Removal instructions for 123HD-Ready

Content is republished with permission from Malwarebytes.

What is 123HD-Ready?

The Malwarebytes research team has determined that 123HD-Ready is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by 123HD-Ready?

You may see these browser extensions/add-ons:

and this entry in your list of installed programs:

How did 123HD-Ready get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove 123HD-Ready?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-version.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan now.
When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
Reboot your computer if prompted.

Is there anything else I need to do to get rid of 123HD-Ready?

The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the 123HD-Ready listing. Then confirm removal.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the 123HD-Ready browser hijacker. It would have warned you before the potentially unwanted program could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0053624 - {11111111-1111-1111-1111-110511361124} - C:\Program Files\123HD-Ready\123HD-Ready-bho.dll

Alterations made by the installer:


File system details  
---------------------------------------------
    Adds the folder C:\Program Files\123HD-Ready
       Adds the file 123HD-Ready.ico"="4/22/2014 9:19 PM, 9662 bytes, A
       Adds the file 123HD-Ready-bg.exe"="4/26/2014 12:09 PM, 593920 bytes, A
       Adds the file 123HD-Ready-bho.dll"="4/26/2014 12:09 PM, 524288 bytes, A
       Adds the file 123HD-Ready-buttonutil.dll"="4/26/2014 12:09 PM, 350720 bytes, A
       Adds the file 123HD-Ready-buttonutil.exe"="4/26/2014 12:09 PM, 248832 bytes, A
       Adds the file 123HD-Ready-codedownloader.exe"="4/26/2014 12:09 PM, 477696 bytes, A
       Adds the file 53624.crx"="4/26/2014 12:09 PM, 248912 bytes, A
       Adds the file 53624.xpi"="4/26/2014 12:09 PM, 285055 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-2.exe"="4/26/2014 12:09 PM, 333824 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-3.exe"="4/26/2014 12:09 PM, 1861120 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-4.exe"="4/26/2014 12:09 PM, 796672 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-5.exe"="4/26/2014 12:09 PM, 321536 bytes, A
       Adds the file background.html"="4/22/2014 9:19 PM, 729 bytes, A
       Adds the file Uninstall.exe"="4/26/2014 12:09 PM, 78848 bytes, A
       Adds the file utils.exe"="4/26/2014 12:09 PM, 2138581 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0
       Adds the file background.html"="4/26/2014 12:09 PM, 1705 bytes, A
       Adds the file chromeCoreFilesIndex.txt"="4/26/2014 12:09 PM, 853 bytes, A
       Adds the file crossriderManifest.json"="4/26/2014 12:09 PM, 522 bytes, A
       Adds the file manifest.json"="4/26/2014 12:09 PM, 1133 bytes, A
       Adds the file popup.html"="4/26/2014 12:09 PM, 139 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData
       Adds the file manifest.xml"="4/26/2014 12:09 PM, 1732 bytes, A
       Adds the file plugins.json"="4/26/2014 12:09 PM, 7959 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins
       Adds the file 1.js"="4/26/2014 12:09 PM, 6794 bytes, A
       Adds the file 102.js"="4/26/2014 12:09 PM, 1057 bytes, A
       Adds the file 103.js"="4/26/2014 12:09 PM, 2296 bytes, A
       Adds the file 104.js"="4/26/2014 12:09 PM, 1289 bytes, A
       Adds the file 13.js"="4/26/2014 12:09 PM, 6993 bytes, A
       Adds the file 14.js"="4/26/2014 12:09 PM, 20752 bytes, A
       Adds the file 17.js"="4/26/2014 12:09 PM, 79864 bytes, A
       Adds the file 177.js"="4/26/2014 12:09 PM, 31088 bytes, A
       Adds the file 180.js"="4/26/2014 12:09 PM, 1065 bytes, A
       Adds the file 182.js"="4/26/2014 12:09 PM, 14181 bytes, A
       Adds the file 183.js"="4/26/2014 12:09 PM, 2441 bytes, A
       Adds the file 184.js"="4/26/2014 12:09 PM, 1273 bytes, A
       Adds the file 19.js"="4/26/2014 12:09 PM, 7001 bytes, A
       Adds the file 193.js"="4/26/2014 12:09 PM, 797 bytes, A
       Adds the file 207.js"="4/26/2014 12:09 PM, 1537 bytes, A
       Adds the file 21.js"="4/26/2014 12:09 PM, 3560 bytes, A
       Adds the file 22.js"="4/26/2014 12:09 PM, 8958 bytes, A
       Adds the file 223.js"="4/26/2014 12:09 PM, 453 bytes, A
       Adds the file 246.js"="4/26/2014 12:09 PM, 2446 bytes, A
       Adds the file 28.js"="4/26/2014 12:09 PM, 536 bytes, A
       Adds the file 4.js"="4/26/2014 12:09 PM, 94050 bytes, A
       Adds the file 47.js"="4/26/2014 12:09 PM, 7574 bytes, A
       Adds the file 64.js"="4/26/2014 12:09 PM, 2200 bytes, A
       Adds the file 72.js"="4/26/2014 12:09 PM, 46247 bytes, A
       Adds the file 78.js"="4/26/2014 12:09 PM, 3187 bytes, A
       Adds the file 80.js"="4/26/2014 12:09 PM, 62 bytes, A
       Adds the file 91.js"="4/26/2014 12:09 PM, 152614 bytes, A
       Adds the file 93.js"="4/26/2014 12:09 PM, 793 bytes, A
       Adds the file 97.js"="4/26/2014 12:09 PM, 3157 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\userCode
       Adds the file background.js"="4/26/2014 12:09 PM, 394 bytes, A
       Adds the file extension.js"="4/26/2014 12:09 PM, 708 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons
       Adds the file icon128.png"="4/26/2014 12:09 PM, 3493 bytes, A
       Adds the file icon16.png"="4/26/2014 12:09 PM, 1053 bytes, A
       Adds the file icon48.png"="4/26/2014 12:09 PM, 1405 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons\actions
       Adds the file 1.png"="4/26/2014 12:09 PM, 1223 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js
       Adds the file background.js"="4/26/2014 12:09 PM, 35180 bytes, A
       Adds the file main.js"="4/26/2014 12:09 PM, 8491 bytes, A
       Adds the file platformVersion.js"="4/26/2014 12:09 PM, 409 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api
       Adds the file chrome.js"="4/26/2014 12:09 PM, 11499 bytes, A
       Adds the file cookie.js"="4/26/2014 12:09 PM, 11743 bytes, A
       Adds the file message.js"="4/26/2014 12:09 PM, 3346 bytes, A
       Adds the file monitor.js"="4/26/2014 12:09 PM, 2039 bytes, A
       Adds the file pageAction.js"="4/26/2014 12:09 PM, 1737 bytes, A
       Adds the file pageActionBG.js"="4/26/2014 12:09 PM, 2519 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib
       Adds the file app_api.js"="4/26/2014 12:09 PM, 6697 bytes, A
       Adds the file bg_app_api.js"="4/26/2014 12:09 PM, 4729 bytes, A
       Adds the file consts.js"="4/26/2014 12:09 PM, 429 bytes, A
       Adds the file cookie_store.js"="4/26/2014 12:09 PM, 5905 bytes, A
       Adds the file crossriderAPI.js"="4/26/2014 12:09 PM, 11366 bytes, A
       Adds the file delegate.js"="4/26/2014 12:09 PM, 2002 bytes, A
       Adds the file events.js"="4/26/2014 12:09 PM, 5757 bytes, A
       Adds the file extensionDataStore.js"="4/26/2014 12:09 PM, 6817 bytes, A
       Adds the file installer.js"="4/26/2014 12:09 PM, 780 bytes, A
       Adds the file logFile.js"="4/26/2014 12:09 PM, 775 bytes, A
       Adds the file logging.js"="4/26/2014 12:09 PM, 944 bytes, A
       Adds the file onBGDocumentLoad.js"="4/26/2014 12:09 PM, 480 bytes, A
       Adds the file reports.js"="4/26/2014 12:09 PM, 4949 bytes, A
       Adds the file storageWrapper.js"="4/26/2014 12:09 PM, 903 bytes, A
       Adds the file updateManager.js"="4/26/2014 12:09 PM, 8324 bytes, A
       Adds the file util.js"="4/26/2014 12:09 PM, 5142 bytes, A
       Adds the file xhr.js"="4/26/2014 12:09 PM, 2699 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\popupResource
       Adds the file newPopup.js"="4/26/2014 12:09 PM, 40 bytes, A
       Adds the file popup.js"="4/26/2014 12:09 PM, 45 bytes, A
    Adds the folder C:\Users\{username}\AppData\LocalLow\123HD-Ready
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com
       Adds the file chrome.manifest"="4/26/2014 12:09 PM, 732 bytes, A
       Adds the file install.rdf"="4/26/2014 12:09 PM, 1374 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content
       Adds the file api.js"="4/26/2014 12:09 PM, 18796 bytes, A
       Adds the file background.html"="4/26/2014 12:09 PM, 2001 bytes, A
       Adds the file baseObject.js"="4/26/2014 12:09 PM, 19 bytes, A
       Adds the file browser.xul"="4/26/2014 12:09 PM, 4813 bytes, A
       Adds the file dialog.js"="4/26/2014 12:09 PM, 1343 bytes, A
       Adds the file ffCoreFilesIndex.txt"="4/26/2014 12:09 PM, 1052 bytes, A
       Adds the file main.js"="4/26/2014 12:09 PM, 18708 bytes, A
       Adds the file options.js"="4/26/2014 12:09 PM, 1931 bytes, A
       Adds the file options.xul"="4/26/2014 12:09 PM, 1913 bytes, A
       Adds the file platformVersion.js"="4/26/2014 12:09 PM, 614 bytes, A
       Adds the file search_dialog.xul"="4/26/2014 12:09 PM, 2457 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api
       Adds the file asyncDB.js"="4/26/2014 12:09 PM, 4805 bytes, A
       Adds the file background.js"="4/26/2014 12:09 PM, 1336 bytes, A
       Adds the file browserAction.js"="4/26/2014 12:09 PM, 8906 bytes, A
       Adds the file contextMenu.js"="4/26/2014 12:09 PM, 5359 bytes, A
       Adds the file dbManager.js"="4/26/2014 12:09 PM, 10097 bytes, A
       Adds the file dom_bg.js"="4/26/2014 12:09 PM, 2505 bytes, A
       Adds the file fileManager.js"="4/26/2014 12:09 PM, 943 bytes, A
       Adds the file firefox.js"="4/26/2014 12:09 PM, 353 bytes, A
       Adds the file firefoxNotifications.js"="4/26/2014 12:09 PM, 1116 bytes, A
       Adds the file firefoxOmnibox.js"="4/26/2014 12:09 PM, 1515 bytes, A
       Adds the file message.js"="4/26/2014 12:09 PM, 5210 bytes, A
       Adds the file pageAction.js"="4/26/2014 12:09 PM, 11257 bytes, A
       Adds the file request.js"="4/26/2014 12:09 PM, 2314 bytes, A
       Adds the file tabs.js"="4/26/2014 12:09 PM, 3628 bytes, A
       Adds the file webRequest.js"="4/26/2014 12:09 PM, 5638 bytes, A
       Adds the file windowsMessagingHandler.js"="4/26/2014 12:09 PM, 960 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core
       Adds the file addressBarChangeObserver.js"="4/26/2014 12:09 PM, 130 bytes, A
       Adds the file console.js"="4/26/2014 12:09 PM, 1753 bytes, A
       Adds the file consts.js"="4/26/2014 12:09 PM, 2421 bytes, A
       Adds the file delegate.js"="4/26/2014 12:09 PM, 2180 bytes, A
       Adds the file extensionDataStore.js"="4/26/2014 12:09 PM, 10314 bytes, A
       Adds the file folderIOWrapper.js"="4/26/2014 12:09 PM, 3526 bytes, A
       Adds the file httpObserver.js"="4/26/2014 12:09 PM, 2561 bytes, A
       Adds the file IDBWrapper.js"="4/26/2014 12:09 PM, 4692 bytes, A
       Adds the file installer.js"="4/26/2014 12:09 PM, 1320 bytes, A
       Adds the file logFile.js"="4/26/2014 12:09 PM, 1562 bytes, A
       Adds the file prefs.js"="4/26/2014 12:09 PM, 1649 bytes, A
       Adds the file progressListenerObserver.js"="4/26/2014 12:09 PM, 1368 bytes, A
       Adds the file registry.js"="4/26/2014 12:09 PM, 1158 bytes, A
       Adds the file reloadObserver.js"="4/26/2014 12:09 PM, 1527 bytes, A
       Adds the file reports.js"="4/26/2014 12:09 PM, 3975 bytes, A
       Adds the file requestObject.js"="4/26/2014 12:09 PM, 1261 bytes, A
       Adds the file searchSettings.js"="4/26/2014 12:09 PM, 3426 bytes, A
       Adds the file uninstallObserver.js"="4/26/2014 12:09 PM, 2372 bytes, A
       Adds the file updateManager.js"="4/26/2014 12:09 PM, 11480 bytes, A
       Adds the file utils.js"="4/26/2014 12:09 PM, 18746 bytes, A
       Adds the file xhr.js"="4/26/2014 12:09 PM, 2852 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\defaults\preferences
       Adds the file prefs.js"="4/26/2014 12:09 PM, 3983 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData
       Adds the file manifest.xml"="4/26/2014 12:09 PM, 1729 bytes, A
       Adds the file plugins.json"="4/26/2014 12:09 PM, 7746 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins
       Adds the file 1.js"="4/26/2014 12:09 PM, 6794 bytes, A
       Adds the file 102.js"="4/26/2014 12:09 PM, 1057 bytes, A
       Adds the file 103.js"="4/26/2014 12:09 PM, 2296 bytes, A
       Adds the file 104.js"="4/26/2014 12:09 PM, 1289 bytes, A
       Adds the file 13.js"="4/26/2014 12:09 PM, 6993 bytes, A
       Adds the file 14.js"="4/26/2014 12:09 PM, 20752 bytes, A
       Adds the file 16.js"="4/26/2014 12:09 PM, 16022 bytes, A
       Adds the file 17.js"="4/26/2014 12:09 PM, 79864 bytes, A
       Adds the file 177.js"="4/26/2014 12:09 PM, 31088 bytes, A
       Adds the file 180.js"="4/26/2014 12:09 PM, 1065 bytes, A
       Adds the file 182.js"="4/26/2014 12:09 PM, 14181 bytes, A
       Adds the file 183.js"="4/26/2014 12:09 PM, 2441 bytes, A
       Adds the file 184.js"="4/26/2014 12:09 PM, 1273 bytes, A
       Adds the file 193.js"="4/26/2014 12:09 PM, 797 bytes, A
       Adds the file 207.js"="4/26/2014 12:09 PM, 1537 bytes, A
       Adds the file 21.js"="4/26/2014 12:09 PM, 3560 bytes, A
       Adds the file 22.js"="4/26/2014 12:09 PM, 8958 bytes, A
       Adds the file 223.js"="4/26/2014 12:09 PM, 453 bytes, A
       Adds the file 246.js"="4/26/2014 12:09 PM, 2446 bytes, A
       Adds the file 28.js"="4/26/2014 12:09 PM, 536 bytes, A
       Adds the file 4.js"="4/26/2014 12:09 PM, 94050 bytes, A
       Adds the file 47.js"="4/26/2014 12:09 PM, 7574 bytes, A
       Adds the file 64.js"="4/26/2014 12:09 PM, 2200 bytes, A
       Adds the file 72.js"="4/26/2014 12:09 PM, 46247 bytes, A
       Adds the file 78.js"="4/26/2014 12:09 PM, 3187 bytes, A
       Adds the file 91.js"="4/26/2014 12:09 PM, 152614 bytes, A
       Adds the file 93.js"="4/26/2014 12:09 PM, 793 bytes, A
       Adds the file 98.js"="4/26/2014 12:09 PM, 1806 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\userCode
       Adds the file background.js"="4/26/2014 12:09 PM, 394 bytes, A
       Adds the file extension.js"="4/26/2014 12:09 PM, 708 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\locale\en-US
       Adds the file translations.dtd"="4/26/2014 12:09 PM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin
       Adds the file button1.png"="4/26/2014 12:09 PM, 1361 bytes, A
       Adds the file button2.png"="4/26/2014 12:09 PM, 1361 bytes, A
       Adds the file button3.png"="4/26/2014 12:09 PM, 1361 bytes, A
       Adds the file button4.png"="4/26/2014 12:09 PM, 1361 bytes, A
       Adds the file button5.png"="4/26/2014 12:09 PM, 1361 bytes, A
       Adds the file crossrider_statusbar.png"="4/26/2014 12:09 PM, 1361 bytes, A
       Adds the file icon128.png"="4/26/2014 12:09 PM, 3493 bytes, A
       Adds the file icon16.png"="4/26/2014 12:09 PM, 1053 bytes, A
       Adds the file icon24.png"="4/26/2014 12:09 PM, 965 bytes, A
       Adds the file icon48.png"="4/26/2014 12:09 PM, 1405 bytes, A
       Adds the file panelarrow-up.png"="4/26/2014 12:09 PM, 917 bytes, A
       Adds the file popup.html"="4/26/2014 12:09 PM, 349 bytes, A
       Adds the file skin.css"="4/26/2014 12:09 PM, 990 bytes, A
       Adds the file update.css"="4/26/2014 12:09 PM, 140 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-1"="4/26/2014 12:09 PM, 4414 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-2"="4/26/2014 12:09 PM, 4382 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-3"="4/26/2014 12:09 PM, 5806 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-4"="4/26/2014 12:09 PM, 5212 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-5"="4/26/2014 12:09 PM, 4480 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-1.job"="4/26/2014 12:09 PM, 1384 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-2.job"="4/26/2014 12:09 PM, 1352 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-3.job"="4/26/2014 12:09 PM, 2776 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-4.job"="4/26/2014 12:09 PM, 2182 bytes, A
       Adds the file b9614245-efcf-4f8b-bb47-5d872ee3edbb-5.job"="4/26/2014 12:09 PM, 1450 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\Chrome]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\Chrome-Profiles]
       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\IE\Profiles]
       "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\123HD-Ready\Installer]
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}]
       "(Default)"="REG_SZ", "123HD-Ready"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\123HD-Ready\123HD-Ready-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053624.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544364424}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511361124}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053624"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522362224}]
       "(Default)"="REG_SZ", "CrossriderApp0053624.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522362224}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\123HD-Ready\123HD-Ready-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522362224}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053624.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522362224}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522362224}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544364424}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522362224}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053624.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0053624"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511361124}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0053624"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0053624"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511361124}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0053624.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522362224}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0053624.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0053624.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053624.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522362224}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555365524}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555365524}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555365524}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555365524}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544364424}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566366624}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566366624}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566366624}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566366624}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544364424}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544364424}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0053624 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544364424}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\123HD-Ready\123HD-Ready-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544364424}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544364424}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\123HD-Ready"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25912]
       "53624"="REG_SZ", "123HD-Ready"
    [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25912\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511361124}]
       "(Default)"="REG_SZ", "CrossriderApp0053624"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511361124}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\123HD-Ready]
       "CrAppId"="REG_SZ", "53624"
       "CrPublisherId"="REG_SZ", "25912"
       "DisplayIcon"="REG_SZ", "C:\Program Files\123HD-Ready\utils.exe"
       "DisplayName"="REG_SZ", "123HD-Ready"
       "DisplayVersion"="REG_SZ", "1.34.4.10"
       "Publisher"="REG_SZ", "Phoenix Media"
       "UninstallString"="REG_SZ", "C:\Program Files\123HD-Ready\Uninstall.exe /fcp=1"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\123HD-Ready]
       "ActiveAppId"="REG_SZ", "53624"
       "BhoRunningVersion"="REG_SZ", "153"
       "IsBhoEnabled"="REG_DWORD", 1
       "LastSetSearch"="REG_DWORD", 1398507075
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\123HD-Ready\background]
       "__onDocumentStart_script__"="REG_SZ", ""
       "__onDocumentStart_script_store__"="REG_SZ", ""
       "IsEnabled"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\123HD-Ready\Code]
       "AppJavaScript"="REG_SZ", " {javascript removed, full log available on request}"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\123HD-Ready\Update]
       "LastCheck"="REG_DWORD", 1398506966
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "B3B5CFA0438942B3BB1CB19125898DEDIE"
       "Verifier"="REG_SZ", "d7c6a9300880f1a3e88861396c25d903"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate]
       "53624"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest]
       "53624"="REG_SZ", ""
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\25912]
       "53624"="REG_SZ", "123HD-Ready"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\25912\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Phoenix Media]
       "53624"="REG_SZ", "123HD-Ready"
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110511361124}]
       "Flags"="REG_DWORD", 1024
       "VerCache"="REG_BINARY, ......................
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511361124}\iexplore]
       "Count"="REG_DWORD", 2
       "Flags"="REG_DWORD", 0
       "LoadTimeArray"="REG_BINARY, ....................
       "NavTimeArray"="REG_BINARY, ....................
       "Time"="REG_BINARY, ........
       "Type"="REG_DWORD", 3

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 4/26/2014
Scan Time: 12:22:10 PM
Logfile: mbam123HD.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.26.01
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 213693
Time Elapsed: 4 min, 27 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511361124}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544364424}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555365524}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566366624}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053624.BHO.1, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511361124}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053624.BHO, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511361124}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511361124}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522362224}, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053624.Sandbox.1, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053624.Sandbox, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511361124}\INPROCSERVER32, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\123HD-Ready, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, HKLM\SOFTWARE\123HD-Ready, Quarantined, [a247b37b6d0e89adbaa30e62df23fc04], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25912, Quarantined, [c2279a941d5e16202f1b82f6679b47b9], 
PUP.Optional.123HDReady.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\123HD-Ready, Quarantined, [b633290598e3b6804418224eb64cfe02], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [9f4add51b7c467cf747d535c659e768a], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25912, Quarantined, [1bce012dd2a9c67074d72e4ac43ea15f], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Phoenix Media, Quarantined, [717875b93f3cf93d03b18df06a98b749], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 27
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\defaults, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\defaults\preferences, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\userCode, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\locale, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\locale\en-US, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_jodedgbjmohnmabanimipelnganjpmkh_0, Quarantined, [3aaf58d64437bb7ba828c6a9ab574ab6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\userCode, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons\actions, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\popupResource, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jodedgbjmohnmabanimipelnganjpmkh, Quarantined, [5792d559493274c2c60dfd720200619f], 

Files: 198
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\123HD-Ready-bho.dll, Quarantined, [6584e04e334891a5d87e5918d62bdc24], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\123HD-Ready.exe, Quarantined, [b9305cd2d3a85cdae43191b03ec2dd23], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\background.html, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\123HD-Ready-bg.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\123HD-Ready-buttonutil.dll, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\123HD-Ready-buttonutil.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\123HD-Ready-codedownloader.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\123HD-Ready.ico, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\53624.crx, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\53624.xpi, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\b9614245-efcf-4f8b-bb47-5d872ee3edbb-2.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\b9614245-efcf-4f8b-bb47-5d872ee3edbb-3.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\b9614245-efcf-4f8b-bb47-5d872ee3edbb-4.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\b9614245-efcf-4f8b-bb47-5d872ee3edbb-5.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\Uninstall.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.123HDReady.A, C:\Program Files\123HD-Ready\utils.exe, Quarantined, [8465f03ef982330305547af6c0424db3], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jodedgbjmohnmabanimipelnganjpmkh_0.localstorage, Quarantined, [d01935f91d5e56e095ca274938ca39c7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_jodedgbjmohnmabanimipelnganjpmkh_0.localstorage-journal, Quarantined, [935682ac3645e353bfa0ec84e0228977], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\b9614245-efcf-4f8b-bb47-5d872ee3edbb-1.job, Quarantined, [9a4f022c0675989ec6fedc9af60c1ce4], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\b9614245-efcf-4f8b-bb47-5d872ee3edbb-2.job, Quarantined, [eefbbe7023588babc7fdaacc857dda26], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\b9614245-efcf-4f8b-bb47-5d872ee3edbb-3.job, Quarantined, [ac3d7bb33d3e9c9ab70d92e4c73b28d8], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\b9614245-efcf-4f8b-bb47-5d872ee3edbb-4.job, Quarantined, [76733bf36615b680b90b31451be79c64], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\b9614245-efcf-4f8b-bb47-5d872ee3edbb-5.job, Quarantined, [5e8b52dc2d4e9d99dee6bcba778bdc24], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome.manifest, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\install.rdf, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\background.html, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\baseObject.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\browser.xul, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\dialog.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\main.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\options.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\options.xul, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\platformVersion.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\search_dialog.xul, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\asyncDB.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\background.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\browserAction.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\contextMenu.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\dbManager.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\dom_bg.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\fileManager.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\firefox.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\firefoxNotifications.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\message.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\pageAction.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\request.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\tabs.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\webRequest.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\console.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\consts.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\delegate.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\extensionDataStore.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\folderIOWrapper.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\httpObserver.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\IDBWrapper.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\installer.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\logFile.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\prefs.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\progressListenerObserver.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\registry.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\reloadObserver.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\reports.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\requestObject.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\searchSettings.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\uninstallObserver.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\updateManager.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\utils.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\chrome\content\core\xhr.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\defaults\preferences\prefs.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\manifest.xml, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins.json, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\1.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\102.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\103.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\104.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\13.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\14.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\16.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\17.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\177.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\180.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\182.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\183.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\184.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\193.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\207.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\21.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\22.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\223.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\246.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\28.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\4.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\47.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\64.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\72.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\78.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\91.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\93.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\plugins\98.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\userCode\background.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\extensionData\userCode\extension.js, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\locale\en-US\translations.dtd, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\button1.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\button2.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\button3.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\button4.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\button5.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\crossrider_statusbar.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\icon128.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\icon16.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\icon24.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\icon48.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\panelarrow-up.png, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\popup.html, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\skin.css, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\00e20d06-34e4-45a5-b600-14a647ce8c1d@04178abf-57e0-43de-a20e-091e3215ebf0.com\skin\update.css, Quarantined, [8c5d210d5b20ad898937f2768b779070], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_jodedgbjmohnmabanimipelnganjpmkh_0\1, Quarantined, [3aaf58d64437bb7ba828c6a9ab574ab6], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\background.html, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\chromeCoreFilesIndex.txt, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\crossriderManifest.json, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\manifest.json, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\popup.html, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\manifest.xml, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins.json, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\1.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\102.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\103.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\104.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\13.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\14.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\17.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\177.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\180.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\182.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\183.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\184.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\19.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\193.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\207.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\21.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\22.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\223.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\246.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\28.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\4.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\47.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\64.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\72.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\78.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\80.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\91.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\93.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\plugins\97.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\userCode\background.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\extensionData\userCode\extension.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons\icon128.png, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons\icon16.png, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons\icon48.png, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\icons\actions\1.png, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\background.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\main.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\platformVersion.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api\chrome.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api\cookie.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api\message.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api\monitor.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api\pageAction.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\api\pageActionBG.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\app_api.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\bg_app_api.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\consts.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\cookie_store.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\crossriderAPI.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\delegate.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\events.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\extensionDataStore.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\installer.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\logFile.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\logging.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\onBGDocumentLoad.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\reports.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\storageWrapper.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\updateManager.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\util.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\xhr.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\popupResource\newPopup.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\jodedgbjmohnmabanimipelnganjpmkh\1.26.18_0\js\lib\popupResource\popup.js, Quarantined, [feeb44eaa1da5bdbdff29cd334ce5ea2], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jodedgbjmohnmabanimipelnganjpmkh\000003.log, Quarantined, [5792d559493274c2c60dfd720200619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jodedgbjmohnmabanimipelnganjpmkh\CURRENT, Quarantined, [5792d559493274c2c60dfd720200619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jodedgbjmohnmabanimipelnganjpmkh\LOCK, Quarantined, [5792d559493274c2c60dfd720200619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jodedgbjmohnmabanimipelnganjpmkh\LOG, Quarantined, [5792d559493274c2c60dfd720200619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jodedgbjmohnmabanimipelnganjpmkh\MANIFEST-000002, Quarantined, [5792d559493274c2c60dfd720200619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "1459d86538071fe65ee9242b6661f987");), Replaced,[dd0cee400675bf77f3d5461520e4ad53]

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 26 April 2014 - 04:51 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us