Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for HDtubeV1.6

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 32,138 posts
Content is republished with permission from Malwarebytes.

What is HDtubeV1.6?
 
The Malwarebytes research team has determined that HDtubeV1.6 is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.
 
How do I know if my computer is affected by HDtubeV1.6?
 
You may see these browser extensions/add-ons:
 
warning1.png
 
warning2.png
 
and this entry in your list of installed programs:
 
warning4.png
 
 
How did HDtubeV1.6 get on my computer?
 
Browser hijackers use different methods for distributing themselves. This particular one was offered as a video enhancing browser extension.
 
How do I remove HDtubeV1.6?
 
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:

  • Enable free trial of Malwarebytes Anti-Malware Premium
  • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of HDtubeV1.6?

  • No, Malwarebytes' Anti-Malware removes HDtubeV1.6 completely.
How would the full version of Malwarebytes Anti-Malware help protect me?
 
We hope our application and this guide have helped you eradicate this hijacker.  
 
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HDtubeV1.6 hijacker.  It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
 



protection1.png
 

Technical details for experts
 
Signs in a HijackThis log:

O2 - BHO: CrossriderApp0059564 - {11111111-1111-1111-1111-110511951164} - C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll
 
Alterations made by the installer:

 
File system details  
---------------------------------------------
    Adds the folder C:\Program Files\HDtubeV1.6
       Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A
       Adds the file 360-59564.crx"="6/30/2014 9:45 AM, 285968 bytes, A
       Adds the file 59564.xpi"="6/30/2014 9:45 AM, 472708 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7.crx"="6/30/2014 9:45 AM, 284773 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.exe"="6/30/2014 9:45 AM, 1946472 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.exe"="6/30/2014 9:45 AM, 388968 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.exe"="6/30/2014 9:45 AM, 872808 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.exe"="6/30/2014 9:46 AM, 483688 bytes, A
       Adds the file background.html"="6/25/2014 7:01 AM, 729 bytes, A
       Adds the file HDtubeV1.6.ico"="6/25/2014 7:01 AM, 9662 bytes, A
       Adds the file HDtubeV1.6-bg.exe"="6/30/2014 9:45 AM, 596840 bytes, A
       Adds the file HDtubeV1.6-bho.dll"="6/30/2014 9:45 AM, 577384 bytes, A
       Adds the file HDtubeV1.6-codedownloader.exe"="6/30/2014 9:45 AM, 545640 bytes, A
       Adds the file Uninstall.exe"="6/30/2014 9:45 AM, 105832 bytes, A
       Adds the file utils.exe"="6/30/2014 9:45 AM, 2280370 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\defaults\preferences
       Adds the file prefs.js"="6/30/2014 9:45 AM, 3977 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData
       Adds the file manifest.xml"="6/30/2014 9:45 AM, 1711 bytes, A
       Adds the file plugins.json"="6/30/2014 9:45 AM, 13332 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\userCode
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\locale\en-US
       Adds the file translations.dtd"="6/30/2014 9:45 AM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-1"="6/30/2014 9:45 AM, 4576 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-11"="6/30/2014 9:45 AM, 6830 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-2"="6/30/2014 9:45 AM, 4378 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-4"="6/30/2014 9:45 AM, 5238 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5"="6/30/2014 9:46 AM, 4472 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user"="6/30/2014 9:46 AM, 4492 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job"="6/30/2014 9:45 AM, 1546 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job"="6/30/2014 9:45 AM, 3800 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job"="6/30/2014 9:45 AM, 1348 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job"="6/30/2014 9:45 AM, 2208 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job"="6/30/2014 9:46 AM, 1442 bytes, A
       Adds the file 93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user.job"="6/30/2014 9:46 AM, 1456 bytes, A
 
Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}]
       "(Default)"="REG_SZ", "HDtubeV1.6"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0059564.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511951164}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0059564"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}]
       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522952264}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0059564"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511951164}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0059564"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0059564"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511951164}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522952264}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0059564.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0059564.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522952264}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555955564}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566956664}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544954464}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0059564 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544954464}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\HDtubeV1.6"
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDtubeV1.6\Installer]
       "BundledAddCh"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\19979]
       "59564"="REG_SZ", "HDtubeV1.6"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\19979\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511951164}
       "(Default)"="REG_SZ", "CrossriderApp0059564"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511951164}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDtubeV1.6]
       "CrAppId"="REG_SZ", "59564"
       "CrPublisherId"="REG_SZ", "19979"
       "DisplayIcon"="REG_SZ", "C:\Program Files\HDtubeV1.6\utils.exe"
       "DisplayName"="REG_SZ", "HDtubeV1.6"
       "DisplayVersion"="REG_SZ", "1.34.6.10"
       "Publisher"="REG_SZ", "HDTube"
       "UninstallString"="REG_SZ", "C:\Program Files\HDtubeV1.6\Uninstall.exe /fcp=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job"="REG_BINARY, ................................
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job.fp"="REG_DWORD", 1170458839
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job"="REG_BINARY, ................................
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job.fp"="REG_DWORD", 1027380523
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job"="REG_BINARY, ................................
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job.fp"="REG_DWORD", -1084882610
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job"="REG_BINARY, ................................
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job.fp"="REG_DWORD", 215824598
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job"="REG_BINARY, ................................
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job.fp"="REG_DWORD", 901819135
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user.job"="REG_BINARY, ................................
       "93dbb057-a005-4b79-ab6c-0da10ae47ad7-5_user.job.fp"="REG_DWORD", 873375177
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "EFD41030918E41DEBCBB72FD72C808B3IE"
       "Verifier"="REG_SZ", "fd3b8112c892fbce94f5e4319ce36e4c"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]
       "59564"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]
       "59564"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDtubeV1.6]
       "ActiveAppId"="REG_SZ", "59564"
       "BhoRunningVersion"="REG_SZ", "153"
       "IsBhoEnabled"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDtubeV1.6\Background]
       " { javascript removed, full log available on request } " 
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDtubeV1.6\Update]
       "LastCheck"="REG_DWORD", 1404114358
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\19979]
       "59564"="REG_SZ", "HDtubeV1.6"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\19979\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\HDTube]
       "59564"="REG_SZ", "HDtubeV1.6"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511951164}]
       "Flags"="REG_DWORD", 1024
       "VerCache"="REG_BINARY, ......................
 
 
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 6/30/2014
Scan Time: 9:51:05 AM
Logfile: mbamHDtube.txt
Administrator: Yes
 
Version: 2.00.2.1012
Malware Database: v2014.06.30.04
Rootkit Database: v2014.06.23.02
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 234938
Time Elapsed: 3 min, 16 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 20
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544954464}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555955564}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566956664}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.BHO.1, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.BHO, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511951164}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522952264}, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.Sandbox.1, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0059564.Sandbox, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511951164}\INPROCSERVER32, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\HDtubeV1.6, Quarantined, [198328564d2e64d20a86beef30d2c23e], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [c4d8a4dab1ca52e488fdcafb62a006fa], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [217bdf9f601b88ae8a00c636b64dfb05], 
PUP.Optional.HDPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDtubeV1.6, Quarantined, [d5c75e20afcc55e1b6dcdfce7989f808], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\19979, Quarantined, [5c40b1cd225950e61f67c500aa58f30d], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HDTube, Quarantined, [d5c71569fe7d4ee85a39b6f7c141e020], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HDtubeV1.6, Quarantined, [c0dc532b601b181e682184286999a45c], 
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 14
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\defaults, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\defaults\preferences, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\userCode, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\locale, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\locale\en-US, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6, Quarantined, [c0dc532b601b181e682184286999a45c], 
 
Files: 153
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6-bho.dll, Quarantined, [e9b3ec92cab155e1b1e8454d3ec3b64a], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\HDtubeV1.6.exe, Quarantined, [2478ef8f017ad06612e40f300df3b54b], 
PUP.Optional.InstallCore, C:\Users\{username}\Downloads\googleupdatersetup.exe, Quarantined, [7e1e106eadce191d8d9799e78f7540c0], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-1, Quarantined, [0e8ef985bdbe1f1789158c2325ddb848], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-2, Quarantined, [47553a44d8a375c1148a03acdc268080], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-4, Quarantined, [3b61e995740756e0d7c7e0cf778ba15f], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-5, Quarantined, [5e3ef38b4833dd59c6d8dbd415ed25db], 
PUP.Optional.CrossRider.A, C:\Windows\System32\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-11, Quarantined, [9efe0b73b7c4a98d653a16991fe33bc5], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.job, Quarantined, [9b01027cfa81132325ea6251dd252dd3], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-1.job, Quarantined, [0d8fed91aecd0e28ad5ec30152b03bc5], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.job, Quarantined, [0f8d7b03205beb4b0efd20a4d52dab55], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.job, Quarantined, [acf0740a0e6db77f7c8fd7ed17ebe31d], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.job, Quarantined, [44580d71df9c14220407477d32d08b75], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome.manifest, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\install.rdf, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\13f869df2bef91e54d1419ef961e7621.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]c23b6cf-f0cf-4ff9-89af-a3fb89311be5.com\chrome\content\1f6dd0c9ac63d95a4ab75d00bb7449aa.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\4f6ffa2ef199ae56ce8053a5d157a4fc.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\874bee05f1e0d2cab641c7284d081d23.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\b23f4ee8872da60ae3f60c49e263a5c1.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\background.html, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\browser.xul, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\dialog.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\options.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\options.xul, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\search_dialog.xul, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\0602413d1540afafcfa26d22c54850a5.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\0a001a5a344bb5986cbd35b9ee3ef545.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\0f7a2ed0a71d81c8c83e2ef8ede6ff92.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\1c1b255d37845ad0621308092fb7f264.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\272889d8cb13d5b6c3b049728bc430fc.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\39a1e2ead805957a3866d3cdaf5365a0.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\47d5ddf137fa67f224ad13324992e5be.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\97fa8f90b0e9d14b1998ff70dc8d5fc7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\99f1e26ed15704f41a2f7f17e6815ad0.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\ac708b096387c577246f88ffdfa42dda.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\b096b8d41beb445203cf172ead133b69.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\bc77f814515d670b17dd568f566328a7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\c0389b8711142d104c7ba2b0a0d82eb8.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\c2dcf42ab3af6f2419f8692e2b2cb0df.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\api\d2ff241f5749b445bd5a556e847ffbbd.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\67af2835-79c3-420a-bc70-cd53[email protected]\chrome\content\api\d5a7daeaba90efc16e0c2c0bb9063ec8.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\011efa20c4841f4910eecdd68bb14c14.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\05aaefe13cf7d5bbbcbdf31ad6a25157.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\1149a77a25bdae467fd2d65c159a8133.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\2485a5178046cfc4ad36de1190b3c824.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\2e6c86a1d6416a08ba223cf1546f0c93.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\3cf072c5dbae58d347a8c3b2a9b65c52.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\5d1aae1f8af76631affc28dda0a53440.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\5e17fd481336abd852cc6030d12512cd.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\63fc89599d5a6bbf3cd14379d56f9f1e.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\65a92ca0f2b64e31371e9b6851183a91.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\9b947e3fa900a05dc098846cb2dabf2f.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\adbad22d057b6b7ed696224f7b88466e.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\bb195a40e9df778e281e790021c4b5b7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\cab1cb5180cd9d810da35df475d88ca1.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\cc7ba9f4f47472e78aa8b0ee2e490b15.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\cf7dc26f240f175738468c8a32d9b37b.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\daf01adecb082906ca27ce88486034b8.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\e2d9615909e317f82ad7f4ec6b6b5eef.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\e663215935358a0a1756698f8af0370f.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\f45a0066547d5922211c95c3bdfea680.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\chrome\content\core\installer.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\defaults\preferences\prefs.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\manifest.xml, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins.json, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\231.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\1.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\102.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\103.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\104.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\119.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\123.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\13.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\14.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\155.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\16.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\17.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\177.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\178.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\179.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\180.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\182.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\183.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\184.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\191.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\194.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\195.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\207.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\21.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\22.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\220.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\221.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\223.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\232.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\242.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\244.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\246.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\259.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\262.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\263.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\268.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\273.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\275.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\277.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\278.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\28.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\280.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]4ff9-89af-a3fb89311be5.com\extensionData\plugins\281.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\286.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\4.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\47.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\64.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\7.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\72.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\78.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\9.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\91.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\93.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\plugins\98.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\userCode\background.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\extensionData\userCode\extension.js, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\locale\en-US\translations.dtd, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\button1.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\button2.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\button3.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\button4.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\button5.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\crossrider_statusbar.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\icon128.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\icon16.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\icon24.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\icon48.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\panelarrow-up.png, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\popup.html, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\skin.css, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\[email protected]b89311be5.com\skin\update.css, Quarantined, [eeaed8a629528fa7b0953169b84a05fb], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\1293297481.mxaddon, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\360-59564.crx, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\59564.xpi, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-11.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-2.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-4.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7-5.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\93dbb057-a005-4b79-ab6c-0da10ae47ad7.crx, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\background.html, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6-bg.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6-codedownloader.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\HDtubeV1.6.ico, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\Uninstall.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.HDPlus.A, C:\Program Files\HDtubeV1.6\utils.exe, Quarantined, [c0dc532b601b181e682184286999a45c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146ebc00a3bae5bfd84b6e30e6946e3d");), Replaced,[3d5ff08e26556bcb56d4af0b1fe558a8]
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)
 
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.