Removal instructions for Savings Sidekick

Content is republished with permission from Malwarebytes.

What is Savings Sidekick?

The Malwarebytes research team has determined that Savings Sidekick is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one displays advertisements and alos gathers personal data.

How do I know if my computer is affected by Savings Sidekick?

You may see these browser extensions/add-ons:

these warnings:

and this entry in your list of installed programs:

How did Savings Sidekick get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was dwonloaded from their site.

How do I remove Savings Sidekick?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-version.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
Reboot your computer if prompted.

Is there anything else I need to do to get rid of Savings Sidekick?

No, Malwarebytes' Anti-Malware removes Savings Sidekick completely.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Savings Sidekick hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0005060 - {11111111-1111-1111-1111-110011501160} - C:\Program Files\Savings Sidekick\Savings Sidekick-bho.dll

Alterations made by the installer:

File system details  
---------------------------------------------
    Adds the folder C:\Program Files\Savings Sidekick
       Adds the file background.html"="10/23/2013 12:44 AM, 729 bytes, A
       Adds the file Installer.log"="6/28/2014 8:57 AM, 168923 bytes, A
       Adds the file Savings Sidekick.ico"="10/23/2013 12:44 AM, 9662 bytes, A
       Adds the file Savings Sidekick-bg.exe"="6/28/2014 8:57 AM, 755592 bytes, A
       Adds the file Savings Sidekick-bho.dll"="6/28/2014 8:57 AM, 643464 bytes, A
       Adds the file Savings Sidekick-buttonutil.dll"="6/28/2014 8:57 AM, 418184 bytes, A
       Adds the file Savings Sidekick-buttonutil.exe"="6/28/2014 8:57 AM, 347528 bytes, A
       Adds the file Savings Sidekick-codedownloader.exe"="6/28/2014 8:57 AM, 498568 bytes, A
       Adds the file Savings Sidekick-helper.exe"="6/28/2014 8:57 AM, 322952 bytes, A
       Adds the file Uninstall.exe"="6/28/2014 8:57 AM, 497210 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0
       Adds the file 1"="6/28/2014 8:57 AM, 7168 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData
       Adds the file manifest.xml"="10/22/2013 10:45 PM, 1704 bytes, A
       Adds the file plugins.json"="10/22/2013 10:45 PM, 4516 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\userCode
       Adds the file background.js"="10/22/2013 10:45 PM, 3 bytes, A
       Adds the file extension.js"="10/22/2013 10:45 PM, 203 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons\actions
       Adds the file 1.png"="10/22/2013 10:45 PM, 1223 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js
       Adds the file background.js"="10/22/2013 10:45 PM, 28862 bytes, A
       Adds the file main.js"="10/22/2013 10:45 PM, 8452 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\popupResource
       Adds the file newPopup.js"="10/22/2013 10:45 PM, 40 bytes, A
       Adds the file popup.js"="10/22/2013 10:45 PM, 45 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Updater5060
       Adds the file Updater5060.exe"="6/28/2014 8:57 AM, 219016 bytes, A
    Adds the folder C:\Users\{username}\AppData\LocalLow\Savings Sidekick
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]crossrider.com\defaults
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\defaults\preferences
       Adds the file prefs.js"="10/22/2013 10:45 PM, 1870 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData
       Adds the file manifest.xml"="10/22/2013 10:45 PM, 1701 bytes, A
       Adds the file plugins.json"="10/22/2013 10:45 PM, 4314 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\userCode
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\locale\en-US
       Adds the file translations.dtd"="10/22/2013 10:45 PM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file Updater5060.exe"="6/28/2014 8:57 AM, 3790 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}]
       "(Default)"="REG_SZ", "Savings Sidekick"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Savings Sidekick\Savings Sidekick-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0005060.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440044504460}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110011501160}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0005060"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}]
       "(Default)"="REG_SZ", "CrossriderApp0005060.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Savings Sidekick\Savings Sidekick-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0005060.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440044504460}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220022502260}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0005060.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0005060"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110011501160}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0005060"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0005060"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110011501160}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0005060.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220022502260}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0005060.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0005060.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0005060.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220022502260}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440044504460}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440044504460}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044504460}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0005060 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044504460}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\Savings Sidekick\Savings Sidekick-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044504460}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044504460}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\Savings Sidekick"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011501160}
       "(Default)"="REG_SZ", "CrossriderApp0005060"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110011501160}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savings Sidekick]
       "CrAppId"="REG_SZ", "5060"
       "CrPublisherId"="REG_SZ", "390"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Savings Sidekick\Uninstall.exe"
       "DisplayName"="REG_SZ", "Savings Sidekick"
       "DisplayVersion"="REG_SZ", "1.29.153.2"
       "Publisher"="REG_SZ", "Innovative Apps"
       "UninstallString"="REG_SZ", "C:\Program Files\Savings Sidekick\Uninstall.exe /fromcontrolpanel=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Savings Sidekick\Installer]
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "215AppVerifier"="REG_SZ", "5fe3034951c194f274c529be657243ab"
       "Bic"="REG_SZ", "A58317CB0BC1402CA2D9E671E14D4929IE"
       "Verifier"="REG_SZ", "d9c2aa378ddf56ee77fdc3866c7ef2e9"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]
       "5060"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick]
       "ActiveAppId"="REG_SZ", "5060"
       "BhoRunningVersion"="REG_SZ", "153"
       "IsBhoEnabled"="REG_DWORD", 1
       "LastSetSearch"="REG_DWORD", 1403938745
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Agent]
       "ErrorsDomain"="REG_SZ", "http://errors.mydatastatssrv.com"
       "JsonDomain"="REG_SZ", "http://update.mydatastatssrv.com"
       "StatsDomain"="REG_SZ", "http://stats.mydatastatssrv.com"
       "Version"="REG_SZ", "2"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Code]
       "AppJavaScript"="REG_SZ", "{ javascript removed, full log available on request }" 
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Debug]
       "DebuggedAppUrl"="REG_SZ", "file://C:\Users\{username}\Documents\debug.js"
       "DebuggedBgUrl"="REG_SZ", "file://C:\Users\{username}\Documents\bg_debug.js"
       "DebuggedNewTabUrl"="REG_SZ", "file://C:\Users\{username}\Documents\new_debug.js"
       "IsDebuggingPlugins"="REG_DWORD", 0
       "IsDebugMode"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Installer]
       "CodeDownloadDomain"="REG_SZ", "http://app-static.crossrider.com"
       "Domain"="REG_SZ", "http://app-static.crossrider.com"
       "ErrorsDomain"="REG_SZ", "http://errors.mydatastatssrv.com"
       "FullVersion"="REG_SZ", "1.29.153.2"
       "FullVersionForUrl"="REG_SZ", "1_29_153"
       "MinorVersion"="REG_SZ", "2"
       "Params"="REG_SZ", "{"source_id" : "396779", "sub_id" : "default", "uzid" : "396779&subid=&pid=1445"}"
       "PlatformVersion"="REG_SZ", "1"
       "ScriptVersion"="REG_SZ", "29"
       "SetHomepage"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "SetSearch"="REG_SZ", "false"
       "SoftwareDetected"="REG_SZ", "{"AnySoftware":false,"Wireshark":false,"VirtualBox":false,"VMWare":false,"InsideVM":true,"InsideVMWare":false,"InsideVirtualBox":true,"InsideVirtualPc":false}"
       "SrcId"="REG_SZ", "396779"
       "StatsDomain"="REG_SZ", "http://stats.mydatastatssrv.com"
       "SubId"="REG_SZ", "default"
       "ThankYouPage"="REG_SZ", "true"
       "Time"="REG_SZ", "1403938606"
       "UserConfirmation"="REG_SZ", "false"
       "ZData"="REG_SZ", "396779&subid=&pid=1445"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Log]
       "savings sidekick-bg"="REG_DWORD", 0
       "savings sidekick-bho"="REG_DWORD", 0
       "savings sidekick-buttonutil"="REG_DWORD", 0
       "savings sidekick-helper"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "43"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Savings Sidekick"
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "Savings Sidekick"
       "PluginsManifestVersion"="REG_SZ", "71"
       "PublisherId"="REG_SZ", "390"
       "PublisherName"="REG_SZ", "Innovative Apps"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "95"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Plugins]
       "AppPluginList"="REG_SZ", "42,38,46,17,14,78,13,41,44,39,35,43,40,64,2,4,3,1,21,22,182,183,207,72,177,1000014,28"
       "BgPluginList"="REG_SZ", "42,38,46,41,44,39,35,43,36,4,14,78,64,183,207,47,182,72,1000015"
       "BrowserEventPluginList"="REG_SZ", "14,42,41,44,39,38,43,37,64,72"
       "NewTabPluginList"="REG_SZ", "42,38,46,17,14,78,13,41,44,39,35,43,40,64,2,4,3,1,21,22,72,28"
       "OnRequestPluginList"="REG_SZ", "14,42,41,39,38,43,45,64,72"
       "PopupPluginList"="REG_SZ", "42,38,46,41,44,39,35,43,36,4,14,78,13,64,207,47,182,72,94"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Savings Sidekick\Update]
       "LastCheck"="REG_DWORD", 1403938652
    [HKEY_CURRENT_USER\Software\Cr_Installer\5060]
       "InstallationThankYouPage"="REG_DWORD", 1
       "InstallationTime"="REG_DWORD", 1403938606
       "InstallationUserSettings"="REG_SZ", "{"searchUserConifrmation": false, "setSearch": false, "setHomepage": false, "setNewTab": false}"
       "InstallerIdentifiers"="REG_SZ", "{"installer_bic" : "A58317CB0BC1402CA2D9E671E14D4929IE", "installer_verifier" : "d9c2aa378ddf56ee77fdc3866c7ef2e9", "installer_verifier_for_215app" : "5fe3034951c194f274c529be657243ab"}"
       "InstallerParams"="REG_SZ", "{"source_id" : "396779", "sub_id" : "default", "uzid" : "396779&subid=&pid=1445"}"
       "SoftwareDetected"="REG_SZ", "{"AnySoftware":false,"Wireshark":false,"VirtualBox":false,"VMWare":false,"InsideVM":true,"InsideVMWare":false,"InsideVirtualBox":true,"InsideVirtualPc":false}"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Innovative Apps]
       "5060"="REG_SZ", "Savings Sidekick"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011501160}]
       "Flags"="REG_DWORD", 1024
       "VerCache"="REG_BINARY, ......................

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 6/28/2014
Scan Time: 9:06:12 AM
Logfile: mbamSavingsSidekick.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.28.01
Rootkit Database: v2014.06.23.02
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 234471
Time Elapsed: 2 min, 41 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 19
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110011501160}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440044504460}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550055505560}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660066506660}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0005060.BHO.1, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110011501160}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0005060.BHO, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110011501160}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110011501160}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220022502260}, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0005060.Sandbox.1, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0005060.Sandbox, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110011501160}\INPROCSERVER32, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\Savings Sidekick, Quarantined, [7160df9e42397cbad37f08afc53d54ac], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [a0312756e09bb482df53e71437cc41bf], 
PUP.Optional.SavingsSidekick.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Savings Sidekick, Quarantined, [5978f4891b60d16559f75364a260cc34], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CR_INSTALLER\5060, Quarantined, [6869502df98240f6e3c2903c659d629e], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Innovative Apps, Quarantined, [7e53bbc29dde7fb7e33fe30d8d76629e], 
PUP.Optional.SavingsSidekick.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Savings Sidekick, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 27
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Updater5060, Quarantined, [fdd44b32bdbec76fa8f7bcdaff033ec2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\userCode, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons\actions, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\popupResource, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected], Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\defaults, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\defaults\preferences, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\userCode, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\locale, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\locale\en-US, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0, Quarantined, [953c80fdb8c32313cf52c8d80af8dc24], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 

Files: 216
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick-bho.dll, Quarantined, [e9e8ec91cab155e1b1f5451a3ec3b64a], 
PUP.Optional.SavingsSidekick.A, C:\Users\{username}\Desktop\SavingsSidekick.exe, Quarantined, [24adef8e017ad06612940f500df4b54b], 
PUP.Optional.InstallCore, C:\Users\{username}\Downloads\googleupdatersetup.exe, Quarantined, [7e53106dadce191d8d2299e58f7540c0], 
PUP.Optional.SavingsSidekick.A, C:\Users\{username}\AppData\Local\Updater5060\Updater5060.exe, Quarantined, [c20fe6977506f93dffa71748a8590ff1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\background.html, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\crossriderManifest.json, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\manifest.json, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\popup.html, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\manifest.xml, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins.json, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\1000014_GPL Plugin (Loader).js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\1000015_GPL Background (BG).js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\17_jQuery.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\19_CHAppAPIWrapper.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\1_base.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\21_debug.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\22_resources.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\28_initializer.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\47_resources_background.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\64_appApiMessage.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\72_appApiValidation.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\80_CHPopupAppAPI.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\plugins\97_resourceApiWrapper.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\userCode\background.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\extensionData\userCode\extension.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons\icon128.png, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons\icon16.png, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons\icon48.png, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\icons\actions\1.png, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\background.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\main.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api\chrome.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api\cookie.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api\message.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api\pageAction.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\api\pageActionBG.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\app_api.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\bg_app_api.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\consts.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\cookie_store.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\crossriderAPI.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\delegate.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\events.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\extensionDataStore.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\installer.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\logFile.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\logging.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\onBGDocumentLoad.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\reports.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\storageWrapper.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\updateManager.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\util.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\xhr.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\popupResource\newPopup.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo\1.25.94_0\js\lib\popupResource\popup.js, Quarantined, [e9e86c1197e4fe387c985a3dca381fe1], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome.manifest, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\install.rdf, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\background.html, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\baseObject.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\browser.xul, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\dialog.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\main.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\options.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\options.xul, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\search_dialog.xul, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\asyncDB.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\background.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\browserAction.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\contextMenu.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\dbManager.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\dom_bg.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\fileManager.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\firefox.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\firefoxNotifications.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\firefoxOmnibox.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\message.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\pageAction.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\request.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\tabs.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\api\webRequest.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\console.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\consts.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\delegate.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\extensionDataStore.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\folderIOWrapper.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\httpObserver.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\IDBWrapper.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\installer.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\logFile.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\prefs.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\progressListenerObserver.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\registry.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\reloadObserver.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\reports.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\requestObject.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\searchSettings.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\uninstallObserver.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\updateManager.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\utils.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\chrome\content\core\xhr.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\defaults\preferences\prefs.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\manifest.xml, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins.json, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\1_base.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\1000014_GPL Plugin (Loader).js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\1000015_GPL Background (BG).js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\17_jQuery.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\182_openUrl.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\183_tabsWrapper.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\207_dbWrapper.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\21_debug.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\22_resources.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\28_initializer.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\47_resources_background.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\64_appApiMessage.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\72_appApiValidation.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\plugins\98_omniCommands.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\userCode\background.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\extensionData\userCode\extension.js, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\locale\en-US\translations.dtd, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\button1.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\button2.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\button3.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\button4.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\button5.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\crossrider_statusbar.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\icon128.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\icon16.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\icon24.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\icon48.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\panelarrow-up.png, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\popup.html, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\skin.css, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossFire.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]\skin\update.css, Quarantined, [09c83d40b8c31c1a3b084a4f7989f010], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dhdepfaagokllfmhfbcfmocaeigmoebo_0\1, Quarantined, [953c80fdb8c32313cf52c8d80af8dc24], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\background.html, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Installer.log, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick-bg.exe, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick-buttonutil.dll, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick-buttonutil.exe, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick-codedownloader.exe, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick-helper.exe, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Savings Sidekick.ico, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.SavingsSidekick.A, C:\Program Files\Savings Sidekick\Uninstall.exe, Quarantined, [f2df9de0c3b80036c19dedb633cf2bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146e146f1293f8a336ea9d5582fb8afe"); ), Replaced,[d00187f6fd7e58de331008b07e860bf5]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.InstallationThankYouPage", true); ), Replaced,[1fb29fde057696a0cd7702b635cf9e62]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.InstallationTime", 1403938606); ), Replaced,[b21f1e5f06753afcfe464078996be21e]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.searchUserConifrmation", false); ), Replaced,[755c7508116a43f3da6a7f39976d07f9]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setHomepage", false); ), Replaced,[6c655f1e2d4eb87ec67e3583da2a1fe1]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setNewTab", false); ), Replaced,[5c754637ed8ecb6b7aca6652f113fc04]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setSearch", false); ), Replaced,[19b8a3da4734db5bec589325b54f4eb2]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.active", true); ), Replaced,[d9f87904d9a2a88ed272d7e12ada6997]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.addressbar", "NA"); ), Replaced,[5b76ea93a4d77db9251f1d9b43c17987]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.addressbarenhanced", ""); ), Replaced,[4d84df9e5724bb7b7bc9ffb9cc38b947]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.backgroundver", 43); ), Replaced,[6a67ec91e89387af99aba90fd62ee41c]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.certdomaininstaller", ""); ), Replaced,[1eb32459c8b3cc6ab49077414fb5b848]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.changeprevious", false); ), Replaced,[f9d88fee9be0d85e73d1724649bb8779]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[d4fdcab3a3d83105bf85704823e1a15f]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.value", "1403938606"); ), Replaced,[14bd57263645280e0341dddbee161be5]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[8849dda0a6d58da9b98bb70146be8779]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.description", "Savings Sidekick"); ), Replaced,[f2df512ccbb0f83e72d2bafe06fe16ea]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.domain", ""); ), Replaced,[f5dc04792c4f22140a3a04b471936f91]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.enablesearch", false); ), Replaced,[735e1c61e09b6dc933116058e420847c]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.homepage", ""); ), Replaced,[795892eb1d5e68cebb89bdfb7d87af51]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.iframe", false); ), Replaced,[06cbdf9e413a2313c57fa6122ed6ea16]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[7958e796dc9f91a5b2927f390bf9926e]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22A58317CB0BC1402CA2D9E671E14D4929IE%22Replaced,[0fc22f4ea5d6e650e95b368254b0bf41]C%22installer_verifier%22%3A%22d9c2aa378ddf56ee77fdc3866c7ef2e9%22Replaced,[0fc22f4ea5d6e650e95b368254b0bf41]C%22installer_verifier_for_215app%22%3A%225fe3034951c194f274c529be657243ab%22%7D"); ), %5
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[fcd5daa3bfbcaa8cb292cbed94703bc5]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22396779%22Replaced,[4c85b7c6c8b380b6063e04b423e1837d]C%22sub_id%22%3A%22default%22Replaced,[4c85b7c6c8b380b6063e04b423e1837d]C%22uzid%22%3A%22396779%26subid%3D%26pid%3D1445%22%7D"); ), %5
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[81501568abd0af87d96b2c8c2fd520e0]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.value", "95"); ), Replaced,[a42da7d692e9152173d1dbddb054936d]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[03cec1bcadcef93d7cc8fdbbbe465da3]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.value", "0"); ), Replaced,[d6fb5c21b7c4bf77ac98caee51b3b24e]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[0ec3b2cbf3889f9733119e1a13f115eb]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.value", "%7B%7D"); ), Replaced,[14bd8bf2adceae881f2595236f954fb1]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.expiration", "Sat Jun 28 2014 15:01:05 GMT+0200"); ), Replaced,[2ca5522b6714fb3b4bf95365877dbb45]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.value", "true"); ), Replaced,[bc15a6d7e5960135f3515b5da65eaa56]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[458c6d10621978be7fc58236976d7987]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.value", "%7B%7D"); ), Replaced,[d3fe99e45526c373c38190282ed6e818]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.SoftwareDetected.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); ), Replaced,[bd14fb82aad1e84e49fb6a4e4abae31d]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%22%3AfalseReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22Wireshark%22%3AfalseReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22VirtualBox%22%3AfalseReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22VMWare%22%3AfalseReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22InsideVM%22%3AtrueReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22InsideVMWare%22%3AfalseReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22InsideVirtualBox%22%3AtrueReplaced,[48898fee3d3ecf67e65e6a4ec63e41bf]C%22InsideVirtualPc%22%3Afalse%7D"); ), %5
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.lastDailyReport", "1403938864436"); ), Replaced,[20b196e73b40d06666defabe0ef6d32d]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.lastUpdate", "1403938861581"); ), Replaced,[ad24423b08731f17df65dedaf01419e7]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.manifesturl", ""); ), Replaced,[3c950479ed8e6bcb7dc7c6f2d82c847c]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.name", "Savings Sidekick"); ), Replaced,[6071413ce596ed490a3a08b00ff59f61]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.newtab", ""); ), Replaced,[c908fa83fe7dc571b68e417760a4a060]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.opensearch", ""); ), Replaced,[00d12558681369cd192beccc26dec739]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/5060/plugins/092/ff/plugins.json"); ), Replaced,[e8e9364792e92412f153bafeea1a40c0]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.pluginsversion", 71); ), Replaced,[874a532a5427a393c67e3781d92bfe02]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.publisher", "Innovative Apps"); ), Replaced,[933ec0bdcface15582c216a22ed646ba]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.searchstatus", 0); ), Replaced,[933e502d205ba492c3815761976dd030]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.setnewtab", false); ), Replaced,[a130f18cc0bb2d0914309f1923e12cd4]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.thankyou", ""); ), Replaced,[d7fa136a24572115e75d635545bf20e0]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.updateinterval", 360); ), Replaced,[20b105787308999dd1736b4dcd370ff1]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.5060.ver", 95); ), Replaced,[6b66abd292e9db5b61e3566221e31ce4]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.adsOldValue", -1); ), Replaced,[a42d4a336714132385bf269232d28f71]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.apps", "5060"); ), Replaced,[676ab7c6b6c52610c77d744438cc857b]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.bic", "146e146f1293f8a336ea9d5582fb8afe"); ), Replaced,[ebe694e9b7c452e45fe55c5c669eb749]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.cid", 5060); ), Replaced,[8849d3aa6a11ac8ae06413a5c242768a]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.firstrun", false); ), Replaced,[6a672a535427ba7ce06417a110f4da26]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.hadappinstalled", true); ), Replaced,[369bc2bb9edda88e96ae823652b29c64]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.installationdate", 1403938861); ), Replaced,[626f88f5572466d01d27a5134aba05fb]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.modetype", "production"); ), Replaced,[7859225b04774fe7172defc9a55f08f8]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.reportInstall", true); ), Replaced,[607167166b1043f399ab1f997e8626da]
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossriderapp5060.statsDailyCounter", 1); ), Replaced,[478aeb928bf078bec2828038d62e8b75]

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 28 June 2014 - 01:37 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us