Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Free Video Grabber

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 31,942 posts
Content is republished with permission from Malwarebytes.

What is Free Video Grabber?

The Malwarebytes research team has determined that Free Video Grabber is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Free Video Grabber?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

warning3.png

and this entry in your list of installed programs:

warning4.png


How did Free Video Grabber get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Free Video Grabber?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of Free Video Grabber?
  • The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Free Video Grabber listing. Then confirm removal.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Free Video Grabber hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.


protection1.png

Technical details for experts

Signs in a HijackThis log:
O2 - BHO: CrossriderApp0057250 - {11111111-1111-1111-1111-110511721150} - C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-bho.dll
Alterations made by the installer:
File system details  
---------------------------------------------
    Adds the folder C:\Program Files\Free Video Grabber  6.6
       Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A
       Adds the file 360-57250.crx"="6/14/2014 10:15 AM, 302031 bytes, A
       Adds the file 57250.crx"="6/14/2014 10:15 AM, 300818 bytes, A
       Adds the file 57250.xpi"="6/14/2014 10:15 AM, 495110 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-2.exe"="6/14/2014 10:15 AM, 356864 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-3.exe"="6/14/2014 10:15 AM, 1889792 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-4.exe"="6/14/2014 10:15 AM, 829952 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-5.exe"="6/14/2014 10:15 AM, 453632 bytes, A
       Adds the file background.html"="6/5/2014 10:26 AM, 729 bytes, A
       Adds the file bgNova.html"="6/5/2014 10:26 AM, 729 bytes, A
       Adds the file Free Video Grabber  6.6.ico"="6/5/2014 10:26 AM, 9662 bytes, A
       Adds the file Free Video Grabber  6.6-bg.exe"="6/14/2014 10:15 AM, 637440 bytes, A
       Adds the file Free Video Grabber  6.6-bho.dll"="6/14/2014 10:15 AM, 569856 bytes, A
       Adds the file Free Video Grabber  6.6-buttonutil.dll"="6/14/2014 10:15 AM, 388608 bytes, A
       Adds the file Free Video Grabber  6.6-buttonutil.exe"="6/14/2014 10:15 AM, 270848 bytes, A
       Adds the file Free Video Grabber  6.6-codedownloader.exe"="6/14/2014 10:15 AM, 504320 bytes, A
       Adds the file Free Video Grabber  6.6-nova.dll"="6/14/2014 10:15 AM, 118272 bytes, A
       Adds the file Free Video Grabber  6.6-nova.exe"="6/14/2014 10:15 AM, 586240 bytes, A
       Adds the file Free Video Grabber  6.6-novainstaller.exe"="6/14/2014 10:15 AM, 504320 bytes, A
       Adds the file Uninstall.exe"="6/14/2014 10:15 AM, 79872 bytes, A
       Adds the file utils.exe"="6/14/2014 10:15 AM, 2131136 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0
       Adds the file background.html"="6/14/2014 10:15 AM, 1705 bytes, A
       Adds the file chromeCoreFilesIndex.txt"="6/14/2014 10:15 AM, 853 bytes, A
       Adds the file crossriderManifest.json"="6/14/2014 10:15 AM, 513 bytes, A
       Adds the file manifest.json"="6/14/2014 10:15 AM, 1221 bytes, A
       Adds the file popup.html"="6/14/2014 10:15 AM, 139 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData
       Adds the file manifest.xml"="6/14/2014 10:15 AM, 1792 bytes, A
       Adds the file plugins.json"="6/14/2014 10:15 AM, 8755 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\userCode
       Adds the file background.js"="6/14/2014 10:15 AM, 429 bytes, A
       Adds the file extension.js"="6/14/2014 10:15 AM, 34787 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons
       Adds the file icon128.png"="6/14/2014 10:15 AM, 30436 bytes, A
       Adds the file icon16.png"="6/14/2014 10:15 AM, 7372 bytes, A
       Adds the file icon48.png"="6/14/2014 10:15 AM, 9634 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons\actions
       Adds the file 1.png"="6/14/2014 10:15 AM, 1223 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js
       Adds the file background.js"="6/14/2014 10:15 AM, 35096 bytes, A
       Adds the file main.js"="6/14/2014 10:15 AM, 8491 bytes, A
       Adds the file platformVersion.js"="6/14/2014 10:15 AM, 409 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\popupResource
       Adds the file newPopup.js"="6/14/2014 10:15 AM, 40 bytes, A
       Adds the file popup.js"="6/14/2014 10:15 AM, 45 bytes, A
    Adds the folder C:\Users\{username}\AppData\LocalLow\Free Video Grabber  6.6
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]a-b871-1b059db38737.com
       Adds the file chrome.manifest"="6/14/2014 10:15 AM, 732 bytes, A
       Adds the file install.rdf"="6/14/2014 10:15 AM, 1449 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\defaults\preferences
       Adds the file prefs.js"="6/14/2014 10:15 AM, 3974 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData
       Adds the file manifest.xml"="6/14/2014 10:15 AM, 1792 bytes, A
       Adds the file plugins.json"="6/14/2014 10:15 AM, 8534 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\userCode
       Adds the file background.js"="6/14/2014 10:15 AM, 429 bytes, A
       Adds the file extension.js"="6/14/2014 10:15 AM, 34787 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\locale\en-US
       Adds the file translations.dtd"="6/14/2014 10:15 AM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-1"="6/14/2014 10:15 AM, 4504 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-2"="6/14/2014 10:15 AM, 4384 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-3"="6/14/2014 10:15 AM, 6506 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-4"="6/14/2014 10:15 AM, 5446 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-5"="6/14/2014 10:15 AM, 4484 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-6"="6/14/2014 10:15 AM, 4506 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-7"="6/14/2014 10:15 AM, 4436 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-1.job"="6/14/2014 10:15 AM, 1474 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-2.job"="6/14/2014 10:15 AM, 1354 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-3.job"="6/14/2014 10:15 AM, 3476 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-4.job"="6/14/2014 10:15 AM, 2416 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-5.job"="6/14/2014 10:15 AM, 1454 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-6.job"="6/14/2014 10:15 AM, 1476 bytes, A
       Adds the file 70be44bd-85fa-4a29-b1da-bbf9fa89c941-7.job"="6/14/2014 10:15 AM, 1408 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}]
       "(Default)"="REG_SZ", "Free Video Grabber  6.6"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0057250.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544724450}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511721150}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0057250"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522722250}]
       "(Default)"="REG_SZ", "CrossriderApp0057250.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522722250}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522722250}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0057250.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522722250}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522722250}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544724450}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522722250}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0057250.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0057250"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511721150}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0057250"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0057250"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511721150}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0057250.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522722250}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0057250.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0057250.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0057250.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522722250}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555725550}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555725550}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555725550}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555725550}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544724450}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566726650}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566726650}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566726650}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566726650}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544724450}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544724450}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0057250 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544724450}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544724450}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544724450}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\Free Video Grabber  6.6"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6]
       "ActiveAppId"="REG_SZ", "57250"
       "Free Video Grabber  6.6-ver"="REG_BINARY, (zero length data)
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Chrome]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Chrome-Profiles]
       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Code]
       "AppJavaScript"="REG_SZ", " { javascript removed, full log vailable by request }"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Installer]
       "AdditionalInfo"="REG_SZ", "{"asw":[67108864, 8197]}"
       "Bic"="REG_SZ", "1DD27BEBBC9D4E9FB36102E08B983DA6IE"
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
       "BundledNova"="REG_DWORD", 1
       "CodeDownloadDomain"="REG_SZ", "http://js.datademoserv.com"
       "DefaultBrowser"="REG_SZ", "ie"
       "ErrorsDomain"="REG_SZ", "http://errors.datademoserv.com"
       "FullVersion"="REG_SZ", "1.34.5.29"
       "FullVersionForUrl"="REG_SZ", "1_34_05_29"
       "OsName"="REG_SZ", "7"
       "Params"="REG_SZ", "{   "source_id" : "001577",   "sub_id" : "0",   "uzid" : "0"}"
       "SrcId"="REG_SZ", "001577"
       "StatsDomain"="REG_SZ", "http://stats.datademoserv.com"
       "SubId"="REG_SZ", "0"
       "Time"="REG_SZ", "1402733668"
       "Verifier"="REG_SZ", "4b81cadf6884b90b74af4a88a96ff528"
       "ZData"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "1"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Your best way to grab YouTube videos to your desktop for later use or backup to make sure this video will always stay!"
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "Free Video Grabber  6.6"
       "PluginsManifestVersion"="REG_SZ", "14"
       "PublisherId"="REG_SZ", "27560"
       "PublisherName"="REG_SZ", "Spartacs"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "18"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Free Video Grabber  6.6\Plugins]
       "AppPluginList"="REG_SZ", "246,14,78,4,93,102,180,191,193,211,223,260,91"
       "BgPluginList"="REG_SZ", "246,4,14,78,251,249,250,271,93,102,180,191,193,211,223,260,91"
       "BrowserEventPluginList"="REG_SZ", "14"
       "NewTabPluginList"="REG_SZ", "14,78,4"
       "OnRequestPluginList"="REG_SZ", "14"
       "PopupPluginList"="REG_SZ", "4,14,78"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\27560]
       "57250"="REG_SZ", "Free Video Grabber  6.6"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\27560\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511721150}]
       "(Default)"="REG_SZ", "CrossriderApp0057250"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511721150}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Free Video Grabber  6.6]
       "CrAppId"="REG_SZ", "57250"
       "CrPublisherId"="REG_SZ", "27560"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Free Video Grabber  6.6\utils.exe"
       "DisplayName"="REG_SZ", "Free Video Grabber  6.6"
       "DisplayVersion"="REG_SZ", "1.34.5.29"
       "Publisher"="REG_SZ", "Spartacs"
       "UninstallString"="REG_SZ", "C:\Program Files\Free Video Grabber  6.6\Uninstall.exe /fcp=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-1.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-1.job.fp"="REG_DWORD", -579744796
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-2.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-2.job.fp"="REG_DWORD", 2014114412
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-3.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-3.job.fp"="REG_DWORD", -1607018577
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-4.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-4.job.fp"="REG_DWORD", -1918502488
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-5.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-5.job.fp"="REG_DWORD", 1136262477
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-6.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-6.job.fp"="REG_DWORD", -373746006
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-7.job"="REG_BINARY, ................................
       "70be44bd-85fa-4a29-b1da-bbf9fa89c941-7.job.fp"="REG_DWORD", 1224637448
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Free Video Grabber  6.6\Debug]
       "DebuggedAppUrl"="REG_SZ", "file://C:\Users\{username}\Documents\debug.js"
       "DebuggedBgUrl"="REG_SZ", "file://C:\Users\{username}\Documents\bg_debug.js"
       "DebuggedNewTabUrl"="REG_SZ", "file://C:\Users\{username}\Documents\new_debug.js"
       "IsDebuggingPlugins"="REG_DWORD", 0
       "IsDebugMode"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Free Video Grabber  6.6\Installer]
       "AdditionalInfo"="REG_SZ", "{"asw":[67108864, 8197]}"
       "CodeDownloadDomain"="REG_SZ", "http://js.datademoserv.com"
       "DefaultBrowser"="REG_SZ", "ie"
       "ErrorsDomain"="REG_SZ", "http://errors.datademoserv.com"
       "FullVersion"="REG_SZ", "1.34.5.29"
       "FullVersionForUrl"="REG_SZ", "1_34_05_29"
       "OsName"="REG_SZ", "7"
       "Params"="REG_SZ", "{   "source_id" : "001577",
   "sub_id" : "0",   "uzid" : "0"}"
       "SetSearch"="REG_SZ", "false"
       "SrcId"="REG_SZ", "001577"
       "StatsDomain"="REG_SZ", "http://stats.datademoserv.com"
       "SubId"="REG_SZ", "0"
       "Time"="REG_SZ", "1402733668"
       "ZData"="REG_SZ", "0"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Free Video Grabber  6.6\Log]
       "free video grabber  6.6-buttonutil"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Free Video Grabber  6.6\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "1"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Your best way to grab YouTube videos to your desktop for later use or backup to make sure this video will always stay!"
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "Free Video Grabber  6.6"
       "PluginsManifestVersion"="REG_SZ", "14"
       "PublisherId"="REG_SZ", "27560"
       "PublisherName"="REG_SZ", "Spartacs"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "18"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511721150}\iexplore]
       "Count"="REG_DWORD", 2
       "Flags"="REG_DWORD", 0
       "LoadTimeArray"="REG_BINARY, ....................
       "NavTimeArray"="REG_BINARY, ..h.................
       "Time"="REG_BINARY, ........
       "Type"="REG_DWORD", 3

Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6/14/2014
Scan Time: 10:35:42 AM
Logfile: mbamFVG.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.14.01
Rootkit Database: v2014.06.02.01
License: Trial
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 230855
Time Elapsed: 2 min, 57 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-nova.exe, 2424, Delete-on-Reboot, [5801dc9c2b5089adcf7dd6b3e21f45bb]

Modules: 1
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-buttonutil.dll, Delete-on-Reboot, [2e2b6c0c82f9082ed90e1b821ae89a66], 

Registry Keys: 20
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511721150}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544724450}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555725550}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566726650}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0057250.BHO.1, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511721150}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0057250.BHO, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511721150}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511721150}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522722250}, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0057250.Sandbox.1, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0057250.Sandbox, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511721150}\INPROCSERVER32, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\Free Video Grabber  6.6, Quarantined, [98c15226453638fea42c534b6b973bc5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27560, Quarantined, [a0b9b2c62a514bebc6caddd68b77f10f], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [0455bbbd1467fb3be5ba19d1f50e7d83], 
PUP.Optional.FreeVideoGrabber.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Free Video Grabber  6.6, Quarantined, [b8a18eea98e36dc9646eccd2fd050ff1], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27560, Quarantined, [3029ea8e017a88ae7d148f24fd0524dc], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Spartacs, Quarantined, [99c072062f4ce15548def9ac1be7b749], 
PUP.Optional.FreeVideoGrabber.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Free Video Grabber  6.6, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 25
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\defaults, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\defaults\preferences, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\userCode, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\locale, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\locale\en-US, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\userCode, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons\actions, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\popupResource, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 

Files: 202
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-nova.exe, Quarantined, [5801dc9c2b5089adcf7dd6b3e21f45bb], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-bho.dll, Quarantined, [bd9c5d1bfd7e62d49daf820738c920e0], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Free Video Grabber  6.6.exe, Quarantined, [76e383f57803989e3d1c3d080df3bb45], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-1.job, Quarantined, [f564c0b8413a6dc944d169493dc5d32d], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-2.job, Quarantined, [15449fd9760584b2fd18337ffb070ef2], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-3.job, Quarantined, [0e4bfb7d09722d09a96c2290c83afa06], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-4.job, Quarantined, [ec6d4632c5b6a096f520ad051ae89c64], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-5.job, Quarantined, [acad4c2c85f6f640b1646f43d230ce32], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-6.job, Quarantined, [77e2b2c67605b383c154dfd36d95d12f], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\70be44bd-85fa-4a29-b1da-bbf9fa89c941-7.job, Quarantined, [4f0a3e3a5922fe38ae6710a2fe0438c8], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome.manifest, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\install.rdf, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\0714dd8aa216412fe7368702134a213c.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\2043ed660d50177fc3f478787be394a9.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\84dcce99d1922a18b081a148585a5ed0.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\9f14e38bcb30181e5df1dfd03cbae769.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\background.html, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\browser.xul, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\dialog.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\e32d46421514b9e326b9001e8f98c9f9.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\options.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\options.xul, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\search_dialog.xul, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\109fc5b132c2d84360b27c7c9f7014ce.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\3db7100c7d188ace44c3912e974f4bcb.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\5b8aa89c80c16b7ff5e1758d277449a2.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\5c13a8cfd64db582f168452222cf2ccb.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\6ca60a56b22d1b8c5a5f66c730d2d2e8.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\7221b129a329cf907b42da03008cac66.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\77c91b41b036975e9750ed170d7c0f2c.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\7c584b909c38217e2690f7cea00d7579.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\83905d3aedf6a663b5672e9a1da76393.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\a22f938270b09004690cc7a96f7a62dd.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\abe534bd4a3134e7e4a9d252a2b060c2.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\bc5c2be48b4e455532c907dfaf51b10d.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\c48305c0e617dfadd5afc420c3de8936.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\e90ae4ce0bfdddb074bda3bb0a67aa68.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\eac4b4d4008bd3c37aef4417bb95a418.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\api\f4a7d6c9ab2acb738ca3cc59a8e489fa.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\79d5007740a86a48b49cb939f524e5d3.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\10ee0ba38a28dc6f427f8d452287d343.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\1df4361ee44de300743c5901d24abc11.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\27f6cb9dcc2a85a0601182016954a3aa.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\2ba3f768c13d0e823b3d17ea2fd73f42.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\36d316816a625f5b6b1235bb964b4169.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\519b00970a1be6f516b2a2bab68c6e91.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\5f4b543db75ba8b6f37ca1a1f686b50c.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\6e039029128fe36a665ba395adb1ec96.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\70919f3fc9187367356c33f050afdfee.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\7bd4128938fd845d2d18357f2060b1e9.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\8e634b65168534b9a243c1e6fdfb0c9f.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\9ff84f49d8aad5632677627f4520afb0.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\a5a134853ed0a863ab0e39aa41f54764.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\acb1e62090622453524411ebc1d761cf.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\bf7348b2c12a363748f59751ee88a067.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\c26bfb886606ec53c9fd076f5fadf60b.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\cfbf026f7ac1f10d4dd2e509f85be697.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\f8f0f0cb4c1deda98d5a97635e555e93.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\fc531b04ed2f5015951c3415d2cb628e.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\chrome\content\core\installer.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\defaults\preferences\prefs.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\manifest.xml, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins.json, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\1.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\102.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\104.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\13.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\21a6fc2d[email protected]7.com\extensionData\plugins\14.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\16.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\17.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\177.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\180.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\182.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\183.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\191.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\193.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\207.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\21.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\211.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\22.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\223.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\21a6fc2d-988c-40bd-8e[email protected]\extensionData\plugins\246.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\260.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\268.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\28.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\4.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\47.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\64.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\72.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\78.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\91.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\93.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\plugins\98.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\userCode\background.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\extensionData\userCode\extension.js, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\21a6fc2d-988c-40bd-8e6b-[email protected]\locale\en-US\translations.dtd, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\button1.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\button2.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\button3.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\button4.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\button5.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\crossrider_statusbar.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\icon128.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\icon16.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\icon24.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\icon48.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\panelarrow-up.png, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\popup.html, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\skin.css, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]59db38737.com\skin\update.css, Quarantined, [86d304748dee13234b79d7b6758d31cf], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\background.html, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\chromeCoreFilesIndex.txt, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\crossriderManifest.json, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\manifest.json, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\popup.html, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\manifest.xml, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins.json, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\1.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\102.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\104.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\13.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\14.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\17.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\177.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\180.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\182.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\183.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\19.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\191.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\193.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\207.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\21.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\211.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\22.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\223.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\246.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\260.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\267.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\28.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\4.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\47.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\64.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\72.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\78.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\80.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\91.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\93.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\plugins\97.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\userCode\background.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\extensionData\userCode\extension.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons\icon128.png, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons\icon16.png, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons\icon48.png, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\icons\actions\1.png, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\background.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\main.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\platformVersion.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api\chrome.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api\cookie.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api\message.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api\monitor.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api\pageAction.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\api\pageActionBG.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\app_api.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\bg_app_api.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\consts.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\cookie_store.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\crossriderAPI.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\delegate.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\events.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\extensionDataStore.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\installer.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\logFile.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\logging.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\onBGDocumentLoad.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\reports.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\storageWrapper.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\updateManager.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\util.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\xhr.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\popupResource\newPopup.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\iknpbebblfaafdhikacfdfbmonfbjdfg\1.26.18_0\js\lib\popupResource\popup.js, Quarantined, [adac6810710ab48215cd2875d82a0af6], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-buttonutil.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\1293297481.mxaddon, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\360-57250.crx, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\57250.crx, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\57250.xpi, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\70be44bd-85fa-4a29-b1da-bbf9fa89c941-2.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\70be44bd-85fa-4a29-b1da-bbf9fa89c941-3.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\70be44bd-85fa-4a29-b1da-bbf9fa89c941-4.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\70be44bd-85fa-4a29-b1da-bbf9fa89c941-5.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\background.html, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\bgNova.html, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-bg.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-buttonutil.dll, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-codedownloader.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-nova.dll, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6-novainstaller.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Free Video Grabber  6.6.ico, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\Uninstall.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 
PUP.Optional.FreeVideoGrabber.A, C:\Program Files\Free Video Grabber  6.6\utils.exe, Quarantined, [2e2b6c0c82f9082ed90e1b821ae89a66], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.