BleepingComputer.com: Infected with Trojan.maljava; do not know how to remove

Jump to content

Forum Guidelines

Posted Image Read the following topic before creating a new topic in this forum. It contains instructions on the what we would like you to post, which will enable us to help you more quickly.

Preparation Guide For Use Before Using Malware Removal Tools and Requesting Help


Posted Image Unfortunately, with the amount of logs we receive per day, the average response time is 5 days. I want to assure you, though, that your topic will be looked at and responded to. So please be patient.


Posted Image DO NOT RUN ComboFix unless requested to.


Posted Image Only members of the Malware Response Team or Moderators are allowed to help people with logs. Anyone else should refrain from posting to another user's log.


Posted Image When posting a log please put the type of infection you have in the topic title. IE: Winfixer, Virtumonde, WinTools, WebSearch, Home Search Assistant, etc.


Posted Image Do not bump your topic. We try to resolve logs on a first come/first served basis. By bumping your log you will be pushed back in line due to the new date of your bump.
  • 5 Pages +
  • « First
  • 3
  • 4
  • 5
  • You cannot start a new topic
  • This topic is locked

Infected with Trojan.maljava; do not know how to remove

#61 User is offline   SMH1105 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 62
  • Joined: 20-September 11

Posted 11 November 2011 - 01:17 AM

Hi,

Thank you for all your help on this!

I downloaded and ran the Windows Update fix you recommended, but the program is still giving me an error code, 80096001. I am happy to manually download and install the updates, but I wanted to wait and see if you thought that was a good idea before I try to do that.

Re: the Trojan.maljava, here are the contents of the Firefox log you asked about:

# Mozilla User Preferences

/* Do not edit this file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
* For more information, see http://www.mozilla.org/unix/customizing.html#prefs
*/

user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.lastUpdateTime.addon-background-update-timer", 1318677991);
user_pref("app.update.lastUpdateTime.background-update-timer", 1318678231);
user_pref("app.update.lastUpdateTime.blocklist-background-update-timer", 1318678111);
user_pref("app.update.lastUpdateTime.microsummary-generator-update-timer", 1313245738);
user_pref("app.update.lastUpdateTime.places-maintenance-timer", 1304151756);
user_pref("app.update.lastUpdateTime.search-engine-update-timer", 1318704933);
user_pref("browser.cache.disk.capacity", 1048576);
user_pref("browser.cache.disk.smart_size.first_run", false);
user_pref("browser.cache.disk.smart_size_cached_value", 1048576);
user_pref("browser.download.manager.retention", 0);
user_pref("browser.feeds.showFirstRunUI", false);
user_pref("browser.formfill.enable", false);
user_pref("browser.history_expire_days.mirror", 180);
user_pref("browser.history_expire_days_min", 0);
user_pref("browser.migration.version", 5);
user_pref("browser.places.importBookmarksHTML", false);
user_pref("browser.places.smartBookmarksVersion", 2);
user_pref("browser.rights.3.shown", true);
user_pref("browser.search.useDBForOrder", true);
user_pref("browser.startup.homepage", "http://www.worldsunluckiesttraveler.com/entry.asp");
user_pref("browser.startup.homepage_override.buildID", "20110928134238");
user_pref("browser.startup.homepage_override.mstone", "rv:7.0.1");
user_pref("browser.syncPromoViewsLeft", 0);
user_pref("capability.policy.maonoscript.javascript.enabled", "allAccess");
user_pref("capability.policy.maonoscript.sites", "addons.mozilla.org bleepingcomputer.com flashgot.net google-analytics.com google.com googleapis.com googlesyndication.com gstatic.com hotmail.com informaction.com live.com maone.net mozilla.net msn.com noscript.net passport.com passport.net passportimages.com paypal.com paypalobjects.com securecode.com wlxrs.com yahoo.com yahooapis.com yimg.com youtube.com ytimg.com about: about:addons about:blank about:blocked about:certerror about:config about:crashes about:credits about:home about:neterror about:plugins about:privatebrowsing about:sessionrestore chrome: http://bleepingcomputer.com http://flashgot.net http://google-analytics.com http://google.com http://googleapis.com http://googlesyndication.com http://gstatic.com http://hotmail.com http://informaction.com http://live.com http://maone.net http://mozilla.net http://msn.com http://noscript.net http://passport.com http://passport.net http://passportimages.com http://paypal.com http://paypalobjects.com http://securecode.com http://wlxrs.com http://yahoo.com http://yahooapis.com http://yimg.com http://youtube.com http://ytimg.com https://bleepingcomputer.com https://flashgot.net https://google-analytics.com https://google.com https://googleapis.com https://googlesyndication.com https://gstatic.com https://hotmail.com https://informaction.com https://live.com https://maone.net https://mozilla.net https://msn.com https://noscript.net https://passport.com https://passport.net https://passportimages.com https://paypal.com https://paypalobjects.com https://securecode.com https://wlxrs.com https://yahoo.com https://yahooapis.com https://yimg.com https://youtube.com https://ytimg.com resource:");
user_pref("extensions.adblockplus.currentVersion", "1.3.10");
user_pref("extensions.blocklist.pingCountTotal", 129);
user_pref("extensions.blocklist.pingCountVersion", 13);
user_pref("extensions.bootstrappedAddons", "{}");
user_pref("extensions.databaseSchema", 5);
user_pref("extensions.enabledAddons", "optimizegoogle@optimizegoogle.com:0.78.2,{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20110704,{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10,{BBDA0591-3099-440a-AA10-41764D9DB4DB}:3.2,{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:2011.7.2.3,{972ce4c6-7e08-4474-a285-3208198ce6fd}:7.0.1");
user_pref("extensions.enabledItems", "{20a82645-c095-46ed-80e3-08825760534b}:1.1,{AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17");
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"mtime\":1293945306693},\"{BBDA0591-3099-440a-AA10-41764D9DB4DB}\":{\"descriptor\":\"C:\\\\ProgramData\\\\Norton\\\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\\\\N360_5.1.0.29\\\\IPSFFPlgn\",\"mtime\":1317222248872},\"{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}\":{\"descriptor\":\"C:\\\\ProgramData\\\\Norton\\\\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\\\\N360_5.1.0.29\\\\coFFPlgn_2011_7_2_3\",\"mtime\":1318697873444}}},{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1317604414184},\"{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\extensions\\\\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\",\"mtime\":1306089198191},\"{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\extensions\\\\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}\",\"mtime\":1318470030174}}},{\"name\":\"app-profile\",\"addons\":{\"optimizegoogle@optimizegoogle.com\":{\"descriptor\":\"C:\\\\Users\\\\Stephanie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\rfnl8qrg.default\\\\extensions\\\\optimizegoogle@optimizegoogle.com.xpi\",\"mtime\":1316921732081},\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"C:\\\\Users\\\\Stephanie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\rfnl8qrg.default\\\\extensions\\\\{20a82645-c095-46ed-80e3-08825760534b}\",\"mtime\":1293992650661},\"{73a6fe31-595d-460b-a920-fcc0f8843232}\":{\"descriptor\":\"C:\\\\Users\\\\Stephanie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\rfnl8qrg.default\\\\extensions\\\\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi\",\"mtime\":1318677998242},\"{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}\":{\"descriptor\":\"C:\\\\Users\\\\Stephanie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\rfnl8qrg.default\\\\extensions\\\\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}\",\"mtime\":1316921836794},\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"descriptor\":\"C:\\\\Users\\\\Stephanie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\rfnl8qrg.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\",\"mtime\":1317233260282}}}]");
user_pref("extensions.lastAppVersion", "7.0.1");
user_pref("extensions.lastPlatformVersion", "7.0.1");
user_pref("extensions.pendingOperations", false);
user_pref("extensions.skype_toolbar.version", "5.0.0.6906");
user_pref("extensions.ui.lastCategory", "addons://list/extension");
user_pref("extensions.ui.locale.hidden", true);
user_pref("extensions.update.notifyUser", false);
user_pref("general.useragent.extra.microsoftdotnet", "(.NET CLR 3.5.30729)");
user_pref("idle.lastDailyNotification", 1318629098);
user_pref("intl.charsetmenu.browser.cache", "Shift_JIS, windows-1250, windows-1252, ISO-8859-1, UTF-8");
user_pref("lightweightThemes.isThemeSelected", true);
user_pref("lightweightThemes.persisted.footerURL", false);
user_pref("lightweightThemes.persisted.headerURL", false);
user_pref("lightweightThemes.usedThemes", "[{\"id\":\"27178\",\"name\":\"Gerberas\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/7/8/27178/GerberasH.jpg?1260925626\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/7/8/27178/Abstractflower1F.jpg?1260925626\",\"textcolor\":\"#0f0e0e\",\"accentcolor\":\"#121111\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/7/8/27178/preview_small.jpg?1260925626\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/7/8/27178/preview.jpg?1260925626\",\"author\":\"MaDonna ♥\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/27178\",\"version\":\"1260925626\",\"updateDate\":1315369961024,\"installDate\":1315369961024},{\"id\":\"427335\",\"name\":\"Sunshines Yellow\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/3/5/427335/SunshineYellowsH.jpg?1313434090\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/3/5/427335/SunshineYellowsH-Copy.jpg?1313434090\",\"textcolor\":\"#000000\",\"accentcolor\":\"#ffcc66\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/3/5/427335/preview_small.jpg?1313434090\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/3/5/427335/preview.jpg?1313434090\",\"author\":\"MaDonna ♥\",\"description\":\"fall, autumn, summer, flowers, daisy, vines, shadows, yellow, orange, white floral, blossoms, My wallpaper to match can be found at: http://nature.desktopnexus.com/wallpaper/764240/\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/427335\",\"version\":\"1313434090\",\"updateDate\":1315369928539,\"installDate\":1315369928539},{\"id\":\"429547\",\"name\":\"Colors of August\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/4/7/429547/ColorsofAugustHCustom.jpg?1314229617\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/4/7/429547/ColorsofAugustHCustom-Copy.jpg?1314229617\",\"textcolor\":\"#ffffff\",\"accentcolor\":\"#292626\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/4/7/429547/preview_small.jpg?1314229617\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/4/7/429547/preview.jpg?1314229617\",\"author\":\"MaDonna ♥\",\"description\":\"chrysanthemums, roses, leaves, berries, pods, fall, autumn, flowers, bouquet\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/429547\",\"version\":\"1314229617\",\"updateDate\":1315369912438,\"installDate\":1315369912438},{\"id\":\"369166\",\"name\":\"Little Flowers Japanese 2011\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/6/6/369166/JAPANESE.jpg?1310262012\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/6/6/369166/Japanesefu.jpg?1310262012\",\"textcolor\":\"#000000\",\"accentcolor\":\"#6dd3f2\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/6/6/369166/preview_small.jpg?1310262012\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/6/6/369166/preview.jpg?1310262012\",\"author\":\"fronzy75\",\"description\":\"Rated me\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/369166\",\"version\":\"1310262012\",\"updateDate\":1310318744278,\"installDate\":1307866804376},{\"id\":\"302814\",\"name\":\"Yellow Tulips II\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/1/4/302814/1HEADER.JPG?1285194489\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/1/4/302814/1FOOTER.JPG?1285194489\",\"textcolor\":\"#000000\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/1/4/302814/preview_small.jpg?1285194489\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/1/4/302814/preview.jpg?1285194489\",\"author\":\"SaSSyGirL~Ƹ̵̡Ӝ̵̨̄Ʒ~\",\"description\":\"flowers, bouquet, arrangement, floral, yellow, tulips, bloom, blossom, spring\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/302814\",\"version\":\"1285194489\",\"updateDate\":1304257986574,\"installDate\":1304216079560},{\"id\":\"383351\",\"name\":\"Delicate Beauty\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/5/1/383351/Header.jpg?1300638404\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/5/1/383351/Footer.jpg?1300638404\",\"textcolor\":\"#000000\",\"accentcolor\":\"#fcfcfc\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/5/1/383351/preview_small.jpg?1300638404\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/5/1/383351/preview.jpg?1300638404\",\"author\":\"Sinine\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/383351\",\"updateDate\":1304215978626,\"installDate\":1304215978626},{\"id\":\"398609\",\"name\":\"Spring Flowers by J\",\"headerURL\":\"http://getpersonas-cdn.mozilla.net/static/0/9/398609/Header-Spring.JPG?1303413418\",\"footerURL\":\"http://getpersonas-cdn.mozilla.net/static/0/9/398609/Footer-Spring.JPG?1303413418\",\"iconURL\":\"http://getpersonas-cdn.mozilla.net/static/0/9/398609/preview_small.jpg?1303413418\",\"previewURL\":\"http://getpersonas-cdn.mozilla.net/static/0/9/398609/preview.jpg?1303413418\",\"author\":\"jordanhunterjackson\",\"updateURL\":\"https://www.getpersonas.com/en-US/update_check/398609\",\"updateDate\":1304215880066,\"installDate\":1304215880066}]");
user_pref("microsoft.CLR.auto_install", false);
user_pref("network.cookie.lifetimePolicy", 2);
user_pref("network.cookie.prefsMigrated", true);
user_pref("noscript.ABE.migration", 1);
user_pref("noscript.gtemp", "");
user_pref("noscript.policynames", "");
user_pref("noscript.subscription.lastCheck", -1633112373);
user_pref("noscript.temp", "");
user_pref("noscript.version", "2.1.2.8");
user_pref("noscript.visibleUIChecked", true);
user_pref("places.database.lastMaintenance", 1318629098);
user_pref("places.history.enabled", false);
user_pref("places.history.expiration.transient_current_max_pages", 96055);
user_pref("places.last_vacuum", 1298987785);
user_pref("pref.browser.homepage.disable_button.current_page", false);
user_pref("print.print_printer", "HP LaserJet P1006");
user_pref("print.printer_HP_LaserJet_P1006.print_bgcolor", false);
user_pref("print.printer_HP_LaserJet_P1006.print_bgimages", false);
user_pref("print.printer_HP_LaserJet_P1006.print_command", "");
user_pref("print.printer_HP_LaserJet_P1006.print_downloadfonts", false);
user_pref("print.printer_HP_LaserJet_P1006.print_edge_bottom", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_edge_left", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_edge_right", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_edge_top", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_evenpages", true);
user_pref("print.printer_HP_LaserJet_P1006.print_footercenter", "");
user_pref("print.printer_HP_LaserJet_P1006.print_footerleft", "&PT");
user_pref("print.printer_HP_LaserJet_P1006.print_footerright", "&D");
user_pref("print.printer_HP_LaserJet_P1006.print_headercenter", "");
user_pref("print.printer_HP_LaserJet_P1006.print_headerleft", "&T");
user_pref("print.printer_HP_LaserJet_P1006.print_headerright", "&U");
user_pref("print.printer_HP_LaserJet_P1006.print_in_color", true);
user_pref("print.printer_HP_LaserJet_P1006.print_margin_bottom", "0.5");
user_pref("print.printer_HP_LaserJet_P1006.print_margin_left", "0.5");
user_pref("print.printer_HP_LaserJet_P1006.print_margin_right", "0.5");
user_pref("print.printer_HP_LaserJet_P1006.print_margin_top", "0.5");
user_pref("print.printer_HP_LaserJet_P1006.print_oddpages", true);
user_pref("print.printer_HP_LaserJet_P1006.print_orientation", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_page_delay", 50);
user_pref("print.printer_HP_LaserJet_P1006.print_pagedelay", 500);
user_pref("print.printer_HP_LaserJet_P1006.print_paper_data", 1);
user_pref("print.printer_HP_LaserJet_P1006.print_paper_height", " 11.00");
user_pref("print.printer_HP_LaserJet_P1006.print_paper_size_type", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_paper_size_unit", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_paper_width", " 8.50");
user_pref("print.printer_HP_LaserJet_P1006.print_reversed", false);
user_pref("print.printer_HP_LaserJet_P1006.print_scaling", " 1.00");
user_pref("print.printer_HP_LaserJet_P1006.print_shrink_to_fit", true);
user_pref("print.printer_HP_LaserJet_P1006.print_to_file", false);
user_pref("print.printer_HP_LaserJet_P1006.print_to_filename", "");
user_pref("print.printer_HP_LaserJet_P1006.print_unwriteable_margin_bottom", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_unwriteable_margin_left", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_unwriteable_margin_right", 0);
user_pref("print.printer_HP_LaserJet_P1006.print_unwriteable_margin_top", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_bgcolor", false);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_bgimages", false);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_command", "");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_downloadfonts", false);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_edge_bottom", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_edge_left", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_edge_right", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_edge_top", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_evenpages", true);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_footercenter", "");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_footerleft", "&PT");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_footerright", "&D");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_headercenter", "");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_headerleft", "&T");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_headerright", "&U");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_in_color", true);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_margin_bottom", "0.5");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_margin_left", "0.5");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_margin_right", "0.5");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_margin_top", "0.5");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_oddpages", true);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_orientation", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_pagedelay", 500);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_paper_data", 1);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_paper_height", " 11.00");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_paper_size_type", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_paper_size_unit", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_paper_width", " 8.50");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_reversed", false);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_scaling", " 1.00");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_shrink_to_fit", false);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_to_file", false);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_to_filename", "");
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_unwriteable_margin_bottom", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_unwriteable_margin_left", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_unwriteable_margin_right", 0);
user_pref("print.printer_\\\\stuprinters.law.upenn.edu\\law-lab.print_unwriteable_margin_top", 0);
user_pref("privacy.item.cache", true);
user_pref("privacy.item.downloads", false);
user_pref("privacy.item.formdata", false);
user_pref("privacy.item.history", false);
user_pref("privacy.item.passwords", false);
user_pref("privacy.sanitize.migrateFx3Prefs", true);
user_pref("privacy.sanitize.promptOnSanitize", false);
user_pref("privacy.sanitize.sanitizeOnShutdown", true);
user_pref("privacy.sanitize.timeSpan", 0);
user_pref("security.warn_viewing_mixed", false);
user_pref("services.sync.lastversion", "1.9.0");
user_pref("signon.rememberSignons", false);
user_pref("storage.vacuum.last.index", 1);
user_pref("storage.vacuum.last.places.sqlite", 1317686860);
user_pref("symantec.browser.sessionstore.resume_from_crash.toggle", false);
user_pref("toolkit.telemetry.prompted", true);
user_pref("urlclassifier.keyupdatetime.https://sb-ssl.google.com/safebrowsing/newkey", 1321296845);
user_pref("weboftrust.cookie_updated", "1318721368822");
user_pref("weboftrust.extension_id", "47a064ef0c22f418bf33f7d0a6b538506c058a06");
user_pref("weboftrust.firstrun_guide", "2");
user_pref("weboftrust.last_version", "20110704");
user_pref("weboftrust.search.aolsearch.display", "AOL Search");
user_pref("weboftrust.search.aolsearch.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*aol\\.[a-z]{2,}\\/");
user_pref("weboftrust.search.aolsearch.pre0.match", 3);
user_pref("weboftrust.search.aolsearch.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*aol\\.[a-z]{2,}\\/[^\\\\?]*redir\\\\?.*s_cu=(http.+)(&.*)?");
user_pref("weboftrust.search.aolsearch.prestyle", ".HL [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.aolsearch.style", "a.find ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-top: 2px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.aolsearch.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*aol\\.[a-z]{2,}\\/[^\\\\?]*search\\\\?.+");
user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
user_pref("weboftrust.search.ask.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*ask\\.com\\/");
user_pref("weboftrust.search.ask.pre0.match", 4);
user_pref("weboftrust.search.ask.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*ask\\.com\\/(bar|r)\\\\?.*&u=(http[^&]+)");
user_pref("weboftrust.search.ask.prestyle", ".s_binoc2 ~ [ATTR], .nu ~ [ATTR], [ATTR=\"safeweb.norton.com\"] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.ask.style", "a.title ~ [ATTR=\"NAME\"], a.L4 ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-top: 1px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.ask.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*ask\\.com\\/web\\\\?.+");
user_pref("weboftrust.search.baidu.display", "Baidu");
user_pref("weboftrust.search.baidu.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*baidu\\.com\\/");
user_pref("weboftrust.search.baidu.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.baidu.style", ".f a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.baidu.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*baidu\\.com\\/s\\\\?.+");
user_pref("weboftrust.search.bing.display", "Bing");
user_pref("weboftrust.search.bing.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(msn(scache)?|live|bingj?|microsofttranslator)\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/");
user_pref("weboftrust.search.bing.prestyle", ".rc_p [ATTR], .sb_vdl [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.bing.style", ".nc_tc a ~ [ATTR=\"NAME\"], .sb_tlst a ~ [ATTR=\"NAME\"], .sn_rct a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.bing.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*bing\\.com\\/search\\\\?");
user_pref("weboftrust.search.dmoz.display", "dmoz - Open Directory Project");
user_pref("weboftrust.search.dmoz.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*dmoz\\.org\\/");
user_pref("weboftrust.search.dmoz.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.dmoz.style", "li a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.dmoz.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*dmoz\\.org\\/");
user_pref("weboftrust.search.dogpile.display", "Dogpile");
user_pref("weboftrust.search.dogpile.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*dogpile\\.com\\/");
user_pref("weboftrust.search.dogpile.pre0.match", 3);
user_pref("weboftrust.search.dogpile.pre0.re", "^http(s)?\\:\\/\\/cs\\.(dogpile|infospace)\\.com\\/ClickHandler.+ru=(http[^&]+)");
user_pref("weboftrust.search.dogpile.prestyle", ".paidSearchResult [ATTR] { display: none ! important; } .searchResultsPane { max-width: 44.08em; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.dogpile.style", "a.resultTitle ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-bottom: 1px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.dogpile.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*dogpile\\.com\\/(info\\.[^\\/]+/)?(search\\/)?web.+");
user_pref("weboftrust.search.facebook.display", "Facebook");
user_pref("weboftrust.search.facebook.dynamic", 1);
user_pref("weboftrust.search.facebook.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(facebook\\.(com|net)|fbcdn\\.net|bing\\.com)\\/");
user_pref("weboftrust.search.facebook.match0.attribute0.flags", "n");
user_pref("weboftrust.search.facebook.match0.attribute0.name", "class");
user_pref("weboftrust.search.facebook.match0.attribute0.re", "mceContentBody");
user_pref("weboftrust.search.facebook.match0.element", "body");
user_pref("weboftrust.search.facebook.prestyle", ".uiHeader [ATTR], a.uiLinkSubtle ~ [ATTR], .profile-picture [ATTR], .HovercardContent td > a ~ [ATTR], .uiAttachmentTitle ~ a ~ [ATTR], a.UIImageBlock_Image ~ [ATTR], .UIMediaItem [ATTR], .UIStoryAttachment_Caption [ATTR], .uiStreamPassive [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.facebook.style", "a[onmousedown^=\"UntrustedLink\"] ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-top: 1px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.facebook.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*facebook\\.com\\/");
user_pref("weboftrust.search.gmail.display", "Gmail");
user_pref("weboftrust.search.gmail.dynamic", 1);
user_pref("weboftrust.search.gmail.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/");
user_pref("weboftrust.search.gmail.match0.attribute0.flags", "n");
user_pref("weboftrust.search.gmail.match0.attribute0.name", "class");
user_pref("weboftrust.search.gmail.match0.attribute0.re", "editable");
user_pref("weboftrust.search.gmail.match0.element", "body");
user_pref("weboftrust.search.gmail.pre0.match", 4);
user_pref("weboftrust.search.gmail.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)?googlesyndication\\.com\\/(aclk|pagead).*\\\\?.*adurl=(.+)(&.*)?");
user_pref("weboftrust.search.gmail.prestyle", ".e ~ [ATTR], #gbd [ATTR], #gbi [ATTR], .vd ~ [ATTR], .Ni ~ [ATTR], .mr ~ [ATTR], [ATTR] { position: absolute; visibility: hidden; } .e:last-of-type ~ [ATTR] { position: relative; visibility: visible; }");
user_pref("weboftrust.search.gmail.style", "a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-bottom: 2px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.gmail.url", "^http(s)?\\:\\/\\/mail\\.google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(mail|a)\\/.+");
user_pref("weboftrust.search.gmail.urlign", "&(name=htmlcompose|view=(js|cw)&)");
user_pref("weboftrust.search.google.display", "Google");
user_pref("weboftrust.search.google.dynamic", 1);
user_pref("weboftrust.search.google.ign", "^http(s)?\\:\\/\\/(([\\w\\-]+\\.)*(www|g?mail|maps|news|groups|books|scholar|video|images|blogsearch|translate|sites|docs|picasaweb|profiles|adwords|labs|investor|encrypted|code|services|checkout|trends|plus)\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/|q=(cache|related)\\:");
user_pref("weboftrust.search.google.pre0.match", 9);
user_pref("weboftrust.search.google.pre0.re", "^http(s)?\\:\\/\\/(([\\w\\-]+\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})|([\\w\\-]+\\.)*start3\\.mozilla\\.com)\\/(url|pagead|interstitial|aclk|product_url).*\\\\?.*(q|adurl|url)(=|%3D)(https?(\\:|%3A)[^&]+)(&.*)?");
user_pref("weboftrust.search.google.prestyle", "#scTopOfPageRefinementLinks[partner=\"wot\"] [ATTR], #gb [ATTR], #gbd [ATTR], .g > div > div > div span > a.l ~ [ATTR], .ts td > a ~ [ATTR], .result-image [ATTR], .cite ~ [ATTR], .gl [ATTR], .g > a:not([class]):first-child ~ [ATTR], a.f1 ~ [ATTR], a.fl ~ [ATTR], a[href^=\"/\"][href*=\"&oi=video_result\"] ~ [ATTR], a[href^=\"/\"][href*=\"&ct=image\"] ~ [ATTR], a[href^=\"/\"][href*=\"&sa=X&\"] ~ [ATTR], .slk [ATTR], #gbar [ATTR], #ssb [ATTR], #doc3 [ATTR], #sft [ATTR], .osl [ATTR], #rtr [ATTR], .bc [ATTR], #nycprv [ATTR] { display: none ! important; } a[creator=\"SiteAdvisor\"] img { position: relative ! important; } [mclinkinfo] a ~ [ATTR], a[creator=\"SiteAdvisor\"] + [ATTR=\"siteadvisor.com\"], [id^=\"BubbleLayer\"] [ATTR] { display: none ! important; } [ATTR] { display: none ! important; }");
user_pref("weboftrust.search.google.script", "if(document.location.protocol==\"http:\"){if(typeof(contentscript)==\"object\"){contentscript.update();}else if((!window.parent||window==window.parent)&&typeof(loader)!=\"object\"){loader={time:Date.now(),maxage:300000,url:\"http://api.mywot.com/0.4/script?target=google\"};var script=wot_getlastscript();if(!script||script.url.indexOf(loader.url)!=0||script.time<(loader.time-loader.maxage)){wot_loadscript(loader.url+(wot_getapiparams()||\"\")+\"&_=\"+loader.time);}else if(script.status==200&&script.code.length>0){eval(script.code);}}}");
user_pref("weboftrust.search.google.style", "a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; display: inline-block ! important; }");
user_pref("weboftrust.search.google.url", "^http(s)?\\:\\/\\/((www|encrypted)\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/");
user_pref("weboftrust.search.google.urlign", "^http(s)?\\:\\/\\/((www|encrypted)\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(\\+|a\\/|accounts|ad(s|manager|planner|sense|words)|alerts|analytics|apps|appserve|base|calendar|chrome(frame)?|codesearch|comparisonads|corporate|crisisresponse|datacenter|dfp|dictionary|doodle|educators|enterprise|events|experimental|familysafety|finance|flutrends|friendconnect|goog411|googlebooks|googlenotebook|googlevoice|gwt|help|history|hostednews|images|imgres|ime|insights|landing|local|logos|mapmaker|maps|mobile|moon|music|newproducts|news|notebook|patents|phone|postini|powermeter|press|profiles|publicdata|puzzles|onlinechallenge|reader|recaptcha|relief|services|s2|sitesearch|sky|smallbusinessnetwork|squared|submit|support|sync|talk|toolbar|uds|ventures|voice|wallet|web(masters|elements)|intl\\/[^\\/]+\\/.+|search\\\\?.*tbm=isch)");
user_pref("weboftrust.search.googleimages.display", "Google Image Search");
user_pref("weboftrust.search.googleimages.dynamic", 1);
user_pref("weboftrust.search.googleimages.ign", "^http(s)?\\:\\/\\/(([\\w\\-]+\\.)*(www|g?mail|maps|news|groups|books|scholar|video|images|blogsearch|translate|sites|docs|picasaweb|adwords|labs|investor)\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/|q=(cache|related)\\:");
user_pref("weboftrust.search.googleimages.pre0.match", 5);
user_pref("weboftrust.search.googleimages.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/imgres\\\\?.*img(ref)?url=(.+)(&.*)?");
user_pref("weboftrust.search.googleimages.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.googleimages.style", "a.rg_l ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; top: 5px; left: 5px; position: absolute; visibility: visible; } #ImgContent a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; top: 0px; margin-left: -20px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.googleimages.url", "^http(s)?\\:\\/\\/(www|images)\\.google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(images\\\\?.+|search\\\\?.*tbm=isch)");
user_pref("weboftrust.search.hotmail.display", "Windows Live Hotmail");
user_pref("weboftrust.search.hotmail.dynamic", 1);
user_pref("weboftrust.search.hotmail.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(live|(imagine-)?msn|microsoft)\\.com\\/");
user_pref("weboftrust.search.hotmail.match0.element", "#mp0_msgPartBody");
user_pref("weboftrust.search.hotmail.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.hotmail.style", ".MsgPartBody a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.hotmail.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*mail\\.live\\.com\\/mail\\/");
user_pref("weboftrust.search.ixquick.display", "Ixquick");
user_pref("weboftrust.search.ixquick.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(ixquick|startpage|startingpage)\\.com\\/?");
user_pref("weboftrust.search.ixquick.pre0.match", 6);
user_pref("weboftrust.search.ixquick.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(url|pagead|interstitial|aclk).*\\\\?.*(q|adurl|url)=(.+)(&.*)?");
user_pref("weboftrust.search.ixquick.pre1.match", 4);
user_pref("weboftrust.search.ixquick.pre1.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(ixquick|startpage|startingpage)\\.com\\/do\\/highlight.*&u=(http[^&]*)");
user_pref("weboftrust.search.ixquick.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.ixquick.style", "a.title ~ [ATTR=\"NAME\"], a.title2 ~ [ATTR=\"NAME\"], .result h3 > a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.ixquick.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(ixquick|startpage|startingpage)\\.com\\/do\\/metasearch");
user_pref("weboftrust.search.mailru.display", "Mail.Ru");
user_pref("weboftrust.search.mailru.ign", "^http(s)?\\:\\/\\/(.+\\.)?mail\\.ru\\/");
user_pref("weboftrust.search.mailru.pre0.match", 9);
user_pref("weboftrust.search.mailru.pre0.re", "^http(s)?\\:\\/\\/(([\\w\\-]+\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})|([\\w\\-]+\\.)*start3\\.mozilla\\.com)\\/(url|pagead|interstitial|aclk|product_url).*\\\\?.*(q|adurl|url)(=|%3D)(https?(\\:|%3A)[^&]+)(&.*)?");
user_pref("weboftrust.search.mailru.prestyle", ".video-thumb [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.mailru.style", ".res-head a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.mailru.url", "^http(s)?\\:\\/\\/go\\.mail\\.ru\\/search\\?.+");
user_pref("weboftrust.search.naver.display", "Naver");
user_pref("weboftrust.search.naver.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*naver\\.com\\/");
user_pref("weboftrust.search.naver.prestyle", ".thumb_wrap [ATTR], .thumb [ATTR], .mov_thumb [ATTR], .btn_area [ATTR], .txt_block [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.naver.style", "#content a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.naver.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*naver\\.com\\/search.*\\\\?.+");
user_pref("weboftrust.search.rambler.display", "Rambler");
user_pref("weboftrust.search.rambler.ign", "^http(s)?\\:\\/\\/(.+\\.)?rambler\\.ru\\/");
user_pref("weboftrust.search.rambler.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.rambler.style", ".search-results a.title ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.rambler.url", "^http(s)?\\:\\/\\/nova\\.rambler\\.ru\\/(search|srch)\\?.+");
user_pref("weboftrust.search.reddit.display", "reddit");
user_pref("weboftrust.search.reddit.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*reddit\\.com\\/");
user_pref("weboftrust.search.reddit.prestyle", ".thumbnail ~ [ATTR], .footer [ATTR], #ad [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.reddit.style", ".content a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.reddit.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*reddit\\.com\\/");
user_pref("weboftrust.search.reddit.urlign", "^http(s)?\\:\\/\\/blog\\.reddit\\.com\\/");
user_pref("weboftrust.search.searchcom.display", "Search.com");
user_pref("weboftrust.search.searchcom.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*search\\.com\\/.+");
user_pref("weboftrust.search.searchcom.pre0.match", 3);
user_pref("weboftrust.search.searchcom.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)?search\\.com\\/click.*\\\\?.*,(http.*)$");
user_pref("weboftrust.search.searchcom.pre1.match", 6);
user_pref("weboftrust.search.searchcom.pre1.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/(url|pagead|interstitial|aclk).*\\\\?.*(q|adurl|url)=(.+)(&.*)?");
user_pref("weboftrust.search.searchcom.prestyle", ".attrib [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.searchcom.style", ".title a ~ [ATTR=\"NAME\"], .savvyad_unit a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; } .savvyad_unit a ~ [ATTR] { float: right; margin-top: -16px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.searchcom.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*search\\.com\\/search(\\\\?|\\/).+");
user_pref("weboftrust.search.seznam.display", "Seznam");
user_pref("weboftrust.search.seznam.ign", "^http(s)?\\:\\/\\/(.+\\.)?(seznam|sklik)\\.cz\\/");
user_pref("weboftrust.search.seznam.pre0.match", 3);
user_pref("weboftrust.search.seznam.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)?sklik\\.cz\\/click.*url=([^&]+)");
user_pref("weboftrust.search.seznam.prestyle", ".limiter > a ~ [ATTR], .hintImage a ~ [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.seznam.style", ".result a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.seznam.url", "^http(s)?\\:\\/\\/search\\.seznam\\.cz\\/");
user_pref("weboftrust.search.twitter.display", "Twitter");
user_pref("weboftrust.search.twitter.dynamic", 1);
user_pref("weboftrust.search.twitter.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*twitter\\.com\\/");
user_pref("weboftrust.search.twitter.prestyle", ".meta a ~ [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.twitter.style", "#content a ~ [ATTR=\"NAME\"], .tweet-text a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-top: 1px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.twitter.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*twitter\\.com\\/");
user_pref("weboftrust.search.webde.display", "WEB.DE");
user_pref("weboftrust.search.webde.ign", "^http(s)?\\:\\/\\/(.+\\.)?web\\.de\\/");
user_pref("weboftrust.search.webde.pre0.match", 9);
user_pref("weboftrust.search.webde.pre0.re", "^http(s)?\\:\\/\\/(([\\w\\-]+\\.)?google\\.(com?\\.[a-z]{2}|[a-z]{2,})|([\\w\\-]+\\.)*start3\\.mozilla\\.com)\\/(url|pagead|interstitial|aclk|product_url).*\\\\?.*(q|adurl|url)(=|%3D)(https?(\\:|%3A)[^&]+)(&.*)?");
user_pref("weboftrust.search.webde.prestyle", "[ATTR] { position: absolute; visibility: hidden; } .sponsoredLink a { display: inline ! important; }");
user_pref("weboftrust.search.webde.style", ".resultContent h3 a ~ [ATTR=\"NAME\"], .sponsoredLink h3 a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; position: relative; visibility: visible; }");
user_pref("weboftrust.search.webde.url", "^http(s)?\\:\\/\\/suche\\.web\\.de\\/search\\/(web|dir)");
user_pref("weboftrust.search.wikipedia.display", "Wikipedia");
user_pref("weboftrust.search.wikipedia.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*(wik(ipedia|ibooks|inews|imedia(foundation)?|iquote|isource|tionary|iversity)|mediawiki)\\.org\\/");
user_pref("weboftrust.search.wikipedia.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.wikipedia.style", "#bodyContent a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat ! important; margin-left: 4px ! important; position: relative; visibility: visible; }");
user_pref("weboftrust.search.wikipedia.url", "^http(s)?\\:\\/\\/.+\\.wiki(pedia|news)\\.org\\/");
user_pref("weboftrust.search.wikipedia.urlign", "\\/w\\/extensions\\/|&action=(edit|submit)");
user_pref("weboftrust.search.yahoo.display", "Yahoo!");
user_pref("weboftrust.search.yahoo.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yahoo\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/|^http(s)?\\:\\/\\/.+\\/search\\/cache\\\\?");
user_pref("weboftrust.search.yahoo.pre0.match", 4);
user_pref("weboftrust.search.yahoo.pre0.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yahoo\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/.+\\*\\*http.+yahoo\\.[a-z]{2,}.+fu=(http.+)");
user_pref("weboftrust.search.yahoo.pre1.match", 4);
user_pref("weboftrust.search.yahoo.pre1.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yahoo\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/.+\\*\\*(http.+)");
user_pref("weboftrust.search.yahoo.pre2.match", 4);
user_pref("weboftrust.search.yahoo.pre2.re", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yahoo\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/click\\\\?u=(http.+)");
user_pref("weboftrust.search.yahoo.prestyle", ".bbox [ATTR], .right [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.yahoo.style", "a.yschttl ~ [ATTR=\"NAME\"], .active a ~ [ATTR=\"NAME\"], .hd h3 a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; padding-top: 1px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.yahoo.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yahoo\\.(com?\\.[a-z]{2}|[a-z]{2,})\\/search[;\\\\?].+");
user_pref("weboftrust.search.yahoomail.display", "Yahoo! Mail");
user_pref("weboftrust.search.yahoomail.dynamic", 1);
user_pref("weboftrust.search.yahoomail.ign", "^http(s)?\\:\\/\\/([\\w\\-]*\\.)*(yahoo\\.(com|net)|ymailupdates\\.com)\\/");
user_pref("weboftrust.search.yahoomail.match0.condition", "or");
user_pref("weboftrust.search.yahoomail.match0.match0.attribute0.name", "class");
user_pref("weboftrust.search.yahoomail.match0.match0.attribute0.re", "msg-body");
user_pref("weboftrust.search.yahoomail.match0.match0.element", "div");
user_pref("weboftrust.search.yahoomail.match0.match1.attribute0.name", "id");
user_pref("weboftrust.search.yahoomail.match0.match1.attribute0.re", "^(messageAreaIframe|ViewArea_.*)$");
user_pref("weboftrust.search.yahoomail.match0.match1.element", "$frame");
user_pref("weboftrust.search.yahoomail.prestyle", "[ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.yahoomail.style", "a ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.yahoomail.url", "^http(s)?\\:\\/\\/([\\w\\-]*\\.)*mail\\.yahoo\\.(com|net)\\/(dc|neo|om\\/api)\\/");
user_pref("weboftrust.search.yandex.display", "Yandex");
user_pref("weboftrust.search.yandex.ign", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yandex\\.[a-z]{2,}\\/");
user_pref("weboftrust.search.yandex.prestyle", ".redirect [ATTR], .show-player ~ [ATTR], .moreInfo [ATTR], .l-head [ATTR] { display: none ! important; } [ATTR] { position: absolute; visibility: hidden; }");
user_pref("weboftrust.search.yandex.style", ".b-serp-item__title-link ~ [ATTR=\"NAME\"], .b-serp-item__title__link ~ [ATTR=\"NAME\"], .agp ~ [ATTR=\"NAME\"], .title ~ [ATTR=\"NAME\"], .domain ~ [ATTR=\"NAME\"] { background: url(IMAGE) right no-repeat; margin-left: 0px; margin-right: 4px; position: relative; visibility: visible; }");
user_pref("weboftrust.search.yandex.url", "^http(s)?\\:\\/\\/([\\w\\-]+\\.)*yandex\\.(ru|com)\\/(yandsearch|search\\.xml)\\\\?.+");
user_pref("weboftrust.shared.1", "4sq.com,abcn.ws,aol.it,apne.ws,bbc.in,bzfd.it,cs.pn,d3w.io,dlvr.it,eca.sh,engt.co,es.pn,exm.nr,f.ast.ly,fa.by,flpbd.it,gd.is,ht.ly,huff.to,ind.pn,is.gd,j.mp,lat.ms,lnkd.in,migre.me,n.pr,nblo.gs,nyr.kr,nyti.ms,on.cnn.com,on.mash.to,on.msnbc.com,ow.ly,pep.si,ping.fm,politi.co,post.ly,rww.to,su.pr,t.co,tcrn.ch,tgr.ph,thkpr.gs,tiny.ly,tinyurl.com,tl.gd,tldr.us,tr.im,twitter.com,usat.me,wapo.st,wp.me,x.co,yhoo.it");
user_pref("weboftrust.shared.2", "bit.ly,bitly.com,goo.gl,gu.com,sites.google.com");
user_pref("weboftrust.update_checked", "1318721370023");
user_pref("weboftrust.witness_id", "9e8c7c2d6769b596f4381497fef4091cb65820a4");
user_pref("weboftrust.witness_key", "0ab4d6d170fd770f72ddd323f8aad575e8c33cf6");
user_pref("xpinstall.whitelist.add", "");
user_pref("xpinstall.whitelist.add.36", "");

#62 User is offline   nasdaq 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 5,053
  • Joined: 16-June 06
  • Gender:Male
  • Location:Montreal, QC. Canada

Posted 11 November 2011 - 09:36 AM

In post no 2 of this topic you will be given 3 solutions for your Update Problem.
http://www.vistax64.com/windows-updates/274401-windows-update-error-code-80096001-a.html

Try the first solution for now.
1.Reset WU components in aggressive mode How do I reset Windows Update components?

Do the automatic fix suggested whe you visit the page/link.
===

As for your False positive on the Java Cache It may just be a anoyance. You have the No Scrispt enable so unless you go to some unknown or untrusted site I do not this its dangerous.

I can only suggest you create an account and start a topic in the Firefox Forum.
http://www.firefoxforum.com/
You should get first hand help on this issues.

Keep me posted on the Microsoft Update issue.

#63 User is offline   SMH1105 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 62
  • Joined: 20-September 11

Posted 11 November 2011 - 08:21 PM

Thanks for your help with the Trojan.maljava. I'm hoping it's just a false positive, as you said.


Re: the Windows Update Fix software, I tried it twice, and it wouldn't install. Should I keep going with the next solutions?

#64 User is offline   nasdaq 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 5,053
  • Joined: 16-June 06
  • Gender:Male
  • Location:Montreal, QC. Canada

Posted 12 November 2011 - 09:55 AM

I have perused the 2nd article and you should try it.

Keep me posted.

#65 User is offline   SMH1105 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 62
  • Joined: 20-September 11

Posted 12 November 2011 - 10:32 AM

Hi again,

I tried the 2nd option and it said that it completed its task, but when I restarted and tried to use Windows Update, I received the same error message. ???

#66 User is offline   nasdaq 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 5,053
  • Joined: 16-June 06
  • Gender:Male
  • Location:Montreal, QC. Canada

Posted 12 November 2011 - 10:49 AM

Try the Microsoft fix on this page.

http://support.microsoft.com/kb/822798

#67 User is offline   SMH1105 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 62
  • Joined: 20-September 11

Posted 14 November 2011 - 09:03 AM

I tried most of these fixes, but I confess that some of them only half-worked (I'd do a few steps and then something would not respond the way the post said it should). I'm a bit out of my depth when it has me installing and uninstalling certificates, etc. -- is there any way to uninstall and re-install the Windows Update software instead?

#68 User is offline   nasdaq 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 5,053
  • Joined: 16-June 06
  • Gender:Male
  • Location:Montreal, QC. Canada

Posted 14 November 2011 - 09:41 AM

Quote

is there any way to uninstall and re-install the Windows Update software instead?

I do not think so. If it was that simple there would not be a need for this article.
http://support.microsoft.com/kb/822798

You can contact Microsoft Support. On the left pane select Get Help Now.
Follow the instructions.

===

Time for some housekeeping
    The following will implement some cleanup procedures as well as reset System Restore points:

    Click Start > Run and copy/paste the following bold text into the Run box and click OK:

    ComboFix /Uninstall

===

Delete the other tools we used.

Surf Safely, and Think Prevention!
===

I will keep this topic open for an extra 5 days.
If you need additional help here please let me know.

#69 User is offline   SMH1105 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 62
  • Joined: 20-September 11

Posted 14 November 2011 - 09:53 AM

Sounds good. Thank you again for all your help! I truly appreciate it.

#70 User is offline   nasdaq 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Malware Response Team
  • Posts: 5,053
  • Joined: 16-June 06
  • Gender:Male
  • Location:Montreal, QC. Canada

Posted 19 November 2011 - 11:09 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

Share this topic:


  • 5 Pages +
  • « First
  • 3
  • 4
  • 5
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users