Jump to content

Welcome to Geeks to Go
Geeks to Go Welcome
Create Account Login to Account
Photo

Removal instructions for VisualBee

- - - - -
Started by Metallica , Apr 23 2015 04:15 AM

  • Please log in to reply
No replies to this topic

#1
Metallica
Posted 23 April 2015 - 04:15 AM

Metallica

    Spyware Veteran

  • GeekU Moderator
  • 33,101 posts
Content is republished with permission from Malwarebytes.

What is VisualBee?

The Malwarebytes research team has determined that VisualBee is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by VisualBee?

You may see this Firefox add-on:

warning1.png

these tasks in your Task Scheduler:

warning3.png

and this entry in your list of installed programs:

warning4.png

How did VisualBee get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove VisualBee?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
But we do advise to use the Uninstall from Add/Remove Software in your Control Panel (see screenshot above) first.
  • Please download Malwarebytes Anti-Malware to your desktop.
  • Double-click mbam-setup-version.exe and follow the prompts to install the program.
  • At the end, be sure a check-mark is placed next to the following:
    • Enable free trial of Malwarebytes Anti-Malware Premium
    • Launch Malwarebytes Anti-Malware
  • Then click Finish.
  • If an update is found, you will be prompted to download and install the latest version.
  • Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
  • When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
  • Restart your computer when prompted to do so.
Is there anything else I need to do to get rid of VisualBee?
  • No, together with the uninstaller, Malwarebytes' Anti-Malware removes VisualBee completely.
  • This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.
How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the VisualBee hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

protection1.png


Technical details for experts

No visible signs in a HijackThis log

You may see these entries in FRST logs:

 () C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job
 () C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5.job
 () C:\Program Files\Information
 FF Extension: No Name - C:\Users\Malwarebytes\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\Extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com [2015-04-23]

Information (HKLM\...\Information) (Version: 1.36.01.22 - VisualBee)
Task: {AC32A81C-75CA-437F-9AB5-1413643DE102} - System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5 => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe [2015-04-23] (VisualBee) <==== ATTENTION
Task: {AC9A81AF-E451-40A1-B4DC-CE62E00B168B} - System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe [2015-04-23] (VisualBee) <==== ATTENTION
Task: C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5.job => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job => C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe <==== ATTENTION
Alterations made by the installer:

File system details  
---------------------------------------------
    Adds the folder C:\Program Files\Information
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2.xpi"="4/23/2015 10:44 AM, 393090 bytes, A
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-4.exe"="4/23/2015 10:44 AM, 1273344 bytes, A
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe"="4/23/2015 10:44 AM, 1014784 bytes, A
       Adds the file Uninstall.exe"="4/23/2015 10:44 AM, 115712 bytes, A
       Adds the file utils.exe"="4/23/2015 10:44 AM, 1849998 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5"="4/23/2015 10:44 AM, 5458 bytes, A
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5_user"="4/23/2015 10:44 AM, 5464 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5.job"="4/23/2015 10:44 AM, 2428 bytes, A
       Adds the file 2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job"="4/23/2015 10:44 AM, 2428 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"
       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Information
    [HKEY_LOCAL_MACHINE\SOFTWARE\Information\DZwF6X9KB9OILwcCERvGMQFt485yVdupNy3GtGUo7zwKdPdVo9OIHY1KuIQzzFjjg/mPg3i4zRORT3lMAFbx2QourPF1Ml54mp7Pn9Z6BSSMixHkn0v3iGFwLa8teoMyr2vQBHm07t7gD5/bxC/go9d+kLFhlTh2Hza6yZurAAQ=]
       "B6e0sf/DJMxWLe8rV/7vKkPaxnF+mHPvWRVckXKE2yxV9ykgHQ/B5myzjJc8kZmEfYL+hEnVWVW98epXSKFmxhb+3LAI0fC1r2j370nZOvd37+8VJzKNKx+81ErxDoho7pS9ytdZNSBJ2vNJJ+vE7b/9pdKPtnpBH7dk58zkjamXfpzne7bBpeK/tCtyC5ajhBXyMoPfI7LcFwoiDlc8z/G3u7VA9kiwPQSHZxV2lhMIrk9FGqwxzanuvWEgp31oyd/9+iL2Ot/X3pxtKuXNPR1AIrmP/PgqpGVDoqAHFZ9NbeD+e7eQENUI5O3Z4Zle66+qLIXCLVKVZpVO8ByoxQ=="="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Information\Installer]
       "BundledFirefox"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Information\Z/PQsIb8BrtNkYa2WvMgS3ZrX/7ewI7oycIz8Q7DJtHQIHuQUBQzfiUPQyMStSaVXIDiMnW4l+pS3yVcmrDl8I/azZgOSBJUPVAP8x44M0mSmcqH2NU3iLrSIIihFNArkHj6b4tYJfR4LhUak7EO121Z0fTFa7+ITf0dzRG2a44=]
       "I8vYGmAGeQcC0bww7xR7G8OyK6bgJoDNmTEzwLuc7+NVHtK/q1hHyvP35F5/r0NJ6roq0MQSJgFzh0z0/Lua0uSsJgs4AO4Js1zBXi/6BeV2tNlkDEQntVCEGf2Y1fMXrPknCFWdVT05PYaNfgQObcRyBNNVJoR6i/lwofIGjT4="="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21409]
       "50368"="REG_SZ", "Information"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21409\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Information]
       "CrAppId"="REG_SZ", "50368"
       "CrPublisherId"="REG_SZ", "21409"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Information\utils.exe"
       "DisplayName"="REG_SZ", "Information"
       "DisplayVersion"="REG_SZ", "1.36.01.22"
       "Publisher"="REG_SZ", "VisualBee"
       "UninstallString"="REG_SZ", "C:\Program Files\Information\Uninstall.exe /fcp=1  "
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "2dd8035f-c232-46ba-a649-bf88af80cca2-5.job"="REG_BINARY, ................................
       "2dd8035f-c232-46ba-a649-bf88af80cca2-5.job.fp"="REG_DWORD", 650851903
       "2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job"="REG_BINARY, .'..............................
       "2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job.fp"="REG_DWORD", -466726888
    [HKEY_USERS\.DEFAULT\Software\Opera Software
       "ATTEMPTS
        REG_SZ, "51" ==> REG_SZ, "52"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "8655ebc447297b398088e5f1933333c9IE"
       "Verifier"="REG_SZ", "4704d091642d168879ad647182ff110a"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21409
       "50368"="REG_SZ", "Information"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21409\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\VisualBee]
       "50368"="REG_SZ", "Information"
Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/23/2015
Scan Time: 10:55:58 AM
Logfile: MBAMVisualBee.txt
Administrator: Yes

Version: 2.01.0.1004
Malware Database: v2015.04.23.02
Rootkit Database: v2015.04.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 286157
Time Elapsed: 4 min, 0 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 5
PUP.Optional.CrossRider.C, HKLM\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [5ba3135c98f231059d4d3889877c57a9], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21409, Quarantined, [e41a7ef14a4050e65434f41145bf09f7], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [fd014d22e9a179bd84a7e5567293dc24], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21409, Quarantined, [9d61aac51e6c50e618eb3aa9fd062ed2], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\VisualBee, Quarantined, [88769ed1c4c6b87e54f5b252d52fb44c], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 13
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults\preferences, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\userCode, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale\en-US, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 

Files: 121
PUP.Optional.Information.A, C:\Users\{username}\Desktop\VisualBee.exe, Quarantined, [39c5eb848efce94d49f9e0bdc839f010], 
PUP.Optional.Information.A, C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-4.exe, Quarantined, [8d71d49b94f6e15574ceabf2d62b50b0], 
PUP.Optional.Information.A, C:\Program Files\Information\2dd8035f-c232-46ba-a649-bf88af80cca2-5.exe, Quarantined, [24da94db2d5d57df95ada5f8fd043dc3], 
PUP.Optional.Information.A, C:\Program Files\Information\utils.exe, Quarantined, [946a0966008a0d297ec41885d42d946c], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5, Quarantined, [06f82649fd8da19595429c51e122d927], 
PUP.Optional.CrossRider.T, C:\Windows\System32\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user, Quarantined, [30cecda2335771c517c0ce1f649fd22e], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5.job, Quarantined, [08f6125da2e8db5b507a8db909fcd12f], 
PUP.Optional.CrossRider.T, C:\Windows\Tasks\2dd8035f-c232-46ba-a649-bf88af80cca2-5_user.job, Quarantined, [a559c4abd5b5a88ea02a73d3a75ee719], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\crossrider_statusbar.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button1.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button2.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button3.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button4.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\button5.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon128.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon16.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon24.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\icon48.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\panelarrow-up.png, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\popup.html, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\skin.css, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\skin\update.css, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome.manifest, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\install.rdf, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\3bc392fcdaaf3e709711d74ec002fe13.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\6af56984f704fd2f6e2a583f9c1c9a9d.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\8177fcb43ac8aa528440197a1ea59187.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\9e41110748dd329122fea0fe554579ef.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\b80aa331870fd2afc2a3bd0615537fd6.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\background.html, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\browser.xul, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\da31a5664809f9d542b889e1df5ce890.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\dialog.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\options.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\options.xul, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\search_dialog.xul, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\874104ca34bcd35f439ccb0e204d5b70.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\09d2b21decd02275836b4651e661b982.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\0c796e0c0abc4257b4b5a5b48b90cefe.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\2bd7ca36ec5b42c7c4750eec13498935.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\2dd830d6492b4c712ce2f4cfe0270be6.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\4a7f4b7bb54be9419b4aba3f4e3d15c4.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\4b84e73ac3e07a5aedd9eb999348682c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\552263e656ea35860ad578910b7da420.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\6d3cc87df9f640a73341e14e29d3631a.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\901b41d96e52b6dffceccba2a6520b6a.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\9f524633f0904c1f52dfb1f9d9c6a6ef.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\ae3923a142065e880b59f076fbea5ccb.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\b270dd6248ad2bf45b5cff4ff9a3e469.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\b84eddabaa74360ea5cad547da81b82e.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\ecddd8e222f6704a239ec64eb936ff3c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\api\eeb9c26356ea2f665e08adce3bc9b1c4.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\a07a218f2925d6202f79d5d9811684ca.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\09b8b5e72e05abea3907e2a0781dde56.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\0f03ae1e7f9f52f61c93af4d68256ec1.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\1f5425fbb02f38bb5a151dcd3a83edf6.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\2f1221113e94bd9d7ea797e947000b43.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\354d2c035af4cdfda0fb57efa794105c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\43d85c95da65abec16b5347cdd14c8d5.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\4440d35dc6de29306fd8279ad95bb83f.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\81842831daf484f5da66df0636f8cf0c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\93fd89c061730ff71eada4082e2dec79.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\9d3b1cbf4ff1fcabc26188c5320d1fe3.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\a4b4e229f95d0dd8fb430ef1df3692c1.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\b4909696abf2daab9daa67203d1ae823.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\b4c4fd0d0ac396e6efd35b332d48a4b9.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\bd0b9841c8206394aba99345994d14ad.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\bd2852942672a73ad396fc9dda3807f1.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\c12dd957fa87a136b47d00f83f2732a9.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\cd416a8ddac6e09f605861d8132f886c.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\e32fae616d5421a0149305861f92cc0d.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\fa2f05785feb2993eeecdb25516e5705.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\chrome\content\core\installer.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\defaults\preferences\prefs.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\manifest.xml, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins.json, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\102.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\13.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\14.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\16.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\17.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\180.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\184.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\192.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\193.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\195.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\211.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\220.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\221.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\223.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\226.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\230.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\233.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\242.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\244.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\246.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\253.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\260.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\273.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\281.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\288.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\289.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\32.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\345.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\354.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\376.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\385.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\390.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\391.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\4.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\47.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\5.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\64.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\7.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\78.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\9.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\plugins\91.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\userCode\background.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\extensionData\userCode\extension.js, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\ce85a36c-113a-4928-aa86-88a31bd595e7@aa144f8a-c1f6-481f-991c-18bf0472c970.com\locale\en-US\translations.dtd, Quarantined, [25d92e4199f1ff37c13f95c1fa0bb34d], 

Physical Sectors: 0
(No malicious items detected)


(end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
  • Dynamically Blocks Malware Sites & Servers
  • Malware Execution Prevention
Save yourself the hassle and get protected.
  • 0

Advertisements

Back to Malware Removal Guides and Tutorials


0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Malware Removal Guides and Tutorials

As Featured On:

featured
Malware Removal How to Guides Windows 7 System Building Download Files Register welcome

Never used a forum? Learn how.