Removal instructions for Plus-HD-3.2

Content is republished with permission from Malwarebytes.

What is Plus-HD-3.2?

The Malwarebytes research team has determined that Plus-HD-3.2 is a browser hijacker. These so-called "hijackers" manipulate your browser(s), for example to change your startpage or searchscopes, so that the affected browser visits their site or one of their choice. This one also displays advertisements.

How do I know if my computer is affected by Plus-HD-3.2?

You may see these browser add-ons:

these tasks in your Task Scheduler:

and this entry in your list of installed programs:

How did Plus-HD-3.2 get on my computer?

Browser hijackers use different methods for distributing themselves. This particular one was bundled with other software.

How do I remove Plus-HD-3.2?

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted application.

Please download Malwarebytes Anti-Malware to your desktop.
Double-click mbam-setup-version.exe and follow the prompts to install the program.
At the end, be sure a check-mark is placed next to the following:
- Enable free trial of Malwarebytes Anti-Malware Premium
- Launch Malwarebytes Anti-Malware
Then click Finish.
If an update is found, you will be prompted to download and install the latest version.
Once the program has loaded, select Scan Now. Or select the Threat Scan from the Scan menu.
When the scan is complete, make sure that all Threats are selected, and click Remove Selected.
Restart your computer when prompted to do so.

Is there anything else I need to do to get rid of Plus-HD-3.2?

No, Malwarebytes' Anti-Malware removes Plus-HD-3.2 completely.
This PUP creates some scheduled tasks. You can read here how to check for and, if necessary, remove Scheduled Tasks.

How would the full version of Malwarebytes Anti-Malware help protect me?

We hope our application and this guide have helped you eradicate this hijacker.

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Plus-HD-3.2 hijacker. It would have warned you before the application could install itself, giving you a chance to stop it before it became too late.

Technical details for experts

Possible sign in a HijackThis log:

O2 - BHO: CrossriderApp0034330 - {11111111-1111-1111-1111-110311431130} - C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll

You may see these entries in FRST logs:

 BHO: Plus-HD-3.2 -> {11111111-1111-1111-1111-110311431130} -> C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll [2015-07-24] (Plus HD)
 BHO-x32: Plus-HD-3.2 -> {11111111-1111-1111-1111-110311431130} -> C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll [2015-07-24] (Plus HD)
 FF Extension: Plus-HD-3.2 - C:\Users\Metallica\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\Extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com [2015-07-24]
 CHR Extension: (Plus-HD-3.2) - C:\Users\Metallica\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek [2015-07-24]
 C:\Windows\System32\Tasks\Plus-HD-3.2-updater
 C:\Windows\System32\Tasks\Plus-HD-3.2-codedownloader
 C:\Windows\System32\Tasks\Plus-HD-3.2-enabler
 C:\Windows\Tasks\Plus-HD-3.2-firefoxinstaller.job
 C:\Windows\Tasks\Plus-HD-3.2-chromeinstaller.job
 C:\Windows\Tasks\Plus-HD-3.2-updater.job
 C:\Windows\Tasks\Plus-HD-3.2-codedownloader.job
 C:\Windows\Tasks\Plus-HD-3.2-enabler.job
 C:\Program Files (x86)\Plus-HD-3.2

Plus-HD-3.2 (HKLM-x32\...\Plus-HD-3.2) (Version: 1.33.153.1 - Plus HD) <==== ATTENTION
Task: {3019CBA4-97FD-4BC2-AEB2-11ABC0DB436B} - System32\Tasks\Plus-HD-3.2-enabler => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-enabler.exe [2015-07-24] (Plus HD) <==== ATTENTION
Task: {394BCC2D-159A-4843-840C-1593057E5674} - System32\Tasks\Plus-HD-3.2-firefoxinstaller => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-firefoxinstaller.exe [2015-07-24] (Plus HD) <==== ATTENTION
Task: {7763643F-3D00-4A74-AB66-6933F44642BC} - System32\Tasks\Plus-HD-3.2-codedownloader => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-codedownloader.exe [2015-07-24] (Plus HD) <==== ATTENTION
Task: {9C53C9CB-C5D8-4356-A1DE-9D4C9E299DF8} - System32\Tasks\Plus-HD-3.2-chromeinstaller => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-chromeinstaller.exe [2015-07-24] (Plus HD) <==== ATTENTION
Task: {D949640E-821E-4AD6-B7C7-F0D8C780626B} - System32\Tasks\Plus-HD-3.2-updater => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-updater.exe [2015-07-24] (Plus HD) <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.2-chromeinstaller.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-chromeinstaller.exe?/installcrx /agentregpath='Plus-HD-3.2' /extensionfilepath C:\Program Files (x86)\Plus-HD-3.2\34330.crx' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installerfullversion=1.33.153.1 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.2-codedownloader.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-codedownloader.exeU/reinstallapp /runfrom=task /agentregpath='Plus-HD-3.2' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installerfullversion=1.33.153.1 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /codedownloaddomain=http:/app-static.crossrider.com <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.2-enabler.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-enabler.exeO/enablebho /agentregpath='Plus-HD-3.2' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.2-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-firefoxinstaller.exe;/installxpi /agentregpath='Plus-HD-3.2' /extensionfilepath C:\Program Files (x86)\Plus-HD-3.2\34330.xpi' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installerfullversion=1.33.153.1 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /waitforbrowser=300 /extensionid=49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com /extensionversion=0.93 /prefsbranch=a49ef6b77d54642d3a3a182912137df82350ffb92f05e4412b1997a670953a747com34330 /updateurl=https:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/34330.rdf <==== ATTENTION
Task: C:\Windows\Tasks\Plus-HD-3.2-updater.job => C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-updater.exe?/runupdater /agentregpath='Plus-HD-3.2' /appid=34330 /srcid='000775' /subid='0' /zdata='0' /bic=A2558D42D1B241B0A7C0A02CA0FFBE46IE /verifier=51e696db2fda5ba2b9ea38990538d327 /installerversion=1_33_153 /installationtime=1437720963 /statsdomain=http:/stats.srvstatsdata.com /errorsdomain=http:/errors.srvstatsdata.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.srvstatsdata.com /updaterversion=2 /monetizationdomain=http:/stats.syncstatsdata.com <==== ATTENTION

Alterations made by the installer:

File system details [View: All details] (Selection)
---------------------------------------------------
    Adds the folder C:\Program Files (x86)\Plus-HD-3.2
       Adds the file 34330.crx"="24/07/2015 08:56, 260444 bytes, A
       Adds the file 34330.xpi"="24/07/2015 08:56, 296600 bytes, A
       Adds the file background.html"="19/01/2014 14:34, 729 bytes, A
       Adds the file Installer.log"="24/07/2015 08:56, 359315 bytes, A
       Adds the file Plus-HD-3.2.ico"="19/01/2014 14:34, 9662 bytes, A
       Adds the file Plus-HD-3.2-bg.exe"="24/07/2015 08:56, 627048 bytes, A
       Adds the file Plus-HD-3.2-bho.dll"="24/07/2015 08:56, 592744 bytes, A
       Adds the file Plus-HD-3.2-bho64.dll"="24/07/2015 08:56, 886632 bytes, A
       Adds the file Plus-HD-3.2-chromeinstaller.exe"="24/07/2015 08:56, 926568 bytes, A
       Adds the file Plus-HD-3.2-codedownloader.exe"="24/07/2015 08:56, 529256 bytes, A
       Adds the file Plus-HD-3.2-enabler.exe"="24/07/2015 08:56, 348520 bytes, A
       Adds the file Plus-HD-3.2-firefoxinstaller.exe"="24/07/2015 08:56, 891240 bytes, A
       Adds the file Plus-HD-3.2-updater.exe"="24/07/2015 08:56, 358760 bytes, A
       Adds the file Uninstall.exe"="24/07/2015 08:56, 81768 bytes, A
       Adds the file utils.exe"="24/07/2015 08:56, 1294268 bytes, A
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons
    Adds the folder C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale
    Adds the folder C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin
    In the existing folder C:\Windows\System32\Tasks
       Adds the file Plus-HD-3.2-chromeinstaller"="24/07/2015 08:56, 5036 bytes, A
       Adds the file Plus-HD-3.2-codedownloader"="24/07/2015 08:56, 4318 bytes, A
       Adds the file Plus-HD-3.2-enabler"="24/07/2015 08:56, 4190 bytes, A
       Adds the file Plus-HD-3.2-firefoxinstaller"="24/07/2015 08:56, 5164 bytes, A
       Adds the file Plus-HD-3.2-updater"="24/07/2015 08:56, 4366 bytes, A
    In the existing folder C:\Windows\Tasks
       Adds the file Plus-HD-3.2-chromeinstaller.job"="24/07/2015 08:56, 2006 bytes, A
       Adds the file Plus-HD-3.2-codedownloader.job"="24/07/2015 08:56, 1288 bytes, A
       Adds the file Plus-HD-3.2-enabler.job"="24/07/2015 08:56, 1160 bytes, A
       Adds the file Plus-HD-3.2-firefoxinstaller.job"="24/07/2015 08:56, 2134 bytes, A
       Adds the file Plus-HD-3.2-updater.job"="24/07/2015 08:56, 1336 bytes, A

Registry details [View: All details] (Selection)
------------------------------------------------
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}]
       "(Default)"="REG_SZ", "Plus-HD-3.2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311431130}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322432230}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110311431130}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO.1]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.BHO.1\CLSID]
       "(Default)"="REG_SZ", "{11111111-1111-1111-1111-110311431130}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220322432230}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox\CurVer]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox.1]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CrossriderApp0034330.Sandbox.1\CLSID]
       "(Default)"="REG_SZ", "{22222222-2222-2222-2222-220322432230}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435530}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435530}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355435530}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366436630}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0]
       "(Default)"="REG_SZ", "CrossriderApp0034330 Type Library"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\0\win32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\0\win64]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\FLAGS]
       "(Default)"="REG_SZ", "0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344434430}\1.0\HELPDIR]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}]
       "(Default)"="REG_SZ", "Plus-HD-3.2"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\Implemented Categories\{59fb2056-d625-48d0-a944-1a85b5ab2640}]
       "(Default)"="REG_SZ", ""
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330.BHO.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11111111-1111-1111-1111-110311431130}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\InprocServer32]
       "(Default)"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll"
       "ThreadingModel"="REG_SZ", "Apartment"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\ProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox.1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\Programmable]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322432230}\VersionIndependentProgID]
       "(Default)"="REG_SZ", "CrossriderApp0034330.Sandbox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355435530}]
       "(Default)"="REG_SZ", "ICrossriderBHO"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355435530}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550355435530}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366436630}]
       "(Default)"="REG_SZ", "ISandBox"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366436630}\ProxyStubClsid32]
       "(Default)"="REG_SZ", "{00020424-0000-0000-C000-000000000046}"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366436630}\TypeLib]
       "(Default)"="REG_SZ", "{44444444-4444-4444-4444-440344434430}"
       "Version"="REG_SZ", "1.0"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431130}]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID]
       "{11111111-1111-1111-1111-110311431130}"="REG_SZ", "1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures]
       "Plus-HD-3.2-chromeinstaller.job"="REG_BINARY, ................................
       "Plus-HD-3.2-chromeinstaller.job.fp"="REG_DWORD", 622235118
       "Plus-HD-3.2-codedownloader.job"="REG_BINARY, ................................
       "Plus-HD-3.2-codedownloader.job.fp"="REG_DWORD", -1850897575
       "Plus-HD-3.2-enabler.job"="REG_BINARY, ................................
       "Plus-HD-3.2-enabler.job.fp"="REG_DWORD", -25830795
       "Plus-HD-3.2-firefoxinstaller.job"="REG_BINARY, ................................
       "Plus-HD-3.2-firefoxinstaller.job.fp"="REG_DWORD", -698731780
       "Plus-HD-3.2-updater.job"="REG_BINARY, ................................
       "Plus-HD-3.2-updater.job.fp"="REG_DWORD", 1032880321
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION]
       "Plus-HD-3.2-bg.exe"="REG_DWORD", 8000
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311431130}]
       "(Default)"="REG_SZ", "CrossriderApp0034330"
       "NoExplorer"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-3.2]
       "CrAppId"="REG_SZ", "34330"
       "CrPublisherId"="REG_SZ", "19979"
       "DisplayIcon"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\utils.exe"
       "DisplayName"="REG_SZ", "Plus-HD-3.2"
       "DisplayVersion"="REG_SZ", "1.33.153.1"
       "Publisher"="REG_SZ", "Plus HD"
       "UninstallString"="REG_SZ", "C:\Program Files (x86)\Plus-HD-3.2\Uninstall.exe /fromcontrolpanel=1"
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Chrome]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Chrome\Profiles]
       "C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Firefox]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Firefox\Profiles]
       "C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\IE]
       "TotalProfiles"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\IE\Profiles]
       "S-1-5-21-612512518-1730918975-1677248042-1002"="REG_DWORD", 1
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Plus-HD-3.2\Installer]
       "BundledChrome"="REG_DWORD", 1
       "BundledFirefox"="REG_DWORD", 1
       "BundledIe"="REG_DWORD", 1
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Crossrider]
       "Bic"="REG_SZ", "A2558D42D1B241B0A7C0A02CA0FFBE46IE"
       "Verifier"="REG_SZ", "51e696db2fda5ba2b9ea38990538d327"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2]
       "ActiveAppId"="REG_SZ", "34330"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Code]
       "AppJavaScript"="REG_SZ",   { Javascript removed } 
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Debug]
       "IsDebuggingPlugins"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Installer]
       "CodeDownloadDomain"="REG_SZ", "http://app-static.crossrider.com"
       "DefaultBrowser"="REG_SZ", "ff"
       "ErrorsDomain"="REG_SZ", "http://errors.srvstatsdata.com"
       "FullVersion"="REG_SZ", "1.33.153.1"
       "FullVersionForUrl"="REG_SZ", "1_33_153"
       "OsName"="REG_SZ", "7"
       "Params"="REG_SZ", "{   "source_id" : "000775",   "sub_id" : "0",   "uzid" : "0"}"
       "SrcId"="REG_SZ", "000775"
       "StatsDomain"="REG_SZ", "http://stats.srvstatsdata.com"
       "SubId"="REG_SZ", "0"
       "Time"="REG_SZ", "1437720963"
       "ZData"="REG_SZ", "0"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Log]
       "plus-hd-3.2-bho"="REG_DWORD", 0
       "plus-hd-3.2-bho64"="REG_DWORD", 0
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Manifest]
       "AddressbarURL"="REG_SZ", "NA"
       "BgVersion"="REG_SZ", "16"
       "ChangePrevious"="REG_SZ", "false"
       "Description"="REG_SZ", "Turn YouTube videos to High Definition by default"
       "DisableIe"="REG_SZ", "true"
       "EnableSearchIE"="REG_SZ", "false"
       "HomePageUrl"="REG_SZ", "NA"
       "IsButtonEnabled"="REG_SZ", "false"
       "Manifest"="REG_SZ", "NA"
       "ModeType"="REG_SZ", "production"
       "Name"="REG_SZ", "Plus-HD-3.2"
       "PluginsManifestVersion"="REG_SZ", "209"
       "PublisherId"="REG_SZ", "19979"
       "PublisherName"="REG_SZ", "Plus HD"
       "RunInFrame"="REG_SZ", "false"
       "SetNewTab"="REG_SZ", "false"
       "ThanksUrl"="REG_SZ", "NA"
       "UninstallerOfferAction"="REG_SZ", "NA"
       "UninstallerOfferUrl"="REG_SZ", "NA"
       "UpdateInterval"="REG_DWORD", 360
       "Version"="REG_SZ", "232"
    [HKEY_CURRENT_USER\Software\AppDataLow\Software\Plus-HD-3.2\Update]
       "LastCheck"="REG_DWORD", 1437720966
    [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.2]
    [HKEY_CURRENT_USER\Software\InstalledBrowserExtensions\Plus HD]
       "34330"="REG_SZ", "Plus-HD-3.2"

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 24/07/2015
Scan Time: 09:16
Logfile: mbamPlus-HD-32.txt
Administrator: Yes

Version: 2.1.8.1057
Malware Database: v2015.07.24.03
Rootkit Database: v2015.07.22.01
License: Premium
Malware Protection: Disabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: {username}

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 327430
Time Elapsed: 4 min, 21 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 44
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344434430}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355435530}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366436630}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{55555555-5555-5555-5555-550355435530}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{66666666-6666-6666-6666-660366436630}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{55555555-5555-5555-5555-550355435530}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{66666666-6666-6666-6666-660366436630}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{44444444-4444-4444-4444-440344434430}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{44444444-4444-4444-4444-440344434430}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.BHO.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.BHO, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.BHO, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.BHO.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.BHO, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.BHO.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{11111111-1111-1111-1111-110311431130}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{22222222-2222-2222-2222-220322432230}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.Sandbox.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CrossriderApp0034330.Sandbox, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.Sandbox, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.Sandbox, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CrossriderApp0034330.Sandbox.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CrossriderApp0034330.Sandbox.1, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{22222222-2222-2222-2222-220322432230}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{22222222-2222-2222-2222-220322432230}, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, HKLM\SOFTWARE\CLASSES\CLSID\{11111111-1111-1111-1111-110311431130}\INPROCSERVER32, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.PlusHD.C, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Plus-HD-3.2, Quarantined, [f3a04b9af595ee48d3a8c5a9f3120af6], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFABB72-9500-4E71-8169-6C9CB8EC0DA0}, Quarantined, [b5de19cccebc82b4031d8312689c8c74], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C1FD4A3-12AA-45B4-BEBD-600DAFC61974}, Quarantined, [dcb7b530612939fddb43b7de2fd510f0], 
PUP.Optional.PlusHD.A, HKLM\SOFTWARE\WOW6432NODE\Plus-HD-3.2, Quarantined, [bfd4865f8cfe5adcd6ec450f2bd84bb5], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFABB72-9500-4E71-8169-6C9CB8EC0DA0}, Quarantined, [b2e15c89d7b3c37376aa8213e91b51af], 
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C1FD4A3-12AA-45B4-BEBD-600DAFC61974}, Quarantined, [eea504e11b6fff37c35b3b5a07fd13ed], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, Quarantined, [1d76826367231f17c36f65159173de22], 
PUP.Optional.PlusHD.A, HKCU\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-3.2, Quarantined, [8112499cb5d5162035ab12369271916f], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\Plus HD, Quarantined, [a4ef5b8a4941e94d7bf942ed16ed827e], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1AFABB72-9500-4E71-8169-6C9CB8EC0DA0}, Quarantined, [2b6864819cee38fee439b7debb496898], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5C1FD4A3-12AA-45B4-BEBD-600DAFC61974}, Quarantined, [682b8f56bbcfeb4b03188b0a8c783fc1], 
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDBC5A36-5A71-415C-883D-C0B0B8814EFE}, Quarantined, [83102abbfa903303001ccec7d4308e72], 

Registry Values: 7
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1afabb72-9500-4e71-8169-6c9cb8ec0da0}|AppName, Plus-HD-3.2-codedownloader.exe, Quarantined, [b5de19cccebc82b4031d8312689c8c74]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c1fd4a3-12aa-45b4-bebd-600dafc61974}|AppName, Plus-HD-3.2-bg.exe, Quarantined, [dcb7b530612939fddb43b7de2fd510f0]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1afabb72-9500-4e71-8169-6c9cb8ec0da0}|AppName, Plus-HD-3.2-codedownloader.exe, Quarantined, [b2e15c89d7b3c37376aa8213e91b51af]
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c1fd4a3-12aa-45b4-bebd-600dafc61974}|AppName, Plus-HD-3.2-bg.exe, Quarantined, [eea504e11b6fff37c35b3b5a07fd13ed]
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1afabb72-9500-4e71-8169-6c9cb8ec0da0}|AppName, Plus-HD-3.2-codedownloader.exe, Quarantined, [2b6864819cee38fee439b7debb496898]
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{5c1fd4a3-12aa-45b4-bebd-600dafc61974}|AppName, Plus-HD-3.2-bg.exe, Quarantined, [682b8f56bbcfeb4b03188b0a8c783fc1]
PUP.Optional.CrossRider.A, HKCU\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BDBC5A36-5A71-415C-883D-C0B0B8814EFE}|AppName, Plus-HD-3.2-enabler.exe-buttonutil.exe, Quarantined, [83102abbfa903303001ccec7d4308e72]

Registry Data: 0
(No malicious items detected)

Folders: 25
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\userCode, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\actions, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\popupResource, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults\preferences, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\userCode, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale\en-US, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], 

Files: 224
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho64.dll, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bho.dll, Quarantined, [23700adbdbafdc5a89dc3beb8978ad53], 
PUP.Optional.ScramblePacker.A, C:\Users\{username}\Desktop\Bwztelblkp.exe, Quarantined, [ade6d70efa903df9a055e046b74ae21e], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-bg.exe, Quarantined, [c5ce549155356accfb6aa680a65b3dc3], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-chromeinstaller.exe, Quarantined, [464d35b0b5d5d46278ed64c2ea172ed2], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-codedownloader.exe, Quarantined, [6b286382d4b61b1b0a5b35f107fab34d], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-enabler.exe, Quarantined, [6033f8ed444638fef86db27431d07f81], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-firefoxinstaller.exe, Quarantined, [5d360ed7d6b4ba7ce38249dde51cdc24], 
PUP.Optional.HDPlus.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2-updater.exe, Quarantined, [831038adbfcb2b0b7ee7b17515eceb15], 
PUP.Optional.PlusHD.C, C:\Program Files (x86)\Plus-HD-3.2\Uninstall.exe, Quarantined, [f3a04b9af595ee48d3a8c5a9f3120af6], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\Plus-HD-3.2\utils.exe, Quarantined, [e9aae104b6d4d6601edae84eee12ed13], 
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-chromeinstaller.job, Quarantined, [296a4b9a5535d165e6028da8ec17827e], 
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-codedownloader.job, Quarantined, [246f93524e3c5ed824c4fe37d92a28d8], 
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-enabler.job, Quarantined, [afe4ffe6fe8c9a9cd612b5805da69b65], 
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-firefoxinstaller.job, Quarantined, [870c3baa1f6b78be9c4c79bc847f7c84], 
PUP.Optional.PlusHD.A, C:\Windows\Tasks\Plus-HD-3.2-updater.job, Quarantined, [e4af677eb2d8171fd6128fa6c93ac43c], 
PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-chromeinstaller, Quarantined, [a3f08164cac0181e7c6dcf666c9731cf], 
PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-codedownloader, Quarantined, [0e85d510f49669cd70790530cf34f010], 
PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-enabler, Quarantined, [d6bd2bba3f4b48ee9e4b181d0af9c13f], 
PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-firefoxinstaller, Quarantined, [94ff974e29618aac47a2b67ff013ef11], 
PUP.Optional.PlusHD.A, C:\Windows\System32\Tasks\Plus-HD-3.2-updater, Quarantined, [cdc6469f404acb6ba049c273b053de22], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\crossriderManifest.json, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\background.html, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\manifest.json, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\popup.html, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\manifest.xml, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins.json, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\102_dealply_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\103_intext_5_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\104_jollywallet_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\105_corticas_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\119_similar_web_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\123_intext_adv_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\178_revizer_ws_dynamic_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\179_revizer_p_dynamic_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\17_jQuery.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\182_openUrl.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\183_tabsWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\195_icm_convertmedia_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\19_CHAppAPIWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\1_base.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\207_dbWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\21_debug.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\22_resources.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\28_initializer.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\47_resources_background.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\64_appApiMessage.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\72_appApiValidation.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\7_hooks.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\80_CHPopupAppAPI.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\97_resourceApiWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\plugins\9_search_engine_hook.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\userCode\background.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\extensionData\userCode\extension.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\icon128.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\icon16.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\icon48.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\icons\actions\1.png, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\background.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\main.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\platformVersion.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\chrome.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\cookie.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\message.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\monitor.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\pageAction.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\api\pageActionBG.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\app_api.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\bg_app_api.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\consts.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\cookie_store.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\crossriderAPI.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\delegate.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\events.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\extensionDataStore.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\installer.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\logFile.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\logging.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\onBGDocumentLoad.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\reports.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\storageWrapper.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\updateManager.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\util.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\xhr.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\popupResource\newPopup.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpmlmhpdbimdbeoebhifcphjhemhjaek\1.26.114_0\js\lib\popupResource\popup.js, Quarantined, [a5eea73e028877bf80039df2e123cc34], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\crossrider_statusbar.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button1.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button2.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button3.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button4.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\button5.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon128.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon16.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon24.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\icon48.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\panelarrow-up.png, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\popup.html, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\skin.css, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\skin\update.css, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome.manifest, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\install.rdf, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\background.html, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\baseObject.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\browser.xul, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\dialog.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\main.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\options.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\options.xul, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\platformVersion.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\search_dialog.xul, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\asyncDB.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\background.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\browserAction.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\contextMenu.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\dbManager.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\dom_bg.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\fileManager.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\firefox.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\firefoxNotifications.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\firefoxOmnibox.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\message.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\pageAction.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\request.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\tabs.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\webRequest.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\api\windowsMessagingHandler.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\console.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\consts.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\delegate.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\extensionDataStore.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\folderIOWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\httpObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\IDBWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\installer.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\logFile.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\prefs.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\progressListenerObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\registry.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\reloadObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\reports.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\requestObject.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\searchSettings.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\uninstallObserver.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\updateManager.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\utils.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\chrome\content\core\xhr.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\defaults\preferences\prefs.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\manifest.xml, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins.json, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\102_dealply_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\103_intext_5_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\104_jollywallet_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\105_corticas_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\119_similar_web_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\123_intext_adv_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\13_CrossriderAppUtils.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\14_CrossriderUtils.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\184_noproblemppc_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\195_icm_convertmedia_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\1_base.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\207_dbWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\21_debug.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\220_icm_base_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\223_imonomy_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\22_resources.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\231_revizer_ws_dynamic_2_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\16_FFAppAPIWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\177_crossriderDashboard.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\178_revizer_ws_dynamic_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\179_revizer_p_dynamic_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\17_jQuery.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\180_bpo_serp_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\182_openUrl.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\183_tabsWrapper.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\4_jquery_1_7_1.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\64_appApiMessage.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\72_appApiValidation.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\78_CrossriderInfo.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\7_hooks.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\91_monetizationLoader.js.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\93_superfish_no_coupons_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\98_omniCommands.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\9_search_engine_hook.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\244_engageya_inner_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\246_setup.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\253_pixel_inject.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\260_pricedetect_sidebar_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\262_pops_5_j_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\263_intext_5_j_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\273_aedgency_back_button_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\288_firstoffer_pricecomp_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\289_covus_logos_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\28_initializer.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\345_pluginsVerticals.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\354_categories.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\376_loaderBackup.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\385_jollywallet_new_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\47_resources_background.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\plugins\281_ibario_tier3_pops_m.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\userCode\background.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\extensionData\userCode\extension.js, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\extensions\49ef6b77-d546-42d3-a3a1-82912137df82@350ffb92-f05e-4412-b199-7a670953a747.com\locale\en-US\translations.dtd, Quarantined, [fa99b72eb9d1270fbfd25b34a460619f], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\34330.crx, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\34330.xpi, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\background.html, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\Installer.log, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], 
PUP.Optional.PlusHD.A, C:\Program Files (x86)\Plus-HD-3.2\Plus-HD-3.2.ico, Quarantined, [048fb2338a00bc7a01d8c814fe0430d0], 
PUP.Optional.CrossRider.A, C:\Users\{username}\AppData\Roaming\Mozilla\Firefox\Profiles\{profile}.default\prefs.js, Good: (), Bad: (user_pref("extensions.crossrider.bic", "14ebee286233ad694e54ae95f90320e4");), Replaced,[5043d015cfbb52e422c37ff45baabf41]

Physical Sectors: 0
(No malicious items detected)


(end)

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.
We use different ways of protecting your computer(s):

Dynamically Blocks Malware Sites & Servers
Malware Execution Prevention

Save yourself the hassle and get protected.

#1
Metallica

Posted 24 July 2015 - 02:11 AM

Advertisements

1 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us