Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for Lights Cinema

- - - - -

  • Please log in to reply
No replies to this topic

#1
Metallica

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,086 posts
Content is republished with permission from Malwarebytes.

What is Lights Cinema?

The Malwarebytes research team has determined that Lights Cinema is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Lights Cinema?

You may see this Firefox extensions:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did Lights Cinema get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Lights Cinema?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of Lights Cinema?
  • No, Malwarebytes' Anti-Malware removes Lights Cinema completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Lights Cinema hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png


Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 FF Extension: No Name - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\74979c91-c812-44d6-90e1-1ff0491351e5@e3e0c78c-dd15-4ac4-b6a0-08cad184bd23.com [Not Found]
 FF Extension: Lights Cinema 1.3betaV04.04 - C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com [2015-04-12]
 () C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job
 () C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job
 () C:\Program Files\Lights Cinema 1.3betaV04.04

Lights Cinema 1.3betaV04.04 (HKLM\...\Lights Cinema 1.3betaV04.04) (Version: 1.36.01.22 - Cinema PlusV04.04)
Task: {44947133-BF34-4BE8-8987-9BC3D222FA96} - System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5 => C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe [2015-04-12] (Cinema PlusV04.04) <==== ATTENTION
Task: {87EFA06C-DFDC-413D-BC5C-94399C12ACB1} - System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user => C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe [2015-04-12] (Cinema PlusV04.04) <==== ATTENTION
Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files\Lights Cinema 1.3betaV04.04
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782.xpi"="4/12/2015 10:30 AM, 395295 bytes, A
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-4.exe"="4/12/2015 10:30 AM, 1531904 bytes, A
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe"="4/12/2015 10:31 AM, 1164800 bytes, A
       Adds the file Uninstall.exe"="4/12/2015 10:30 AM, 105984 bytes, A
       Adds the file utils.exe"="4/12/2015 10:30 AM, 2241020 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5"="4/12/2015 10:31 AM, 5490 bytes, A
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user"="4/12/2015 10:31 AM, 5496 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job"="4/12/2015 10:31 AM, 2460 bytes, A
       Adds the file 6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job"="4/12/2015 10:31 AM, 2460 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"
       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935]
       "71387"="REG_SZ", "Lights Cinema 1.3betaV04.04"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\30935\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Lights Cinema 1.3betaV04.04\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]
       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Lights Cinema 1.3betaV04.04\Installer]
       "BundledFirefox"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Lights Cinema 1.3betaV04.04\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]
       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lights Cinema 1.3betaV04.04]
       "CrAppId"="REG_SZ", "71387"
       "CrPublisherId"="REG_SZ", "30935"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Lights Cinema 1.3betaV04.04\utils.exe"
       "DisplayName"="REG_SZ", "Lights Cinema 1.3betaV04.04"
       "DisplayVersion"="REG_SZ", "1.36.01.22"
       "Publisher"="REG_SZ", "Cinema PlusV04.04"
       "UninstallString"="REG_SZ", "C:\Program Files\Lights Cinema 1.3betaV04.04\Uninstall.exe /fcp=1  "
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job"="REG_BINARY, ................................
       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job.fp"="REG_DWORD", 1262598109
       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job"="REG_BINARY, ................................
       "6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job.fp"="REG_DWORD", -1038303828
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"
       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935]
       "71387"="REG_SZ", "Lights Cinema 1.3betaV04.04"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\30935\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Cinema PlusV04.04]
       "71387"="REG_SZ", "Lights Cinema 1.3betaV04.04"


Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/12/2015
Scan Time: 10:39:34 AM
Logfile: MBAMLightsCinema.txt
Administrator: Yes

Version: 2.01.0.1004
Malware Database: v2015.04.11.08
Rootkit Database: v2015.03.31.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 290090
Time Elapsed: 4 min, 18 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 7
PUP.Optional.LightsCinema.A, HKLM\SOFTWARE\Lights Cinema 1.3betaV04.04, Quarantined, [401455169eec60d66f7cd0f32cd749b7], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [43113d2e0e7cef47f32f709332d2956b], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [a2b2b7b42c5ec67001e21028867f768a], 
PUP.Optional.GlobalUpdate.C, HKCU\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, Quarantined, [e56fabc092f87cba01dac7f691723ac6], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Quarantined, [fb595c0f2b5fe35370cd1dc259aab050], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Cinema PlusV04.04, Quarantined, [0153501b2b5f7eb8ee2701d355ae51af], 
PUP.Optional.LightsCinema.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Lights Cinema 1.3betaV04.04, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], 

Registry Values: 2
PUP.Optional.GlobalUpdate.C, HKLM\SOFTWARE\GLOBALUPDATE\UPDATEDEV|AuCheckPeriodMs, 21600000, Quarantined, [cf850f5c533769cd68da3f7e6b98d729]
PUP.Optional.GlobalUpdate.C, HKCU\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, Quarantined, [e56fabc092f87cba01dac7f691723ac6]

Registry Data: 0
(No malicious items detected)

Folders: 14
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults\preferences, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale\en-US, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.LightsCinema.A, C:\Program Files\Lights Cinema 1.3betaV04.04, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], 

Files: 136
PUP.Optional.CrossRider, C:\Users\{username}\Desktop\Arihajdjr.exe, Quarantined, [8fc5d596d5b537ff30554c9705fc56aa], 
PUP.Optional.CrossRider.A, C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-4.exe, Quarantined, [a5af76f57d0d8ea88c234be8749220e0], 
PUP.Optional.CrossRider.A, C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.exe, Quarantined, [ce8693d8c8c2d462f1be38fbe422b749], 
PUP.Optional.CrossRider.A, C:\Program Files\Lights Cinema 1.3betaV04.04\utils.exe, Quarantined, [a1b35714cbbffc3ab7f8a98a3bcb4db3], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5, Quarantined, [a6ae1358018977bf15466f7b9f642bd5], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user, Quarantined, [6fe53e2d632782b4154677736c97c43c], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5.job, Quarantined, [b4a0c3a8fa90c76fe9d1f4507095a15f], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\6a098d7f-e656-4e8f-b775-9d9e2897f782-5_user.job, Quarantined, [db791952c4c648eecded8cb81de845bb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\crossrider_statusbar.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button1.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button2.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button3.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button4.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\button5.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon128.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon16.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon24.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\icon48.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\panelarrow-up.png, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\popup.html, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\skin.css, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\skin\update.css, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome.manifest, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\install.rdf, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\0a1024373dee83e5bb65be67883dcbbc.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\0e4ea7d0acd445a6f777a7b4c0956857.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\15f92d29678a4c69009742baf2ba1eae.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\1bb0dd8be92955c94fd5f353b339e519.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\background.html, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\browser.xul, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\dialog.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\e4cbeacd46dbc84e6a3170639e05c86e.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\eaa35fe4ae19d60b5e50e3348b934132.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\options.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\options.xul, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\search_dialog.xul, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\83560a4a0a429da1176fdf03227bb78f.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\000b05c24375ef936dd170d3ca6dabca.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\0a5023d35f91ca1351568a6c49dbcf99.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\1340cc9c07c5a130bf588570f8dd0952.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\465ac0389d07de2cdfcf626517f15a3f.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\46e617fe2f42902b14e628578d91e4ad.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\7e354f077f1060e41d223e429a6c74ee.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\7fa4b475b0c3b492371f2fdd31dfb7b8.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\828fac603a08239c054a0046587faae1.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\8508f4f2cf4bb44d04c3499afc2925a2.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\9a67c6d844a3ffffcac1b6e7e44ec498.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\bfdbc65c514c222d20b0a4b13a5dc553.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\cba142ea14448c73cf844ae0befa36d1.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\ccbb5647576c9eb14a709d5a5abcac9d.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\f746b865119e75e0c2cd3d48558bc167.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\api\f75b17999cff0bd67c05c5320293988c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\76cb473505b781577c34f78ef852edda.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\16ecfe388b06d12e4fe4324bd058327c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\1dd518f8d486efbda499e5c97cf33719.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\2088ad542e8875a24ff219eabe86f83b.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\3559d4cbcf3a41ca9fef0188418c408c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\404e9295f3729fad0a73c3ebef7efc14.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\534580e6ef40903e6cc0ecfd51b645d6.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\5b829fd38e662cc6c3d66965aa4bf159.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\639ccf3549de43ce0a531375c2086637.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\73321ce29165b69fcaad9ce2c66db9ea.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\76caa8629b04bfc77a6483f8566d41fa.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\78815854113320f2c2582bfb6b06d822.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\8a1909d5e8d274eb285cd67a342ab782.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\97f18ff39d170b6ea46005d3bf4a8be9.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\9b88e59a225f650f828704526e444fa2.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\a03b08d0eb30ee5d2104d30da5b2fdf4.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\a8f5b75f923c81fc82673c8c7764172c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\c2a32b71c73bc636815075b48e57537c.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\ecb3d2d4d3f91e2b82f03d2d7be183d4.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\f89db11aecb58da5174caa4001150257.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\chrome\content\core\installer.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\defaults\preferences\prefs.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\manifest.xml, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins.json, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\289.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\102.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\119.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\123.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\13.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\14.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\16.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\17.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\178.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\179.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\180.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\184.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\195.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\200.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\220.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\221.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\223.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\231.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\232.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\234.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\242.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\246.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\252.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\253.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\260.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\262.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\263.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\273.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\281.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\288.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\290.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\334.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\335.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\339.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\344.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\345.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\354.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\356.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\375.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\376.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\379.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\380.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\385.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\389.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\390.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\391.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\4.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\47.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\64.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\7.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\78.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\9.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\91.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\plugins\93.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode\background.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\extensionData\userCode\extension.js, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ccf7276c-d388-480f-8835-5b680025e1ca@gmail.com\locale\en-US\translations.dtd, Quarantined, [85cf284392f843f33e61a1b3f21319e7], 
PUP.Optional.LightsCinema.A, C:\Program Files\Lights Cinema 1.3betaV04.04\6a098d7f-e656-4e8f-b775-9d9e2897f782.xpi, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], 
PUP.Optional.LightsCinema.A, C:\Program Files\Lights Cinema 1.3betaV04.04\Uninstall.exe, Quarantined, [4d07016ab2d87abccdf7c2f68e7558a8], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.