What is OMG Music Plus?
The Malwarebytes research team has determined that OMG Music Plus is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is effected by OMG Music Plus?
You may see these browser extensions/add-ons:
and this entry in your list of installed programs:
How did OMG Music Plus get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.
How do I remove OMG Music Plus?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program. You will need Malwarebytes Anti-Malware version 2.00 (beta) or newer to disable the Chrome and Firefox extensions.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-consumer.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan now.
- When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
- Reboot your computer if prompted.
- The Firefox extension can now safely be removed. Open the "Extensions" tab under "Add-ons" and click "Remove" and "Restart" to complete the removal.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the OMG Music Plus rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.
Signs in a HijackThis log:
O2 - BHO: CrossriderApp0049182 - {11111111-1111-1111-1111-110411911182} - C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll
Alterations made by the installer:
File system details --------------------------------------------- Adds the folder C:\Program Files\OMG Music Plus Adds the file 49182.xpi"="3/16/2014 1:18 PM, 283903 bytes, A Adds the file background.html"="2/10/2014 3:08 PM, 729 bytes, A Adds the file Installer.log"="3/16/2014 1:18 PM, 215471 bytes, A Adds the file OMG Music Plus.ico"="2/10/2014 3:08 PM, 9662 bytes, A Adds the file OMG Music Plus-bg.exe"="3/16/2014 1:18 PM, 773120 bytes, A Adds the file OMG Music Plus-bho.dll"="3/16/2014 1:18 PM, 677888 bytes, A Adds the file OMG Music Plus-buttonutil.dll"="3/16/2014 1:18 PM, 428544 bytes, A Adds the file OMG Music Plus-buttonutil.exe"="3/16/2014 1:18 PM, 331264 bytes, A Adds the file OMG Music Plus-codedownloader.exe"="3/16/2014 1:18 PM, 553984 bytes, A Adds the file OMG Music Plus-enabler.exe"="3/16/2014 1:18 PM, 405504 bytes, A Adds the file OMG Music Plus-firefoxinstaller.exe"="3/16/2014 1:18 PM, 932352 bytes, A Adds the file OMG Music Plus-helper.exe"="3/16/2014 1:18 PM, 331776 bytes, A Adds the file OMG Music Plus-updater.exe"="3/16/2014 1:18 PM, 379392 bytes, A Adds the file Uninstall.exe"="3/16/2014 1:18 PM, 77312 bytes, A Adds the file utils.exe"="3/16/2014 1:18 PM, 1171595 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com Adds the file chrome.manifest"="3/16/2014 1:18 PM, 732 bytes, A Adds the file install.rdf"="3/16/2014 1:18 PM, 1345 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content Adds the file api.js"="3/16/2014 1:18 PM, 18742 bytes, A Adds the file background.html"="3/16/2014 1:18 PM, 2001 bytes, A Adds the file baseObject.js"="3/16/2014 1:18 PM, 19 bytes, A Adds the file browser.xul"="3/16/2014 1:18 PM, 4819 bytes, A Adds the file dialog.js"="3/16/2014 1:18 PM, 1343 bytes, A Adds the file ffCoreFilesIndex.txt"="3/16/2014 1:18 PM, 1052 bytes, A Adds the file main.js"="3/16/2014 1:18 PM, 18750 bytes, A Adds the file options.js"="3/16/2014 1:18 PM, 1931 bytes, A Adds the file options.xul"="3/16/2014 1:18 PM, 1913 bytes, A Adds the file platformVersion.js"="3/16/2014 1:18 PM, 612 bytes, A Adds the file search_dialog.xul"="3/16/2014 1:18 PM, 2457 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api Adds the file asyncDB.js"="3/16/2014 1:18 PM, 4805 bytes, A Adds the file background.js"="3/16/2014 1:18 PM, 1336 bytes, A Adds the file browserAction.js"="3/16/2014 1:18 PM, 8906 bytes, A Adds the file contextMenu.js"="3/16/2014 1:18 PM, 5359 bytes, A Adds the file dbManager.js"="3/16/2014 1:18 PM, 10097 bytes, A Adds the file dom_bg.js"="3/16/2014 1:18 PM, 2505 bytes, A Adds the file fileManager.js"="3/16/2014 1:18 PM, 943 bytes, A Adds the file firefox.js"="3/16/2014 1:18 PM, 353 bytes, A Adds the file firefoxNotifications.js"="3/16/2014 1:18 PM, 1116 bytes, A Adds the file firefoxOmnibox.js"="3/16/2014 1:18 PM, 1515 bytes, A Adds the file message.js"="3/16/2014 1:18 PM, 4935 bytes, A Adds the file pageAction.js"="3/16/2014 1:18 PM, 11257 bytes, A Adds the file request.js"="3/16/2014 1:18 PM, 2314 bytes, A Adds the file tabs.js"="3/16/2014 1:18 PM, 3628 bytes, A Adds the file webRequest.js"="3/16/2014 1:18 PM, 3801 bytes, A Adds the file windowsMessagingHandler.js"="3/16/2014 1:18 PM, 960 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core Adds the file addressBarChangeObserver.js"="3/16/2014 1:18 PM, 130 bytes, A Adds the file console.js"="3/16/2014 1:18 PM, 1753 bytes, A Adds the file consts.js"="3/16/2014 1:18 PM, 2356 bytes, A Adds the file delegate.js"="3/16/2014 1:18 PM, 2180 bytes, A Adds the file extensionDataStore.js"="3/16/2014 1:18 PM, 8607 bytes, A Adds the file folderIOWrapper.js"="3/16/2014 1:18 PM, 3526 bytes, A Adds the file httpObserver.js"="3/16/2014 1:18 PM, 2561 bytes, A Adds the file IDBWrapper.js"="3/16/2014 1:18 PM, 4191 bytes, A Adds the file installer.js"="3/16/2014 1:18 PM, 1320 bytes, A Adds the file logFile.js"="3/16/2014 1:18 PM, 1562 bytes, A Adds the file prefs.js"="3/16/2014 1:18 PM, 1649 bytes, A Adds the file progressListenerObserver.js"="3/16/2014 1:18 PM, 1368 bytes, A Adds the file registry.js"="3/16/2014 1:18 PM, 1158 bytes, A Adds the file reloadObserver.js"="3/16/2014 1:18 PM, 1527 bytes, A Adds the file reports.js"="3/16/2014 1:18 PM, 3869 bytes, A Adds the file requestObject.js"="3/16/2014 1:18 PM, 1261 bytes, A Adds the file searchSettings.js"="3/16/2014 1:18 PM, 3426 bytes, A Adds the file uninstallObserver.js"="3/16/2014 1:18 PM, 2372 bytes, A Adds the file updateManager.js"="3/16/2014 1:18 PM, 11288 bytes, A Adds the file utils.js"="3/16/2014 1:18 PM, 18554 bytes, A Adds the file xhr.js"="3/16/2014 1:18 PM, 2852 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences Adds the file prefs.js"="3/16/2014 1:18 PM, 3972 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData Adds the file manifest.xml"="3/16/2014 1:21 PM, 1701 bytes, A Adds the file plugins.json"="3/16/2014 1:21 PM, 11799 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins Adds the file 1_base.js"="3/16/2014 1:18 PM, 6908 bytes, A Adds the file 102_dealply_m.js"="3/16/2014 1:18 PM, 2201 bytes, A Adds the file 103_intext_5_m.js"="3/16/2014 1:21 PM, 2294 bytes, A Adds the file 104_jollywallet_m.js"="3/16/2014 1:18 PM, 1450 bytes, A Adds the file 13_CrossriderAppUtils.js"="3/16/2014 1:18 PM, 7056 bytes, A Adds the file 14_CrossriderUtils.js"="3/16/2014 1:18 PM, 20810 bytes, A Adds the file 16_FFAppAPIWrapper.js"="3/16/2014 1:18 PM, 16158 bytes, A Adds the file 17_jQuery.js"="3/16/2014 1:18 PM, 79982 bytes, A Adds the file 177_crossriderDashboard.js"="3/16/2014 1:18 PM, 30419 bytes, A Adds the file 182_openUrl.js"="3/16/2014 1:18 PM, 14301 bytes, A Adds the file 183_tabsWrapper.js"="3/16/2014 1:18 PM, 2555 bytes, A Adds the file 191_ciuvo_m.js"="3/16/2014 1:18 PM, 1106 bytes, A Adds the file 207_dbWrapper.js"="3/16/2014 1:18 PM, 1661 bytes, A Adds the file 21_debug.js"="3/16/2014 1:18 PM, 3676 bytes, A Adds the file 22_resources.js"="3/16/2014 1:18 PM, 9082 bytes, A Adds the file 245_engageya_overlay_m.js"="3/16/2014 1:21 PM, 475 bytes, A Adds the file 246_setup.js"="3/16/2014 1:21 PM, 1840 bytes, A Adds the file 28_initializer.js"="3/16/2014 1:18 PM, 664 bytes, A Adds the file 4_jquery_1_7_1.js"="3/16/2014 1:18 PM, 94180 bytes, A Adds the file 47_resources_background.js"="3/16/2014 1:18 PM, 7720 bytes, A Adds the file 64_appApiMessage.js"="3/16/2014 1:18 PM, 2332 bytes, A Adds the file 72_appApiValidation.js"="3/16/2014 1:21 PM, 46060 bytes, A Adds the file 78_CrossriderInfo.js"="3/16/2014 1:18 PM, 3321 bytes, A Adds the file 91_monetizationLoader.js.js"="3/16/2014 1:21 PM, 145065 bytes, A Adds the file 93_superfish_no_coupons_m.js"="3/16/2014 1:18 PM, 775 bytes, A Adds the file 98_omniCommands.js"="3/16/2014 1:18 PM, 1936 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode Adds the file background.js"="3/16/2014 1:18 PM, 1515 bytes, A Adds the file extension.js"="3/16/2014 1:21 PM, 383 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US Adds the file translations.dtd"="3/16/2014 1:18 PM, 425 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin Adds the file button1.png"="3/16/2014 1:18 PM, 1351 bytes, A Adds the file button2.png"="3/16/2014 1:18 PM, 1361 bytes, A Adds the file button3.png"="3/16/2014 1:18 PM, 1361 bytes, A Adds the file button4.png"="3/16/2014 1:18 PM, 1361 bytes, A Adds the file button5.png"="3/16/2014 1:18 PM, 1361 bytes, A Adds the file crossrider_statusbar.png"="3/16/2014 1:18 PM, 1361 bytes, A Adds the file icon128.png"="3/16/2014 1:18 PM, 4438 bytes, A Adds the file icon16.png"="3/16/2014 1:18 PM, 1351 bytes, A Adds the file icon24.png"="3/16/2014 1:18 PM, 2660 bytes, A Adds the file icon48.png"="3/16/2014 1:18 PM, 3716 bytes, A Adds the file panelarrow-up.png"="3/16/2014 1:18 PM, 917 bytes, A Adds the file popup.html"="3/16/2014 1:18 PM, 349 bytes, A Adds the file skin.css"="3/16/2014 1:18 PM, 990 bytes, A Adds the file update.css"="3/16/2014 1:18 PM, 140 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file OMG Music Plus-codedownloader"="3/16/2014 1:18 PM, 4498 bytes, A Adds the file OMG Music Plus-enabler"="3/16/2014 1:18 PM, 4392 bytes, A Adds the file OMG Music Plus-firefoxinstaller"="3/16/2014 1:18 PM, 5326 bytes, A Adds the file OMG Music Plus-updater"="3/16/2014 1:18 PM, 4558 bytes, A In the existing folder C:\Windows\Tasks Adds the file OMG Music Plus-codedownloader.job"="3/16/2014 1:18 PM, 1468 bytes, A Adds the file OMG Music Plus-enabler.job"="3/16/2014 1:18 PM, 1362 bytes, A Adds the file OMG Music Plus-firefoxinstaller.job"="3/16/2014 1:18 PM, 2296 bytes, A Adds the file OMG Music Plus-updater.job"="3/16/2014 1:18 PM, 1528 bytes, A Registry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}] "(Default)"="REG_SZ", "OMG Music Plus" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Implemented Categories] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\ProgID] "(Default)"="REG_SZ", "CrossriderApp0049182.BHO.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411911182}\VersionIndependentProgID] "(Default)"="REG_SZ", "CrossriderApp0049182" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}] "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\ProgID] "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422912282}\VersionIndependentProgID] "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO] "(Default)"="REG_SZ", "CrossriderApp0049182" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO\CLSID] "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110411911182}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO\CurVer] "(Default)"="REG_SZ", "CrossriderApp0049182" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO.1] "(Default)"="REG_SZ", "CrossriderApp0049182" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.BHO.1\CLSID] "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110411911182}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox] "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox\CLSID] "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220422912282}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox\CurVer] "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox.1] "(Default)"="REG_SZ", "CrossriderApp0049182.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0049182.Sandbox.1\CLSID] "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220422912282}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}] "(Default)"="REG_SZ", "ICrossriderBHO" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455915582}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}] "(Default)"="REG_SZ", "ISandBox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466916682}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440444914482}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0] "(Default)"="REG_SZ", "CrossriderApp0049182 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444914482}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\OMG Music Plus" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411911182}] "(Default)"="REG_SZ", "CrossriderApp0049182" "NoExplorer"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{11111111-1111-1111-1111-110411911182}"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OMG Music Plus] "CrAppId"="REG_SZ", "49182" "CrPublisherId"="REG_SZ", "5526" "DisplayIcon"="REG_SZ", "C:\Program Files\OMG Music Plus\utils.exe" "DisplayName"="REG_SZ", "OMG Music Plus" "DisplayVersion"="REG_SZ", "1.34.1.29" "Publisher"="REG_SZ", "Bundlore LTD" "UninstallString"="REG_SZ", "C:\Program Files\OMG Music Plus\Uninstall.exe /fromcontrolpanel=1" [HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Firefox] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Firefox\Profiles] "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\IE] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\OMG Music Plus\Installer] "BundledFirefox"="REG_DWORD", 1 "BundledIe"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider] "Bic"="REG_SZ", "F4F5096D5934430D803D464022014ED6IE" "Verifier"="REG_SZ", "094540c5d4d623d3ddf38dcdfed2671f" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\Button] "49182"="REG_DWORD", 1 "Index"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate] "49182"="REG_SZ", "" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest] "49182"="REG_SZ", "" [HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus] "ActiveAppId"="REG_SZ", "49182" "BhoRunningVersion"="REG_SZ", "153" "IsBhoEnabled"="REG_DWORD", 1 "LastSetSearch"="REG_DWORD", 1394972459 [HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\background] "__onDocumentStart_script__"="REG_SZ", "" "__onDocumentStart_script_store__"="REG_SZ", "" "IsEnabled"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\Code] "AppJavaScript"="REG_SZ", "{javascript removed, full log available by request} " [HKEY_CURRENT_USER\Software\AppDataLow\Software\OMG Music Plus\Update] "LastCheck"="REG_DWORD", 1394972310 [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Bundlore LTD] "49182"="REG_SZ", "OMG Music Plus" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411911182}\iexplore] "Count"="REG_DWORD", 4 "Flags"="REG_DWORD", 0 "LoadTimeArray"="REG_BINARY, .................... "NavTimeArray"="REG_BINARY, .................... "Time"="REG_BINARY, ........ "Type"="REG_DWORD", 3
Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 3/16/2014 Scan Time: 1:26:32 PM Logfile: mbamOMGusic.txt Administrator: Yes Version: 2.00.0.1000 Malware Database: v2014.03.16.02 Rootkit Database: v2014.02.20.01 License: Trial Malware Protection: Disabled Malicious Website Protection: Disabled Chameleon: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Malwarebytes Scan Type: Threat Scan Result: Completed Objects Scanned: 201640 Time Elapsed: 2 min, 48 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Shuriken: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 18 PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440444914482}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550455915582}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660466916682}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.BHO.1, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.BHO, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110411911182}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220422912282}, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.Sandbox.1, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0049182.Sandbox, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110411911182}\INPROCSERVER32, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\OMG Music Plus, Quarantined, [d9191be86e0df14534f00f8bcf330bf5], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [f8fab053d7a4a88ebff36e6009fa39c7], PUP.Optional.OMGMusicPlus.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\OMG Music Plus, Quarantined, [7082f3103843fd39b86a1981b34fb050], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Bundlore LTD, Quarantined, [33bf22e184f71d192473a1fd36ccf20e], PUP.Optional.OMGMusicPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\OMG Music Plus, Quarantined, [48aae122afcccc6a7b677d1957abf10f], Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 14 PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin, Quarantined, [777b00031467251119376730f80a37c9], Files: 118 PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-bho.dll, Quarantined, [f6fcb64daccfc274010f6246a55c5ea2], PUP.Optional.OMGMusicPlus.A, C:\Users\{username}\Desktop\Nvwngyuuiux.exe, Quarantined, [bf331de614676fc735da594f68996a96], PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-codedownloader.job, Quarantined, [92603fc4daa11b1b879ac2d81fe3e41c], PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-enabler.job, Quarantined, [f3fff80b7b0047efac75c1d9659d6b95], PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-firefoxinstaller.job, Quarantined, [fdf518eb6f0c56e051d048523dc530d0], PUP.Optional.OMGMusicPlus.A, C:\Windows\Tasks\OMG Music Plus-updater.job, Quarantined, [15dd788b6813bc7a8e933c5e1de52cd4], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\49182.xpi, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\background.html, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\Installer.log, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-bg.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-buttonutil.dll, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-buttonutil.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-codedownloader.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-enabler.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-firefoxinstaller.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-helper.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus-updater.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\OMG Music Plus.ico, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\Uninstall.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.OMGMusicPlus.A, C:\Program Files\OMG Music Plus\utils.exe, Quarantined, [48aae122afcccc6a7b677d1957abf10f], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome.manifest, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\install.rdf, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\background.html, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\baseObject.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\browser.xul, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\dialog.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\main.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\options.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\options.xul, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\platformVersion.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\search_dialog.xul, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\asyncDB.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\background.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\browserAction.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\contextMenu.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\dbManager.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\dom_bg.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\fileManager.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefox.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefoxNotifications.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\message.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\pageAction.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\request.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\tabs.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\webRequest.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\console.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\consts.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\delegate.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\extensionDataStore.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\folderIOWrapper.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\httpObserver.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\IDBWrapper.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\installer.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\logFile.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\prefs.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\progressListenerObserver.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\registry.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\reloadObserver.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\reports.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\requestObject.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\searchSettings.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\uninstallObserver.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\updateManager.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\utils.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\chrome\content\core\xhr.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\defaults\preferences\prefs.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\manifest.xml, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins.json, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\102_dealply_m.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\17_jQuery.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\182_openUrl.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\191_ciuvo_m.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\1_base.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\21_debug.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\22_resources.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\245_engageya_overlay_m.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\246_setup.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\28_initializer.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\47_resources_background.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\plugins\98_omniCommands.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode\background.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\extensionData\userCode\extension.js, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\locale\en-US\translations.dtd, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button1.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button2.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button3.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button4.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\button5.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\crossrider_statusbar.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon128.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon16.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon24.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\icon48.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\panelarrow-up.png, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\popup.html, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\skin.css, Quarantined, [777b00031467251119376730f80a37c9], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\dc77187f-1ad7-4b19-8787-a0a5cc10343f@e6264eef-2457-4fa2-bea4-bd6135e1199d.com\skin\update.css, Quarantined, [777b00031467251119376730f80a37c9], PUP.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "144cad6cd11e5259ebb287b85bd2e06e")<img src='http://www.geekstogo.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />, Replaced,[cc26f2115823bd79fe05a3bd8381936d] PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.adc77187f1ad74b198787a0a5cc10343fe6264eef24574fa2bea4bd6135e1199dcom49182.49182.internaldb.Resources_meta.value", "%7B%22browserbutton.png%22%3A%7B%22id%22%3A482036Replaced,[d919798a285320161af598c80ff57e82]C%22ver%22%3A1Replaced,[d919798a285320161af598c80ff57e82]C%22status%22%3A1Replaced,[d919798a285320161af598c80ff57e82]C%22name%22%3A%22browserbutton.png%22Replaced,[d919798a285320161af598c80ff57e82]C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/49182/482036%22%7D%7D")<img src='http://www.geekstogo.com/forum/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />, %5 Physical Sectors: 0 (No malicious items detected) (end)
As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention