Removal instructions for Amazon Mini Saver

Content is republished with permission from Malwarebytes.

What is Amazon Mini Saver?

The Malwarebytes research team has determined that Amazon Mini Saver is a browser hijacker. These so-called "hijackers" alter your startpage or searchscopes so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Amazon Mini Saver?

You may see these browser extensions/add-ons:

and this icon in your browsers too/menu bar:

and this entry in your list of installed programs:

How did Amazon Mini Saver get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Amazon Mini Saver?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.

Double-click mbam-setup-version.exe and follow the prompts to install the program.

At the end, be sure a check-mark is placed next to the following:

Enable free trial of Malwarebytes Anti-Malware Premium

Launch Malwarebytes Anti-Malware

Then click Finish.

If an update is found, you will be prompted to download and install the latest version.

Once the program has loaded, select Scan now.

When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.

Reboot your computer if prompted.

Is there anything else I need to do to get rid of Amazon Mini Saver?

No, Malwarebytes' Anti-Malware removes Amazon Mini Saver completely.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Amazon Mini Saver hijacker. It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Signs in a HijackThis log:

O2 - BHO: CrossriderApp0054491 - {11111111-1111-1111-1111-110511441191} - C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll

Alterations made by the installer:

File system details  
---------------------------------------------
Adds the folder C:\Program Files\Amazon Mini Saver
  Adds the file 1293297481.mxaddon"="5/22/2014 2:40 PM, 38693 bytes, A
  Adds the file 360-54491.crx"="5/31/2014 10:14 AM, 274126 bytes, A
  Adds the file 54491.crx"="5/31/2014 10:14 AM, 272935 bytes, A
  Adds the file 54491.xpi"="5/31/2014 10:14 AM, 461864 bytes, A
  Adds the file Amazon Mini Saver.ico"="5/27/2014 12:40 PM, 9662 bytes, A
  Adds the file Amazon Mini Saver-bg.exe"="5/31/2014 10:14 AM, 641024 bytes, A
  Adds the file Amazon Mini Saver-bho.dll"="5/31/2014 10:14 AM, 571904 bytes, A
  Adds the file Amazon Mini Saver-buttonutil.dll"="5/31/2014 10:14 AM, 388096 bytes, A
  Adds the file Amazon Mini Saver-buttonutil.exe"="5/31/2014 10:14 AM, 273408 bytes, A
  Adds the file Amazon Mini Saver-codedownloader.exe"="5/31/2014 10:14 AM, 505856 bytes, A
  Adds the file Amazon Mini Saver-nova.dll"="5/31/2014 10:14 AM, 117248 bytes, A
  Adds the file Amazon Mini Saver-nova.exe"="5/31/2014 10:14 AM, 588288 bytes, A
  Adds the file Amazon Mini Saver-novainstaller.exe"="5/31/2014 10:14 AM, 505856 bytes, A
  Adds the file background.html"="5/27/2014 12:40 PM, 729 bytes, A
  Adds the file bgNova.html"="5/27/2014 12:40 PM, 729 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-2.exe"="5/31/2014 10:14 AM, 359936 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-3.exe"="5/31/2014 10:14 AM, 1893888 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-4.exe"="5/31/2014 10:14 AM, 834048 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-5.exe"="5/31/2014 10:15 AM, 455680 bytes, A
  Adds the file Uninstall.exe"="5/31/2014 10:14 AM, 79360 bytes, A
  Adds the file utils.exe"="5/31/2014 10:14 AM, 2236503 bytes, A
Adds the folder C:\Users\{username}\AppData\LocalLow\Amazon Mini Saver
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com
  Adds the file chrome.manifest"="5/31/2014 10:14 AM, 732 bytes, A
  Adds the file install.rdf"="5/31/2014 10:14 AM, 1359 bytes, A
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults\preferences
  Adds the file prefs.js"="5/31/2014 10:14 AM, 3992 bytes, A
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData
  Adds the file manifest.xml"="5/31/2014 10:14 AM, 1721 bytes, A
  Adds the file plugins.json"="5/31/2014 10:14 AM, 8862 bytes, A
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale\en-US
  Adds the file translations.dtd"="5/31/2014 10:14 AM, 425 bytes, A
Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e[email protected]\skin
In the existing folder C:\Windows\System32\Tasks
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-1"="5/31/2014 10:14 AM, 4460 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-2"="5/31/2014 10:14 AM, 4416 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-3"="5/31/2014 10:14 AM, 6834 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-4"="5/31/2014 10:14 AM, 5300 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-5"="5/31/2014 10:15 AM, 4534 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-6"="5/31/2014 10:14 AM, 4464 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-7"="5/31/2014 10:14 AM, 4400 bytes, A
In the existing folder C:\Windows\Tasks
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-1.job"="5/31/2014 10:14 AM, 1430 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-2.job"="5/31/2014 10:14 AM, 1386 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-3.job"="5/31/2014 10:14 AM, 3804 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-4.job"="5/31/2014 10:14 AM, 2270 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-5.job"="5/31/2014 10:15 AM, 1504 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-6.job"="5/31/2014 10:14 AM, 1434 bytes, A
  Adds the file db516d24-2066-4307-b472-15a4876ffaab-7.job"="5/31/2014 10:14 AM, 1372 bytes, A
 
Registry details  
------------------------------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver]
  "ActiveAppId"="REG_SZ", "54491"
  "Amazon Mini Saver-ver"="REG_BINARY, (zero length data)
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Code]
  "AppJavaScript"="REG_SZ", ""
  "BgJavaScript"="REG_SZ", " { javascript removed, full log available on request }"
  "NewTabJavaScript"="REG_SZ", ""
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Firefox]
  "TotalProfiles"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Firefox\Profiles]
  "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\IE]
  "TotalProfiles"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\IE\Profiles]
  "S-1-5-21-4016700205-1717049133-1125222536-1001"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Installer]
  "Bic"="REG_SZ", "AA928F983D2D45488862B891D1BB5FE6IE"
  "BundledChrome"="REG_DWORD", 1
  "BundledFirefox"="REG_DWORD", 1
  "BundledIe"="REG_DWORD", 1
  "BundledNova"="REG_DWORD", 1
  "CodeDownloadDomain"="REG_SZ", "http://js.clientstatsservice.com"
  "DefaultBrowser"="REG_SZ", "ie"
  "ErrorsDomain"="REG_SZ", "http://errors.clientstatsservice.com"
  "FullVersion"="REG_SZ", "1.34.5.22"
  "FullVersionForUrl"="REG_SZ", "1_34_05_22"
  "OsName"="REG_SZ", "7"
  "Params"="REG_SZ", "{   "source_id" : "001373",   "sub_id" : "0",   "uzid" : "0"}"
  "SrcId"="REG_SZ", "001373"
  "StatsDomain"="REG_SZ", "http://stats.clientstatsservice.com"
  "SubId"="REG_SZ", "0"
  "Time"="REG_SZ", "1401524082"
  "Verifier"="REG_SZ", "ed67a200d9d9d74a84cd1f1098ab03be"
  "ZData"="REG_SZ", "0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Manifest]
  "AddressbarURL"="REG_SZ", "NA"
  "BgVersion"="REG_SZ", "1"
  "ChangePrevious"="REG_SZ", "false"
  "Description"="REG_SZ", "Browse Amazons products and save money"
  "DisableIe"="REG_SZ", "true"
  "EnableSearchIE"="REG_SZ", "false"
  "HomePageUrl"="REG_SZ", "NA"
  "IsButtonEnabled"="REG_SZ", "true"
  "Manifest"="REG_SZ", "NA"
  "ModeType"="REG_SZ", "production"
  "Name"="REG_SZ", "Amazon Mini Saver"
  "PluginsManifestVersion"="REG_SZ", "14"
  "PublisherId"="REG_SZ", "25286"
  "PublisherName"="REG_SZ", "Nero"
  "RunInFrame"="REG_SZ", "true"
  "SetNewTab"="REG_SZ", "false"
  "ThanksUrl"="REG_SZ", "NA"
  "UninstallerOfferAction"="REG_SZ", "NA"
  "UninstallerOfferUrl"="REG_SZ", "NA"
  "UpdateInterval"="REG_DWORD", 360
  "Version"="REG_SZ", "17"
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Plugins]
  "AppPluginList"="REG_SZ", "246,14,78,4,93,102,155,193,223,263,91"
  "BgPluginList"="REG_SZ", "246,4,14,78,251,249,250,93,102,155,193,223,263,91"
  "BrowserEventPluginList"="REG_SZ", "14"
  "NewTabPluginList"="REG_SZ", "14,78,4"
  "OnRequestPluginList"="REG_SZ", "14"
  "PopupPluginList"="REG_SZ", "4,14,78"
[HKEY_LOCAL_MACHINE\SOFTWARE\Amazon Mini Saver\Update]
  "LastCheck"="REG_DWORD", 1401524093
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}]
  "(Default)"="REG_SZ", "Amazon Mini Saver"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\Implemented Categories]
  "(Default)"="REG_SZ", ""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
  "(Default)"="REG_SZ", ""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\InprocServer32]
  "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll"
  "ThreadingModel"="REG_SZ", "Apartment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\ProgID]
  "(Default)"="REG_SZ", "CrossriderApp0054491.BHO.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\Programmable]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\TypeLib]
  "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511441191}\VersionIndependentProgID]
  "(Default)"="REG_SZ", "CrossriderApp0054491"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}]
  "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\InprocServer32]
  "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll"
  "ThreadingModel"="REG_SZ", "Apartment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\ProgID]
  "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\Programmable]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\TypeLib]
  "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522442291}\VersionIndependentProgID]
  "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO]
  "(Default)"="REG_SZ", "CrossriderApp0054491"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO\CLSID]
  "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511441191}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO\CurVer]
  "(Default)"="REG_SZ", "CrossriderApp0054491"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO.1]
  "(Default)"="REG_SZ", "CrossriderApp0054491"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.BHO.1\CLSID]
  "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110511441191}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox]
  "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox\CLSID]
  "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522442291}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox\CurVer]
  "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox.1]
  "(Default)"="REG_SZ", "CrossriderApp0054491.Sandbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0054491.Sandbox.1\CLSID]
  "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220522442291}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}]
  "(Default)"="REG_SZ", "ICrossriderBHO"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}\ProxyStubClsid]
  "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}\ProxyStubClsid32]
  "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555445591}\TypeLib]
  "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"
  "Version"="REG_SZ", "1.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}]
  "(Default)"="REG_SZ", "ISandBox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}\ProxyStubClsid]
  "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}\ProxyStubClsid32]
  "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566446691}\TypeLib]
  "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440544444491}"
  "Version"="REG_SZ", "1.0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0]
  "(Default)"="REG_SZ", "CrossriderApp0054491 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0\0\win32]
  "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0\FLAGS]
  "(Default)"="REG_SZ", "0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544444491}\1.0\HELPDIR]
  "(Default)"="REG_SZ", "C:\Program Files\Amazon Mini Saver"
[HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286]
  "54491"="REG_SZ", "Amazon Mini Saver"
[HKEY_LOCAL_MACHINE\SOFTWARE\InstalledBrowserExtensions\25286\Status]
  "Installed"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511441191}]
  "(Default)"="REG_SZ", "CrossriderApp0054491"
  "NoExplorer"="REG_DWORD", 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
  "{11111111-1111-1111-1111-110511441191}"="REG_SZ", "1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Amazon Mini Saver]
  "CrAppId"="REG_SZ", "54491"
  "CrPublisherId"="REG_SZ", "25286"
  "DisplayIcon"="REG_SZ", "C:\Program Files\Amazon Mini Saver\utils.exe"
  "DisplayName"="REG_SZ", "Amazon Mini Saver"
  "DisplayVersion"="REG_SZ", "1.34.5.22"
  "Publisher"="REG_SZ", "Nero"
  "UninstallString"="REG_SZ", "C:\Program Files\Amazon Mini Saver\Uninstall.exe /fcp=1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures
  "db516d24-2066-4307-b472-15a4876ffaab-1.job"="REG_BINARY, ................................
  "db516d24-2066-4307-b472-15a4876ffaab-1.job.fp"="REG_DWORD", 729416091
  "db516d24-2066-4307-b472-15a4876ffaab-2.job"="REG_BINARY, ................................
  "db516d24-2066-4307-b472-15a4876ffaab-2.job.fp"="REG_DWORD", -1429918120
  "db516d24-2066-4307-b472-15a4876ffaab-3.job"="REG_BINARY, ................................
  "db516d24-2066-4307-b472-15a4876ffaab-3.job.fp"="REG_DWORD", -352828336
  "db516d24-2066-4307-b472-15a4876ffaab-4.job"="REG_BINARY, ................................
  "db516d24-2066-4307-b472-15a4876ffaab-4.job.fp"="REG_DWORD", 649531374
  "db516d24-2066-4307-b472-15a4876ffaab-5.job"="REG_BINARY, ................................
  "db516d24-2066-4307-b472-15a4876ffaab-5.job.fp"="REG_DWORD", -55435605
  "db516d24-2066-4307-b472-15a4876ffaab-6.job"="REG_BINARY, ................................
  "db516d24-2066-4307-b472-15a4876ffaab-6.job.fp"="REG_DWORD", -1262949490
  "db516d24-2066-4307-b472-15a4876ffaab-7.job"="REG_BINARY, ................................
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver]
  "ActiveAppId"="REG_SZ", "54491"
  "BhoRunningVersion"="REG_SZ", "153"
  "IsBhoEnabled"="REG_DWORD", 1
  "LastSetSearch"="REG_DWORD", 1401524292
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\background]
  "__onDocumentStart_script__"="REG_SZ", ""
  "__onDocumentStart_script_store__"="REG_SZ", ""
  "IsEnabled"="REG_DWORD", 1
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\Code]
  "AppJavaScript"="REG_SZ", ""
  "BgJavaScript"="REG_SZ", ""
  "NewTabJavaScript"="REG_SZ", ""
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\Installer]
  "CodeDownloadDomain"="REG_SZ", "http://js.clientstatsservice.com"
  "DefaultBrowser"="REG_SZ", "ie"
  "ErrorsDomain"="REG_SZ", "http://errors.clientstatsservice.com"
  "FullVersion"="REG_SZ", "1.34.5.22"
  "FullVersionForUrl"="REG_SZ", "1_34_05_22"
  "OsName"="REG_SZ", "7"
  "Params"="REG_SZ", "{   "source_id" : "001373",   "sub_id" : "0",   "uzid" : "0"}"
  "SetSearch"="REG_SZ", "false"
  "SrcId"="REG_SZ", "001373"
  "StatsDomain"="REG_SZ", "http://stats.clientstatsservice.com"
  "SubId"="REG_SZ", "0"
  "Time"="REG_SZ", "1401524082"
  "ZData"="REG_SZ", "0"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\Amazon Mini Saver\Log]
  "amazon mini saver-buttonutil"="REG_DWORD", 0

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org
 
Scan Date: 5/31/2014
Scan Time: 10:28:03 AM
Logfile: mbamAmazonMiniSaver.txt
Administrator: Yes
 
Version: 2.00.2.1012
Malware Database: v2014.05.31.02
Rootkit Database: v2014.05.21.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
 
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: Malwarebytes
 
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 225493
Time Elapsed: 2 min, 54 sec
 
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
 
Processes: 0
(No malicious items detected)
 
Modules: 0
(No malicious items detected)
 
Registry Keys: 20
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440544444491}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550555445591}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660566446691}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.BHO.1, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.BHO, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110511441191}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220522442291}, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.Sandbox.1, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0054491.Sandbox, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110511441191}\INPROCSERVER32, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\Amazon Mini Saver, Quarantined, [e8064c0beb90b581ce0f177627db3dc3],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [8866aaad93e87db90476643b738f6c94],
PUP.Optional.AmazonMini.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Amazon Mini Saver, Quarantined, [e00e0f483c3fcc6aaa35b1dc58aa7a86],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [3eb060f74d2ea6904d43ae28a06351af],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\25286, Quarantined, [9d5186d14c2f6fc784f7366908fab14f],
PUP.Optional.CrossRider.A, HKU\S-1-5-21-4016700205-1717049133-1125222536-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Nero, Quarantined, [ffef4d0aaccf261097b70bcf818212ee],
PUP.Optional.AmazonMini.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Amazon Mini Saver, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
 
Registry Values: 0
(No malicious items detected)
 
Registry Data: 0
(No malicious items detected)
 
Folders: 14
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults\preferences, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305[email protected]\extensionData\plugins, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale\en-US, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
 
Files: 132
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bho.dll, Quarantined, [a14d55026b1020162fbe4f0f7b86c040],
PUP.Optional.CrossRider.A, C:\Users\{username}\Desktop\Amazon Mini Saver.exe, Quarantined, [7579f562cdaebd795b1a34129b6532ce],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-1.job, Quarantined, [717da9aee59688aefcff2776bc4627d9],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-2.job, Quarantined, [ec020d4a6e0d2a0cd5260b922fd3669a],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-3.job, Quarantined, [e7077cdb83f8eb4b9665dfbee61c9e62],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-4.job, Quarantined, [40ae7bdcd0ab32045aa14f4e58aa9c64],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-5.job, Quarantined, [7f6ff265b9c2d165db20debf3fc35fa1],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-6.job, Quarantined, [f6f83c1b5f1ca98d1ae16e2f40c2649c],
PUP.Optional.CrossRider.A, C:\Windows\Tasks\db516d24-2066-4307-b472-15a4876ffaab-7.job, Quarantined, [d915ed6a097243f38b700796c04248b8],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome.manifest, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\install.rdf, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\30007ff9ba1003bb03634d9aab1dca8f.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\70a5e7bef78b21ff4043fda1646c1011.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\background.html, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\browser.xul, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\deebd130b09ca7f6e3eaa72d20c47dd8.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\dialog.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\f1ecaad9e2efcf795f2e525d9194acb5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\f71cb8549e296d7eee45e88e4350d0b6.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\options.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\options.xul, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\search_dialog.xul, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\0df3eaf9cb71ded809c21dcaf2598ec5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\21ca3787d5a57cade52b0a25b13787fe.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\2f402570cbf2c6478afa472870ce5428.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\30ca242fd0e92463a9d0ddc05b81cc29.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\31fe48a21a6d41d69aab54cdd8c2c672.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\38a09ab38b78be5b20a6fd81addcbe45.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\4b5a6b996af49d9118ef5aaa235b26bb.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\4cb07f33fef68cf9e035a8b3ff43e2d5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\754c8a420613094ec21e49c709da472e.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\7ccd8009d35ec3a3f5f608b961623fa9.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\8000a40b27b02efda39a5ce59f6a2d71.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\94f29b1eda2efeac347ffea44c449b78.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\9eded3e1d9e1b0ae9d7f5ff751ce6e70.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\abf93e2e92042b236b7721c22bab9be5.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\d8bc5f546a8c784fdc68dbc90cc7934d.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\api\e3b9a71f468a6c643c5854d3b7a91156.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\7d2fe98ec74beb3fb5a7f01860ede7bf.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\00817a92a304a1e51c003b21781b71fd.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\14ec6c2555bdd234c13cfb794898e805.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\30ecf4b18bbe9ae6485b4d95d8f5f668.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\491aff33dc804f0fc832c07896f54985.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\4b99f768323686114dc471a20b1263d8.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\4eb231d4de169602f4c030c58117bd84.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\72dd5c65151ac0d23dff6c8123b80375.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\7619ccece3ca48a870340a6c2c527375.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\7c37a41e98093d5e549e10cb1d403595.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\8976f2fc1fc298d9bd10f9f614a3eb82.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\8b29d36b5f10e0d83bd1d7fe5857eb23.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\933e20d7ca6365de51e81d19a5932008.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\a864846e6787b6e62e0b58f9d0f52176.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\bbdd52c2b54fa9d9ac44919d29e32291.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\c55395ee8dd10055995f7fa25c684737.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\d12c5bb1348d72d8d929850089d65c9f.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\ec04dee27d6bc97b5f21e71912d94c38.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\ee1cf7dee15c8288c8721a19016087b4.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\f5f88d5205ec989cc6c3f568cc9c25a7.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\chrome\content\core\installer.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\defaults\preferences\prefs.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\manifest.xml, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins.json, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\1.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\102.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\104.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\13.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\14.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\155.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\16.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\17.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\177.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\182.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\183.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\193.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\207.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\21.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\22.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\220.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\221.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\223.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\246.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\263.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\28.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\4.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\47.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\64.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\7.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\72.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\78.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\9.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\91.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\93.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\plugins\98.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode\background.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\extensionData\userCode\extension.js, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\locale\en-US\translations.dtd, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button1.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button2.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button3.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button4.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\button5.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\crossrider_statusbar.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon128.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon16.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon24.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\icon48.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\panelarrow-up.png, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\popup.html, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\skin.css, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\extensions\e5ee2b2c-8305-45e7-8327-7e8d2f95c44d@72e95ca9-af64-494a-aba2-56feb04f1c1d.com\skin\update.css, Quarantined, [ad41e37480fb2016643197e8b54d9868],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\1293297481.mxaddon, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\360-54491.crx, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\54491.crx, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\54491.xpi, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-bg.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-buttonutil.dll, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-buttonutil.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-codedownloader.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-nova.dll, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-nova.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver-novainstaller.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Amazon Mini Saver.ico, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\background.html, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\bgNova.html, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-2.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-3.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-4.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\db516d24-2066-4307-b472-15a4876ffaab-5.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\Uninstall.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.AmazonMini.A, C:\Program Files\Amazon Mini Saver\utils.exe, Quarantined, [47a71740a8d3e2544011325b8a7813ed],
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\6qeoodjs.default-1401006518835\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "146515d3569bb0cf9a8998adbdfe3106");), Replaced,[27c77bdce7946ec87b58206b84803fc1]
 
Physical Sectors: 0
(No malicious items detected)
 
 
(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers

Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 31 May 2014 - 04:12 AM

Advertisements

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us