Removal instructions for Freenpro25

Content is republished with permission from Malwarebytes.

What is Freenpro25?

The Malwarebytes research team has determined that Freenpro25 is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Freenpro25?

You may see these browser extensions/add-ons:

and this entry in your list of installed programs:

How did Freenpro25 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Freenpro25?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-version.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
Reboot your computer if prompted.

Is there anything else I need to do to get rid of Freenpro25?

The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Freenpro25 listing. Then confirm removal.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Freenpro25 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0058028 - {11111111-1111-1111-1111-110511801128} - C:\Program Files\Freenpro25\Freenpro25-bho.dll

Alterations made by the installer:

File system details  
---------------------------------------------
    Adds the folder C:\Program Files\Freenpro25
       Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A
       Adds the file 360-58028.crx"="6/21/2014 7:06 PM, 291202 bytes, A
       Adds the file 58028.crx"="6/21/2014 7:06 PM, 290008 bytes, A
       Adds the file 58028.xpi"="6/21/2014 7:06 PM, 478967 bytes, A
       Adds the file background.html"="6/17/2014 4:39 PM, 729 bytes, A
       Adds the file bgNova.html"="6/17/2014 4:39 PM, 729 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b.crx"="6/21/2014 7:06 PM, 290008 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-11.exe"="6/21/2014 7:06 PM, 1922920 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-2.exe"="6/21/2014 7:06 PM, 375656 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-3.exe"="6/21/2014 7:06 PM, 1922920 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-4.exe"="6/21/2014 7:06 PM, 851304 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-5.exe"="6/21/2014 7:06 PM, 467304 bytes, A
       Adds the file Freenpro25.ico"="6/17/2014 4:39 PM, 9662 bytes, A
       Adds the file Freenpro25-bg.exe"="6/21/2014 7:06 PM, 579944 bytes, A
       Adds the file Freenpro25-bho.dll"="6/21/2014 7:06 PM, 556904 bytes, A
       Adds the file Freenpro25-codedownloader.exe"="6/21/2014 7:06 PM, 528232 bytes, A
       Adds the file Freenpro25-nova.dll"="6/21/2014 7:06 PM, 129896 bytes, A
       Adds the file Freenpro25-nova.exe"="6/21/2014 7:06 PM, 607080 bytes, A
       Adds the file Freenpro25-novainstaller.exe"="6/21/2014 7:06 PM, 528232 bytes, A
       Adds the file Uninstall.exe"="6/21/2014 7:06 PM, 103784 bytes, A
       Adds the file utils.exe"="6/21/2014 7:06 PM, 2259188 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData
       Adds the file manifest.xml"="6/21/2014 7:06 PM, 1679 bytes, A
       Adds the file plugins.json"="6/21/2014 7:06 PM, 10366 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\userCode
       Adds the file background.js"="6/21/2014 7:06 PM, 429 bytes, A
       Adds the file extension.js"="6/21/2014 7:06 PM, 1 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons
       Adds the file icon128.png"="6/21/2014 7:06 PM, 18583 bytes, A
       Adds the file icon16.png"="6/21/2014 7:06 PM, 1317 bytes, A
       Adds the file icon48.png"="6/21/2014 7:06 PM, 3954 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons\actions
       Adds the file 1.png"="6/21/2014 7:06 PM, 1223 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js
       Adds the file background.js"="6/21/2014 7:06 PM, 35062 bytes, A
       Adds the file main.js"="6/21/2014 7:06 PM, 8491 bytes, A
       Adds the file platformVersion.js"="6/21/2014 7:06 PM, 409 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\popupResource
       Adds the file newPopup.js"="6/21/2014 7:06 PM, 40 bytes, A
       Adds the file popup.js"="6/21/2014 7:06 PM, 45 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com
       Adds the file chrome.manifest"="6/21/2014 7:06 PM, 732 bytes, A
       Adds the file install.rdf"="6/21/2014 7:06 PM, 1339 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\defaults\preferences
       Adds the file prefs.js"="6/21/2014 7:06 PM, 3971 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData
       Adds the file manifest.xml"="6/21/2014 7:06 PM, 1679 bytes, A
       Adds the file plugins.json"="6/21/2014 7:06 PM, 10163 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\userCode
       Adds the file background.js"="6/21/2014 7:06 PM, 429 bytes, A
       Adds the file extension.js"="6/21/2014 7:06 PM, 1 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\locale\en-US
       Adds the file translations.dtd"="6/21/2014 7:06 PM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-1"="6/21/2014 7:06 PM, 4492 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-11"="6/21/2014 7:06 PM, 6482 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-2"="6/21/2014 7:06 PM, 4346 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-3"="6/21/2014 7:06 PM, 5800 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-4"="6/21/2014 7:06 PM, 5140 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-5"="6/21/2014 7:06 PM, 4414 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-6"="6/21/2014 7:06 PM, 4490 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-7"="6/21/2014 7:06 PM, 4426 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-1.job"="6/21/2014 7:06 PM, 1462 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-11.job"="6/21/2014 7:06 PM, 3452 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-2.job"="6/21/2014 7:06 PM, 1316 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-3.job"="6/21/2014 7:06 PM, 2770 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-4.job"="6/21/2014 7:06 PM, 2110 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-5.job"="6/21/2014 7:06 PM, 1384 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-6.job"="6/21/2014 7:06 PM, 1460 bytes, A
       Adds the file f4fab799-7105-44cf-bd48-1c3285be1a6b-7.job"="6/21/2014 7:06 PM, 1398 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}]
       "(Default)"="REG_SZ", "Freenpro25"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Freenpro25\Freenpro25-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058028.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544804428}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511801128}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058028"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522802228}]
       "(Default)"="REG_SZ", "CrossriderApp0058028.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522802228}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Freenpro25\Freenpro25-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522802228}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058028.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522802228}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522802228}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544804428}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522802228}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0058028.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0058028"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511801128}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0058028"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0058028"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511801128}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0058028.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522802228}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0058028.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0058028.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0058028.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522802228}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555805528}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555805528}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555805528}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555805528}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544804428}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566806628}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566806628}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566806628}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566806628}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544804428}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544804428}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0058028 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544804428}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\Freenpro25\Freenpro25-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544804428}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544804428}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\Freenpro25"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25]
       "ActiveAppId"="REG_SZ", "58028"
       "Freenpro25-ver"="REG_BINARY, (zero length data)
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Code]
       "AppJavaScript"="REG_SZ", ""
       "BgJavaScript"="REG_SZ", "{ javascript removed, full log available on request }"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Debug]
       "IsDebuggingPlugins"="REG_DWORD", 0
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Installer]
       "AdditionalInfo"="REG_SZ", "{"asw":[67108864, 8197, 0]}"
       "Bic"="REG_SZ", "250E54A012F646E4AB9EC1579AB029A5IE"
       "BundledAddCh"="REG_DWORD", 1
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
       "BundledNova"="REG_DWORD", 1
       "CodeDownloadDomain"="REG_SZ", "http://js.datagenserv.com"
       "CodeDownloadFbDomain"="REG_SZ", "http://js.clientdemocloud.com"
       "DefaultBrowser"="REG_SZ", "ie"
       "ErrorsDomain"="REG_SZ", "http://errors.datagenserv.com"
       "FullVersion"="REG_SZ", "1.34.6.10"
       "FullVersionForUrl"="REG_SZ", "1_34_06_10"
       "OsName"="REG_SZ", "7"
       "Params"="REG_SZ", "{   "source_id" : "001580",   "sub_id" : "0",   "uzid" : "0"}"
       "SrcId"="REG_SZ", "001580"
       "StatsDomain"="REG_SZ", "http://stats.datagenserv.com"
       "SubId"="REG_SZ", "0"
       "Time"="REG_SZ", "1403370379"
       "Verifier"="REG_SZ", "96824d05200642ce73fbdcbfdf6bbadd"
       "ZData"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "2"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Feven Shopping Companion"
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "Frevens Pro 13"
       "PluginsManifestVersion"="REG_SZ", "60"
       "PublisherId"="REG_SZ", "21636"
       "PublisherName"="REG_SZ", "Freeven"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "66"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freenpro25\Plugins]
       "AppPluginList"="REG_SZ", "246,14,78,4,93,102,104,180,184,191,192,223,233,242,262,263,281,91"
       "BgPluginList"="REG_SZ", "246,4,14,78,251,249,250,271,93,102,104,180,184,191,192,223,233,242,262,263,281,91"
       "BrowserEventPluginList"="REG_SZ", "14"
       "NewTabPluginList"="REG_SZ", "14,78,4"
       "OnRequestPluginList"="REG_SZ", "14"
       "PopupPluginList"="REG_SZ", "4,14,78"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636]
       "58028"="REG_SZ", "Freenpro25"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511801128}]
       "(Default)"="REG_SZ", "CrossriderApp0058028"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511801128}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freenpro25]
       "CrAppId"="REG_SZ", "58028"
       "CrPublisherId"="REG_SZ", "21636"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Freenpro25\utils.exe"
       "DisplayName"="REG_SZ", "Freenpro25"
       "DisplayVersion"="REG_SZ", "1.34.6.10"
       "Publisher"="REG_SZ", "setup"
       "UninstallString"="REG_SZ", "C:\Program Files\Freenpro25\Uninstall.exe /fcp=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-1.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-1.job.fp"="REG_DWORD", 456630689
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-11.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-11.job.fp"="REG_DWORD", -568334138
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-2.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-2.job.fp"="REG_DWORD", -601296043
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-3.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-3.job.fp"="REG_DWORD", 1068070353
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-4.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-4.job.fp"="REG_DWORD", -1207027206
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-5.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-5.job.fp"="REG_DWORD", 444582354
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-6.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-6.job.fp"="REG_DWORD", 781899645
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-7.job"="REG_BINARY, ................................
       "f4fab799-7105-44cf-bd48-1c3285be1a6b-7.job.fp"="REG_DWORD", 1116505420

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6/21/2014
Scan Time: 7:11:54 PM
Logfile: mbamFreenpro.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.21.08
Rootkit Database: v2014.06.20.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 232942
Time Elapsed: 3 min, 3 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-nova.exe, 2380, Delete-on-Reboot, [e933ec8fcab155e1b15045493ec3b64a]

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511801128}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544804428}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555805528}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566806628}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058028.BHO.1, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511801128}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058028.BHO, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511801128}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511801128}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522802228}, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058028.Sandbox.1, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0058028.Sandbox, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511801128}\INPROCSERVER32, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\Freenpro25, Quarantined, [5cc06615df9c2b0bf7ac60460ff3c53b], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [8b913348c7b49e98fd1ed4e97b87936d], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [fd1f82f96b1011258da136be23e09c64], 
PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Freenpro25, Quarantined, [58c497e4215acc6ae1c4d9cdc1414fb1], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [4fcdd1aa7803c76fbe5eb30aa55d3cc4], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\setup, Quarantined, [06161665314a1b1b772ffeffe2217c84], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Freenpro25, Quarantined, [0517403bf7843ef8680d960f798905fb], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 27
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\defaults, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\defaults\preferences, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\userCode, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\locale, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\locale\en-US, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\userCode, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons\actions, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\popupResource, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flcnmdehjfeflkohlockkbmoglehckdf, Quarantined, [51cb82f94b30f93d894cbbe534ce17e9], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_flcnmdehjfeflkohlockkbmoglehckdf_0, Quarantined, [f824e19a6c0f70c6498d742c847e5fa1], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25, Quarantined, [0517403bf7843ef8680d960f798905fb], 

Files: 239
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-nova.exe, Quarantined, [e933ec8fcab155e1b15045493ec3b64a], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-bho.dll, Quarantined, [24f8ef8c017ad06612ef0f7f0df4b54b], 
PUP.Optional.Feven.A, C:\Users\{username}\Desktop\Freenpro25.exe, Quarantined, [7f9d2a51a5d63006b4380b3428d8aa56], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-1, Quarantined, [25f7c6b53f3cf145ed4d6b3bb64ce020], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-2, Quarantined, [ac70344787f4e84e5edca303d42e4fb1], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-3, Quarantined, [d8441b60ff7c39fd1b1ffbabf60c52ae], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-4, Quarantined, [2bf1c3b84a31e155d06a31750002c838], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-5, Quarantined, [5ac2dc9ff685c3735ae0bbebe0224cb4], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-6, Quarantined, [180481fae695c96d2515cdd9907238c8], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-7, Quarantined, [98849ae16c0f2e0863d7c5e1c43e8b75], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-11, Quarantined, [ea32b5c69ae1b77f6ccf8f17a35f1de3], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-11.job, Quarantined, [a3797506b7c464d2963cc3e6bf431fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_flcnmdehjfeflkohlockkbmoglehckdf_0.localstorage, Quarantined, [9686f18a156657df1e456c406f9313ed], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_flcnmdehjfeflkohlockkbmoglehckdf_0.localstorage-journal, Quarantined, [0a12304b740721154e155f4df909ce32], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-1.job, Quarantined, [89930e6de39840f6c3de26959270728e], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-2.job, Quarantined, [2bf18cefd7a49d9990119526f50dee12], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-3.job, Quarantined, [0418f289215aa0969110ceed30d235cb], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-4.job, Quarantined, [bf5d126957240c2a1f820bb057abba46], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-5.job, Quarantined, [31eb4e2d95e6c472dfc2a71409f95da3], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-6.job, Quarantined, [6fadabd0205bd2645849704b8979847c], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\f4fab799-7105-44cf-bd48-1c3285be1a6b-7.job, Quarantined, [011b5d1e750660d66f32f1ca976bdf21], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome.manifest, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\install.rdf, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\0159e438fa174be4929c6374f37c6ef6.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\12b5001254721ad604f5484f3026fd45.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\1f9bdcedba2bd6eb22eb696844d8d5f8.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\3e05d0ffd71e56127c51b1b1f00ce843.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\background.html, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\browser.xul, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\c1967f2d5ffc56dc0ec3752598d0a3a0.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\dialog.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\options.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\options.xul, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\search_dialog.xul, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\608f45f088d015beef2967ea6c0856d6.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\009d210eb52851278ba0ce904d08cdfe.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\094bfaa5a7bb42de0fc40c51b18c56d1.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\0b356189b844d07f36b114461731b262.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\11d39a87fec70e1911f1d0e2fd51705a.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\1d9dc6220c5c84ed03bd3d95707c52b8.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\441f25d9dcc044def452d8edf9a94920.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\4cb7f0eebddae306fb314d97852d3173.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\4d6db844b41dea4db061dd1b4fbf71ef.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\6b3ce826857e9d79bcbfc8c98f855c94.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\8da0081546f7b787f12797f3c8a11a37.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\9a8821efa37200dc5482509c6fb3ed81.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\a49cfd1ac619c3db81dc3bf2935d5df1.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\b4abf6d064a27a276cfaa8452b189260.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\c9fb5fc75262f09b6e8c322cfec13d81.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\api\ce62a46501a181d69cd3a6669197c687.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\0644e41bf17a15671ec68a5924c51d80.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\0bcd097b2573858f709812cc4b600fcd.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\23a178faf0c9561d89262559865c55f4.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\359709d5245d2004bf12fbd90644c8a2.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\3b0eda17f845ccbfdbe7c00c76bf6991.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\48217b3bfd299fb800d359d9beb647b0.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\4b7c909324f3c5ccb45d0b6f451b6fa4.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\53541f1028ba4a1cac9a316a279b7dca.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\57ca7415343a4f698593b77644808adf.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\5bde3c978aa0bc3b2bb38563877c7ace.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\7ed511b266f1422c91b96c6e29f74256.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\87ed076a5ed9072284d8ccd3cdd78b27.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\8c117562b69375e61f0ef86e3bd66e54.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\95d4a74d7f94799a629136695c014438.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\98fed54868b595de1cd9b9fd488e4173.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\b2e29847d09553e83eae4f7229e51b77.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\bdc2814167249662b0fdc716083618dc.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\c5f41a62a4b45fe0e96629a773fc2057.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\f40d67e6c271d40106abd2fb8cf8ff4b.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\ff343c1323467c7a00ce577022207dfe.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\chrome\content\core\installer.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\defaults\preferences\prefs.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\manifest.xml, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins.json, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\1.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\102.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\104.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\13.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\14.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\155.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\16.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\17.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\177.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\180.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\182.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\183.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\184.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\191.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\192.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\195.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\207.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\21.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\22.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\220.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\221.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\223.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\233.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\242.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\246.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\262.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\263.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\268.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\28.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\281.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\4.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\4099ddac-[email protected].com\extensionData\plugins\47.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\64.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\7.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\72.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\78.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\9.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\91.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\93.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\plugins\98.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\userCode\background.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\extensionData\userCode\extension.js, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\locale\en-US\translations.dtd, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\button1.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\button2.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\4099ddac-55a8-4242-a8ee-c11ac5c483f8[email protected]\skin\button3.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\button4.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\button5.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\crossrider_statusbar.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\icon128.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\icon16.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\icon24.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\icon48.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\panelarrow-up.png, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\popup.html, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\skin.css, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c58b7567b.com\skin\update.css, Quarantined, [cc501a61a2d97abc4ac6cec659a9a858], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\background.html, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\chromeCoreFilesIndex.txt, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\crossriderManifest.json, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\manifest.json, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\popup.html, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\manifest.xml, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins.json, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\1.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\102.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\104.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\13.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\14.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\155.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\17.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\177.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\180.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\182.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\183.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\184.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\19.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\191.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\192.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\195.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\207.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\21.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\22.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\220.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\221.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\223.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\233.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\242.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\246.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\262.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\263.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\267.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\28.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\4.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\47.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\64.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\7.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\72.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\78.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\80.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\9.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\91.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\93.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\plugins\97.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\userCode\background.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\extensionData\userCode\extension.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons\icon128.png, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons\icon16.png, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons\icon48.png, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\icons\actions\1.png, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\background.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\main.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\platformVersion.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api\chrome.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api\cookie.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api\message.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api\monitor.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api\pageAction.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\api\pageActionBG.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\app_api.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\bg_app_api.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\consts.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\cookie_store.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\crossriderAPI.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\delegate.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\events.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\extensionDataStore.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\installer.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\logFile.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\logging.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\onBGDocumentLoad.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\reports.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\storageWrapper.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\updateManager.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\util.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\xhr.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\popupResource\newPopup.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\flcnmdehjfeflkohlockkbmoglehckdf\1.26.62_0\js\lib\popupResource\popup.js, Quarantined, [0616f18a4437ad893f95049c36cc827e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flcnmdehjfeflkohlockkbmoglehckdf\000003.log, Quarantined, [51cb82f94b30f93d894cbbe534ce17e9], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flcnmdehjfeflkohlockkbmoglehckdf\CURRENT, Quarantined, [51cb82f94b30f93d894cbbe534ce17e9], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flcnmdehjfeflkohlockkbmoglehckdf\LOCK, Quarantined, [51cb82f94b30f93d894cbbe534ce17e9], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flcnmdehjfeflkohlockkbmoglehckdf\LOG, Quarantined, [51cb82f94b30f93d894cbbe534ce17e9], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flcnmdehjfeflkohlockkbmoglehckdf\MANIFEST-000002, Quarantined, [51cb82f94b30f93d894cbbe534ce17e9], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_flcnmdehjfeflkohlockkbmoglehckdf_0\1, Quarantined, [f824e19a6c0f70c6498d742c847e5fa1], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\1293297481.mxaddon, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\360-58028.crx, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\58028.crx, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\58028.xpi, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\background.html, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\bgNova.html, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\f4fab799-7105-44cf-bd48-1c3285be1a6b-11.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\f4fab799-7105-44cf-bd48-1c3285be1a6b-2.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\f4fab799-7105-44cf-bd48-1c3285be1a6b-3.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\f4fab799-7105-44cf-bd48-1c3285be1a6b-4.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\f4fab799-7105-44cf-bd48-1c3285be1a6b-5.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\f4fab799-7105-44cf-bd48-1c3285be1a6b.crx, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-bg.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-codedownloader.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-nova.dll, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25-novainstaller.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Freenpro25.ico, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\Uninstall.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.Feven.A, C:\Program Files\Freenpro25\utils.exe, Quarantined, [0517403bf7843ef8680d960f798905fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146bf672f7b9ae539c7fe01701b3af53");), Replaced,[e13b4833017ab680830a4c639f6503fd]

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 21 June 2014 - 11:53 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us