Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Video HD Helper

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is Video HD Helper?

The Malwarebytes research team has determined that Video HD Helper is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Video HD Helper?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

and this entry in your list of installed programs:

warning4.png


How did Video HD Helper get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was offered as a video enhancing browser extension.

How do I remove Video HD Helper?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of Video HD Helper?
  • No, Malwarebytes' Anti-Malware removes Video HD Helper completely.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Video HD Helper hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.


protection1.png

Technical details for experts

Signs in a HijackThis log:
O2 - BHO: CrossriderApp0058659 - {11111111-1111-1111-1111-110511861159} - C:\Program Files\Video HD Helper\Video HD Helper-bho.dll
Alterations made by the installer:
File system details  
---------------------------------------------
    Adds the folder C:\Program Files\Video HD Helper
       Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A
       Adds the file 360-58659.crx"="6/15/2014 10:05 AM, 256569 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2.exe"="6/15/2014 10:06 AM, 360960 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3.exe"="6/15/2014 10:05 AM, 1896448 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4.exe"="6/15/2014 10:06 AM, 835072 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5.exe"="6/15/2014 10:06 AM, 457728 bytes, A
       Adds the file 58659.crx"="6/15/2014 10:05 AM, 255398 bytes, A
       Adds the file 58659.xpi"="6/15/2014 10:06 AM, 443207 bytes, A
       Adds the file background.html"="6/6/2014 10:01 AM, 729 bytes, A
       Adds the file bgNova.html"="6/6/2014 10:01 AM, 729 bytes, A
       Adds the file Uninstall.exe"="6/15/2014 10:05 AM, 79872 bytes, A
       Adds the file utils.exe"="6/15/2014 10:05 AM, 2141647 bytes, A
       Adds the file Video HD Helper.ico"="6/6/2014 10:01 AM, 9662 bytes, A
       Adds the file Video HD Helper-bg.exe"="6/15/2014 10:06 AM, 642560 bytes, A
       Adds the file Video HD Helper-bho.dll"="6/15/2014 10:06 AM, 571904 bytes, A
       Adds the file Video HD Helper-buttonutil.dll"="6/15/2014 10:06 AM, 391168 bytes, A
       Adds the file Video HD Helper-buttonutil.exe"="6/15/2014 10:06 AM, 273920 bytes, A
       Adds the file Video HD Helper-codedownloader.exe"="6/15/2014 10:06 AM, 509952 bytes, A
       Adds the file Video HD Helper-nova.dll"="6/15/2014 10:05 AM, 117248 bytes, A
       Adds the file Video HD Helper-nova.exe"="6/15/2014 10:05 AM, 593408 bytes, A
       Adds the file Video HD Helper-novainstaller.exe"="6/15/2014 10:05 AM, 509952 bytes, A
    Adds the folder C:\Users\{username}\AppData\LocalLow\Video HD Helper
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com
       Adds the file chrome.manifest"="6/15/2014 10:06 AM, 732 bytes, A
       Adds the file install.rdf"="6/15/2014 10:06 AM, 1376 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\defaults\preferences
       Adds the file prefs.js"="6/15/2014 10:06 AM, 3974 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData
       Adds the file manifest.xml"="6/15/2014 10:06 AM, 1719 bytes, A
       Adds the file plugins.json"="6/15/2014 10:06 AM, 9329 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\userCode
       Adds the file background.js"="6/15/2014 10:06 AM, 394 bytes, A
       Adds the file extension.js"="6/15/2014 10:06 AM, 708 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\locale\en-US
       Adds the file translations.dtd"="6/15/2014 10:06 AM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-1"="6/15/2014 10:06 AM, 4458 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2"="6/15/2014 10:06 AM, 4366 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3"="6/15/2014 10:05 AM, 6486 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4"="6/15/2014 10:06 AM, 5258 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5"="6/15/2014 10:06 AM, 4466 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-6"="6/15/2014 10:06 AM, 4452 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-7"="6/15/2014 10:06 AM, 4388 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-1.job"="6/15/2014 10:06 AM, 1428 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2.job"="6/15/2014 10:06 AM, 1336 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3.job"="6/15/2014 10:05 AM, 3456 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4.job"="6/15/2014 10:06 AM, 2228 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5.job"="6/15/2014 10:06 AM, 1436 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-6.job"="6/15/2014 10:06 AM, 1422 bytes, A
       Adds the file 46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-7.job"="6/15/2014 10:06 AM, 1360 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}]
       "(Default)"="REG_SZ", "Video HD Helper"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Video HD Helper\Video HD Helper-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058659.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544864459}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511861159}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058659"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522862259}]
       "(Default)"="REG_SZ", "CrossriderApp0058659.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522862259}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Video HD Helper\Video HD Helper-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522862259}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058659.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522862259}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522862259}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544864459}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522862259}\VersionIndependentProgID
       "(Default)"="REG_SZ", "CrossriderApp0058659.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0058659"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511861159}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0058659"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0058659"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511861159}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0058659.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522862259}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0058659.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0058659.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058659.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522862259}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555865559}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555865559}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555865559}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555865559}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544864459}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566866659}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566866659}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566866659}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566866659}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544864459}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544864459}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0058659 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544864459}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\Video HD Helper\Video HD Helper-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544864459}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544864459}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\Video HD Helper"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25629]
       "58659"="REG_SZ", "Video HD Helper"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25629\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511861159}]
       "(Default)"="REG_SZ", "CrossriderApp0058659"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511861159}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Video HD Helper]
       "CrAppId"="REG_SZ", "58659"
       "CrPublisherId"="REG_SZ", "25629"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Video HD Helper\utils.exe"
       "DisplayName"="REG_SZ", "Video HD Helper"
       "DisplayVersion"="REG_SZ", "1.34.5.29"
       "Publisher"="REG_SZ", "Covus Freemium GmbH"
       "UninstallString"="REG_SZ", "C:\Program Files\Video HD Helper\Uninstall.exe /fcp=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-1.job"="REG_BINARY, ................................
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-1.job.fp"="REG_DWORD", -1288648694
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2.job"="REG_BINARY, ....................c...........
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2.job.fp"="REG_DWORD", 1509154989
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3.job"="REG_BINARY, ................................
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3.job.fp"="REG_DWORD", 1869167746
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4.job"="REG_BINARY, ................................
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4.job.fp"="REG_DWORD", -1395239400
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5.job"="REG_BINARY, ................................
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5.job.fp"="REG_DWORD", -151770275
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-6.job"="REG_BINARY, ................................
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-6.job.fp"="REG_DWORD", -1279290201
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-7.job"="REG_BINARY, ................................
       "46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-7.job.fp"="REG_DWORD", -2067501496
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper]
       "ActiveAppId"="REG_SZ", "58659"
       "Video HD Helper-ver"="REG_BINARY, (zero length data)
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\Code]
       "AppJavaScript"="REG_SZ", " { javascript removed, full log available on request } " 
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\Installer]
       "AdditionalInfo"="REG_SZ", "{"asw":[67108864, 8197]}"
       "Bic"="REG_SZ", "5A57A9A078F34298B95AB2FB4DB20C00IE"
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
       "BundledNova"="REG_DWORD", 1
       "CodeDownloadDomain"="REG_SZ", "http://js.datademoserv.com"
       "DefaultBrowser"="REG_SZ", "ie"
       "ErrorsDomain"="REG_SZ", "http://errors.datademoserv.com"
       "FullVersion"="REG_SZ", "1.34.5.29"
       "FullVersionForUrl"="REG_SZ", "1_34_05_29"
       "OsName"="REG_SZ", "7"
       "Params"="REG_SZ", "{   "source_id" : "001624",   "sub_id" : "0",   "uzid" : "0"}"
       "SrcId"="REG_SZ", "001624"
       "StatsDomain"="REG_SZ", "http://stats.datademoserv.com"
       "SubId"="REG_SZ", "0"
       "Time"="REG_SZ", "1402819522"
       "Verifier"="REG_SZ", "eac929c899532580ef319f1d7d5bc65d"
       "ZData"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "1"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Shows all videos in HD quality by default."
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "Video HD Helper"
       "PluginsManifestVersion"="REG_SZ", "14"
       "PublisherId"="REG_SZ", "25629"
       "PublisherName"="REG_SZ", "Covus Freemium GmbH"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "18"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Video HD Helper\Plugins]
       "AppPluginList"="REG_SZ", "246,14,78,4,93,102,180,184,191,192,193,223,244,259,91"
       "BgPluginList"="REG_SZ", "246,4,14,78,251,249,250,271,93,102,180,184,191,192,193,223,244,259,91"
       "BrowserEventPluginList"="REG_SZ", "14"
       "NewTabPluginList"="REG_SZ", "14,78,4"
       "OnRequestPluginList"="REG_SZ", "14"
       "PopupPluginList"="REG_SZ", "4,14,78"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Video HD Helper\Update]
       "LastCheck"="REG_DWORD", 1402819565
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\25629]
       "58659"="REG_SZ", "Video HD Helper"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\25629\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Covus Freemium GmbH]
       "58659"="REG_SZ", "Video HD Helper"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511861159}]
       "Flags"="REG_DWORD", 1024


Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6/15/2014
Scan Time: 10:11:04 AM
Logfile: mbamFVH.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.15.02
Rootkit Database: v2014.06.02.01
License: Trial
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 230893
Time Elapsed: 2 min, 40 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-nova.exe, 964, Delete-on-Reboot, [3c8251272952d561531bb4d5fa07a957]

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511861159}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544864459}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555865559}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566866659}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058659.BHO.1, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511861159}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058659.BHO, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511861159}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511861159}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522862259}, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058659.Sandbox.1, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058659.Sandbox, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511861159}\INPROCSERVER32, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\Video HD Helper, Quarantined, [10aeb3c57a010234443dd6c98d7557a9], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25629, Quarantined, [2896eb8d0f6c91a570e2a311d62ccc34], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [704e7efa017a152189d83bb017ec718f], 
PUP.Optional.VideoHDHelper.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Video HD Helper, Quarantined, [b00e85f31f5c82b4d3b0ddc2ee14c33d], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25629, Quarantined, [546af28686f562d41e356a4a3cc61ce4], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Covus Freemium GmbH, Quarantined, [833b1c5cb0cb35017e076c33649e7090], 
PUP.Optional.VideoHDHelper.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Video HD Helper, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 14
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\defaults, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\defaults\preferences, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\userCode, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\locale, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\locale\en-US, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 

Files: 134
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-nova.exe, Delete-on-Reboot, [3c8251272952d561531bb4d5fa07a957], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-bho.dll, Quarantined, [bfff91e77704fb3bb4ba09803bc659a7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Video HD Helper.exe, Quarantined, [ffbfe8900e6d3df98c295aedfa06bd43], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-1.job, Quarantined, [3b83bcbc8fec56e09641b9f9b34f42be], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2.job, Quarantined, [a8163b3d76056acc0ccb644e36cc0ff1], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3.job, Quarantined, [0cb27dfb6e0d46f0c3144d659c664bb5], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4.job, Quarantined, [8e30da9eaad190a6a730149ed72b02fe], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5.job, Quarantined, [308e4335ccaf4ee88453149e10f21ce4], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-6.job, Quarantined, [07b77ff97cff8da950870ca6e31fdb25], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-7.job, Quarantined, [be008bed4437082e894e4d65818149b7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome.manifest, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\install.rdf, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\1ecbe51b33e6a9b51921fdd367348899.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\39138cf87e3cf0820d1ebfc34c8323ea.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\44d56d4edf3afc505690ca402f7a38f4.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\6a2c3131157b157b50a69647dd240aaa.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\background.html, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\browser.xul, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\dialog.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\f13188b4b5aeeae3faf7f7270c7a9434.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\options.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\options.xul, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\search_dialog.xul, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\132055bd8009ce4691fb2971b99acebf.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\13dd881d08a96321d9bc5387b56755fe.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\449c67db628f0cba936e032fa32cc533.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\48e884776d52132298c3aa909ecb520c.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\4f22e7bab1c6f9eb94ca9fe9813c8807.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\68645272e22188f23b54710f3f78a11b.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\6b5226917e2621e38c8d6a6355766f64.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\6f9b79b7df816b8f15fff39a81f3acfe.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\79b900a7d4a6d3fbb5256edb47b39281.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\97b1568a007cef151b8f596d84bb443d.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\9ab91a9b11692f4eeceb6e6b143518e2.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\b3e7b529cf4c2952280130a3527100e0.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\c6f17a1192348c1b9643246495da619f.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\cae1d6295d673d86edad5fd054a44dc5.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\df1dbd1e30c1822e485906d8a24e32ea.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\api\ec912c9316a29c31f11c5d542b7a75df.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\05ba4a79340196cbe9506fb2488cfdd5.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\0661ee4e1c8a890057ee465326f94a78.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\08f1d228dec15df19a274cf13fb386b7.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\1a130338b1d90d2870a27a6917db53c0.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\28dd24df7e85033d5bc6816b0099e62f.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\3a95762b1694653c4458f92db575c702.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\43636b6bb741aa372735b463efbfb411.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\4f14672c012e44c8ded91863ebd7d756.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\5a2f910be1d51590e7d42b0fc68db51a.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\623f7ca0fa8169662a14d95e9292bea8.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\78de35dc514bf5eec8ce8c820f491a10.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\8b752b6419fc590902378ba1ac0e9ffc.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\94506af7b6273d06c4f35d8ff1889607.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\a7d01322b1a258d0f728e09a677d0b63.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\ab01093690b471ca3881e6964b616f56.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\b531086a1d80ec181d711097cb2abd52.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\c1faca4b24aeedd3f1b8f023f5c54429.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\db604ce0e47f3563ae2b1e192303a1e5.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\edbd2f4864979b58e0f221a32ce55818.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\f6f663f749d8934289b5b809b55e9229.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\chrome\content\core\installer.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\defaults\preferences\prefs.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\manifest.xml, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins.json, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\1.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\102.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\103.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\104.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\13.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\14.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\16.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\17.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\177.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\180.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\182.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\183.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\184.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\191.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\192.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\193.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\207.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\21.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\22.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\223.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\244.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\246.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\259.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\268.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\28.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\4.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\47.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\64.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\72.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\78.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\91.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\93.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\plugins\98.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\userCode\background.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\extensionData\userCode\extension.js, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\locale\en-US\translations.dtd, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\button1.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\button2.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\button3.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\button4.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\button5.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\crossrider_statusbar.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\icon128.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\icon16.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\icon24.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\icon48.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\panelarrow-up.png, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\popup.html, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\skin.css, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com\skin\update.css, Quarantined, [0db1dc9c4c2fe254f4429df135cd36ca], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\1293297481.mxaddon, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\360-58659.crx, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-2.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-3.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-4.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\46afc02e-b9b2-4c37-bdb9-c25ef5f070bb-5.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\58659.crx, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\58659.xpi, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\background.html, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\bgNova.html, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Uninstall.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\utils.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-bg.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-buttonutil.dll, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-buttonutil.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-codedownloader.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-nova.dll, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper-novainstaller.exe, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.VideoHDHelper.A, C:\Program Files\Video HD Helper\Video HD Helper.ico, Quarantined, [a717b6c2b7c43006550f346a37cb8878], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "1469e91f6099c7f6c21c3c7db1eb0e0f");), Replaced,[a7170f69b0cbc076653af7ad00044ab6]

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.