We received the file CT3287375.XPI and detected that CT3287375.XPI is not good.
CT3287375.XPI is Adware. You should remove the file CT3287375.XPI.
Kill the process CT3287375.XPI and remove CT3287375.XPI from Windows.
Malware Analysis of CT3287375.XPI
Full path on a computer: %TEMP%\CT3287375\CT3287375.XPI
Detected by UnHackMe:
CT3287375.XPI
Default location: %TEMP%\CT3287375\CT3287375.XPI
Removal Results: Success
Number of reboot: 1
CT3287375.XPI is known as:
Adware.Toolbar
How to quickly detect CT3287375.XPI presence?
![]( "Files")
Files:
Files:- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\{6C3BC03F-D7B9-43AC-8931-C242E3CAE971}\CHROME\CT3287375\CONTENT\TB\AL\WA\RADIO_PLAYER\CSS\GADGET.CSS
- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\{6C3BC03F-D7B9-43AC-8931-C242E3CAE971}\CHROME\CT3287375\CONTENT\TB\AL\WA\RADIO_PLAYER\CSS\JQUERY.JSCROLLPANE.CSS
- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\{6C3BC03F-D7B9-43AC-8931-C242E3CAE971}\CHROME\CT3287375\CONTENT\TB\AL\WA\RADIO_PLAYER\CSS\RESET.CSS
- %APPDATA%\MOZILLA\FIREFOX\PROFILES\CWDGT0Y8.DEFAULT\EXTENSIONS\{6C3BC03F-D7B9-43AC-8931-C242E3CAE971}\CHROME\CT3287375\CONTENT\TB\AL\WA\PRICE_GONG\PG_OFFERS.JS
- %TEMP%\CT3287375\CT3287375.XPI