ESET
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\GoogleChromeRemotePlugin.dll Win32/Toolbar.Linkury.D application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\101_cortica_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\102_dealply_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\103_intext_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\104_jollywallet_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\105_corticas_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\107_coupish_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\108_icm_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\116_ads_only_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\117_coupons_intext_ads_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\119_similar_web_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\120_luck_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\123_intext_adv_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\125_arcadi2_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\126_revizer_ws_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\127_revizer_p_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\128_superfish_pricora_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\129_widdit_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\135_arcadi3_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\138_getdeal_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\155_ibario_pops_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\159_cortica_rollover_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\170_icm1_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\171_arcadi2_sourceID_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\175_coolmirage_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\0VYCH029\50onred_ads_only_no_fb_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\0VYCH029\arcadi2_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\0VYCH029\icm1_5_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\0VYCH029\intext_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\0VYCH029\similar_web_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\0VYCH029\superfish_no_search_no_coupons_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\ads_only_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\ads_only_5_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\arcadi2_sourceID_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\arcadi_serp_dynamic_id_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\CodecPerformerSetup.exe a variant of Win32/InstallBrain.AW application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\coolmirage_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\cortica_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\coupons_intext_ads_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\dealply_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\eGdpSvc[1].exe a variant of Win32/ELEX.S application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\icm_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\revizer_p_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\revizer_p_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\3HCUVKDI\revizer_ws_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\arcadi3_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\CodecPerformerSetup.exe a variant of Win32/InstallBrain.AW application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\coolmirage_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\coupish_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\getdeal_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\icm1_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\AXOQS2F9\icm_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\50onred_ads_only_no_fb_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\cbsidlm-cbsi134-Super_Ad_Blocker-ORG-10295147.exe probably a variant of Win32/CNETInstaller.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\CodecPerformerSetup (1).exe a variant of Win32/InstallBrain.AW application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\CodecPerformerSetup.exe a variant of Win32/InstallBrain.AW application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\coolmirage_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\corticas_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\cortica_rollover_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\coupons_intext_ads_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\ibario_pops_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\intext_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\intext_adv_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\jollywallet_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\luck_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\revizer_ws_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\superfish_pricora_m[2].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Microsoft\Windows\INetCache\IE\O7LR2RQY\widdit_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\Brandon\AppData\Local\Temp\015cb27d-e87b-4519-a964-b8d7b95c5078.exe multiple threats
C:\Windows.old\Users\Brandon\AppData\Local\Temp\tbappb.dll a variant of Win32/Toolbar.Conduit.B application
C:\Windows.old\Users\Brandon\AppData\Local\Temp\tbSwee.dll a variant of Win32/Toolbar.Conduit.B application
C:\Windows.old\Users\Brandon\AppData\Local\Temp\{6C61F3BC-0B2A-432C-8EB4-6C9B5D076E78}\setup.exe multiple threats
C:\Windows.old\Users\Brandon\AppData\Local\Temp\{B2DC238B-6825-4D2F-924A-D33E923FE4BA}\setup.exe multiple threats
C:\Windows.old\Users\Brandon\AppData\Roaming\SearchProtect\ffprotect\application.js Win32/Conduit.SearchProtect.A application
C:\Windows.old\Users\Brandon\AppData\Roaming\SearchProtect\ffprotect\nsprotector.js Win32/Conduit.SearchProtect.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\101_cortica_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\102_dealply_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\103_intext_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\104_jollywallet_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\105_corticas_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\107_coupish_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\108_icm_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\116_ads_only_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\117_coupons_intext_ads_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\119_similar_web_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\120_luck_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\123_intext_adv_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\124_superfish_no_search_no_coupons_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\125_arcadi2_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\126_revizer_ws_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\127_revizer_p_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\128_superfish_pricora_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\129_widdit_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\135_arcadi3_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\138_getdeal_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\155_ibario_pops_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\158_50onred_ads_only_no_fb_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\159_cortica_rollover_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\170_icm1_5_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\171_arcadi2_sourceID_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl\1.25.84_0\extensionData\plugins\175_coolmirage_m.js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\8ZQ8MP24\50onred_ads_only_no_fb_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\JCITVZ64\coolmirage_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\JCITVZ64\coupons_intext_ads_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\JCITVZ64\icm_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\O7E5WPMD\icm1_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\O7E5WPMD\icm_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\O7E5WPMD\revizer_p_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\YC31IJSA\ads_only_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\YC31IJSA\coolmirage_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\YC31IJSA\intext_5_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Local\Microsoft\Windows\INetCache\IE\YC31IJSA\revizer_ws_m[1].js JS/Toolbar.Crossrider.A application
C:\Windows.old\Users\jabon_000\AppData\Roaming\SearchProtect\ffprotect\application.js Win32/Conduit.SearchProtect.A application
C:\Windows.old\Users\jabon_000\AppData\Roaming\SearchProtect\ffprotect\nsprotector.js Win32/Conduit.SearchProtect.A application