, 3436, Delete-on-Reboot, [c8cd272e8bf03ff7fe8dcab5847d02fe] Modules: 0 (No malicious items detected) Registry Keys: 18 PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511421153}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544424453}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555425553}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566426653}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.BHO.1, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511421153}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.BHO, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511421153}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511421153}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522422253}, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.Sandbox.1, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.Sandbox, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511421153}\INPROCSERVER32, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\pro12, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [eda867eec0bb87af01353960976b8779], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [c6cfb4a1c9b22b0be769e2ee57acd42c], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [f99ca0b589f2cb6bbd7ad2c78082639d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Freeven, Quarantined, [6b2a8acb0c6fe056058d277513efe917], Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 27 PUP.Optional.Feven.A, C:\Program Files\pro12, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\defaults, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\defaults\preferences, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\userCode, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\locale, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\locale\en-US, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\userCode, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons\actions, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\popupResource, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0, Quarantined, [692c3322691288aeceab87f6cf33eb15], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb, Quarantined, [b9dce96c85f61f17b2d31c610200fa06], Files: 230 PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-nova.exe, Quarantined, [c8cd272e8bf03ff7fe8dcab5847d02fe], PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-bho.dll, Quarantined, [8d08b4a1a4d780b66526b7c8b44d926e], PUP.Optional.Feven.A, C:\Users\{username}\Desktop\pro12.exe, Quarantined, [d4c172e3582392a44395c7782cd4ac54], PUP.Optional.Feven.A, C:\Program Files\pro12\background.html, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\1293297481.mxaddon, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\360-54253.crx, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\54253.crx, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\54253.xpi, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\bgNova.html, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\ee812f5f-566f-49a4-87f2-dd9b7332a862-2.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\ee812f5f-566f-49a4-87f2-dd9b7332a862-3.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\ee812f5f-566f-49a4-87f2-dd9b7332a862-4.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\ee812f5f-566f-49a4-87f2-dd9b7332a862-5.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-bg.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-codedownloader.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-nova.dll, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\pro12-novainstaller.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\pro12.ico, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\Uninstall.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.Feven.A, C:\Program Files\pro12\utils.exe, Quarantined, [8d08ed68b9c21f171f13d8b1f01201ff], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-1.job, Quarantined, [9302fe57aecd57dfc1f66730b44e8d73], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-2.job, Quarantined, [badb282dbfbca39306b1930435cd06fa], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-3.job, Quarantined, [1a7b0451245773c32d8a781fbd451fe1], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-4.job, Quarantined, [f69f074eee8d55e19a1ddfb858aa5da3], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-5.job, Quarantined, [474ea3b290eb8bab783fadea10f216ea], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-6.job, Quarantined, [abeab5a00b70dc5a9b1cff9836ccc739], PUP.Optional.CrossRider.A, C:\Windows\Tasks\ee812f5f-566f-49a4-87f2-dd9b7332a862-7.job, Quarantined, [7d18262fccaf38feab0cb8df62a09e62], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0.localstorage, Quarantined, [4d483c19a8d366d0e131485013efbe42], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0.localstorage-journal, Quarantined, [64311d38bac1a294c44ee4b436cc728e], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome.manifest, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\install.rdf, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\254dfdcb6eea22fc02a3db1189d3efd9.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\5d41b76aa549f5cbaae82adfdc415c86.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\78eedc40e89e4b7ae1adf82df75319b3.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\9bc2806f20b98051f0c708b7212f9377.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\background.html, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\browser.xul, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\d5e3f32e556498f9563bd5636082185e.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\dialog.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\options.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\options.xul, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\search_dialog.xul, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\a3e7a606f311ab740fd9259cb3a78e34.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\00d8d977236cc80f557b1722ebb12eaf.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\07f367a899584f2de545d3e27a2b2c6a.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\0bc4b69b27695f0d33547d28de0b581f.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\11776d26b143d20fb53eba7acc98097f.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\1bd063f160c94c277e50ad6fde6ed420.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\42193d925a3a2501bab316d91a02c9b3.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\6feff49a9e77c1e42d47b8f3c7906c19.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]92-80d5-75352ee81de1.com\chrome\content\api\99310b9702a3babd7e7cba2efdb55a4c.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\abd976446a36348b3535b4dd6e538ec7.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\c0cec54645fb2c13d012b622f9d71256.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\c9305f2f30958a266e62ed1977234798.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\cabd47239516a6aeb6d10c4a463f1242.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\cb41b4e2084f855a44b256bf5e16d282.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\e8a694b3fbfaf735f1ecf7189330964d.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\api\eaf2103c0c68e1330728e26ea58f1a30.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\498a1b482bff764ec9978d7a574b88c2.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\0fb75edf2c08335b75882de91110b8b5.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\112943c408f07edab2d9cf4b2df39687.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\12e0da79b8f135ac3368fb1227d7c241.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\1d79d49928fb7688b9e1b1a0ac33a160.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\2ab9302c-551a-4804-9971[email protected]\chrome\content\core\2595f9d97c48282ddb6da880f9bd77b9.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\35bd3b7e4087202f8ab63c63ef89e302.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\3c044f6ff4fcafb1a4ec214b3e283276.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\3eb91a6e43b1d53ed7dd13931f9b508c.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\44c56ea48b9fb85be1d0a4fb94ca0605.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\45aa88e5578b347a415f051439baf1d0.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\9313c4e56d81324261898c84f49f6b2c.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\ae89dd7169b04f5e1e96a08ec6f0a21e.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\c2c9d072134968d35401f989671d7e32.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\d596d2b2090ccfa56f8b1d6ad45a9c99.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\e7182093ad5df42661a7c6561525e74a.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\ef64f936acea51eeca7b18e8197a95a0.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\f7ddcb66abd4b293d6ba8f3ad650b793.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\f91e5ddd4338d39e753b66524db661f3.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\fbdfe37b023e53ff3bb60aa2b3d964a4.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\chrome\content\core\installer.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\defaults\preferences\prefs.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\manifest.xml, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins.json, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\220.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\1.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\102.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\103.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\104.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\13.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\14.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\155.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\16.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\17.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\177.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\180.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\182.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\183.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\184.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\190.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\191.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\195.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\207.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\21.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\22.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\221.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\223.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\230.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\233.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\242.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\244.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\246.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\253.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\265.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\28.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\4.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\47.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\64.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\7.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\72.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\2ab9302c-551[email protected]m\extensionData\plugins\78.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\9.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\91.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\93.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\plugins\98.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\userCode\background.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\extensionData\userCode\extension.js, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\locale\en-US\translations.dtd, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\button1.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\button2.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\button3.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\button4.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\button5.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\crossrider_statusbar.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\icon128.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\icon16.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\icon24.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\icon48.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\panelarrow-up.png, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\popup.html, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\skin.css, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]52ee81de1.com\skin\update.css, Quarantined, [7520a7ae5f1cf6407072631846bcb749], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\background.html, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\chromeCoreFilesIndex.txt, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\crossriderManifest.json, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\manifest.json, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\popup.html, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\manifest.xml, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins.json, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\1.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\102.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\103.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\104.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\13.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\14.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\155.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\17.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\177.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\180.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\182.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\183.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\184.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\19.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\190.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\191.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\195.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\207.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\21.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\22.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\220.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\221.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\223.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\230.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\233.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\242.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\244.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\246.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\253.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\28.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\4.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\47.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\64.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\7.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\72.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\78.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\80.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\9.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\91.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\93.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\plugins\97.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\userCode\background.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\extensionData\userCode\extension.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons\icon128.png, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons\icon16.png, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons\icon48.png, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\icons\actions\1.png, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\background.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\main.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\platformVersion.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api\chrome.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api\cookie.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api\message.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api\monitor.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api\pageAction.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\api\pageActionBG.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\app_api.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\bg_app_api.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\consts.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\cookie_store.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\crossriderAPI.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\delegate.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\events.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\extensionDataStore.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\installer.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\logFile.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\logging.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\onBGDocumentLoad.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\reports.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\storageWrapper.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\updateManager.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\util.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\xhr.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\popupResource\newPopup.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.31_0\js\lib\popupResource\popup.js, Quarantined, [deb7ef66f58650e69dc06a13bc46c63a], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0\1, Quarantined, [692c3322691288aeceab87f6cf33eb15], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\000003.log, Quarantined, [b9dce96c85f61f17b2d31c610200fa06], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\CURRENT, Quarantined, [b9dce96c85f61f17b2d31c610200fa06], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\LOCK, Quarantined, [b9dce96c85f61f17b2d31c610200fa06], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\LOG, Quarantined, [b9dce96c85f61f17b2d31c610200fa06], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\MANIFEST-000002, Quarantined, [b9dce96c85f61f17b2d31c610200fa06], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146328edcb906acf8416c1ff0c907f02");), Replaced,[e4b15302c6b573c36437fd86867e0df3] Physical Sectors: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention