Removal instructions for Freeven Pro

Content is republished with permission from Malwarebytes.

What is Freeven Pro?

The Malwarebytes research team has determined that Freeven Pro is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Freeven Pro?

You may see these browser extensions/add-ons:

and this entry in your list of installed programs:

How did Freeven Pro get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Freeven Pro?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-version.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan now.
When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
Reboot your computer if prompted.

Is there anything else I need to do to get rid of Freeven Pro?

The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the Freeven Pro listing. Then confirm removal.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Freeven Pro rogue. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0054253 - {11111111-1111-1111-1111-110511421153} - C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bho.dll

Alterations made by the installer:

File system details  
---------------------------------------------
    Adds the folder C:\Program Files\Freeven pro 1.2
       Adds the file 54253.crx"="3/30/2014 1:31 PM, 265630 bytes, A
       Adds the file 54253.xpi"="3/30/2014 1:31 PM, 303451 bytes, A
       Adds the file background.html"="3/25/2014 12:08 PM, 729 bytes, A
       Adds the file Freeven pro 1.2.ico"="3/25/2014 12:08 PM, 9662 bytes, A
       Adds the file Freeven pro 1.2-bg.exe"="3/30/2014 1:31 PM, 528384 bytes, A
       Adds the file Freeven pro 1.2-bho.dll"="3/30/2014 1:31 PM, 502272 bytes, A
       Adds the file Freeven pro 1.2-chromeinstaller.exe"="3/30/2014 1:31 PM, 1885696 bytes, A
       Adds the file Freeven pro 1.2-codedownloader.exe"="3/30/2014 1:31 PM, 487424 bytes, A
       Adds the file Freeven pro 1.2-enabler.exe"="3/30/2014 1:31 PM, 342528 bytes, A
       Adds the file Freeven pro 1.2-firefoxinstaller.exe"="3/30/2014 1:31 PM, 821248 bytes, A
       Adds the file Freeven pro 1.2-updater.exe"="3/30/2014 1:31 PM, 331264 bytes, A
       Adds the file Installer.log"="3/30/2014 1:32 PM, 19020 bytes, A
       Adds the file Uninstall.exe"="3/30/2014 1:31 PM, 77312 bytes, A
       Adds the file utils.exe"="3/30/2014 1:31 PM, 2174247 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0
       Adds the file background.html"="3/30/2014 1:31 PM, 1705 bytes, A
       Adds the file chromeCoreFilesIndex.txt"="3/30/2014 1:31 PM, 853 bytes, A
       Adds the file crossriderManifest.json"="3/30/2014 1:31 PM, 527 bytes, A
       Adds the file manifest.json"="3/30/2014 1:31 PM, 1111 bytes, A
       Adds the file popup.html"="3/30/2014 1:31 PM, 139 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData
       Adds the file manifest.xml"="3/30/2014 1:31 PM, 1707 bytes, A
       Adds the file plugins.json"="3/30/2014 1:31 PM, 8630 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins
       Adds the file 1_base.js"="3/30/2014 1:31 PM, 6794 bytes, A
       Adds the file 102_dealply_m.js"="3/30/2014 1:31 PM, 2048 bytes, A
       Adds the file 103_intext_5_m.js"="3/30/2014 1:31 PM, 2296 bytes, A
       Adds the file 104_jollywallet_m.js"="3/30/2014 1:31 PM, 1289 bytes, A
       Adds the file 13_CrossriderAppUtils.js"="3/30/2014 1:31 PM, 6993 bytes, A
       Adds the file 14_CrossriderUtils.js"="3/30/2014 1:31 PM, 20752 bytes, A
       Adds the file 155_ibario_pops_m.js"="3/30/2014 1:31 PM, 449 bytes, A
       Adds the file 17_jQuery.js"="3/30/2014 1:31 PM, 79864 bytes, A
       Adds the file 177_crossriderDashboard.js"="3/30/2014 1:31 PM, 31088 bytes, A
       Adds the file 180_bpo_serp_m.js"="3/30/2014 1:31 PM, 804 bytes, A
       Adds the file 182_openUrl.js"="3/30/2014 1:31 PM, 14181 bytes, A
       Adds the file 183_tabsWrapper.js"="3/30/2014 1:31 PM, 2427 bytes, A
       Adds the file 184_noproblemppc_m.js"="3/30/2014 1:31 PM, 1273 bytes, A
       Adds the file 19_CHAppAPIWrapper.js"="3/30/2014 1:31 PM, 7001 bytes, A
       Adds the file 191_ciuvo_m.js"="3/30/2014 1:31 PM, 1153 bytes, A
       Adds the file 207_dbWrapper.js"="3/30/2014 1:31 PM, 1537 bytes, A
       Adds the file 21_debug.js"="3/30/2014 1:31 PM, 3560 bytes, A
       Adds the file 22_resources.js"="3/30/2014 1:31 PM, 8958 bytes, A
       Adds the file 223_imonomy_m.js"="3/30/2014 1:31 PM, 453 bytes, A
       Adds the file 230_revizer_ws_dynamic_b2b_2_m.js"="3/30/2014 1:31 PM, 797 bytes, A
       Adds the file 233_revizer_p_dynamic_b2b_2_m.js"="3/30/2014 1:31 PM, 797 bytes, A
       Adds the file 246_setup.js"="3/30/2014 1:31 PM, 2049 bytes, A
       Adds the file 28_initializer.js"="3/30/2014 1:31 PM, 536 bytes, A
       Adds the file 4_jquery_1_7_1.js"="3/30/2014 1:31 PM, 94050 bytes, A
       Adds the file 47_resources_background.js"="3/30/2014 1:31 PM, 7574 bytes, A
       Adds the file 64_appApiMessage.js"="3/30/2014 1:31 PM, 2200 bytes, A
       Adds the file 72_appApiValidation.js"="3/30/2014 1:31 PM, 46062 bytes, A
       Adds the file 78_CrossriderInfo.js"="3/30/2014 1:31 PM, 3187 bytes, A
       Adds the file 80_CHPopupAppAPI.js"="3/30/2014 1:31 PM, 62 bytes, A
       Adds the file 91_monetizationLoader.js.js"="3/30/2014 1:31 PM, 146479 bytes, A
       Adds the file 93_superfish_no_coupons_m.js"="3/30/2014 1:31 PM, 560 bytes, A
       Adds the file 97_resourceApiWrapper.js"="3/30/2014 1:31 PM, 3157 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\userCode
       Adds the file background.js"="3/30/2014 1:31 PM, 429 bytes, A
       Adds the file extension.js"="3/30/2014 1:31 PM, 1 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons
       Adds the file icon128.png"="3/30/2014 1:31 PM, 18583 bytes, A
       Adds the file icon16.png"="3/30/2014 1:31 PM, 1317 bytes, A
       Adds the file icon48.png"="3/30/2014 1:31 PM, 3954 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons\actions
       Adds the file 1.png"="3/30/2014 1:31 PM, 1223 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js
       Adds the file background.js"="3/30/2014 1:31 PM, 34135 bytes, A
       Adds the file main.js"="3/30/2014 1:31 PM, 8452 bytes, A
       Adds the file platformVersion.js"="3/30/2014 1:31 PM, 408 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api
       Adds the file chrome.js"="3/30/2014 1:31 PM, 11499 bytes, A
       Adds the file cookie.js"="3/30/2014 1:31 PM, 11743 bytes, A
       Adds the file message.js"="3/30/2014 1:31 PM, 3346 bytes, A
       Adds the file monitor.js"="3/30/2014 1:31 PM, 2039 bytes, A
       Adds the file pageAction.js"="3/30/2014 1:31 PM, 1737 bytes, A
       Adds the file pageActionBG.js"="3/30/2014 1:31 PM, 2519 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib
       Adds the file app_api.js"="3/30/2014 1:31 PM, 6697 bytes, A
       Adds the file bg_app_api.js"="3/30/2014 1:31 PM, 4685 bytes, A
       Adds the file consts.js"="3/30/2014 1:31 PM, 335 bytes, A
       Adds the file cookie_store.js"="3/30/2014 1:31 PM, 5905 bytes, A
       Adds the file crossriderAPI.js"="3/30/2014 1:31 PM, 11366 bytes, A
       Adds the file delegate.js"="3/30/2014 1:31 PM, 2002 bytes, A
       Adds the file events.js"="3/30/2014 1:31 PM, 5757 bytes, A
       Adds the file extensionDataStore.js"="3/30/2014 1:31 PM, 6656 bytes, A
       Adds the file installer.js"="3/30/2014 1:31 PM, 780 bytes, A
       Adds the file logFile.js"="3/30/2014 1:31 PM, 775 bytes, A
       Adds the file logging.js"="3/30/2014 1:31 PM, 944 bytes, A
       Adds the file onBGDocumentLoad.js"="3/30/2014 1:31 PM, 480 bytes, A
       Adds the file reports.js"="3/30/2014 1:31 PM, 4929 bytes, A
       Adds the file storageWrapper.js"="3/30/2014 1:31 PM, 903 bytes, A
       Adds the file updateManager.js"="3/30/2014 1:31 PM, 8205 bytes, A
       Adds the file util.js"="3/30/2014 1:31 PM, 5142 bytes, A
       Adds the file xhr.js"="3/30/2014 1:31 PM, 2699 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\popupResource
       Adds the file newPopup.js"="3/30/2014 1:31 PM, 40 bytes, A
       Adds the file popup.js"="3/30/2014 1:31 PM, 45 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com
       Adds the file chrome.manifest"="3/30/2014 1:31 PM, 732 bytes, A
       Adds the file install.rdf"="3/30/2014 1:31 PM, 1346 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content
       Adds the file api.js"="3/30/2014 1:31 PM, 18796 bytes, A
       Adds the file background.html"="3/30/2014 1:31 PM, 2001 bytes, A
       Adds the file baseObject.js"="3/30/2014 1:31 PM, 19 bytes, A
       Adds the file browser.xul"="3/30/2014 1:31 PM, 4821 bytes, A
       Adds the file dialog.js"="3/30/2014 1:31 PM, 1343 bytes, A
       Adds the file ffCoreFilesIndex.txt"="3/30/2014 1:31 PM, 1052 bytes, A
       Adds the file main.js"="3/30/2014 1:31 PM, 18750 bytes, A
       Adds the file options.js"="3/30/2014 1:31 PM, 1931 bytes, A
       Adds the file options.xul"="3/30/2014 1:31 PM, 1913 bytes, A
       Adds the file platformVersion.js"="3/30/2014 1:31 PM, 612 bytes, A
       Adds the file search_dialog.xul"="3/30/2014 1:31 PM, 2457 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api
       Adds the file asyncDB.js"="3/30/2014 1:31 PM, 4805 bytes, A
       Adds the file background.js"="3/30/2014 1:31 PM, 1336 bytes, A
       Adds the file browserAction.js"="3/30/2014 1:31 PM, 8906 bytes, A
       Adds the file contextMenu.js"="3/30/2014 1:31 PM, 5359 bytes, A
       Adds the file dbManager.js"="3/30/2014 1:31 PM, 10097 bytes, A
       Adds the file dom_bg.js"="3/30/2014 1:31 PM, 2505 bytes, A
       Adds the file fileManager.js"="3/30/2014 1:31 PM, 943 bytes, A
       Adds the file firefox.js"="3/30/2014 1:31 PM, 353 bytes, A
       Adds the file firefoxNotifications.js"="3/30/2014 1:31 PM, 1116 bytes, A
       Adds the file firefoxOmnibox.js"="3/30/2014 1:31 PM, 1515 bytes, A
       Adds the file message.js"="3/30/2014 1:31 PM, 5210 bytes, A
       Adds the file pageAction.js"="3/30/2014 1:31 PM, 11257 bytes, A
       Adds the file request.js"="3/30/2014 1:31 PM, 2314 bytes, A
       Adds the file tabs.js"="3/30/2014 1:31 PM, 3628 bytes, A
       Adds the file webRequest.js"="3/30/2014 1:31 PM, 5806 bytes, A
       Adds the file windowsMessagingHandler.js"="3/30/2014 1:31 PM, 960 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core
       Adds the file addressBarChangeObserver.js"="3/30/2014 1:31 PM, 130 bytes, A
       Adds the file console.js"="3/30/2014 1:31 PM, 1753 bytes, A
       Adds the file consts.js"="3/30/2014 1:31 PM, 2356 bytes, A
       Adds the file delegate.js"="3/30/2014 1:31 PM, 2180 bytes, A
       Adds the file extensionDataStore.js"="3/30/2014 1:31 PM, 10309 bytes, A
       Adds the file folderIOWrapper.js"="3/30/2014 1:31 PM, 3526 bytes, A
       Adds the file httpObserver.js"="3/30/2014 1:31 PM, 2561 bytes, A
       Adds the file IDBWrapper.js"="3/30/2014 1:31 PM, 4191 bytes, A
       Adds the file installer.js"="3/30/2014 1:31 PM, 1320 bytes, A
       Adds the file logFile.js"="3/30/2014 1:31 PM, 1562 bytes, A
       Adds the file prefs.js"="3/30/2014 1:31 PM, 1649 bytes, A
       Adds the file progressListenerObserver.js"="3/30/2014 1:31 PM, 1368 bytes, A
       Adds the file registry.js"="3/30/2014 1:31 PM, 1158 bytes, A
       Adds the file reloadObserver.js"="3/30/2014 1:31 PM, 1527 bytes, A
       Adds the file reports.js"="3/30/2014 1:31 PM, 3869 bytes, A
       Adds the file requestObject.js"="3/30/2014 1:31 PM, 1261 bytes, A
       Adds the file searchSettings.js"="3/30/2014 1:31 PM, 3426 bytes, A
       Adds the file uninstallObserver.js"="3/30/2014 1:31 PM, 2372 bytes, A
       Adds the file updateManager.js"="3/30/2014 1:31 PM, 11480 bytes, A
       Adds the file utils.js"="3/30/2014 1:31 PM, 18554 bytes, A
       Adds the file xhr.js"="3/30/2014 1:31 PM, 2852 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\defaults\preferences
       Adds the file prefs.js"="3/30/2014 1:31 PM, 3988 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData
       Adds the file manifest.xml"="3/30/2014 1:31 PM, 1704 bytes, A
       Adds the file plugins.json"="3/30/2014 1:31 PM, 8416 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins
       Adds the file 1_base.js"="3/30/2014 1:31 PM, 6794 bytes, A
       Adds the file 102_dealply_m.js"="3/30/2014 1:31 PM, 2048 bytes, A
       Adds the file 103_intext_5_m.js"="3/30/2014 1:31 PM, 2296 bytes, A
       Adds the file 104_jollywallet_m.js"="3/30/2014 1:31 PM, 1289 bytes, A
       Adds the file 13_CrossriderAppUtils.js"="3/30/2014 1:31 PM, 6993 bytes, A
       Adds the file 14_CrossriderUtils.js"="3/30/2014 1:31 PM, 20752 bytes, A
       Adds the file 155_ibario_pops_m.js"="3/30/2014 1:31 PM, 449 bytes, A
       Adds the file 16_FFAppAPIWrapper.js"="3/30/2014 1:31 PM, 16022 bytes, A
       Adds the file 17_jQuery.js"="3/30/2014 1:31 PM, 79864 bytes, A
       Adds the file 177_crossriderDashboard.js"="3/30/2014 1:31 PM, 31088 bytes, A
       Adds the file 180_bpo_serp_m.js"="3/30/2014 1:31 PM, 804 bytes, A
       Adds the file 182_openUrl.js"="3/30/2014 1:31 PM, 14181 bytes, A
       Adds the file 183_tabsWrapper.js"="3/30/2014 1:31 PM, 2427 bytes, A
       Adds the file 184_noproblemppc_m.js"="3/30/2014 1:31 PM, 1273 bytes, A
       Adds the file 191_ciuvo_m.js"="3/30/2014 1:31 PM, 1153 bytes, A
       Adds the file 207_dbWrapper.js"="3/30/2014 1:31 PM, 1537 bytes, A
       Adds the file 21_debug.js"="3/30/2014 1:31 PM, 3560 bytes, A
       Adds the file 22_resources.js"="3/30/2014 1:31 PM, 8958 bytes, A
       Adds the file 223_imonomy_m.js"="3/30/2014 1:31 PM, 453 bytes, A
       Adds the file 230_revizer_ws_dynamic_b2b_2_m.js"="3/30/2014 1:31 PM, 797 bytes, A
       Adds the file 233_revizer_p_dynamic_b2b_2_m.js"="3/30/2014 1:31 PM, 797 bytes, A
       Adds the file 246_setup.js"="3/30/2014 1:31 PM, 2049 bytes, A
       Adds the file 28_initializer.js"="3/30/2014 1:31 PM, 536 bytes, A
       Adds the file 4_jquery_1_7_1.js"="3/30/2014 1:31 PM, 94050 bytes, A
       Adds the file 47_resources_background.js"="3/30/2014 1:31 PM, 7574 bytes, A
       Adds the file 64_appApiMessage.js"="3/30/2014 1:31 PM, 2200 bytes, A
       Adds the file 72_appApiValidation.js"="3/30/2014 1:31 PM, 46062 bytes, A
       Adds the file 78_CrossriderInfo.js"="3/30/2014 1:31 PM, 3187 bytes, A
       Adds the file 91_monetizationLoader.js.js"="3/30/2014 1:31 PM, 146479 bytes, A
       Adds the file 93_superfish_no_coupons_m.js"="3/30/2014 1:31 PM, 560 bytes, A
       Adds the file 98_omniCommands.js"="3/30/2014 1:31 PM, 1806 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\userCode
       Adds the file background.js"="3/30/2014 1:31 PM, 429 bytes, A
       Adds the file extension.js"="3/30/2014 1:31 PM, 1 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\locale\en-US
       Adds the file translations.dtd"="3/30/2014 1:31 PM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin
       Adds the file button1.png"="3/30/2014 1:31 PM, 1361 bytes, A
       Adds the file button2.png"="3/30/2014 1:31 PM, 1361 bytes, A
       Adds the file button3.png"="3/30/2014 1:31 PM, 1361 bytes, A
       Adds the file button4.png"="3/30/2014 1:31 PM, 1361 bytes, A
       Adds the file button5.png"="3/30/2014 1:31 PM, 1361 bytes, A
       Adds the file crossrider_statusbar.png"="3/30/2014 1:31 PM, 1361 bytes, A
       Adds the file icon128.png"="3/30/2014 1:31 PM, 18583 bytes, A
       Adds the file icon16.png"="3/30/2014 1:31 PM, 1317 bytes, A
       Adds the file icon24.png"="3/30/2014 1:31 PM, 2393 bytes, A
       Adds the file icon48.png"="3/30/2014 1:31 PM, 3954 bytes, A
       Adds the file panelarrow-up.png"="3/30/2014 1:31 PM, 917 bytes, A
       Adds the file popup.html"="3/30/2014 1:31 PM, 349 bytes, A
       Adds the file skin.css"="3/30/2014 1:31 PM, 990 bytes, A
       Adds the file update.css"="3/30/2014 1:31 PM, 140 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file Freeven pro 1.2-chromeinstaller"="3/30/2014 1:31 PM, 6140 bytes, A
       Adds the file Freeven pro 1.2-codedownloader"="3/30/2014 1:31 PM, 4550 bytes, A
       Adds the file Freeven pro 1.2-enabler"="3/30/2014 1:31 PM, 4448 bytes, A
       Adds the file Freeven pro 1.2-firefoxinstaller"="3/30/2014 1:31 PM, 5366 bytes, A
       Adds the file Freeven pro 1.2-updater"="3/30/2014 1:32 PM, 4604 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file Freeven pro 1.2-chromeinstaller.job"="3/30/2014 1:31 PM, 3110 bytes, A
       Adds the file Freeven pro 1.2-codedownloader.job"="3/30/2014 1:31 PM, 1520 bytes, A
       Adds the file Freeven pro 1.2-enabler.job"="3/30/2014 1:31 PM, 1418 bytes, A
       Adds the file Freeven pro 1.2-firefoxinstaller.job"="3/30/2014 1:31 PM, 2336 bytes, A
       Adds the file Freeven pro 1.2-updater.job"="3/30/2014 1:31 PM, 1574 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}]
       "(Default)"="REG_SZ", "Freeven pro 1.2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0054253.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511421153}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0054253"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}]
       "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522422253}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO
       "(Default)"="REG_SZ", "CrossriderApp0054253"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511421153}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0054253"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0054253"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511421153}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522422253}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0054253.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054253.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522422253}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555425553}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566426653}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544424453}"
       "Version"="REG_SZ", "1.0"
     [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0054253 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544424453}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\Freeven pro 1.2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\Chrome]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\Chrome-Profiles]
       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\ErrorLists-crchromeinstaller
       "post_for_sign_Invalid HTTP(S) status code"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Freeven pro 1.2\Installer]
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636]
       "54253"="REG_SZ", "Freeven pro 1.2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\21636\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511421153}]
       "(Default)"="REG_SZ", "CrossriderApp0054253"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511421153}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Freeven pro 1.2]
       "CrAppId"="REG_SZ", "54253"
       "CrPublisherId"="REG_SZ", "21636"
       "DisplayIcon"="REG_SZ", "C:\Program Files\Freeven pro 1.2\utils.exe"
       "DisplayName"="REG_SZ", "Freeven pro 1.2"
       "DisplayVersion"="REG_SZ", "1.34.3.17"
       "Publisher"="REG_SZ", "Freeven"
       "UninstallString"="REG_SZ", "C:\Program Files\Freeven pro 1.2\Uninstall.exe /fromcontrolpanel=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "Freeven pro 1.2-chromeinstaller.job"="REG_BINARY, ................................
       "Freeven pro 1.2-chromeinstaller.job.fp"="REG_DWORD", -549707267
       "Freeven pro 1.2-codedownloader.job"="REG_BINARY, ................................
       "Freeven pro 1.2-codedownloader.job.fp"="REG_DWORD", 938672641
       "Freeven pro 1.2-enabler.job"="REG_BINARY, ................................
       "Freeven pro 1.2-enabler.job.fp"="REG_DWORD", -561916017
       "Freeven pro 1.2-firefoxinstaller.job"="REG_BINARY, ................................
       "Freeven pro 1.2-firefoxinstaller.job.fp"="REG_DWORD", -1369839204
       "Freeven pro 1.2-updater.job"="REG_BINARY, ................................
       "Freeven pro 1.2-updater.job.fp"="REG_DWORD", -1845456473
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "7204D7A3AC0247A5A54EF72E7783D692IE"
       "Verifier"="REG_SZ", "7cda1a7c8762f00a24f9e6273d1ef5a1"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Freeven pro 1.2]
       "ActiveAppId"="REG_SZ", "54253"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Freeven pro 1.2\Code]
       "AppJavaScript"="{ javascript removed, full log available by request }
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Freeven pro 1.2\Update]
       "LastCheck"="REG_DWORD", 1396179113
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636]
       "54253"="REG_SZ", "Freeven pro 1.2"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\21636\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Freeven]
       "54253"="REG_SZ", "Freeven pro 1.2"
    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Approved Extensions]
       "{11111111-1111-1111-1111-110511421153}"="REG_BINARY, ............

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 3/30/2014
Scan Time: 1:42:31 PM
Logfile: mbamFreevenPro.txt
Administrator: Yes

Version: 2.00.0.1000
Malware Database: v2014.03.30.02
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 204754
Time Elapsed: 3 min, 57 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511421153}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544424453}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555425553}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566426653}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.BHO.1, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511421153}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.BHO, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511421153}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511421153}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522422253}, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.Sandbox.1, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054253.Sandbox, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511421153}\INPROCSERVER32, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\Freeven pro 1.2, Quarantined, [88e22fdac8b3290d106be375fd05f60a], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [1456818893e8a5918e09b4a5d72b1be5], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [1258ef1a2754171f274ec5cc34cf3fc1], 
PUP.Optional.Feven.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Freeven pro 1.2, Quarantined, [36348d7c24574de94637cb8d21e1629e], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\21636, Quarantined, [36349b6e601bd0667f19a5b4d230fc04], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Freeven, Quarantined, [0466b356fd7ef54146c5b6a7fa08c937], 
PUP.Optional.Feven.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Freeven pro 1.2, Quarantined, [05659376502bc96d2e0484d37c8601ff], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 27
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\defaults, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\defaults\preferences, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\userCode, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\locale, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\locale\en-US, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\userCode, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons\actions, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\popupResource, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0, Quarantined, [303abe4bb1caf24457c26bec03ff05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb, Quarantined, [204a5faac9b206300322d186a75b4cb4], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2, Quarantined, [05659376502bc96d2e0484d37c8601ff], 

Files: 203
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bho.dll, Quarantined, [80ea45c43d3eb482ef3dc1a2de2302fe], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Hohpbnicnqv.exe, Quarantined, [b1b99a6f4d2e58de537cc89a61a0bb45], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0.localstorage, Quarantined, [7feb3ecb4e2d1a1caec16fe94fb351af], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0.localstorage-journal, Quarantined, [fe6cb950e79470c686e9471113ef2ed2], 
PUP.Optional.Feven.A, C:\Windows\Tasks\Freeven pro 1.2-chromeinstaller.job, Quarantined, [274351b8631875c1cfabd088ae54966a], 
PUP.Optional.Feven.A, C:\Windows\Tasks\Freeven pro 1.2-codedownloader.job, Quarantined, [501aa465681322148eec47113ac89b65], 
PUP.Optional.Feven.A, C:\Windows\Tasks\Freeven pro 1.2-enabler.job, Quarantined, [83e716f3215a74c26e0cd682828027d9], 
PUP.Optional.Feven.A, C:\Windows\Tasks\Freeven pro 1.2-firefoxinstaller.job, Quarantined, [c7a3bb4e9ae1072fbac0e177e31f8a76], 
PUP.Optional.Feven.A, C:\Windows\Tasks\Freeven pro 1.2-updater.job, Quarantined, [e68448c1fc7fb185afcb471146bc817f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome.manifest, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\install.rdf, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\background.html, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\baseObject.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\browser.xul, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\dialog.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\main.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\options.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\options.xul, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\platformVersion.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\search_dialog.xul, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\asyncDB.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\background.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\browserAction.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\contextMenu.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\dbManager.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\dom_bg.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\fileManager.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\firefox.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\firefoxNotifications.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\message.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\pageAction.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\request.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\tabs.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\webRequest.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\console.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\consts.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\delegate.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\extensionDataStore.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\folderIOWrapper.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\httpObserver.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\IDBWrapper.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\installer.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\logFile.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\prefs.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\progressListenerObserver.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\registry.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\reloadObserver.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\reports.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\requestObject.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\searchSettings.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\uninstallObserver.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\updateManager.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\utils.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\chrome\content\core\xhr.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\defaults\preferences\prefs.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\manifest.xml, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins.json, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\223_imonomy_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\102_dealply_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\155_ibario_pops_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\17_jQuery.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\182_openUrl.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\191_ciuvo_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\1_base.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\21_debug.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\22_resources.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\246_setup.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\28_initializer.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\47_resources_background.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\plugins\98_omniCommands.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\userCode\background.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\extensionData\userCode\extension.js, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\locale\en-US\translations.dtd, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\button1.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\button2.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\button3.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\button4.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\button5.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\crossrider_statusbar.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\icon128.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\icon16.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\icon24.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\icon48.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\panelarrow-up.png, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\popup.html, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\skin.css, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\2ab9302c-551a-4804-9971-9932d6d5b0f9@2bfa4cf8-298a-4792-80d5-75352ee81de1.com\skin\update.css, Quarantined, [81e917f24a311521c3b4bb9a0af82bd5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\background.html, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\chromeCoreFilesIndex.txt, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\crossriderManifest.json, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\manifest.json, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\popup.html, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\manifest.xml, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins.json, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\102_dealply_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\103_intext_5_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\104_jollywallet_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\155_ibario_pops_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\17_jQuery.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\182_openUrl.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\183_tabsWrapper.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\191_ciuvo_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\19_CHAppAPIWrapper.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\1_base.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\207_dbWrapper.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\21_debug.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\223_imonomy_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\22_resources.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\246_setup.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\28_initializer.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\47_resources_background.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\64_appApiMessage.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\72_appApiValidation.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\80_CHPopupAppAPI.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\plugins\97_resourceApiWrapper.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\userCode\background.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\extensionData\userCode\extension.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons\icon128.png, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons\icon16.png, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons\icon48.png, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\icons\actions\1.png, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\background.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\main.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\platformVersion.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api\chrome.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api\cookie.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api\message.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api\monitor.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api\pageAction.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\api\pageActionBG.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\app_api.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\bg_app_api.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\consts.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\cookie_store.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\crossriderAPI.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\delegate.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\events.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\extensionDataStore.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\installer.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\logFile.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\logging.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\onBGDocumentLoad.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\reports.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\storageWrapper.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\updateManager.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\util.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\xhr.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\popupResource\newPopup.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmgpbjjcdccinnndjdgmegndbmhbgglb\1.26.15_0\js\lib\popupResource\popup.js, Quarantined, [e08aa663ed8e49ed95662531bc467b85], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_dmgpbjjcdccinnndjdgmegndbmhbgglb_0\1, Quarantined, [303abe4bb1caf24457c26bec03ff05fb], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\000003.log, Quarantined, [204a5faac9b206300322d186a75b4cb4], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\CURRENT, Quarantined, [204a5faac9b206300322d186a75b4cb4], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\LOCK, Quarantined, [204a5faac9b206300322d186a75b4cb4], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\LOG, Quarantined, [204a5faac9b206300322d186a75b4cb4], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmgpbjjcdccinnndjdgmegndbmhbgglb\MANIFEST-000002, Quarantined, [204a5faac9b206300322d186a75b4cb4], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\54253.crx, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\54253.xpi, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\background.html, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-bg.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-chromeinstaller.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-codedownloader.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-enabler.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-firefoxinstaller.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2-updater.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Freeven pro 1.2.ico, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Installer.log, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\Uninstall.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.Feven.A, C:\Program Files\Freeven pro 1.2\utils.exe, Quarantined, [05659376502bc96d2e0484d37c8601ff], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14512c4f31ab3ae8c5c3f9bf85583483");), Replaced,[cc9e03068cef280e125ad263e32134cc]

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 30 March 2014 - 08:39 AM

Advertisements

1 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us