Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 19/04/2014 Scan Time: 21:44:08 Logfile: mbam.txt1.txt Administrator: Yes Version: 2.00.1.1004 Malware Database: v2014.04.19.09 Rootkit Database: v2014.03.27.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Chameleon: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: SOPHIE Scan Type: Threat Scan Result: Completed Objects Scanned: 260166 Time Elapsed: 1 hr, 9 min, 52 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Shuriken: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 3 PUP.Optional.Feven.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Freeven pro, Quarantined, [7abb64c8c6b5b77fc974244dd032a759], PUP.Optional.MediaPlayerplus.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerplus, Quarantined, [e0551d0f9be043f3a0c0531eeb174cb4], PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-3.5, Quarantined, [72c3a983fb80360044b99ad78e740bf5], Registry Values: 0 (No malicious items detected) Registry Data: 1 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Replaced,[e74e012bb4c7221442da1613ed171ce4] Folders: 13 PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\defaults, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\defaults\preferences, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\userCode, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\locale, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\locale\en-US, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], Files: 77 PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Local\Temp\cedd8e0d-deb9-43aa-ae3f-f3385d384218\software\freeven-prox.exe, Quarantined, [191cc6667cff44f2caa94df211efe61a], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Local\Temp\cedd8e0d-deb9-43aa-ae3f-f3385d384218\software\mediaplayerpluus.exe, Quarantined, [6dc832fa7209bb7b89f8ae9100002fd1], PUP.Optional.MySearchDial.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi, Quarantined, [25100626c8b3f44278eb9cd1a35fe020], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome.manifest, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\install.rdf, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\api.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\background.html, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\baseObject.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\browser.xul, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\dialog.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\ffCoreFilesIndex.txt, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\main.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\options.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\options.xul, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\platformVersion.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\search_dialog.xul, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\addressBarChangeObserver.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\console.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\consts.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\delegate.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\folderIOWrapper.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\httpObserver.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\IDBWrapper.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\installer.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\logFile.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\prefs.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\progressListenerObserver.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\registry.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\reloadObserver.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\reports.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\requestObject.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\searchSettings.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\uninstallObserver.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\updateManager.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\chrome\content\core\xhr.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\defaults\preferences\prefs.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\manifest.xml, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins.json, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\1.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\102.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\103.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\104.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\13.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\14.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\16.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\17.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\177.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\182.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\183.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\184.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\191.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\207.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\21.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\22.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\223.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\242.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\244.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\246.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\28.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\4.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\47.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\64.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\72.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\78.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\93.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\plugins\98.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\userCode\background.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\extensionData\userCode\extension.js, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.CrossRider.A, C:\Users\SOPHIE\AppData\Roaming\Mozilla\Firefox\Profiles\vraeuqnt.default\extensions\a0046b9b-fdb9-497f-a4b1-2a108ad6007a@5cdf80b7-0420-4bb7-b3c0-e188e6f4fb8a.com\locale\en-US\translations.dtd, Quarantined, [cc69bc702259f3432b965b0919e9847c], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\b.html, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\b.js, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\c.js, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\icon128.png, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\icon16.png, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\icon48.png, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.TheBestDeals.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikcggonfhgaingjbhjanbibmlfeomooc\1.158.0.0_0\manifest.json, Quarantined, [c372cb618bf08bab9f078bdf37cb5da3], PUP.Optional.WebsSearches.A, C:\Users\SOPHIE\AppData\Local\Google\Chrome\User Data\Default\preferences, Good: (), Bad: ( "startup_urls": [ "http://start.mysearchdial.com/?f=1&a=irmsd1103aw&cd=2XzuyEtN2Y1L1QzuzytDtDtDyE0EtA0F0A0A0CtD0ByC0D0FtN0D0Tzu0SyBtDzztN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=1979940205&ir=", "http://istart.webssearches.com/?type=hp&ts=1397343255&from=tugs&uid=TOSHIBAXMK7559GSXP_11E8F2RDSXX11E8F2RDS" ],), Replaced,[b97c1e0ef982a195526800531fe5be42] Physical Sectors: 0 (No malicious items detected) (end)