Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for BroAppVersion10

- - - - -
Started by Metallica , Jan 26 2015 01:57 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 26 January 2015 - 01:57 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is BroAppVersion10?

The Malwarebytes research team has determined that BroAppVersion10 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by BroAppVersion10?

You may see these browser extensions/add-ons:

warning1.png

warning2.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did BroAppVersion10 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove BroAppVersion10?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
  • Reboot your computer if prompted.
Is there anything else I need to do to get rid of BroAppVersion10?
  • No, Malwarebytes' Anti-Malware removes BroAppVersion10 completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the BroAppVersion10 hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png


Technical details for experts

Signs in a HijackThis log:

O2 - BHO: 6b064ce819644ac68b741b4c9b968d8c0069917 - {11111111-1111-1111-1111-110611991117} - C:\Program Files\BroAppVersion10\BroAppVersion10-bho.dll
You may see these entries in a FRST log:

 BHO: BroAppVersion10 -> {11111111-1111-1111-1111-110611991117} -> C:\Program Files\BroAppVersion10\BroAppVersion10-bho.dll (BrowsrAppServ+)
 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found]
 FF Extension: BroAppVersion10 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\NAUPP49116685@MVOEOKE10798312.com [2015-01-26]
 C:\Windows\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-1.job
 () C:\Windows\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-5_user.job
 () C:\Windows\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-5.job
 () C:\Program Files\BroAppVersion10
Alterations made by the installer:

File system details  
---------------------------------------------
    Adds the folder C:\Program Files\BroAppVersion10
       Adds the file background.html"="1/24/2015 11:16 AM, 729 bytes, A
       Adds the file BroAppVersion10.ico"="1/24/2015 11:16 AM, 15086 bytes, A
       Adds the file BroAppVersion10-bg.exe"="1/26/2015 8:21 AM, 589800 bytes, A
       Adds the file BroAppVersion10-bho.dll"="1/26/2015 8:21 AM, 672744 bytes, A
       Adds the file BroAppVersion10-codedownloader.exe"="1/26/2015 8:21 AM, 1078760 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b.xpi"="1/26/2015 8:21 AM, 364687 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-4.exe"="1/26/2015 8:21 AM, 1477608 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-5.exe"="1/26/2015 8:21 AM, 1119208 bytes, A
       Adds the file Uninstall.exe"="1/26/2015 8:21 AM, 116200 bytes, A
       Adds the file utils.exe"="1/26/2015 8:21 AM, 2637342 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com
       Adds the file chrome.manifest"="1/26/2015 8:21 AM, 516 bytes, A
       Adds the file install.rdf"="1/26/2015 8:21 AM, 1242 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\defaults
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\locale
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-1"="1/26/2015 8:21 AM, 6474 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-5"="1/26/2015 8:21 AM, 5466 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-5_user"="1/26/2015 8:21 AM, 5472 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-1.job"="1/26/2015 8:21 AM, 3444 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-5.job"="1/26/2015 8:21 AM, 2436 bytes, A
       Adds the file d555af3c-3330-48f2-8edb-03120b68708b-5_user.job"="1/26/2015 8:21 AM, 2436 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "B2534D156BBE44CDAE813C0C5F3E1D90IE"
       "Verifier"="REG_SZ", "a84290e463e2ae5b25d5fa94d2bda3c2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\BroAppVersion10\I9I035U5w/bpYvGb0PEGJ81uTijdeP0iAEVwQ4/BJ1HvCmbB0BunTBE1VM2X7SijW6FZsYPHtv2dnYGwkB14cfxf7LZgxQVOGCtaX00dk4PKZg4TBz4zIoASq9mcsSi9fu34vMkMvwpdptLOAj+f8eVmc+nlyw48boc1qHPACZ8=]
       "bpTEU0CglwBomw4W4FnEk3wNa2WtAP5qmxUv9Ad6AlFbKR486G1pf3m2uHWRelvwMIDEjN/mHGw8Bp55mBW3Y9g3k6GMoS0G/hmrBNWcUe2eZadg/cU3ySq4oyOLxAiV84bEaqonP0T8qnl9y6dpvYrVuX6z2lE0BAoVgBHPdIeXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\BroAppVersion10\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\BroAppVersion10\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\BroAppVersion10\Installer]
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\BroAppVersion10\moYLCmdh7Sy+iUrI5tUKUNG4W58kOgrhU4tmDP7utiP9RgFMonlWCNsjUpxB9mvdzx3BC6Oo2QiCKmixdrL1sMACvpOxkHwKDwlyDZ6M0kGGwzCjsKjBNu/IeDTQS4fbM3qbJIdXpN0S1m7Crcz5McYTV9t0DvTXaa4Vs/j3PSg=]
       "FUdQHlF54lVEgL9jvaxQFk4habwJ6RfyzH992g+YySb2DLxoI5nCQkeS3cLVRyOJfsgCkJQcCzWx1TRFGPAypUD9kXZXma7X0RVbcS5CyVxrSmoPQOgYe88ZI89ehWGsADQYHb7a9bRDaUeLIt64ZD/147gRF3FYuk9rIHqN20s="="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.BHO]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110611991117}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.BHO\CurVer]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.BHO.1]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110611991117}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220622992217}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox\CurVer]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox.1]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220622992217}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}]
       "(Default)"="REG_SZ", "BroAppVersion10"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\BroAppVersion10\BroAppVersion10-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\ProgID]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644994417}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611991117}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622992217}]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622992217}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\BroAppVersion10\BroAppVersion10-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622992217}\ProgID]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622992217}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622992217}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644994417}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622992217}\VersionIndependentProgID]]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655995517}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655995517}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655995517}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655995517}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644994417}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666996617}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666996617}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666996617}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666996617}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440644994417}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644994417}\1.0]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644994417}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\BroAppVersion10\BroAppVersion10-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644994417}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644994417}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\BroAppVersion10"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636]
       "69917"="REG_SZ", "BroAppVersion10"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
       "BroAppVersion10-bg.exe"="REG_DWORD", 8000
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611991117}]
       "(Default)"="REG_SZ", "6b064ce819644ac68b741b4c9b968d8c0069917"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BroAppVersion10]
       "CrAppId"="REG_SZ", "69917"
       "CrPublisherId"="REG_SZ", "21636"
       "DisplayIcon"="REG_SZ", "C:\Program Files\BroAppVersion10\utils.exe"
       "DisplayName"="REG_SZ", "BroAppVersion10"
       "DisplayVersion"="REG_SZ", "1.36.01.22"
       "Publisher"="REG_SZ", "BrowsrAppServ+"
       "UninstallString"="REG_SZ", "C:\Program Files\BroAppVersion10\Uninstall.exe /fcp=1  "
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "d555af3c-3330-48f2-8edb-03120b68708b-1.job"="REG_BINARY, ................................
       "d555af3c-3330-48f2-8edb-03120b68708b-1.job.fp"="REG_DWORD", 650482375
       "d555af3c-3330-48f2-8edb-03120b68708b-5.job"="REG_BINARY, ................................
       "d555af3c-3330-48f2-8edb-03120b68708b-5.job.fp"="REG_DWORD", 299352555
       "d555af3c-3330-48f2-8edb-03120b68708b-5_user.job"="REG_BINARY, ................................
       "d555af3c-3330-48f2-8edb-03120b68708b-5_user.job.fp"="REG_DWORD", 448436438
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\BroAppVersion10]
       "ActiveAppId"="REG_SZ", "69917"
       "BhoRunningVersion"="REG_SZ", "154"
       "IsBhoEnabled"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\BroAppVersion10\Code]
       " {JavaScript removed, full log available on request } "
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\BroAppVersion10\Debug]
       "DebuggedAppUrl"="REG_SZ", "file://C:\Users\{username}\Documents\debug.js"
       "DebuggedBgUrl"="REG_SZ", "file://C:\Users\{username}\Documents\bg_debug.js"
       "DebuggedNewTabUrl"="REG_SZ", "file://C:\Users\{username}\Documents\new_debug.js"
       "IsDebuggingPlugins"="REG_DWORD", 0
       "IsDebugMode"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\BroAppVersion10\Installer]
       "AdditionalInfo"="REG_SZ", "{"asw":[67108864, -1073733563, 0, 0],"browser_name":"ie","proc_id":"1FB7C63FC6624494891903129E036DC4PI","os":{"name":"7","build":"7601","product":"Windows 7 Ultimate N","sp":"Service Pack 1","install_date":"1363633411"},"upi":"8655ebc447297b398088e5f1933333c9"}"
       "CodeDownloadDomain"="REG_SZ", "http://js.onlineinputstorage.com"
       "CodeDownloadFbDomain"="REG_SZ", "http://js.clientdemocloud.com"
       "DefaultBrowser"="REG_SZ", "ie"
       "ErrorsDomain"="REG_SZ", "http://errors.onlineinputstorage.com"
       "FullVersion"="REG_SZ", "1.36.01.22"
       "FullVersionForUrl"="REG_SZ", "1_36_01_22"
       "OsName"="REG_SZ", "7"
       "Params"="REG_SZ", "{   "source_id" : "002468",   "sub_id" : "0",   "uzid" : "0"}"
       "SrcId"="REG_SZ", "002468"
       "StatsDomain"="REG_SZ", "http://stats.onlineinputstorage.com"
       "SubId"="REG_SZ", "0"
       "Time"="REG_SZ", "1422256858"
       "ZData"="REG_SZ", "0"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\BroAppVersion10\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "1"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Enhancing browsing experience"
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "BroAppVersion10"
       "PluginsManifestVersion"="REG_SZ", "6"
       "PublisherId"="REG_SZ", "21636"
       "PublisherName"="REG_SZ", "BrowsrAppServ+"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "10"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\BroAppVersion10\Update]
       "LastCheck"="REG_DWORD", 1422256868
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "B2534D156BBE44CDAE813C0C5F3E1D90IE"
       "Verifier"="REG_SZ", "a84290e463e2ae5b25d5fa94d2bda3c2"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]
       "69917"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]
       "69917"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\BroAppVersion10]
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636]
       "69917"="REG_SZ", "BroAppVersion10"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\BrowsrAppServ+]
       "69917"="REG_SZ", "BroAppVersion10"
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions]
       "{11111111-1111-1111-1111-110611991117}"="REG_BINARY, ............
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110611991117}]
       "Flags"="REG_DWORD", 1024
       "VerCache"="REG_BINARY, ......................
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 1/26/2015
Scan Time: 8:28:31 AM
Logfile: mbamBroAppVersion10.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2015.01.26.04
Rootkit Database: v2015.01.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 290521
Time Elapsed: 4 min, 8 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 19
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611991117}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440644994417}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550655995517}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660666996617}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\6b064ce819644ac68b741b4c9b968d8c0069917.BHO.1, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110611991117}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\6b064ce819644ac68b741b4c9b968d8c0069917.BHO, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110611991117}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110611991117}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220622992217}, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox.1, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\6b064ce819644ac68b741b4c9b968d8c0069917.Sandbox, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110611991117}\INPROCSERVER32, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\BroAppVersion10, Quarantined, [22da3fbce9a05cdac3143b3ddc27b64a], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [ae4e619a6b1ebc7a93358430a26126da], 
PUP.Optional.BrowserApp.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\BroAppVersion10, Quarantined, [c6360af138516ec8d108accc5da612ee], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [9d5f9d5ee6a35fd7cd610be00202aa56], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [27d5996282072f079d5591fccd36dc24], 
PUP.Optional.BrowserApp.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BroAppVersion10, Quarantined, [bc402dce98f1a096646b126629dab54b], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 14
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\defaults, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\defaults\preferences, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\userCode, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\locale, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\locale\en-US, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10, Quarantined, [bc402dce98f1a096646b126629dab54b], 

Files: 124
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\BroAppVersion10-bho.dll, Quarantined, [c03cfb00d4b5999d1d4320bd14f1df21], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\BroAppVersion10.exe, Quarantined, [25d72fcc5930a78f5b6600ffb74ac13f], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\BroAppVersion10-bg.exe, Quarantined, [877503f8404983b3e57bb02d9d68b749], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\BroAppVersion10-codedownloader.exe, Quarantined, [2ece89720d7c6ec869f7a4394db8b64a], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\d555af3c-3330-48f2-8edb-03120b68708b-4.exe, Quarantined, [a656d02b3455f2445709da03c63fd927], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\d555af3c-3330-48f2-8edb-03120b68708b-5.exe, Quarantined, [4bb13bc0d1b82016adb3cd109a6b3ac6], 
PUP.Optional.CrossRider.A, C:\Program Files\BroAppVersion10\utils.exe, Quarantined, [dc20fefde1a81f17083598c109f709f7], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-1, Quarantined, [ac50778404850b2bab59c1d9eb18d52b], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-5, Quarantined, [35c713e8bbce54e21aea7525fa0929d7], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-5_user, Quarantined, [ad4f06f5b8d147efa064980231d2cd33], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-1.job, Quarantined, [ac507f7cc4c5ed49c1b923d42bd9c040], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-5.job, Quarantined, [c13b0bf0d9b0b185c2b88a6d61a3cc34], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\d555af3c-3330-48f2-8edb-03120b68708b-5_user.job, Quarantined, [847874877c0db581b6c4df18e61ed729], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome.manifest, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\install.rdf, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\20d9076a5d419543443506a924f2a8c6.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\4937d855803cb8ce7711e55f8602f22f.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\8178e928f8c26fbd6e1ff0127da84ec4.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\a3b49860dce16b62fe506495b15cacef.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\ace7f8a23bbe6c5fd628bf51be34106d.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\background.html, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\browser.xul, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\dialog.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\e574c0d81c6c7f86745cd37f174364b9.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\options.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\options.xul, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\search_dialog.xul, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\9c553273cf8b95b9c77a6b4b226b6a10.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\25ebae5628d3a3e698d3367d049a0cab.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\29fc491d2650d8d302b177add7c7e742.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\2f5f2f4ad28f49829218ec85b3cf3097.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\399df4efb5cda08242c4a53013150cdd.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\5591e81736b827bcd503ada9861d3d60.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\82ac2b8a35a2b089c70721f01915793d.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\8688bda884c77d1a058f3128f89a7f21.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\97afd2d83e03d13ab4e5897c6dafe13e.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\9f54264ebcb1f476c3562706fb3131ed.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\b0725748d1354519b5852cdb3601526f.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\ba38e3632419972bb1aab0d386342faf.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\c0a5083795c188fa9c298a5c9843a228.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\c4eeec6994798ebafbf5e11867192ba1.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\cab1d560f09dcbb2de39ee3e05795446.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\api\fd52657007cb77c46a08bebe6536bc42.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\8e47ca7f6fd7e5c7c49e2ee4ef739192.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\1996898a6aab311e3a3581a240aa7550.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\362f2d46b1d2e1ec29531db05fab9761.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\4d72395a49ba7e06661f32dd01386a0e.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\62ee24049161eebb1382532aff0cce43.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\6df23ed20450c4417cde31915dae33b1.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\7d29e752262427c92f3e75977c891b1d.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\7debb7b189fee5e0c8d7351fea61f7c4.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\7ee79e040a9587d04d1ba794be45738a.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\8bf588b099914aa56437062c47c967b0.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\8f265a5516927b3a3293dc8f2e698f8e.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\9bd7c6482accc057adb79d7abd2eabed.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\9f9a4a79ae27b75c58f79256f82a6dd9.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\b21f179cc77ea6aa4124508ee0bae4c2.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\b23d569d4a0870d4891de365add8a046.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\b6076644cbd80820dc7c987bfe129cb1.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\e01aef9fff3849d3885fa0dd5a820619.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\e1bdbde44cdbd3f9fc50e0eb6e6d15cf.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\e409ea8f9924af9f05773025f63c47a0.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\f100739ffd2febd429782bfd9a765664.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\chrome\content\core\installer.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\defaults\preferences\prefs.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\manifest.xml, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins.json, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\102.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\13.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\14.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\16.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\17.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\180.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\184.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\193.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\195.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\220.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\223.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\230.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\233.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\234.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\242.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\246.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\253.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\262.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\263.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\281.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\288.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\289.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\301.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\337.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\345.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\354.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\356.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\4.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\47.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\64.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\7.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\78.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\9.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\91.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\plugins\93.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\userCode\background.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\extensionData\userCode\extension.js, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\locale\en-US\translations.dtd, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\button1.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\button2.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\button3.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\button4.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\button5.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\crossrider_statusbar.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\icon128.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\icon16.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\icon24.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\icon48.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\panelarrow-up.png, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\popup.html, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\skin.css, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\NAUPP49116685@MVOEOKE10798312.com\skin\update.css, Quarantined, [9f5d17e48108a88e5712b5b1bd46758b], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\background.html, Quarantined, [bc402dce98f1a096646b126629dab54b], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\BroAppVersion10.ico, Quarantined, [bc402dce98f1a096646b126629dab54b], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\d555af3c-3330-48f2-8edb-03120b68708b.xpi, Quarantined, [bc402dce98f1a096646b126629dab54b], 
PUP.Optional.BrowserApp.A, C:\Program Files\BroAppVersion10\Uninstall.exe, Quarantined, [bc402dce98f1a096646b126629dab54b], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.