Removal instructions for HDS-Total

Content is republished with permission from Malwarebytes.

What is HDS-Total?

The Malwarebytes research team has determined that HDS-Total is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by HDS-Total?

You may see these browser extensions/add-ons:

and this entry in your list of installed programs:

How did HDS-Total get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was offered as a video enhancing browser extension.

How do I remove HDS-Total?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-version.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan now.
When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
Reboot your computer if prompted.

Is there anything else I need to do to get rid of HDS-Total?

The Chrome extension can now safely be removed. Open "Settings" > "Extensions" and click the bin behind the HDS-Total listing. Then confirm removal.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the HDS-Total hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0053360 - {11111111-1111-1111-1111-110511331160} - C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-bho.dll

Alterations made by the installer:

File system details  
---------------------------------------------
    Adds the folder C:\Program Files\HDS-Total-1.8
       Adds the file 1293297481.mxaddon"="5/8/2014 2:19 PM, 37690 bytes, A
       Adds the file 360-53360.crx"="5/16/2014 11:09 AM, 308480 bytes, A
       Adds the file 53360.crx"="5/16/2014 11:09 AM, 307294 bytes, A
       Adds the file 53360.xpi"="5/16/2014 11:09 AM, 509334 bytes, A
       Adds the file background.html"="5/8/2014 7:28 PM, 729 bytes, A
       Adds the file bgNova.html"="5/8/2014 7:28 PM, 729 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-2.exe"="5/16/2014 11:09 AM, 334336 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-3.exe"="5/16/2014 11:09 AM, 1847808 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-4.exe"="5/16/2014 11:09 AM, 797184 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-5.exe"="5/16/2014 11:09 AM, 278528 bytes, A
       Adds the file HDS-Total-1.8.ico"="5/8/2014 7:28 PM, 9662 bytes, A
       Adds the file HDS-Total-1.8-bg.exe"="5/16/2014 11:09 AM, 513536 bytes, A
       Adds the file HDS-Total-1.8-bho.dll"="5/16/2014 11:09 AM, 495104 bytes, A
       Adds the file HDS-Total-1.8-codedownloader.exe"="5/16/2014 11:09 AM, 477696 bytes, A
       Adds the file HDS-Total-1.8-nova.dll"="5/16/2014 11:09 AM, 114176 bytes, A
       Adds the file HDS-Total-1.8-nova.exe"="5/16/2014 11:09 AM, 555520 bytes, A
       Adds the file HDS-Total-1.8-novainstaller.exe"="5/16/2014 11:09 AM, 477696 bytes, A
       Adds the file Uninstall.exe"="5/16/2014 11:09 AM, 78848 bytes, A
       Adds the file utils.exe"="5/16/2014 11:09 AM, 2187669 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0
       Adds the file background.html"="5/16/2014 11:09 AM, 1705 bytes, A
       Adds the file chromeCoreFilesIndex.txt"="5/16/2014 11:09 AM, 853 bytes, A
       Adds the file crossriderManifest.json"="5/16/2014 11:09 AM, 524 bytes, A
       Adds the file manifest.json"="5/16/2014 11:09 AM, 1235 bytes, A
       Adds the file popup.html"="5/16/2014 11:09 AM, 139 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData
       Adds the file manifest.xml"="5/16/2014 11:09 AM, 1837 bytes, A
       Adds the file plugins.json"="5/16/2014 11:09 AM, 11595 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\userCode
       Adds the file background.js"="5/16/2014 11:09 AM, 358 bytes, A
       Adds the file extension.js"="5/16/2014 11:09 AM, 1 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons
       Adds the file icon128.png"="5/16/2014 11:09 AM, 25984 bytes, A
       Adds the file icon16.png"="5/16/2014 11:09 AM, 12818 bytes, A
       Adds the file icon48.png"="5/16/2014 11:09 AM, 16868 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons\actions
       Adds the file 1.png"="5/16/2014 11:09 AM, 1223 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js
       Adds the file background.js"="5/16/2014 11:09 AM, 35180 bytes, A
       Adds the file main.js"="5/16/2014 11:09 AM, 8491 bytes, A
       Adds the file platformVersion.js"="5/16/2014 11:09 AM, 409 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api
       Adds the file chrome.js"="5/16/2014 11:09 AM, 11499 bytes, A
       Adds the file cookie.js"="5/16/2014 11:09 AM, 11743 bytes, A
       Adds the file message.js"="5/16/2014 11:09 AM, 3346 bytes, A
       Adds the file monitor.js"="5/16/2014 11:09 AM, 2039 bytes, A
       Adds the file pageAction.js"="5/16/2014 11:09 AM, 1737 bytes, A
       Adds the file pageActionBG.js"="5/16/2014 11:09 AM, 2519 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\popupResource
       Adds the file newPopup.js"="5/16/2014 11:09 AM, 40 bytes, A
       Adds the file popup.js"="5/16/2014 11:09 AM, 45 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com
       Adds the file chrome.manifest"="5/16/2014 11:09 AM, 732 bytes, A
       Adds the file install.rdf"="5/16/2014 11:09 AM, 1476 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\defaults\preferences
       Adds the file prefs.js"="5/16/2014 11:09 AM, 3985 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData
       Adds the file manifest.xml"="5/16/2014 11:09 AM, 1834 bytes, A
       Adds the file plugins.json"="5/16/2014 11:09 AM, 11370 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\userCode
       Adds the file background.js"="5/16/2014 11:09 AM, 358 bytes, A
       Adds the file extension.js"="5/16/2014 11:09 AM, 1 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\locale
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\locale\en-US
       Adds the file translations.dtd"="5/16/2014 11:09 AM, 425 bytes, A
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin
       Adds the file button1.png"="5/16/2014 11:09 AM, 1361 bytes, A
       Adds the file button2.png"="5/16/2014 11:09 AM, 1361 bytes, A
       Adds the file button3.png"="5/16/2014 11:09 AM, 1361 bytes, A
       Adds the file button4.png"="5/16/2014 11:09 AM, 1361 bytes, A
       Adds the file button5.png"="5/16/2014 11:09 AM, 1361 bytes, A
       Adds the file crossrider_statusbar.png"="5/16/2014 11:09 AM, 1361 bytes, A
       Adds the file icon128.png"="5/16/2014 11:09 AM, 25984 bytes, A
       Adds the file icon16.png"="5/16/2014 11:09 AM, 12818 bytes, A
       Adds the file icon24.png"="5/16/2014 11:09 AM, 14381 bytes, A
       Adds the file icon48.png"="5/16/2014 11:09 AM, 16868 bytes, A
       Adds the file panelarrow-up.png"="5/16/2014 11:09 AM, 917 bytes, A
       Adds the file popup.html"="5/16/2014 11:09 AM, 349 bytes, A
       Adds the file skin.css"="5/16/2014 11:09 AM, 990 bytes, A
       Adds the file update.css"="5/16/2014 11:09 AM, 140 bytes, A
    In the existing folder C:\Windows\System32\Tasks
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-1"="5/16/2014 11:09 AM, 4426 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-2"="5/16/2014 11:09 AM, 4412 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-3"="5/16/2014 11:09 AM, 6488 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-4"="5/16/2014 11:09 AM, 5426 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-5"="5/16/2014 11:09 AM, 4500 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-6"="5/16/2014 11:09 AM, 4430 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-7"="5/16/2014 11:09 AM, 4360 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-1.job"="5/16/2014 11:09 AM, 1396 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-2.job"="5/16/2014 11:09 AM, 1382 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-3.job"="5/16/2014 11:09 AM, 3458 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-4.job"="5/16/2014 11:09 AM, 2396 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-5.job"="5/16/2014 11:09 AM, 1470 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-6.job"="5/16/2014 11:09 AM, 1400 bytes, A
       Adds the file e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-7.job"="5/16/2014 11:09 AM, 1332 bytes, A

Registry details  
------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}]
       "(Default)"="REG_SZ", "HDS-Total-1.8"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053360.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544334460}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511331160}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053360"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522332260}]
       "(Default)"="REG_SZ", "CrossriderApp0053360.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522332260}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522332260}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053360.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522332260}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522332260}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544334460}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522332260}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0053360.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.BHO
       "(Default)"="REG_SZ", "CrossriderApp0053360"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511331160}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0053360"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0053360"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511331160}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0053360.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522332260}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0053360.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0053360.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0053360.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522332260}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555335560}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555335560}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555335560}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555335560}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544334460}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566336660}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566336660}\ProxyStubClsid]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566336660}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566336660}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544334460}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544334460}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0053360 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544334460}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544334460}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544334460}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files\HDS-Total-1.8"
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDS-Total-1.8]
       "ActiveAppId"="REG_SZ", "53360"
       "HDS-Total-1.8-ver"="REG_BINARY, (zero length data)
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDS-Total-1.8\Chrome]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDS-Total-1.8\Chrome-Profiles]
       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\HDS-Total-1.8\Code]
       "BgJavaScript"="REG_SZ", " {javascript removed, full log available on request} "
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\HDS-Total-1.8\Update]
       "LastCheck"="REG_DWORD", 1400231384
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\27058]
       "53360"="REG_SZ", "HDS-Total-1.8"
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\27058\Status]
       "Installed"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\HQ-V-Pro]
       "53360"="REG_SZ", "HDS-Total-1.8"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511331160}]
       "(Default)"="REG_SZ", "CrossriderApp0053360"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110511331160}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDS-Total-1.8]
       "CrAppId"="REG_SZ", "53360"
       "CrPublisherId"="REG_SZ", "27058"
       "DisplayIcon"="REG_SZ", "C:\Program Files\HDS-Total-1.8\utils.exe"
       "DisplayName"="REG_SZ", "HDS-Total-1.8"
       "DisplayVersion"="REG_SZ", "1.34.5.4"
       "Publisher"="REG_SZ", "HQ-V-Pro"
       "UninstallString"="REG_SZ", "C:\Program Files\HDS-Total-1.8\Uninstall.exe /fcp=1"

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 5/16/2014
Scan Time: 11:20:43 AM
Logfile: mbamHDSTotal.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.05.16.07
Rootkit Database: v2014.03.27.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Chameleon: Disabled

OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 219531
Time Elapsed: 3 min, 46 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 1
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-nova.exe, 3344, Delete-on-Reboot, [a176a6aca5d63105203e6b0ff60b8c74]

Modules: 0
(No malicious items detected)

Registry Keys: 20
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511331160}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544334460}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555335560}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566336660}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053360.BHO.1, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511331160}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053360.BHO, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511331160}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511331160}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522332260}, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053360.Sandbox.1, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0053360.Sandbox, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511331160}\INPROCSERVER32, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\HDS-Total-1.8, Quarantined, [20f7064c1b60d75f3ecff3db0003c838], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27058, Quarantined, [9f786ae887f4f541b0b2d4ba936faa56], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3cdbaca62e4d47ef4c4711b40af9619f], 
PUP.Optional.HDTotal.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\HDS-Total-1.8, Quarantined, [b067cc86ff7c171f4ac5448a20e33fc1], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\27058, Quarantined, [b760d181f586b5819ac96e2031d19f61], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\HQ-V-Pro, Quarantined, [a770b59d1f5c58de4808b8cd25ddab55], 
PUP.Optional.HDTotal.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\HDS-Total-1.8, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 27
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\defaults, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\defaults\preferences, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\userCode, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\locale, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\locale\en-US, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\userCode, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons\actions, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\popupResource, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cgbeihidkikgdcoogkeoeconphggdhop_0, Quarantined, [35e28cc6483358de56670375a45ee21e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cgbeihidkikgdcoogkeoeconphggdhop, Quarantined, [fd1a163ce8934cea7b4fd4a4768c7c84], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 

Files: 229
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-nova.exe, Quarantined, [a176a6aca5d63105203e6b0ff60b8c74], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-bho.dll, Quarantined, [23f45200f28963d3ca9496e4847de41c], 
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\HDS-Total-1.8.exe, Quarantined, [ac6b88ca6813ce6839fe95af4eb27789], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cgbeihidkikgdcoogkeoeconphggdhop_0.localstorage, Quarantined, [9b7c8bc73a41c274f53a7813a85af709], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cgbeihidkikgdcoogkeoeconphggdhop_0.localstorage-journal, Quarantined, [03142d25bac1af87a38c1b7061a151af], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-1.job, Quarantined, [b26584ce572483b37d65bece7191fe02], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-2.job, Quarantined, [a473460cfe7d1c1a22c0becea1611ee2], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-3.job, Quarantined, [46d1ec66d3a8cd69e3ff0785dd2552ae], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-4.job, Quarantined, [799e252d0477f4420ad8d7b516eca45c], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-5.job, Quarantined, [8691c78bbbc05adc25bd6d1f649e659b], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-6.job, Quarantined, [63b4005289f2be787b674d3f47bb01ff], 
PUP.Optional.CrossRider.A, C:\Windows\Tasks\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-7.job, Quarantined, [da3d034fc4b7af870fd35d2f11f109f7], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome.manifest, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\install.rdf, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\background.html, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\baseObject.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\browser.xul, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\dialog.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\main.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\options.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\options.xul, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\platformVersion.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\search_dialog.xul, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\setup.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\asyncDB.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\background.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\browserAction.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\contextMenu.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\dbManager.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\dom_bg.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\fileManager.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\firefox.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\firefoxNotifications.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\message.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\pageAction.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\request.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\tabs.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\webRequest.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\console.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\consts.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\delegate.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\extensionDataStore.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\folderIOWrapper.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\httpObserver.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\IDBWrapper.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\installer.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\logFile.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\prefs.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\progressListenerObserver.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\registry.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\reloadObserver.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\reports.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\requestObject.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\searchSettings.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\uninstallObserver.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\updateManager.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\utils.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\chrome\content\core\xhr.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\defaults\preferences\prefs.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\manifest.xml, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins.json, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\1.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\102.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\103.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\104.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\119.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\123.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\13.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\14.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\155.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\16.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\17.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\177.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\179.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\180.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\182.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\183.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\184.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\190.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\191.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\195.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\207.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\21.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\22.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\220.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\221.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\223.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\231.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\232.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\246.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\28.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\4.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\47.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\64.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\7.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\72.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\78.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\9.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\91.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\93.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\plugins\98.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\userCode\background.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\extensionData\userCode\extension.js, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\locale\en-US\translations.dtd, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\button1.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\button2.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\button3.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\button4.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\button5.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\crossrider_statusbar.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\icon128.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\icon16.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\icon24.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\icon48.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\panelarrow-up.png, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\popup.html, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\skin.css, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\extensions\9ee595b4-f5ec-4afb-bea5-3c873daf5e4a@9725de39-97db-467b-bf84-04c276190009.com\skin\update.css, Quarantined, [4fc82c267605d660d907a4d10002c33d], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\background.html, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\chromeCoreFilesIndex.txt, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\crossriderManifest.json, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\manifest.json, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\popup.html, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\manifest.xml, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins.json, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\1.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\102.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\103.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\104.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\119.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\123.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\13.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\14.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\155.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\17.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\177.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\179.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\180.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\182.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\183.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\184.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\19.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\190.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\191.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\195.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\207.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\21.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\22.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\220.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\221.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\223.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\231.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\232.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\246.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\28.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\4.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\47.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\64.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\7.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\72.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\78.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\80.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\9.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\91.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\93.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\plugins\97.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\userCode\background.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\extensionData\userCode\extension.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons\icon128.png, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons\icon16.png, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons\icon48.png, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\icons\actions\1.png, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\background.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\main.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\platformVersion.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api\chrome.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api\cookie.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api\message.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api\monitor.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api\pageAction.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\api\pageActionBG.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\app_api.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\bg_app_api.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\consts.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\cookie_store.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\crossriderAPI.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\delegate.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\events.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\extensionDataStore.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\installer.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\logFile.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\logging.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\onBGDocumentLoad.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\reports.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\storageWrapper.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\updateManager.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\util.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\xhr.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\popupResource\newPopup.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgbeihidkikgdcoogkeoeconphggdhop\1.26.37_0\js\lib\popupResource\popup.js, Quarantined, [3ddad37fccaf26109cd5cbab2cd64bb5], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cgbeihidkikgdcoogkeoeconphggdhop_0\1, Quarantined, [35e28cc6483358de56670375a45ee21e], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cgbeihidkikgdcoogkeoeconphggdhop\000003.log, Quarantined, [fd1a163ce8934cea7b4fd4a4768c7c84], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cgbeihidkikgdcoogkeoeconphggdhop\CURRENT, Quarantined, [fd1a163ce8934cea7b4fd4a4768c7c84], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cgbeihidkikgdcoogkeoeconphggdhop\LOCK, Quarantined, [fd1a163ce8934cea7b4fd4a4768c7c84], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cgbeihidkikgdcoogkeoeconphggdhop\LOG, Quarantined, [fd1a163ce8934cea7b4fd4a4768c7c84], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cgbeihidkikgdcoogkeoeconphggdhop\MANIFEST-000002, Quarantined, [fd1a163ce8934cea7b4fd4a4768c7c84], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-bg.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\1293297481.mxaddon, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\360-53360.crx, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\53360.crx, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\53360.xpi, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\background.html, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\bgNova.html, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-2.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-3.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-4.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\e97c5a39-a5d1-4e45-8fe9-2c5a1b25c4d7-5.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-codedownloader.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-nova.dll, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8-novainstaller.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\HDS-Total-1.8.ico, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\Uninstall.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.HDTotal.A, C:\Program Files\HDS-Total-1.8\utils.exe, Quarantined, [3ed9ada5fa811d195eaa84fb9a6821df], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\joxsq3f5.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14604507887887d0cc30cb3ea65fca6d");), Replaced,[8394341ec3b8da5c87d9472fdb2936ca]

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 16 May 2014 - 03:47 AM

Advertisements

1 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us