What is Free Ven?
The Malwarebytes research team has determined that Free Ven is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is effected by Free Ven?
You may see these browser extensions/add-ons:



and this entry in your list of installed programs:

How did Free Ven get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was offered as a shopping companion browser extension.
How do I remove Free Ven?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You will need Malwarebytes Anti-Malware version 2.00 (beta) or newer to disable the Chrome and Firefox extensions.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-consumer.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan now.
- When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
- Reboot your computer if prompted.
- The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the "free ven 1.26.22" listing. Then confirm removal.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Free Ven rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
Signs in a HijackThis log:
O2 - BHO: CrossriderApp0051680 - {11111111-1111-1111-1111-110511161180} - C:\Program Files\free ven\free ven-bho.dll
Alterations made by the installer:
File system details --------------------------------------------- Adds the folder C:\Program Files\free ven Adds the file 51680.crx"="3/15/2014 10:10 AM, 265994 bytes, A Adds the file 51680.xpi"="3/15/2014 10:10 AM, 303847 bytes, A Adds the file background.html"="3/10/2014 7:14 PM, 729 bytes, A Adds the file free ven.ico"="3/10/2014 7:14 PM, 9662 bytes, A Adds the file free ven-bg.exe"="3/15/2014 10:10 AM, 527872 bytes, A Adds the file free ven-bho.dll"="3/15/2014 10:10 AM, 501760 bytes, A Adds the file free ven-chromeinstaller.exe"="3/15/2014 10:10 AM, 2051584 bytes, A Adds the file free ven-codedownloader.exe"="3/15/2014 10:10 AM, 567296 bytes, A Adds the file free ven-enabler.exe"="3/15/2014 10:10 AM, 407040 bytes, A Adds the file free ven-firefoxinstaller.exe"="3/15/2014 10:10 AM, 958464 bytes, A Adds the file free ven-updater.exe"="3/15/2014 10:10 AM, 391680 bytes, A Adds the file Installer.log"="3/15/2014 10:10 AM, 274713 bytes, A Adds the file Uninstall.exe"="3/15/2014 10:10 AM, 77312 bytes, A Adds the file utils.exe"="3/15/2014 10:10 AM, 2296927 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_hjghiofiijcepdnocbgefbdlbckjfheg_0 Adds the file 1"="3/15/2014 10:13 AM, 19456 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0 Adds the file background.html"="3/15/2014 10:10 AM, 1705 bytes, A Adds the file chromeCoreFilesIndex.txt"="3/15/2014 10:10 AM, 853 bytes, A Adds the file crossriderManifest.json"="3/15/2014 10:10 AM, 517 bytes, A Adds the file manifest.json"="3/15/2014 10:10 AM, 1089 bytes, A Adds the file popup.html"="3/15/2014 10:10 AM, 139 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData Adds the file manifest.xml"="3/15/2014 10:10 AM, 1700 bytes, A Adds the file plugins.json"="3/15/2014 10:10 AM, 8524 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins Adds the file 1_base.js"="3/15/2014 10:10 AM, 6794 bytes, A Adds the file 102_dealply_m.js"="3/15/2014 10:10 AM, 2048 bytes, A Adds the file 103_intext_5_m.js"="3/15/2014 10:10 AM, 2296 bytes, A Adds the file 104_jollywallet_m.js"="3/15/2014 10:10 AM, 1289 bytes, A Adds the file 13_CrossriderAppUtils.js"="3/15/2014 10:10 AM, 6993 bytes, A Adds the file 14_CrossriderUtils.js"="3/15/2014 10:10 AM, 20752 bytes, A Adds the file 155_ibario_pops_m.js"="3/15/2014 10:10 AM, 411 bytes, A Adds the file 17_jQuery.js"="3/15/2014 10:10 AM, 79864 bytes, A Adds the file 177_crossriderDashboard.js"="3/15/2014 10:10 AM, 31088 bytes, A Adds the file 180_bpo_serp_m.js"="3/15/2014 10:10 AM, 808 bytes, A Adds the file 182_openUrl.js"="3/15/2014 10:10 AM, 14181 bytes, A Adds the file 183_tabsWrapper.js"="3/15/2014 10:10 AM, 2427 bytes, A Adds the file 184_noproblemppc_m.js"="3/15/2014 10:10 AM, 1235 bytes, A Adds the file 19_CHAppAPIWrapper.js"="3/15/2014 10:10 AM, 7001 bytes, A Adds the file 190_pops_5_m.js"="3/15/2014 10:10 AM, 2294 bytes, A Adds the file 191_ciuvo_m.js"="3/15/2014 10:10 AM, 957 bytes, A Adds the file 207_dbWrapper.js"="3/15/2014 10:10 AM, 1537 bytes, A Adds the file 21_debug.js"="3/15/2014 10:10 AM, 3560 bytes, A Adds the file 22_resources.js"="3/15/2014 10:10 AM, 8958 bytes, A Adds the file 223_imonomy_m.js"="3/15/2014 10:10 AM, 543 bytes, A Adds the file 230_revizer_ws_dynamic_b2b_2_m.js"="3/15/2014 10:10 AM, 867 bytes, A Adds the file 233_revizer_p_dynamic_b2b_2_m.js"="3/15/2014 10:10 AM, 867 bytes, A Adds the file 246_setup.js"="3/15/2014 10:10 AM, 1842 bytes, A Adds the file 28_initializer.js"="3/15/2014 10:10 AM, 536 bytes, A Adds the file 4_jquery_1_7_1.js"="3/15/2014 10:10 AM, 94050 bytes, A Adds the file 47_resources_background.js"="3/15/2014 10:10 AM, 7574 bytes, A Adds the file 64_appApiMessage.js"="3/15/2014 10:10 AM, 2200 bytes, A Adds the file 72_appApiValidation.js"="3/15/2014 10:10 AM, 46062 bytes, A Adds the file 78_CrossriderInfo.js"="3/15/2014 10:10 AM, 3187 bytes, A Adds the file 80_CHPopupAppAPI.js"="3/15/2014 10:10 AM, 62 bytes, A Adds the file 91_monetizationLoader.js.js"="3/15/2014 10:10 AM, 145067 bytes, A Adds the file 93_superfish_no_coupons_m.js"="3/15/2014 10:10 AM, 560 bytes, A Adds the file 97_resourceApiWrapper.js"="3/15/2014 10:10 AM, 3157 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\userCode Adds the file background.js"="3/15/2014 10:10 AM, 429 bytes, A Adds the file extension.js"="3/15/2014 10:10 AM, 1 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons Adds the file icon128.png"="3/15/2014 10:10 AM, 18583 bytes, A Adds the file icon16.png"="3/15/2014 10:10 AM, 1317 bytes, A Adds the file icon48.png"="3/15/2014 10:10 AM, 3954 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons\actions Adds the file 1.png"="3/15/2014 10:10 AM, 1223 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js Adds the file background.js"="3/15/2014 10:10 AM, 34135 bytes, A Adds the file main.js"="3/15/2014 10:10 AM, 8452 bytes, A Adds the file platformVersion.js"="3/15/2014 10:10 AM, 408 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api Adds the file chrome.js"="3/15/2014 10:10 AM, 11499 bytes, A Adds the file cookie.js"="3/15/2014 10:10 AM, 11743 bytes, A Adds the file message.js"="3/15/2014 10:10 AM, 3346 bytes, A Adds the file monitor.js"="3/15/2014 10:10 AM, 2039 bytes, A Adds the file pageAction.js"="3/15/2014 10:10 AM, 1737 bytes, A Adds the file pageActionBG.js"="3/15/2014 10:10 AM, 2519 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib Adds the file app_api.js"="3/15/2014 10:10 AM, 6697 bytes, A Adds the file bg_app_api.js"="3/15/2014 10:10 AM, 4685 bytes, A Adds the file consts.js"="3/15/2014 10:10 AM, 335 bytes, A Adds the file cookie_store.js"="3/15/2014 10:10 AM, 5905 bytes, A Adds the file crossriderAPI.js"="3/15/2014 10:10 AM, 11366 bytes, A Adds the file delegate.js"="3/15/2014 10:10 AM, 2002 bytes, A Adds the file events.js"="3/15/2014 10:10 AM, 5757 bytes, A Adds the file extensionDataStore.js"="3/15/2014 10:10 AM, 6656 bytes, A Adds the file installer.js"="3/15/2014 10:10 AM, 780 bytes, A Adds the file logFile.js"="3/15/2014 10:10 AM, 775 bytes, A Adds the file logging.js"="3/15/2014 10:10 AM, 944 bytes, A Adds the file onBGDocumentLoad.js"="3/15/2014 10:10 AM, 480 bytes, A Adds the file reports.js"="3/15/2014 10:10 AM, 4929 bytes, A Adds the file storageWrapper.js"="3/15/2014 10:10 AM, 903 bytes, A Adds the file updateManager.js"="3/15/2014 10:10 AM, 8205 bytes, A Adds the file util.js"="3/15/2014 10:10 AM, 5142 bytes, A Adds the file xhr.js"="3/15/2014 10:10 AM, 2699 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\popupResource Adds the file newPopup.js"="3/15/2014 10:10 AM, 40 bytes, A Adds the file popup.js"="3/15/2014 10:10 AM, 45 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hjghiofiijcepdnocbgefbdlbckjfheg Adds the file 000003.log"="3/15/2014 10:13 AM, 1071118 bytes, A Adds the file CURRENT"="3/15/2014 10:13 AM, 16 bytes, A Adds the file LOCK"="3/15/2014 10:13 AM, 0 bytes, A Adds the file LOG"="3/15/2014 10:13 AM, 47 bytes, A Adds the file MANIFEST-000002"="3/15/2014 10:13 AM, 50 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com Adds the file chrome.manifest"="3/15/2014 10:10 AM, 732 bytes, A Adds the file install.rdf"="3/15/2014 10:10 AM, 1339 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content Adds the file api.js"="3/15/2014 10:10 AM, 18796 bytes, A Adds the file background.html"="3/15/2014 10:10 AM, 2001 bytes, A Adds the file baseObject.js"="3/15/2014 10:10 AM, 19 bytes, A Adds the file browser.xul"="3/15/2014 10:10 AM, 4807 bytes, A Adds the file dialog.js"="3/15/2014 10:10 AM, 1343 bytes, A Adds the file ffCoreFilesIndex.txt"="3/15/2014 10:10 AM, 1052 bytes, A Adds the file main.js"="3/15/2014 10:10 AM, 18750 bytes, A Adds the file options.js"="3/15/2014 10:10 AM, 1931 bytes, A Adds the file options.xul"="3/15/2014 10:10 AM, 1913 bytes, A Adds the file platformVersion.js"="3/15/2014 10:10 AM, 612 bytes, A Adds the file search_dialog.xul"="3/15/2014 10:10 AM, 2457 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api Adds the file asyncDB.js"="3/15/2014 10:10 AM, 4805 bytes, A Adds the file background.js"="3/15/2014 10:10 AM, 1336 bytes, A Adds the file browserAction.js"="3/15/2014 10:10 AM, 8906 bytes, A Adds the file contextMenu.js"="3/15/2014 10:10 AM, 5359 bytes, A Adds the file dbManager.js"="3/15/2014 10:10 AM, 10097 bytes, A Adds the file dom_bg.js"="3/15/2014 10:10 AM, 2505 bytes, A Adds the file fileManager.js"="3/15/2014 10:10 AM, 943 bytes, A Adds the file firefox.js"="3/15/2014 10:10 AM, 353 bytes, A Adds the file firefoxNotifications.js"="3/15/2014 10:10 AM, 1116 bytes, A Adds the file firefoxOmnibox.js"="3/15/2014 10:10 AM, 1515 bytes, A Adds the file message.js"="3/15/2014 10:10 AM, 5210 bytes, A Adds the file pageAction.js"="3/15/2014 10:10 AM, 11257 bytes, A Adds the file request.js"="3/15/2014 10:10 AM, 2314 bytes, A Adds the file tabs.js"="3/15/2014 10:10 AM, 3628 bytes, A Adds the file webRequest.js"="3/15/2014 10:10 AM, 5806 bytes, A Adds the file windowsMessagingHandler.js"="3/15/2014 10:10 AM, 960 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core Adds the file addressBarChangeObserver.js"="3/15/2014 10:10 AM, 130 bytes, A Adds the file console.js"="3/15/2014 10:10 AM, 1753 bytes, A Adds the file consts.js"="3/15/2014 10:10 AM, 2356 bytes, A Adds the file delegate.js"="3/15/2014 10:10 AM, 2180 bytes, A Adds the file extensionDataStore.js"="3/15/2014 10:10 AM, 10309 bytes, A Adds the file folderIOWrapper.js"="3/15/2014 10:10 AM, 3526 bytes, A Adds the file httpObserver.js"="3/15/2014 10:10 AM, 2561 bytes, A Adds the file IDBWrapper.js"="3/15/2014 10:10 AM, 4191 bytes, A Adds the file installer.js"="3/15/2014 10:10 AM, 1320 bytes, A Adds the file logFile.js"="3/15/2014 10:10 AM, 1562 bytes, A Adds the file prefs.js"="3/15/2014 10:10 AM, 1649 bytes, A Adds the file progressListenerObserver.js"="3/15/2014 10:10 AM, 1368 bytes, A Adds the file registry.js"="3/15/2014 10:10 AM, 1158 bytes, A Adds the file reloadObserver.js"="3/15/2014 10:10 AM, 1527 bytes, A Adds the file reports.js"="3/15/2014 10:10 AM, 3869 bytes, A Adds the file requestObject.js"="3/15/2014 10:10 AM, 1261 bytes, A Adds the file searchSettings.js"="3/15/2014 10:10 AM, 3426 bytes, A Adds the file uninstallObserver.js"="3/15/2014 10:10 AM, 2372 bytes, A Adds the file updateManager.js"="3/15/2014 10:10 AM, 11480 bytes, A Adds the file utils.js"="3/15/2014 10:10 AM, 18554 bytes, A Adds the file xhr.js"="3/15/2014 10:10 AM, 2852 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\defaults\preferences Adds the file prefs.js"="3/15/2014 10:10 AM, 3980 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData Adds the file manifest.xml"="3/15/2014 10:12 AM, 1700 bytes, A Adds the file plugins.json"="3/15/2014 10:12 AM, 13284 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins Adds the file 1_base.js"="3/15/2014 10:10 AM, 6794 bytes, A Adds the file 102_dealply_m.js"="3/15/2014 10:10 AM, 2048 bytes, A Adds the file 103_intext_5_m.js"="3/15/2014 10:10 AM, 2296 bytes, A Adds the file 104_jollywallet_m.js"="3/15/2014 10:10 AM, 1289 bytes, A Adds the file 13_CrossriderAppUtils.js"="3/15/2014 10:10 AM, 6993 bytes, A Adds the file 14_CrossriderUtils.js"="3/15/2014 10:10 AM, 20752 bytes, A Adds the file 155_ibario_pops_m.js"="3/15/2014 10:10 AM, 411 bytes, A Adds the file 16_FFAppAPIWrapper.js"="3/15/2014 10:10 AM, 16022 bytes, A Adds the file 17_jQuery.js"="3/15/2014 10:10 AM, 79864 bytes, A Adds the file 177_crossriderDashboard.js"="3/15/2014 10:10 AM, 31088 bytes, A Adds the file 180_bpo_serp_m.js"="3/15/2014 10:12 AM, 802 bytes, A Adds the file 182_openUrl.js"="3/15/2014 10:10 AM, 14181 bytes, A Adds the file 183_tabsWrapper.js"="3/15/2014 10:10 AM, 2427 bytes, A Adds the file 184_noproblemppc_m.js"="3/15/2014 10:12 AM, 1271 bytes, A Adds the file 190_pops_5_m.js"="3/15/2014 10:10 AM, 2294 bytes, A Adds the file 191_ciuvo_m.js"="3/15/2014 10:10 AM, 957 bytes, A Adds the file 207_dbWrapper.js"="3/15/2014 10:10 AM, 1537 bytes, A Adds the file 21_debug.js"="3/15/2014 10:10 AM, 3560 bytes, A Adds the file 22_resources.js"="3/15/2014 10:10 AM, 8958 bytes, A Adds the file 223_imonomy_m.js"="3/15/2014 10:12 AM, 451 bytes, A Adds the file 230_revizer_ws_dynamic_b2b_2_m.js"="3/15/2014 10:12 AM, 795 bytes, A Adds the file 233_revizer_p_dynamic_b2b_2_m.js"="3/15/2014 10:12 AM, 795 bytes, A Adds the file 246_setup.js"="3/15/2014 10:12 AM, 1840 bytes, A Adds the file 28_initializer.js"="3/15/2014 10:10 AM, 536 bytes, A Adds the file 4_jquery_1_7_1.js"="3/15/2014 10:10 AM, 94050 bytes, A Adds the file 47_resources_background.js"="3/15/2014 10:10 AM, 7574 bytes, A Adds the file 64_appApiMessage.js"="3/15/2014 10:10 AM, 2200 bytes, A Adds the file 72_appApiValidation.js"="3/15/2014 10:10 AM, 46062 bytes, A Adds the file 78_CrossriderInfo.js"="3/15/2014 10:10 AM, 3187 bytes, A Adds the file 91_monetizationLoader.js.js"="3/15/2014 10:10 AM, 145067 bytes, A Adds the file 93_superfish_no_coupons_m.js"="3/15/2014 10:10 AM, 560 bytes, A Adds the file 98_omniCommands.js"="3/15/2014 10:10 AM, 1806 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\userCode Adds the file background.js"="3/15/2014 10:10 AM, 429 bytes, A Adds the file extension.js"="3/15/2014 10:12 AM, 3 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\locale\en-US Adds the file translations.dtd"="3/15/2014 10:10 AM, 425 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin Adds the file button1.png"="3/15/2014 10:10 AM, 1361 bytes, A Adds the file button2.png"="3/15/2014 10:10 AM, 1361 bytes, A Adds the file button3.png"="3/15/2014 10:10 AM, 1361 bytes, A Adds the file button4.png"="3/15/2014 10:10 AM, 1361 bytes, A Adds the file button5.png"="3/15/2014 10:10 AM, 1361 bytes, A Adds the file crossrider_statusbar.png"="3/15/2014 10:10 AM, 1361 bytes, A Adds the file icon128.png"="3/15/2014 10:10 AM, 18583 bytes, A Adds the file icon16.png"="3/15/2014 10:10 AM, 1317 bytes, A Adds the file icon24.png"="3/15/2014 10:10 AM, 2393 bytes, A Adds the file icon48.png"="3/15/2014 10:10 AM, 3954 bytes, A Adds the file panelarrow-up.png"="3/15/2014 10:10 AM, 917 bytes, A Adds the file popup.html"="3/15/2014 10:10 AM, 349 bytes, A Adds the file skin.css"="3/15/2014 10:10 AM, 990 bytes, A Adds the file update.css"="3/15/2014 10:10 AM, 140 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file free ven-chromeinstaller"="3/15/2014 10:10 AM, 6112 bytes, A Adds the file free ven-codedownloader"="3/15/2014 10:10 AM, 4476 bytes, A Adds the file free ven-enabler"="3/15/2014 10:10 AM, 4376 bytes, A Adds the file free ven-firefoxinstaller"="3/15/2014 10:10 AM, 5264 bytes, A Adds the file free ven-updater"="3/15/2014 10:10 AM, 4522 bytes, A In the existing folder C:\Windows\Tasks Adds the file free ven-chromeinstaller.job"="3/15/2014 10:10 AM, 3082 bytes, A Adds the file free ven-codedownloader.job"="3/15/2014 10:10 AM, 1446 bytes, A Adds the file free ven-enabler.job"="3/15/2014 10:10 AM, 1346 bytes, A Adds the file free ven-firefoxinstaller.job"="3/15/2014 10:10 AM, 2234 bytes, A Adds the file free ven-updater.job"="3/15/2014 10:10 AM, 1492 bytes, A Registry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}] "(Default)"="REG_SZ, "free ven" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\Implemented Categories] "(Default)"="REG_SZ, "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}] "(Default)"="REG_SZ, "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\InprocServer32] "(Default)"="REG_SZ, "C:\Program Files\free ven\free ven-bho.dll" "ThreadingModel"="REG_SZ, "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\ProgID] "(Default)"="REG_SZ, "CrossriderApp0051680.BHO.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\TypeLib] "(Default)"="REG_SZ, "{44444444-4444-4444-4444-440544164480}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511161180}\VersionIndependentProgID] "(Default)"="REG_SZ, "CrossriderApp0051680" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162280}] "(Default)"="REG_SZ, "CrossriderApp0051680.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162280}\InprocServer32] "(Default)"="REG_SZ, "C:\Program Files\free ven\free ven-bho.dll" "ThreadingModel"="REG_SZ, "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162280}\ProgID] "(Default)"="REG_SZ, "CrossriderApp0051680.Sandbox.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162280}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162280}\TypeLib] "(Default)"="REG_SZ, "{44444444-4444-4444-4444-440544164480}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162280}\VersionIndependentProgID] "(Default)"="REG_SZ, "CrossriderApp0051680.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.BHO] "(Default)"="REG_SZ, "CrossriderApp0051680" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.BHO\CLSID] "(Default)"="REG_SZ, "{11111111-1111-1111-1111-110511161180}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.BHO\CurVer] "(Default)"="REG_SZ, "CrossriderApp0051680" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.BHO.1] "(Default)"="REG_SZ, "CrossriderApp0051680" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.BHO.1\CLSID] "(Default)"="REG_SZ, "{11111111-1111-1111-1111-110511161180}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.Sandbox] "(Default)"="REG_SZ, "CrossriderApp0051680.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.Sandbox\CLSID] "(Default)"="REG_SZ, "{22222222-2222-2222-2222-220522162280}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.Sandbox\CurVer] "(Default)"="REG_SZ, "CrossriderApp0051680.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.Sandbox.1] "(Default)"="REG_SZ, "CrossriderApp0051680.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0051680.Sandbox.1\CLSID] "(Default)"="REG_SZ, "{22222222-2222-2222-2222-220522162280}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165580}] "(Default)"="REG_SZ, "ICrossriderBHO" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165580}\ProxyStubClsid] "(Default)"="REG_SZ, "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165580}\ProxyStubClsid32] "(Default)"="REG_SZ, "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165580}\TypeLib] "(Default)"="REG_SZ, "{44444444-4444-4444-4444-440544164480}" "Version"="REG_SZ, "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166680}] "(Default)"="REG_SZ, "ISandBox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166680}\ProxyStubClsid] "(Default)"="REG_SZ, "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166680}\ProxyStubClsid32] "(Default)"="REG_SZ, "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166680}\TypeLib] "(Default)"="REG_SZ, "{44444444-4444-4444-4444-440544164480}" "Version"="REG_SZ, "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544164480}\1.0] "(Default)"="REG_SZ, "CrossriderApp0051680 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544164480}\1.0\0\win32] "(Default)"="REG_SZ, "C:\Program Files\free ven\free ven-bho.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544164480}\1.0\FLAGS] "(Default)"="REG_SZ, "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544164480}\1.0\HELPDIR] "(Default)"="REG_SZ, "C:\Program Files\free ven" [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\Chrome] "TotalProfiles"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\Chrome-Profiles] "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\ErrorLists-crchromeinstaller] "post_response_json_invalid"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\Firefox] "TotalProfiles"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\Firefox\Profiles] "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\IE] "TotalProfiles"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\free ven\Installer] "BundledChrome"="REG_DWORD, 1 "BundledFirefox"="REG_DWORD, 1 "BundledIe"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511161180}] "(Default)"="REG_SZ, "CrossriderApp0051680" "NoExplorer"="REG_DWORD, 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{11111111-1111-1111-1111-110511161180}"="REG_SZ, "1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\free ven] "CrAppId"="REG_SZ, "51680" "CrPublisherId"="REG_SZ, "21636" "DisplayIcon"="REG_SZ, "C:\Program Files\free ven\utils.exe" "DisplayName"="REG_SZ, "free ven" "DisplayVersion"="REG_SZ, "1.34.3.6" "Publisher"="REG_SZ, "freeven" "UninstallString"="REG_SZ, "C:\Program Files\free ven\Uninstall.exe /fromcontrolpanel=1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures] "free ven-chromeinstaller.job"="REG_BINARY, ................................ "free ven-chromeinstaller.job.fp"="REG_DWORD, -1576395472 "free ven-codedownloader.job"="REG_BINARY, ................................ "free ven-codedownloader.job.fp"="REG_DWORD, 2087747667 "free ven-enabler.job"="REG_BINARY, ................................ "free ven-enabler.job.fp"="REG_DWORD, 1153331095 "free ven-firefoxinstaller.job"="REG_BINARY, ................................ "free ven-firefoxinstaller.job.fp"="REG_DWORD, -630187845 "free ven-updater.job"="REG_BINARY, ................................ "free ven-updater.job.fp"="REG_DWORD, 1565813042 [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider] "Bic"="REG_SZ, "6C2D7BCB12C448638E107A77FC61A794IE" "Verifier"="REG_SZ, "c8c803235ee2c426ea7a7820e85518b2" [HKEY_CURRENT_USER\Software\AppDataLow\Software\free ven] "ActiveAppId"="REG_SZ, "51680" "BhoRunningVersion"="REG_SZ, "153" "IsBhoEnabled"="REG_DWORD, 1 [HKEY_CURRENT_USER\Software\AppDataLow\Software\free ven\Plugins\1] "JavaScript"="REG_SZ, "{ javascript removed, full log available on request }" [HKEY_CURRENT_USER\Software\AppDataLow\Software\free ven\Update] "LastCheck"="REG_DWORD, 1394874643 [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\freeven] "51680"="REG_SZ, "free ven"
Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 3/15/2014 Scan Time: 10:19:07 AM Logfile: mbamFreeven.txt Administrator: Yes Version: 2.00.0.1000 Malware Database: v2014.03.15.01 Rootkit Database: v2014.02.20.01 License: Trial Malware Protection: Disabled Malicious Website Protection: Disabled Chameleon: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Malwarebytes Scan Type: Threat Scan Result: Completed Objects Scanned: 201533 Time Elapsed: 3 min, 1 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Shuriken: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 1 PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-bho.dll, Delete-on-Reboot, [88058b783447092d016d6e3ae41da957], Registry Keys: 21 PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511161180}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544164480}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555165580}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566166680}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051680.BHO.1, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511161180}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051680.BHO, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511161180}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511161180}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522162280}, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051680.Sandbox.1, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0051680.Sandbox, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511161180}\INPROCSERVER32, Quarantined, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, HKLM\SOFTWARE\free ven, Quarantined, [b6d72cd7cfac35019ba136637d85e41c], PUP.Optional.Ligtning.A, HKLM\SOFTWARE\GOOGLE\CHROME\EXTENSIONS\cekcjpgehmohobmdiikfnopibipmgnml, Quarantined, [f19c887bb3c80d290718dfc07c86966a], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [2b62f211b4c7a98d176bc9d0748ea35d], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [2e5fd231780357dff709f5d9e0239e62], PUP.Optional.Freeven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\free ven, Quarantined, [642905fe09720531cb6fa3f6b74ba759], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [6726e81b473479bd99e7adecd32f51af], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\freeven, Quarantined, [cbc27f84f388af87fc72d1c8f111e11f], PUP.Optional.Freeven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\free ven, Quarantined, [315ca85b7efd86b081c33d59c1417789], Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 28 PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log, Quarantined, [4d40c83b4833f73fcd6e3a650af8cb35], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\userCode, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons\actions, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\popupResource, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.Freeven.A, C:\Program Files\free ven, Delete-on-Reboot, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\defaults, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\defaults\preferences, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\userCode, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\locale, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\locale\en-US, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], Files: 207 PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-bho.dll, Delete-on-Reboot, [88058b783447092d016d6e3ae41da957], PUP.Optional.Freeven.A, C:\Users\{username}\Desktop\Vefgs.exe, Quarantined, [c9c4ca393645c96dd8954a5e19e8f10f], PUP.Optional.Freeven.A, C:\Windows\Tasks\free ven-chromeinstaller.job, Quarantined, [3e4f23e0017a50e658e15b3ee41e3ac6], PUP.Optional.Freeven.A, C:\Windows\Tasks\free ven-codedownloader.job, Quarantined, [4a43af546d0ebd79f346a5f406fcda26], PUP.Optional.Freeven.A, C:\Windows\Tasks\free ven-enabler.job, Quarantined, [276616eda8d3f244f3465346d62c6898], PUP.Optional.Freeven.A, C:\Windows\Tasks\free ven-firefoxinstaller.job, Quarantined, [7f0ec04308737bbb1c1d0f8a1ae8ce32], PUP.Optional.Freeven.A, C:\Windows\Tasks\free ven-updater.job, Quarantined, [58357a89de9db086bf7aecad58aa48b8], PUP.Optional.eSafe.A, C:\ProgramData\eSafe\log\eGdpSvc.LOG, Quarantined, [4d40c83b4833f73fcd6e3a650af8cb35], PUP.Optional.NewTab.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx, Quarantined, [0885e023a6d5ad89763f871858aa8f71], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\background.html, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\background.js, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\data.json, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\icon128.png, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\jquery.js, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\manifest.json, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\xa.js, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.Lightning.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml\1.3_0\xagainit.js, Quarantined, [602ddd26dd9ee0568600088b7a884eb2], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\background.html, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\chromeCoreFilesIndex.txt, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\crossriderManifest.json, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\manifest.json, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\popup.html, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\manifest.xml, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins.json, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\102_dealply_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\103_intext_5_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\104_jollywallet_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\155_ibario_pops_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\17_jQuery.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\182_openUrl.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\183_tabsWrapper.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\190_pops_5_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\191_ciuvo_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\19_CHAppAPIWrapper.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\1_base.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\207_dbWrapper.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\21_debug.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\223_imonomy_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\22_resources.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\246_setup.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\28_initializer.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\47_resources_background.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\64_appApiMessage.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\72_appApiValidation.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\80_CHPopupAppAPI.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\plugins\97_resourceApiWrapper.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\userCode\background.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\extensionData\userCode\extension.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons\icon128.png, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons\icon16.png, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons\icon48.png, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\icons\actions\1.png, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\background.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\main.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\platformVersion.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api\chrome.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api\cookie.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api\message.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api\monitor.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api\pageAction.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\api\pageActionBG.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\app_api.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\bg_app_api.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\consts.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\cookie_store.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\crossriderAPI.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\delegate.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\events.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\extensionDataStore.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\installer.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\logFile.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\logging.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\onBGDocumentLoad.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\reports.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\storageWrapper.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\updateManager.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\util.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\xhr.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\popupResource\newPopup.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjghiofiijcepdnocbgefbdlbckjfheg\1.26.22_0\js\lib\popupResource\popup.js, Quarantined, [711c768d2853d75f8f249afa01016898], PUP.Optional.Freeven.A, C:\Program Files\free ven\51680.crx, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\51680.xpi, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\background.html, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-bg.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-chromeinstaller.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-codedownloader.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-enabler.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-firefoxinstaller.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven-updater.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\free ven.ico, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\Installer.log, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\Uninstall.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.Freeven.A, C:\Program Files\free ven\utils.exe, Quarantined, [315ca85b7efd86b081c33d59c1417789], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome.manifest, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\install.rdf, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\background.html, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\baseObject.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\browser.xul, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\dialog.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\main.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\options.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\options.xul, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\platformVersion.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\search_dialog.xul, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\asyncDB.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\background.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\browserAction.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\contextMenu.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\dbManager.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\dom_bg.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\fileManager.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\firefox.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\firefoxNotifications.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\message.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\pageAction.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\request.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\tabs.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\webRequest.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\console.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\consts.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\delegate.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\extensionDataStore.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\folderIOWrapper.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\httpObserver.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\IDBWrapper.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\installer.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\logFile.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\prefs.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\progressListenerObserver.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\registry.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f11[email protected]\chrome\content\core\reloadObserver.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\reports.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\requestObject.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\searchSettings.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\uninstallObserver.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\updateManager.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\utils.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\chrome\content\core\xhr.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\defaults\preferences\prefs.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\manifest.xml, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins.json, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\21_debug.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\102_dealply_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\155_ibario_pops_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\17_jQuery.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\223_imonomy_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\22_resources.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\246_setup.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\28_initializer.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\47_resources_background.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\98_omniCommands.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\182_openUrl.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\190_pops_5_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\191_ciuvo_m.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\1_base.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-960[email protected]\extensionData\userCode\background.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\extensionData\userCode\extension.js, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\locale\en-US\translations.dtd, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\button1.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\button2.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\button3.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929[email protected]\skin\button4.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\button5.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\crossrider_statusbar.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\icon128.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\icon16.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\icon24.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\icon48.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\panelarrow-up.png, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\popup.html, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\skin.css, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\d43e4d33-1c9f-4167-9600-b4929087f116@3cc778fb-659e-4988-abd4-592fc6b8806a.com\skin\update.css, Quarantined, [117c2fd46516f244a6fb3c5ace3416ea], PUP.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "144c5035859d2f5969c180b28e5fa083")<img src='http://www.geekstogo.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />, Replaced,[335a857e9be01a1ca96e075829db12ee] Physical Sectors: 0 (No malicious items detected) (end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention