What is HQVid1.9h?
The Malwarebytes research team has determined that HQVid1.9h is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the effected browser visits their site or one of their choice. This one also displays advertisements.
How do I know if my computer is affected by HQVid1.9h?
You may see these browser extensions/add-ons:



and this entry in your list of installed programs:

How did HQVid1.9h get on my computer?
Browser hijackers use different methods for distributing themselves. This particular one was offered as a video enhancing browser extension.
How do I remove HQVid1.9h?
Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.
- Please download Malwarebytes Anti-Malware to your desktop.
- Double-click mbam-setup-version.exe and follow the prompts to install the program.
- At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
- Then click Finish.
- If an update is found, you will be prompted to download and install the latest version.
- Once the program has loaded, select Scan now.
- When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
- Reboot your computer if prompted.
- The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the HQVid1.9h listing. Then confirm removal.
We hope our application and this guide have helped you eradicate this hijacker.
As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HQVid1.9h browser hijacker. It would have warned you before the potentially unwanted program could install itself, giving you a chance to stop it before it became too late.
Signs in a HijackThis log:
O2 - BHO: CrossriderApp0053172 - {11111111-1111-1111-1111-110511311172} - C:\Program Files\HQVid1.9h\HQVid1.9h-bho.dllAlterations made by the installer:
File system details --------------------------------------------- Adds the folder C:\Program Files\HQVid1.9h Adds the file 53172.crx"="4/27/2014 10:29 AM, 258969 bytes, A Adds the file 53172.xpi"="4/27/2014 10:29 AM, 298122 bytes, A Adds the file background.html"="4/2/2014 1:38 PM, 729 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-2.exe"="4/27/2014 10:29 AM, 333824 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-3.exe"="4/27/2014 10:29 AM, 1861120 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-4.exe"="4/27/2014 10:29 AM, 796672 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-5.exe"="4/27/2014 10:29 AM, 321024 bytes, A Adds the file HQVid1.9h.ico"="4/2/2014 1:38 PM, 9662 bytes, A Adds the file HQVid1.9h-bg.exe"="4/27/2014 10:29 AM, 519168 bytes, A Adds the file HQVid1.9h-bho.dll"="4/27/2014 10:29 AM, 495104 bytes, A Adds the file HQVid1.9h-codedownloader.exe"="4/27/2014 10:29 AM, 477696 bytes, A Adds the file Uninstall.exe"="4/27/2014 10:29 AM, 78336 bytes, A Adds the file utils.exe"="4/27/2014 10:29 AM, 2149696 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0 Adds the file background.html"="4/27/2014 10:29 AM, 1705 bytes, A Adds the file chromeCoreFilesIndex.txt"="4/27/2014 10:29 AM, 853 bytes, A Adds the file crossriderManifest.json"="4/27/2014 10:29 AM, 528 bytes, A Adds the file manifest.json"="4/27/2014 10:29 AM, 1222 bytes, A Adds the file popup.html"="4/27/2014 10:29 AM, 139 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData Adds the file manifest.xml"="4/27/2014 10:29 AM, 1843 bytes, A Adds the file plugins.json"="4/27/2014 10:29 AM, 8903 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins Adds the file 1.js"="4/27/2014 10:29 AM, 6794 bytes, A Adds the file 102.js"="4/27/2014 10:29 AM, 2048 bytes, A Adds the file 103.js"="4/27/2014 10:29 AM, 2296 bytes, A Adds the file 104.js"="4/27/2014 10:29 AM, 1289 bytes, A Adds the file 119.js"="4/27/2014 10:29 AM, 5012 bytes, A Adds the file 13.js"="4/27/2014 10:29 AM, 6993 bytes, A Adds the file 14.js"="4/27/2014 10:29 AM, 20752 bytes, A Adds the file 17.js"="4/27/2014 10:29 AM, 79864 bytes, A Adds the file 177.js"="4/27/2014 10:29 AM, 31088 bytes, A Adds the file 179.js"="4/27/2014 10:29 AM, 704 bytes, A Adds the file 180.js"="4/27/2014 10:29 AM, 804 bytes, A Adds the file 182.js"="4/27/2014 10:29 AM, 14181 bytes, A Adds the file 183.js"="4/27/2014 10:29 AM, 2427 bytes, A Adds the file 19.js"="4/27/2014 10:29 AM, 7001 bytes, A Adds the file 191.js"="4/27/2014 10:29 AM, 1153 bytes, A Adds the file 207.js"="4/27/2014 10:29 AM, 1537 bytes, A Adds the file 21.js"="4/27/2014 10:29 AM, 3560 bytes, A Adds the file 22.js"="4/27/2014 10:29 AM, 8958 bytes, A Adds the file 223.js"="4/27/2014 10:29 AM, 453 bytes, A Adds the file 231.js"="4/27/2014 10:29 AM, 706 bytes, A Adds the file 232.js"="4/27/2014 10:29 AM, 703 bytes, A Adds the file 242.js"="4/27/2014 10:29 AM, 1057 bytes, A Adds the file 246.js"="4/27/2014 10:29 AM, 2049 bytes, A Adds the file 28.js"="4/27/2014 10:29 AM, 536 bytes, A Adds the file 4.js"="4/27/2014 10:29 AM, 94050 bytes, A Adds the file 47.js"="4/27/2014 10:29 AM, 7574 bytes, A Adds the file 64.js"="4/27/2014 10:29 AM, 2200 bytes, A Adds the file 72.js"="4/27/2014 10:29 AM, 46062 bytes, A Adds the file 78.js"="4/27/2014 10:29 AM, 3187 bytes, A Adds the file 80.js"="4/27/2014 10:29 AM, 62 bytes, A Adds the file 91.js"="4/27/2014 10:29 AM, 151095 bytes, A Adds the file 93.js"="4/27/2014 10:29 AM, 560 bytes, A Adds the file 97.js"="4/27/2014 10:29 AM, 3157 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\userCode Adds the file background.js"="4/27/2014 10:29 AM, 440 bytes, A Adds the file extension.js"="4/27/2014 10:29 AM, 756 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons Adds the file icon128.png"="4/27/2014 10:29 AM, 5524 bytes, A Adds the file icon16.png"="4/27/2014 10:29 AM, 3235 bytes, A Adds the file icon48.png"="4/27/2014 10:29 AM, 4124 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons\actions Adds the file 1.png"="4/27/2014 10:29 AM, 1223 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js Adds the file background.js"="4/27/2014 10:29 AM, 34135 bytes, A Adds the file main.js"="4/27/2014 10:29 AM, 8452 bytes, A Adds the file platformVersion.js"="4/27/2014 10:29 AM, 408 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api Adds the file chrome.js"="4/27/2014 10:29 AM, 11499 bytes, A Adds the file cookie.js"="4/27/2014 10:29 AM, 11743 bytes, A Adds the file message.js"="4/27/2014 10:29 AM, 3346 bytes, A Adds the file monitor.js"="4/27/2014 10:29 AM, 2039 bytes, A Adds the file pageAction.js"="4/27/2014 10:29 AM, 1737 bytes, A Adds the file pageActionBG.js"="4/27/2014 10:29 AM, 2519 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib Adds the file app_api.js"="4/27/2014 10:29 AM, 6697 bytes, A Adds the file bg_app_api.js"="4/27/2014 10:29 AM, 4685 bytes, A Adds the file consts.js"="4/27/2014 10:29 AM, 335 bytes, A Adds the file cookie_store.js"="4/27/2014 10:29 AM, 5905 bytes, A Adds the file crossriderAPI.js"="4/27/2014 10:29 AM, 11366 bytes, A Adds the file delegate.js"="4/27/2014 10:29 AM, 2002 bytes, A Adds the file events.js"="4/27/2014 10:29 AM, 5757 bytes, A Adds the file extensionDataStore.js"="4/27/2014 10:29 AM, 6645 bytes, A Adds the file installer.js"="4/27/2014 10:29 AM, 780 bytes, A Adds the file logFile.js"="4/27/2014 10:29 AM, 775 bytes, A Adds the file logging.js"="4/27/2014 10:29 AM, 944 bytes, A Adds the file onBGDocumentLoad.js"="4/27/2014 10:29 AM, 480 bytes, A Adds the file reports.js"="4/27/2014 10:29 AM, 4929 bytes, A Adds the file storageWrapper.js"="4/27/2014 10:29 AM, 903 bytes, A Adds the file updateManager.js"="4/27/2014 10:29 AM, 8205 bytes, A Adds the file util.js"="4/27/2014 10:29 AM, 5142 bytes, A Adds the file xhr.js"="4/27/2014 10:29 AM, 2699 bytes, A Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\popupResource Adds the file newPopup.js"="4/27/2014 10:29 AM, 40 bytes, A Adds the file popup.js"="4/27/2014 10:29 AM, 45 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com Adds the file chrome.manifest"="4/27/2014 10:29 AM, 732 bytes, A Adds the file install.rdf"="4/27/2014 10:29 AM, 1479 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content Adds the file api.js"="4/27/2014 10:29 AM, 18796 bytes, A Adds the file background.html"="4/27/2014 10:29 AM, 2001 bytes, A Adds the file baseObject.js"="4/27/2014 10:29 AM, 19 bytes, A Adds the file browser.xul"="4/27/2014 10:29 AM, 4809 bytes, A Adds the file dialog.js"="4/27/2014 10:29 AM, 1343 bytes, A Adds the file ffCoreFilesIndex.txt"="4/27/2014 10:29 AM, 1052 bytes, A Adds the file main.js"="4/27/2014 10:29 AM, 18930 bytes, A Adds the file options.js"="4/27/2014 10:29 AM, 1931 bytes, A Adds the file options.xul"="4/27/2014 10:29 AM, 1913 bytes, A Adds the file platformVersion.js"="4/27/2014 10:29 AM, 613 bytes, A Adds the file search_dialog.xul"="4/27/2014 10:29 AM, 2457 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api Adds the file asyncDB.js"="4/27/2014 10:29 AM, 4805 bytes, A Adds the file background.js"="4/27/2014 10:29 AM, 1336 bytes, A Adds the file browserAction.js"="4/27/2014 10:29 AM, 8906 bytes, A Adds the file contextMenu.js"="4/27/2014 10:29 AM, 5359 bytes, A Adds the file dbManager.js"="4/27/2014 10:29 AM, 10097 bytes, A Adds the file dom_bg.js"="4/27/2014 10:29 AM, 2505 bytes, A Adds the file fileManager.js"="4/27/2014 10:29 AM, 943 bytes, A Adds the file firefox.js"="4/27/2014 10:29 AM, 353 bytes, A Adds the file firefoxNotifications.js"="4/27/2014 10:29 AM, 1116 bytes, A Adds the file firefoxOmnibox.js"="4/27/2014 10:29 AM, 1515 bytes, A Adds the file message.js"="4/27/2014 10:29 AM, 5210 bytes, A Adds the file pageAction.js"="4/27/2014 10:29 AM, 11257 bytes, A Adds the file request.js"="4/27/2014 10:29 AM, 2314 bytes, A Adds the file tabs.js"="4/27/2014 10:29 AM, 3628 bytes, A Adds the file webRequest.js"="4/27/2014 10:29 AM, 5638 bytes, A Adds the file windowsMessagingHandler.js"="4/27/2014 10:29 AM, 960 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core Adds the file addressBarChangeObserver.js"="4/27/2014 10:29 AM, 130 bytes, A Adds the file console.js"="4/27/2014 10:29 AM, 1753 bytes, A Adds the file consts.js"="4/27/2014 10:29 AM, 2356 bytes, A Adds the file delegate.js"="4/27/2014 10:29 AM, 2180 bytes, A Adds the file extensionDataStore.js"="4/27/2014 10:29 AM, 10314 bytes, A Adds the file folderIOWrapper.js"="4/27/2014 10:29 AM, 3526 bytes, A Adds the file httpObserver.js"="4/27/2014 10:29 AM, 2561 bytes, A Adds the file IDBWrapper.js"="4/27/2014 10:29 AM, 4191 bytes, A Adds the file installer.js"="4/27/2014 10:29 AM, 1320 bytes, A Adds the file logFile.js"="4/27/2014 10:29 AM, 1562 bytes, A Adds the file prefs.js"="4/27/2014 10:29 AM, 1649 bytes, A Adds the file progressListenerObserver.js"="4/27/2014 10:29 AM, 1368 bytes, A Adds the file registry.js"="4/27/2014 10:29 AM, 1158 bytes, A Adds the file reloadObserver.js"="4/27/2014 10:29 AM, 1527 bytes, A Adds the file reports.js"="4/27/2014 10:29 AM, 3869 bytes, A Adds the file requestObject.js"="4/27/2014 10:29 AM, 1261 bytes, A Adds the file searchSettings.js"="4/27/2014 10:29 AM, 3426 bytes, A Adds the file uninstallObserver.js"="4/27/2014 10:29 AM, 2372 bytes, A Adds the file updateManager.js"="4/27/2014 10:29 AM, 11480 bytes, A Adds the file utils.js"="4/27/2014 10:29 AM, 18554 bytes, A Adds the file xhr.js"="4/27/2014 10:29 AM, 2852 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults Adds the file prefs.js"="4/27/2014 10:29 AM, 3989 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData Adds the file manifest.xml"="4/27/2014 10:29 AM, 1840 bytes, A Adds the file plugins.json"="4/27/2014 10:29 AM, 8688 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins Adds the file 1.js"="4/27/2014 10:29 AM, 6794 bytes, A Adds the file 102.js"="4/27/2014 10:29 AM, 2048 bytes, A Adds the file 103.js"="4/27/2014 10:29 AM, 2296 bytes, A Adds the file 104.js"="4/27/2014 10:29 AM, 1289 bytes, A Adds the file 119.js"="4/27/2014 10:29 AM, 5012 bytes, A Adds the file 13.js"="4/27/2014 10:29 AM, 6993 bytes, A Adds the file 14.js"="4/27/2014 10:29 AM, 20752 bytes, A Adds the file 16.js"="4/27/2014 10:29 AM, 16022 bytes, A Adds the file 17.js"="4/27/2014 10:29 AM, 79864 bytes, A Adds the file 177.js"="4/27/2014 10:29 AM, 31088 bytes, A Adds the file 179.js"="4/27/2014 10:29 AM, 704 bytes, A Adds the file 180.js"="4/27/2014 10:29 AM, 804 bytes, A Adds the file 182.js"="4/27/2014 10:29 AM, 14181 bytes, A Adds the file 183.js"="4/27/2014 10:29 AM, 2427 bytes, A Adds the file 191.js"="4/27/2014 10:29 AM, 1153 bytes, A Adds the file 207.js"="4/27/2014 10:29 AM, 1537 bytes, A Adds the file 21.js"="4/27/2014 10:29 AM, 3560 bytes, A Adds the file 22.js"="4/27/2014 10:29 AM, 8958 bytes, A Adds the file 223.js"="4/27/2014 10:29 AM, 453 bytes, A Adds the file 231.js"="4/27/2014 10:29 AM, 706 bytes, A Adds the file 232.js"="4/27/2014 10:29 AM, 703 bytes, A Adds the file 242.js"="4/27/2014 10:29 AM, 1057 bytes, A Adds the file 246.js"="4/27/2014 10:29 AM, 2049 bytes, A Adds the file 28.js"="4/27/2014 10:29 AM, 536 bytes, A Adds the file 4.js"="4/27/2014 10:29 AM, 94050 bytes, A Adds the file 47.js"="4/27/2014 10:29 AM, 7574 bytes, A Adds the file 64.js"="4/27/2014 10:29 AM, 2200 bytes, A Adds the file 72.js"="4/27/2014 10:29 AM, 46062 bytes, A Adds the file 78.js"="4/27/2014 10:29 AM, 3187 bytes, A Adds the file 91.js"="4/27/2014 10:29 AM, 151095 bytes, A Adds the file 93.js"="4/27/2014 10:29 AM, 560 bytes, A Adds the file 98.js"="4/27/2014 10:29 AM, 1806 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode Adds the file background.js"="4/27/2014 10:29 AM, 440 bytes, A Adds the file extension.js"="4/27/2014 10:29 AM, 756 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US Adds the file translations.dtd"="4/27/2014 10:29 AM, 425 bytes, A Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin Adds the file button1.png"="4/27/2014 10:29 AM, 1361 bytes, A Adds the file button2.png"="4/27/2014 10:29 AM, 1361 bytes, A Adds the file button3.png"="4/27/2014 10:29 AM, 1361 bytes, A Adds the file button4.png"="4/27/2014 10:29 AM, 1361 bytes, A Adds the file button5.png"="4/27/2014 10:29 AM, 1361 bytes, A Adds the file crossrider_statusbar.png"="4/27/2014 10:29 AM, 1361 bytes, A Adds the file icon128.png"="4/27/2014 10:29 AM, 5524 bytes, A Adds the file icon16.png"="4/27/2014 10:29 AM, 3235 bytes, A Adds the file icon24.png"="4/27/2014 10:29 AM, 3684 bytes, A Adds the file icon48.png"="4/27/2014 10:29 AM, 4124 bytes, A Adds the file panelarrow-up.png"="4/27/2014 10:29 AM, 917 bytes, A Adds the file popup.html"="4/27/2014 10:29 AM, 349 bytes, A Adds the file skin.css"="4/27/2014 10:29 AM, 990 bytes, A Adds the file update.css"="4/27/2014 10:29 AM, 140 bytes, A In the existing folder C:\Windows\System32\Tasks Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-1"="4/27/2014 10:29 AM, 4400 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-2"="4/27/2014 10:29 AM, 4386 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-3"="4/27/2014 10:29 AM, 5798 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-4"="4/27/2014 10:29 AM, 5398 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-5"="4/27/2014 10:29 AM, 4476 bytes, A In the existing folder C:\Windows\Tasks Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-1.job"="4/27/2014 10:29 AM, 1370 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-2.job"="4/27/2014 10:29 AM, 1356 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-3.job"="4/27/2014 10:29 AM, 2768 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-4.job"="4/27/2014 10:29 AM, 2368 bytes, A Adds the file c5a54bcb-302c-46a5-a869-1873420d13d1-5.job"="4/27/2014 10:29 AM, 1446 bytes, A Registry details ------------------------------------------ [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}] "(Default)"="REG_SZ", "HQVid1.9h" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\Implemented Categories] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}] "(Default)"="REG_SZ", "" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\HQVid1.9h\HQVid1.9h-bho.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\ProgID] "(Default)"="REG_SZ", "CrossriderApp0053172.BHO.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544314472}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511311172}\VersionIndependentProgID] "(Default)"="REG_SZ", "CrossriderApp0053172" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}] "(Default)"="REG_SZ", "CrossriderApp0053172.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}\InprocServer32] "(Default)"="REG_SZ", "C:\Program Files\HQVid1.9h\HQVid1.9h-bho.dll" "ThreadingModel"="REG_SZ", "Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}\ProgID] "(Default)"="REG_SZ", "CrossriderApp0053172.Sandbox.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}\Programmable] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544314472}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522312272}\VersionIndependentProgID] "(Default)"="REG_SZ", "CrossriderApp0053172.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.BHO] "(Default)"="REG_SZ", "CrossriderApp0053172" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.BHO\CLSID] "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511311172}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.BHO\CurVer] "(Default)"="REG_SZ", "CrossriderApp0053172" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.BHO.1] "(Default)"="REG_SZ", "CrossriderApp0053172" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.BHO.1\CLSID] "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511311172}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.Sandbox] "(Default)"="REG_SZ", "CrossriderApp0053172.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.Sandbox\CLSID] "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522312272}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.Sandbox\CurVer] "(Default)"="REG_SZ", "CrossriderApp0053172.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.Sandbox.1] "(Default)"="REG_SZ", "CrossriderApp0053172.Sandbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053172.Sandbox.1\CLSID] "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522312272}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}] "(Default)"="REG_SZ", "ICrossriderBHO" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555315572}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544314472}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}] "(Default)"="REG_SZ", "ISandBox" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}\ProxyStubClsid] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}\ProxyStubClsid32] "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566316672}\TypeLib] "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544314472}" "Version"="REG_SZ", "1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544314472}\1.0] "(Default)"="REG_SZ", "CrossriderApp0053172 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544314472}\1.0\0\win32] "(Default)"="REG_SZ", "C:\Program Files\HQVid1.9h\HQVid1.9h-bho.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544314472}\1.0\FLAGS] "(Default)"="REG_SZ", "0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544314472}\1.0\HELPDIR] "(Default)"="REG_SZ", "C:\Program Files\HQVid1.9h" [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\Chrome] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\Chrome-Profiles] "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\ErrorLists-crchromeinstaller] "post_for_sign_Invalid HTTP(S) status code"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\Firefox] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\Firefox\Profiles] "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\IE] "TotalProfiles"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\IE\Profiles] "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\HQVid1.9h\Installer] "BundledChrome"="REG_DWORD", 1 "BundledFirefox"="REG_DWORD", 1 "BundledIe"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\27058] "53172"="REG_SZ", "HQVid1.9h" [HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\27058\Status] "Installed"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511311172}] "(Default)"="REG_SZ", "CrossriderApp0053172" "NoExplorer"="REG_DWORD", 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID] "{11111111-1111-1111-1111-110511311172}"="REG_SZ", "1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HQVid1.9h] "CrAppId"="REG_SZ", "53172" "CrPublisherId"="REG_SZ", "27058" "DisplayIcon"="REG_SZ", "C:\Program Files\HQVid1.9h\utils.exe" "DisplayName"="REG_SZ", "HQVid1.9h" "DisplayVersion"="REG_SZ", "1.34.3.28" "Publisher"="REG_SZ", "High-QualityV8" "UninstallString"="REG_SZ", "C:\Program Files\HQVid1.9h\Uninstall.exe /fromcontrolpanel=1" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider] "Bic"="REG_SZ", "B46426E8ED9045A49B18CB205A374644IE" "Verifier"="REG_SZ", "da4227c015f3ab57734ee55225f4c554" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onBeforeNavigate] "53172"="REG_SZ", "" [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider\onRequest] "53172"="REG_SZ", "" [HKEY_CURRENT_USER\Software\AppDataLow\Software\HQVid1.9h] "ActiveAppId"="REG_SZ", "53172" "BhoRunningVersion"="REG_SZ", "153" "IsBhoEnabled"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\AppDataLow\Software\HQVid1.9h\Background] "__onDocumentStart_script__"="REG_SZ", "{javascript rempved, full log available on request}" [HKEY_CURRENT_USER\Software\AppDataLow\Software\HQVid1.9h\Update] "LastCheck"="REG_DWORD", 1398587377 [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\27058] "53172"="REG_SZ", "HQVid1.9h" [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\27058\Status] "Installed"="REG_DWORD", 1 [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\High-QualityV8] "53172"="REG_SZ", "HQVid1.9h"Malwarebytes Anti-Malware log:
Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 4/27/2014 Scan Time: 10:43:03 AM Logfile: mbamHQVid19h.txt Administrator: Yes Version: 2.00.1.1004 Malware Database: v2014.04.27.02 Rootkit Database: v2014.03.27.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Chameleon: Disabled OS: Windows 7 Service Pack 1 CPU: x86 File System: NTFS User: Malwarebytes Scan Type: Threat Scan Result: Completed Objects Scanned: 213693 Time Elapsed: 7 min, 17 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Shuriken: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 20 PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511311172}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544314472}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555315572}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566316672}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053172.BHO.1, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511311172}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053172.BHO, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511311172}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511311172}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522312272}, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053172.Sandbox.1, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053172.Sandbox, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511311172}\INPROCSERVER32, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.HQVid.A, HKLM\SOFTWARE\HQVid1.9h, Quarantined, [71dd1c134338b680fddf511f639fb44c], PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27058, Quarantined, [be90f837671468ce47705028b84acb35], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [60ee34fb80fb3204a7b68030b84b827e], PUP.Optional.HQVid.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HQVid1.9h, Quarantined, [0747220dfc7f38fe5981fd737a88d828], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27058, Quarantined, [8ec05ad56c0f72c4f0c8463215edb050], PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\High-QualityV8, Quarantined, [ce80bd729ddeca6c7005e98b14ee5ba5], PUP.Optional.HQVid.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HQVid1.9h, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 27 PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\userCode, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons\actions, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\popupResource, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_deghekbbihbapplmbffglehkdhkeibbm_0, Quarantined, [9ab45fd00972e353bb4d91dab1517987], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deghekbbihbapplmbffglehkdhkeibbm, Quarantined, [7cd21a15215a072fa1742348986a18e8], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], Files: 215 PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\HQVid1.9h-bho.dll, Quarantined, [4b0356d91665f4424d21c7aa17ea4db3], PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\HQVid1.9h.exe, Quarantined, [67e7b87773083bfb38dda799639de917], PUP.Optional.CrossRider.A, C:\Windows\Tasks\c5a54bcb-302c-46a5-a869-1873420d13d1-1.job, Quarantined, [8fbf32fdf487f34351e027508280fa06], PUP.Optional.CrossRider.A, C:\Windows\Tasks\c5a54bcb-302c-46a5-a869-1873420d13d1-2.job, Quarantined, [83cba18e661577bf52df03744eb49e62], PUP.Optional.CrossRider.A, C:\Windows\Tasks\c5a54bcb-302c-46a5-a869-1873420d13d1-3.job, Quarantined, [af9fef403843979f2110393ee61cdf21], PUP.Optional.CrossRider.A, C:\Windows\Tasks\c5a54bcb-302c-46a5-a869-1873420d13d1-4.job, Quarantined, [3e1073bcaad153e3e74a5a1d0200a858], PUP.Optional.CrossRider.A, C:\Windows\Tasks\c5a54bcb-302c-46a5-a869-1873420d13d1-5.job, Quarantined, [d7775ad53d3e76c0f041a1d652b0946c], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_deghekbbihbapplmbffglehkdhkeibbm_0.localstorage, Quarantined, [ba943ef1bdbe88ae5bec6f08d32fad53], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_deghekbbihbapplmbffglehkdhkeibbm_0.localstorage-journal, Quarantined, [de70bd725e1d4bebd6714d2a34ce25db], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome.manifest, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\install.rdf, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\background.html, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\baseObject.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\browser.xul, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\dialog.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\main.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\options.xul, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\platformVersion.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\search_dialog.xul, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\asyncDB.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\background.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\browserAction.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\contextMenu.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dbManager.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\dom_bg.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\fileManager.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefox.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxNotifications.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\message.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\pageAction.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\request.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\tabs.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\webRequest.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\console.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\consts.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\delegate.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\extensionDataStore.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\folderIOWrapper.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\httpObserver.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\IDBWrapper.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\installer.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\logFile.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\prefs.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\progressListenerObserver.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\registry.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reloadObserver.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\reports.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\requestObject.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\searchSettings.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\uninstallObserver.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\updateManager.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\utils.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\chrome\content\core\xhr.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\defaults\preferences\prefs.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\manifest.xml, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins.json, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\195.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\1.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\102.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\103.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\104.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\119.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\123.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\13.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\14.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\155.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\16.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\17.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\177.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\178.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\179.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\180.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\182.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\183.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\184.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\190.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\191.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\207.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\21.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\22.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\220.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\221.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\223.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\231.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\232.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\242.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\246.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\257.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\28.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\4.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\47.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\64.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\7.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\72.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\78.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\9.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\91.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\93.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\plugins\98.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode\background.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\extensionData\userCode\extension.js, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\locale\en-US\translations.dtd, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button1.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button2.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button3.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button4.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\button5.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\crossrider_statusbar.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon128.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon16.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon24.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\icon48.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\panelarrow-up.png, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\popup.html, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\skin.css, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com\skin\update.css, Quarantined, [7cd2e44b7308fc3a3bf0d891fd05d729], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\background.html, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\chromeCoreFilesIndex.txt, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\crossriderManifest.json, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\manifest.json, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\popup.html, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\manifest.xml, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins.json, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\1.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\102.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\103.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\104.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\119.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\13.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\14.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\17.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\177.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\179.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\180.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\182.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\183.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\19.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\191.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\207.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\21.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\22.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\223.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\231.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\232.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\242.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\246.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\28.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\4.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\47.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\64.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\72.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\78.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\80.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\91.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\93.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\plugins\97.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\userCode\background.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\extensionData\userCode\extension.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons\icon128.png, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons\icon16.png, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons\icon48.png, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\icons\actions\1.png, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\background.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\main.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\platformVersion.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api\chrome.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api\cookie.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api\message.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api\monitor.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api\pageAction.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\api\pageActionBG.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\app_api.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\bg_app_api.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\consts.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\cookie_store.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\crossriderAPI.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\delegate.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\events.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\extensionDataStore.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\installer.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\logFile.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\logging.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\onBGDocumentLoad.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\reports.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\storageWrapper.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\updateManager.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\util.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\xhr.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\popupResource\newPopup.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\deghekbbihbapplmbffglehkdhkeibbm\1.26.34_0\js\lib\popupResource\popup.js, Quarantined, [410d9996512a43f39b2b4b1ea55d2bd5], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_deghekbbihbapplmbffglehkdhkeibbm_0\1, Quarantined, [9ab45fd00972e353bb4d91dab1517987], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deghekbbihbapplmbffglehkdhkeibbm\000003.log, Quarantined, [7cd21a15215a072fa1742348986a18e8], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deghekbbihbapplmbffglehkdhkeibbm\CURRENT, Quarantined, [7cd21a15215a072fa1742348986a18e8], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deghekbbihbapplmbffglehkdhkeibbm\LOCK, Quarantined, [7cd21a15215a072fa1742348986a18e8], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deghekbbihbapplmbffglehkdhkeibbm\LOG, Quarantined, [7cd21a15215a072fa1742348986a18e8], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\deghekbbihbapplmbffglehkdhkeibbm\MANIFEST-000002, Quarantined, [7cd21a15215a072fa1742348986a18e8], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\53172.crx, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\53172.xpi, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\background.html, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\c5a54bcb-302c-46a5-a869-1873420d13d1-2.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\c5a54bcb-302c-46a5-a869-1873420d13d1-3.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\c5a54bcb-302c-46a5-a869-1873420d13d1-4.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\c5a54bcb-302c-46a5-a869-1873420d13d1-5.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\HQVid1.9h-bg.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\HQVid1.9h-codedownloader.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\HQVid1.9h.ico, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\Uninstall.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.HQVid.A, C:\Program Files\HQVid1.9h\utils.exe, Quarantined, [65e96ec1c0bb4ee85de909672bd7e21e], PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "145a251b5e4d07a4ed413173af84a5d4");), Replaced,[53fb6dc22a516cca2b3ab7a5da2ae61a] Physical Sectors: 0 (No malicious items detected) (end)As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):
- Dynamically Blocks Malware Sites & Servers
- Malware Execution Prevention