The application xgjcyb.exe, “Lights Cinema 1.3betaV05.03 exe” has been detected as a potentially unwanted program by 18 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler named XGJCYB triggered to execute each time a user logs in. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider. While running, it connects to the Internet address ip-184-168-221-47.ip.secureserver.net on port 80 using the HTTP protocol.