Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for MediaPlayer+vidsEd.3

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,085 posts
Content is republished with permission from Malwarebytes.

What is MediaPlayer+vidsEd.3?

The Malwarebytes research team has determined that MediaPlayer+vidsEd.3 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by MediaPlayer+vidsEd.3?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

this task in your Scheduled Tasks:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did MediaPlayer+vidsEd.3 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove MediaPlayer+vidsEd.3?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of MediaPlayer+vidsEd.3?
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the MediaPlayer+vidsEd.3 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png


Technical details for experts

Signs in a HijackThis log:

O2 - BHO: 5957acae63ad4d89b684a64590505c730067913 - {11111111-1111-1111-1111-110611791113} - C:\Program Files\MediaPlayer+vidsEd.3\MediaPlayer+vidsEd.3-bho.dll
Possible signs in a FRST log:

 BHO: MediaPlayer+vidsEd.3 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files\MediaPlayer+vidsEd.3\MediaPlayer+vidsEd.3-bho.dll (Enter)
 FF Extension: MediaPlayer+vidsEd.3 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com [2015-01-15]
 () C:\Windows\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-1.job
 () C:\Windows\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5_user.job
 () C:\Windows\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5.job
 () C:\Program Files\MediaPlayer+vidsEd.3
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/15/2015
Scan Time: 9:06:33 AM
Logfile: mbamMediaPlayerVidsEd.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.01.15.05
Rootkit Database: v2015.01.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 288293
Time Elapsed: 3 min, 34 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611791113}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644794413}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655795513}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666796613}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\5957acae63ad4d89b684a64590505c730067913.BHO.1, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611791113}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\5957acae63ad4d89b684a64590505c730067913.BHO, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110611791113}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110611791113}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622792213}, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\5957acae63ad4d89b684a64590505c730067913.Sandbox.1, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\5957acae63ad4d89b684a64590505c730067913.Sandbox, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611791113}\INPROCSERVER32, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MediaPlayer+vidsEd.3, Quarantined, [4e636d8ad2b761d5b26c80edc63d1fe1], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [c9e86691ee9b65d142e1dfc88182639d], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [2d843abd0b7ee5514c3c00dd1fe50ef2], 
PUP.Optional.MediaPlayer.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayer+vidsEd.3, Quarantined, [04adee097514fd393fe11b524eb57f81], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [f4bda651c4c59f978cb528583ec52cd4], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Enter, Quarantined, [a20fd91ecbbee4523f9132b47d879d63], 
PUP.Optional.MediaPlayer.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\MediaPlayer+vidsEd.3, Quarantined, [d2df1fd83a4f90a6ddcc7def06fd9769], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 14
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults\preferences, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\userCode, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale\en-US, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3, Quarantined, [d2df1fd83a4f90a6ddcc7def06fd9769], 

Files: 122
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\MediaPlayer+vidsEd.3-bho.dll, Quarantined, [832e6097cebb4ee8dfec715b957053ad], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\MediaPlayer+vidsEd.3.exe, Quarantined, [1e93eb0cee9bbc7a771496678f7208f8], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-4.exe, Quarantined, [bdf4ba3dc0c90e28a823b11b53b28e72], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5.exe, Quarantined, [0ea30deac3c6ad89ca018e3e41c45ca4], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\MediaPlayer+vidsEd.3-bg.exe, Quarantined, [377a1bdce6a3b680fbd07e4ed233de22], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\MediaPlayer+vidsEd.3-codedownloader.exe, Quarantined, [179a86716e1bc67016b5cffdd0350000], 
PUP.Optional.CrossRider.A, C:\Program Files\MediaPlayer+vidsEd.3\utils.exe, Quarantined, [288947b02e5bbd7915271e3bb44c9769], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-1, Quarantined, [b5fcba3d0386ec4ad48665279e6506fa], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5, Quarantined, [40719661682101355cfe612b05fe48b8], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5_user, Quarantined, [159c2fc8cbbeb185c397721a46bd17e9], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-1.job, Quarantined, [0fa2fff81277eb4bd602d41513f11be5], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5.job, Quarantined, [862b7384315859dd11c76d7c0400f60a], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4-5_user.job, Quarantined, [357c65928108a19593455594f21204fc], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome.manifest, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\install.rdf, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\2b256e4d5949ba7d46562d87d6d3168c.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\43a256bc40cec27fea03e43979973811.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\70d572eeffccb3d45bc5b7ba83f4c81e.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\7b3aa8491a3bca9eae78d37b09defe75.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\background.html, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\browser.xul, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\dialog.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\e01edaed0ffaf6c8c2cd0cc73a865910.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\f2f9b66c91b835a5c68a501a94b7635c.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\options.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\options.xul, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\search_dialog.xul, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\0a482e40d9e28ea7b540f599d3f0d56b.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\112b75afc4187ff007e0e62851420e9b.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\13c600beb18d580701b3a1fb0789c155.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\2a09319109974441d0465d390e49933b.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\3d2de314ab699925783f37a1ac043d69.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\3fc13213b42a62539e84a54eacccd517.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\5534bd2fb6a53ca632446a6dfbdfabde.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\575d4f2b69e1032bbfa3732c9fb03e5e.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\5a1f162ea5c7d203798a3f66d60239ed.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\6e6703dbe868ad7e21440e322c7d6fd4.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\98603dd0a44287f29537ba766d95b315.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\a3a96ac761db6995f5bc7c2b18acbaf2.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\b606bd67736b2b5af6f6fcfa28b6b484.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\bf22f4333c43f8beaf7a16ce3cbddae2.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\cb46943442158817f114acd731702f93.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\api\f3e646fe1b1d8734d944ac95bbb566f6.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\66d14e687256731391c96b3085f77f4a.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\0eea2ff80b68dc78c7a8a6f1b896ea47.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\17eb383496d0109457ed4c6267973fbc.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\21de6fab2bdb66fc90f27451b573d3a2.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\2278c093a04766e7b71201b1327bde1a.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\2a1afe892c12a864f87f45c42c76af0f.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\39eb79c8db4a425d24bc5baba01cfa71.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\4fda992b0783418adb33ea03da880705.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\50f8229becb86f1665e68aa511471f9d.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\5843c9f8bab2baa3690e92e111c55a49.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\5d99d97d7cfcf9cb345a2f942e92ecc6.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\6429c51a82aa79ff529ad5fc4e168044.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\841ecbfc7928270a13b1dea13d6df266.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\925030299e877c04519458fa3d441ea4.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\99aca192fdeee22f4d4ca46613b9f21d.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\a37ea67ac723373498d9caed7c5eafba.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\af6864c291010b6a59d26047ed032f35.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\b1dc250114df14a2664246d8ab2c75e8.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\e5c353c314aada566c75e16c05d7364e.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\f1c0b7311e9eb4aa8ffd6a1affd44b24.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\chrome\content\core\installer.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\defaults\preferences\prefs.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\manifest.xml, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins.json, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\102.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\13.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\14.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\16.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\17.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\180.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\184.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\192.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\193.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\195.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\200.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\220.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\221.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\223.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\242.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\246.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\253.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\262.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\263.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\273.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\281.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\301.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\345.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\354.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\4.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\47.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\64.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\7.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\78.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\9.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\91.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\plugins\93.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\userCode\background.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\extensionData\userCode\extension.js, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\locale\en-US\translations.dtd, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button1.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button2.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button3.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button4.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\button5.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\crossrider_statusbar.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon128.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon16.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon24.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\icon48.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\panelarrow-up.png, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\popup.html, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\skin.css, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\b6e4f54065ff48dd97db30ca@c9b45f807bf54a45a4669e51c.com\skin\update.css, Quarantined, [e2cfb047a0e9ef4763a741256c97e41c], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\3e752a7a-30c0-4992-8225-b7e2dd3cc7f4.xpi, Quarantined, [d2df1fd83a4f90a6ddcc7def06fd9769], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\background.html, Quarantined, [d2df1fd83a4f90a6ddcc7def06fd9769], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\MediaPlayer+vidsEd.3.ico, Quarantined, [d2df1fd83a4f90a6ddcc7def06fd9769], 
PUP.Optional.MediaPlayer.A, C:\Program Files\MediaPlayer+vidsEd.3\Uninstall.exe, Quarantined, [d2df1fd83a4f90a6ddcc7def06fd9769], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14aec9a493446e164f285568dddf2ea8");), Replaced,[753c90679beede587e99ce02887d926e]

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.