Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cannot update windows


  • This topic is locked This topic is locked
26 replies to this topic

#1 prov1kenobi

prov1kenobi

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 30 October 2012 - 03:34 PM

Attached File  attach.txt   11.15KB   0 downloadsDDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.9.2
Run by WS-4 at 11:25:52 on 2012-10-30
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3294.1309 [GMT -7:00]
.
AV: ESET NOD32 Antivirus 5.2 *Enabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.2 *Enabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\AOL Computer Checkup\AOLDefragSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\taskhost.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\WTS Paradigm\BaseCamp\BaseCampTray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Users\WS-4\AppData\Local\Skillbrains\lightshot\3.0.0.0\LightShot.exe
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\Program Files\JELD-WEN\Quick Quote 2\QQAutoUpdate.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\msdtc.exe
C:\Windows\Explorer.EXE
C:\Quotemaster\m2o.exe
C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files\WTS Paradigm\BaseCamp\BaseCampService.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\WS-4\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k HPService
C:\Windows\system32\svchost.exe -k netsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = iexplore
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - <orphaned>
BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} -
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} -
BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} -
EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll
uRun: [Akamai NetSession Interface] "c:\users\ws-4\appdata\local\akamai\netsession_win.exe"
uRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
uRun: [LightShot] c:\users\ws-4\appdata\local\skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue
mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 9.0\acrobat\Acrotray.exe"
mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 9.0\acrobat\Acrobat_sl.exe"
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\AppleSyncNotifier.exe
mRun: [ISUSPM] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -scheduler
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [WTSParadigmBaseCamp] c:\program files\wts paradigm\basecamp\BaseCampTray.exe
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mRun: [hpqSRMon] c:\program files\hp\digital imaging\bin\hpqSRMon.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\bdarem~1.lnk - c:\program files\usb tv\em28xx\BDARemote.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
uPolicies-Explorer: NoDrives = dword:0
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoWelcomeScreen = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:0
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
IE: Append Link Target to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert link target to existing PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert to Adobe PDF - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~1\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1342723561328
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
TCP: NameServer = 192.168.1.254
TCP: Interfaces\{98E37479-2681-4953-8F71-37D67A4CB478} : DHCPNameServer = 192.168.1.254
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - c:\program files\belarc\advisor\system\BAVoilaX.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
SSODL: UPnPMonitor - <orphaned>
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\
FF - plugin: c:\progra~1\micros~1\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~1\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\acrobat 9.0\acrobat\air\nppdf32.dll
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\autodesk\autodesk design review firefox add-on v1.1\npADRdwf.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npCouponPrinter.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npMozCouponPrinter.dll
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - plugin: c:\programdata\id software\quakelive\npquakezero.dll
FF - plugin: c:\users\ws-4\appdata\local\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\plugins\np-mswmp.dll
FF - plugin: c:\users\ws-4\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\ws-4\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
FF - ExtSQL: 2012-10-05 21:55; {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}; c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF - ExtSQL: 2012-10-16 16:30; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2012-10-16 16:35; {7b13ec3e-999a-4b70-b9cb-2617b8323822}; c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF - ExtSQL: 2012-10-16 16:57; jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack; c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack
FF - ExtSQL: 2012-10-17 15:44; tineye@ideeinc.com; c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\extensions\tineye@ideeinc.com.xpi
FF - ExtSQL: 2012-10-19 15:55; smartwebprinting@hp.com; c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
FF - ExtSQL: 2012-10-25 10:33; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\ws-4\appdata\roaming\mozilla\firefox\profiles\maupcxrh.default-1350429686012\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: !HIDDEN! 2012-10-19 15:55; smartwebprinting@hp.com; c:\program files\hp\digital imaging\smart web printing\MozillaAddOn3
.
============= SERVICES / DRIVERS ===============
.
R1 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2012-3-14 169080]
R2 AOLDiskOptimizer;AOLDiskOptimizer;c:\program files\aol computer checkup\AOLDefragSrv.exe [2011-9-26 248328]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2012-3-7 913144]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2012-3-14 103112]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2012-10-22 399432]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-10-22 676936]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-10-22 22856]
R3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000]
S1 GhPciScan;GhostPciScanner;c:\program files\symantec\norton ghost 2003\GhPciScan.sys [2003-12-17 5632]
S2 !SASCORE;SAS Core Service;"c:\program files\superantispyware\sascore.exe" --> c:\program files\superantispyware\SASCORE.EXE [?]
S2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2009-7-13 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-10-6 136176]
S2 MSSQL$PROQUOTE;SQL Server (PROQUOTE);c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe [2008-11-24 29263712]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-10-8 250808]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-10-6 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-10-19 115168]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2012-10-9 27192]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-10-22 52224]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2012-10-5 1343400]
.
=============== Created Last 30 ================
.
2012-10-29 17:37:56 -------- d-----w- c:\windows\system32\appmgmt
2012-10-29 17:34:42 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-29 17:34:42 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-29 17:34:18 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-25 20:33:11 -------- d-----w- c:\users\ws-4\appdata\local\IsolatedStorage
2012-10-23 10:03:00 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-10-23 10:02:59 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-10-23 10:02:42 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-10-23 10:02:42 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-10-23 10:02:42 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-23 10:01:47 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-10-22 21:54:55 805376 ----a-w- c:\windows\system32\FntCache.dll
2012-10-22 21:54:55 739840 ----a-w- c:\windows\system32\d2d1.dll
2012-10-22 21:18:54 -------- d-----w- c:\windows\system32\SPReview
2012-10-22 19:46:02 1159168 ----a-w- c:\windows\system32\sysmain.dll
2012-10-22 19:46:01 863744 ----a-w- c:\windows\system32\diagperf.dll
2012-10-22 19:46:01 52224 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2012-10-22 19:46:01 51200 ----a-w- c:\windows\system32\PushPrinterConnections.exe
2012-10-22 19:46:01 505856 ----a-w- c:\windows\system32\taskschd.dll
2012-10-22 19:46:01 4247040 ----a-w- c:\program files\windows nt\accessories\wordpad.exe
2012-10-22 19:44:55 577024 ----a-w- c:\windows\system32\wpd_ci.dll
2012-10-22 19:43:38 293888 ----a-w- c:\windows\system32\ssText3d.scr
2012-10-22 19:43:38 254976 ----a-w- c:\windows\system32\wsqmcons.exe
2012-10-22 19:43:38 159232 ----a-w- c:\windows\system32\syncui.dll
2012-10-22 19:43:37 1174016 ----a-w- c:\program files\windows sidebar\sidebar.exe
2012-10-22 19:43:36 51712 ----a-w- c:\windows\system32\wscapi.dll
2012-10-22 19:43:36 115712 ----a-w- c:\windows\system32\setupcln.dll
2012-10-22 19:43:29 246272 ----a-w- c:\windows\system32\scansetting.dll
2012-10-22 19:43:22 220672 ----a-w- c:\windows\system32\Ribbons.scr
2012-10-22 19:43:22 135680 ----a-w- c:\windows\system32\recovery.dll
2012-10-22 19:43:20 509440 ----a-w- c:\windows\system32\qedit.dll
2012-10-22 19:41:57 194560 ----a-w- c:\windows\system32\ListSvc.dll
2012-10-22 19:41:57 165376 ----a-w- c:\windows\system32\provsvc.dll
2012-10-22 19:41:53 744448 ----a-w- c:\windows\system32\ActionCenter.dll
2012-10-22 19:41:53 537600 ----a-w- c:\windows\system32\ActionCenterCPL.dll
2012-10-22 19:41:04 2576384 ----a-w- c:\windows\system32\gameux.dll
2012-10-22 19:41:04 1596416 ----a-w- c:\program files\dvd maker\Pipeline.dll
2012-10-22 19:41:02 68096 ----a-w- c:\windows\system32\Mcx2Svc.dll
2012-10-22 19:41:02 488448 ----a-w- c:\windows\system32\evr.dll
2012-10-22 19:41:02 312168 ----a-w- c:\windows\system32\MCEWMDRMNDBootstrap.dll
2012-10-22 19:41:01 630784 ----a-w- c:\windows\system32\DXPTaskRingtone.dll
2012-10-22 19:40:56 776192 ----a-w- c:\windows\system32\calc.exe
2012-10-22 19:40:56 242176 ----a-w- c:\program files\dvd maker\WMM2CLIP.dll
2012-10-22 19:40:55 878592 ----a-w- c:\windows\system32\Bubbles.scr
2012-10-22 19:40:41 257536 ----a-w- c:\windows\system32\WindowsAnytimeUpgrade.exe
2012-10-22 19:40:35 292864 ----a-w- c:\windows\system32\WindowsAnytimeUpgradeResults.exe
2012-10-22 19:40:28 859648 ----a-w- c:\windows\system32\OobeFldr.dll
2012-10-22 18:33:54 1130824 ----a-w- c:\windows\system32\dfshim.dll
2012-10-22 18:32:59 2522624 ----a-w- c:\windows\system32\dbgeng.dll
2012-10-22 18:31:59 400896 ----a-w- c:\windows\system32\ipsmsnap.dll
2012-10-22 18:30:59 130048 ----a-w- c:\windows\system32\wbem\dsprov.dll
2012-10-22 18:28:44 780288 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2012-10-22 18:28:44 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2012-10-22 18:28:44 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2012-10-22 18:28:44 351232 ----a-w- c:\windows\system32\wmicmiplugin.dll
2012-10-22 18:27:40 189952 ----a-w- c:\windows\system32\sqmapi.dll
2012-10-22 18:27:39 697344 ----a-w- c:\windows\system32\SmiEngine.dll
2012-10-22 18:27:09 209920 ----a-w- c:\windows\system32\PkgMgr.exe
2012-10-22 18:27:09 189952 ----a-w- c:\windows\system32\wdscore.dll
2012-10-22 18:25:15 323072 ----a-w- c:\windows\system32\drvstore.dll
2012-10-22 18:25:14 257024 ----a-w- c:\windows\system32\dpx.dll
2012-10-22 18:19:50 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-10-22 18:06:57 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-22 18:06:56 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-10-22 18:06:52 542208 ----a-w- c:\windows\system32\kerberos.dll
2012-10-22 18:06:49 400896 ----a-w- c:\windows\system32\srcore.dll
2012-10-22 18:06:48 262656 ----a-w- c:\windows\system32\rstrui.exe
2012-10-22 18:06:41 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-22 18:06:41 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-10-22 18:06:40 103936 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-22 18:06:26 41984 ----a-w- c:\windows\system32\browcli.dll
2012-10-22 18:06:26 102912 ----a-w- c:\windows\system32\browser.dll
2012-10-22 18:06:02 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-10-22 18:04:26 769024 ----a-w- c:\windows\system32\localspl.dll
2012-10-22 18:04:25 30208 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\winprint.dll
2012-10-22 18:00:33 -------- d-----w- c:\windows\system32\catroot2
2012-10-22 17:48:37 -------- d-----w- c:\windows\SoftwareDistribution.old
2012-10-22 17:26:07 -------- d-----w- c:\windows\CheckSur
2012-10-22 16:53:27 -------- d-----w- C:\7b4ae1f890e9a521cb01622f
2012-10-22 16:47:15 -------- d-----w- c:\users\ws-4\appdata\roaming\Malwarebytes
2012-10-22 16:47:08 -------- d-----w- c:\programdata\Malwarebytes
2012-10-22 16:47:07 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-22 16:36:52 -------- d-sh--w- C:\$RECYCLE.BIN
2012-10-22 16:35:27 -------- d-----w- c:\users\ws-4\appdata\local\temp
2012-10-22 15:48:20 98816 ----a-w- c:\windows\sed.exe
2012-10-22 15:48:20 256000 ----a-w- c:\windows\PEV.exe
2012-10-22 15:48:20 208896 ----a-w- c:\windows\MBR.exe
2012-10-22 15:24:12 -------- d-----w- c:\windows\system32\EventProviders
2012-10-22 15:24:07 -------- d-----w- C:\7533d60f6a2161adc127c2c30a75
2012-10-19 23:29:41 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-10-19 23:26:46 -------- d-----w- c:\windows\pss
2012-10-19 23:24:55 -------- d-----w- c:\users\ws-4\appdata\local\HP
2012-10-19 22:46:25 452408 ----a-w- c:\windows\system32\hpzids01.dll
2012-10-18 20:26:33 -------- d-----w- c:\program files\Skillbrains
2012-10-18 20:26:29 -------- d-----w- c:\users\ws-4\appdata\local\Skillbrains
2012-10-18 16:18:19 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2012-10-18 16:18:18 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2012-10-18 16:17:57 -------- d-----w- c:\program files\You Have to Win the Game
2012-10-10 20:41:58 60 ----a-w- c:\windows\wpd99.drv
2012-10-10 20:41:58 36864 ----a-w- c:\windows\system32\pdf995mon.dll
2012-10-10 20:41:58 1667584 ----a-w- c:\windows\system32\pdfmona.dll
2012-10-10 18:10:07 -------- d-----w- c:\users\ws-4\appdata\local\Marvin Windows and Doors
2012-10-09 21:04:36 -------- d-----w- c:\users\ws-4\appdata\local\VS Revo Group
2012-10-09 21:04:31 27192 ----a-w- c:\windows\system32\drivers\revoflt.sys
2012-10-09 21:04:29 -------- d-----w- c:\program files\VS Revo Group
2012-10-09 16:55:36 -------- d-----w- c:\users\ws-4\appdata\local\ElevatedDiagnostics
2012-10-09 16:55:27 -------- d-----w- c:\windows\softwaredistribution.bak1
2012-10-08 16:21:02 -------- d-----w- c:\users\ws-4\appdata\local\Macromedia
2012-10-08 16:20:46 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-08 16:20:46 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-08 15:29:57 -------- d-----w- c:\users\ws-4\appdata\local\Mozilla
2012-10-08 00:25:39 -------- d-sh--w- c:\users\ws-4\UserData
2012-10-08 00:23:50 -------- d-----w- c:\program files\ESET
2012-10-08 00:19:47 -------- d-sh--w- c:\users\ws-4\PrivacIE
2012-10-08 00:19:43 -------- d-sh--w- c:\users\ws-4\IECompatCache
2012-10-08 00:09:58 281600 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpcpp093.DLL
2012-10-08 00:09:58 161280 ----a-w- c:\windows\system32\hpcpn093.dll
2012-10-08 00:09:57 59928 ----a-w- c:\windows\system32\fxcompchannel.dll
2012-10-07 23:54:03 90624 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\HPZPPWN7.DLL
2012-10-06 05:08:11 -------- d-----w- c:\users\ws-4\appdata\local\Laplink
2012-10-06 05:08:10 -------- d-----w- c:\users\ws-4\appdata\roaming\WTSParadigm
2012-10-06 05:08:10 -------- d-----w- c:\users\ws-4\appdata\roaming\WTS Paradigm
2012-10-06 05:08:10 -------- d-----w- c:\users\ws-4\appdata\roaming\WhenU
2012-10-06 05:08:10 -------- d-----w- c:\users\ws-4\appdata\roaming\TeamViewer
2012-10-06 05:06:48 -------- d-----w- c:\users\ws-4\appdata\roaming\AOL
2012-10-06 05:06:32 -------- d-----w- c:\users\ws-4\appdata\local\Apps
2012-10-06 05:06:32 -------- d-----w- c:\users\ws-4\appdata\local\{3248F0A6-6813-11D6-A77B-00B0D0150060}
2012-10-06 05:06:31 -------- d-----w- c:\users\ws-4\appdata\local\Yahoo
2012-10-06 05:06:31 -------- d-----w- c:\users\ws-4\appdata\local\Roxio
2012-10-06 05:06:30 -------- d-----w- c:\users\ws-4\appdata\local\PunkBuster
2012-10-06 05:06:30 -------- d-----w- c:\users\ws-4\appdata\local\PowerDVD DX
2012-10-06 05:06:30 -------- d-----w- c:\users\ws-4\appdata\local\PDF Writer
2012-10-06 05:05:40 -------- d-----w- c:\users\ws-4\appdata\local\intuit
2012-10-06 05:05:40 -------- d-----w- c:\users\ws-4\appdata\local\Identities
2012-10-06 05:05:40 -------- d-----w- c:\users\ws-4\appdata\local\Help
2012-10-06 05:04:10 -------- d-----w- c:\users\ws-4\appdata\local\Google
2012-10-06 05:04:10 -------- d-----w- c:\users\ws-4\appdata\local\Deployment
2012-10-06 05:04:10 -------- d-----w- c:\users\ws-4\appdata\local\DassaultSystemes
2012-10-06 05:04:10 -------- d-----w- c:\users\ws-4\appdata\local\Citrix
2012-10-06 05:04:10 -------- d-----w- c:\users\ws-4\appdata\local\BVRP Software
2012-10-06 05:04:10 -------- d-----w- c:\users\ws-4\appdata\local\Autodesk
2012-10-06 05:04:09 -------- d-----w- c:\users\ws-4\appdata\local\ATI
2012-10-06 05:04:07 -------- d-----w- c:\users\ws-4\appdata\local\Apple Computer
2012-10-06 05:04:07 -------- d-----w- c:\users\ws-4\appdata\local\Apple
2012-10-06 05:04:02 -------- d-----w- c:\users\ws-4\appdata\local\Akamai
2012-10-06 05:04:00 -------- d-----w- c:\users\ws-4\appdata\local\Adobe
2012-10-06 05:00:55 -------- d-----w- c:\program files\common files\eDrawings2007
2012-10-06 05:00:55 -------- d-----w- c:\program files\common files\Bullzip
2012-10-06 05:00:51 -------- d-----w- c:\program files\common files\Autodesk Shared
2012-10-06 05:00:51 -------- d-----w- c:\program files\common files\ATI Technologies
2012-10-06 04:59:57 -------- d-----w- c:\program files\common files\Akamai
2012-10-06 04:59:14 -------- d-----w- c:\windows\system32\XPSViewer
2012-10-06 04:57:45 -------- d-----w- c:\program files\TruStile
2012-10-06 04:57:43 -------- d-----w- c:\program files\Transparent
2012-10-06 04:57:42 -------- d-----w- c:\program files\TM Cobb Company
2012-10-06 04:57:37 -------- d-----w- c:\program files\TDCI
2012-10-06 04:57:34 -------- d-----w- c:\program files\Symantec
2012-10-06 04:57:14 -------- d-----r- c:\program files\Skype
2012-10-06 04:57:13 -------- d-----w- c:\program files\Security Task Manager
2012-10-06 04:57:13 -------- d-----w- c:\program files\Seagate Software
2012-10-06 04:56:56 -------- d-----w- c:\program files\Roxio
2012-10-06 04:56:55 -------- d-----w- c:\program files\ReflexiveArcade
2012-10-06 04:56:51 -------- d-----w- c:\program files\Realtek
2012-10-06 04:56:32 -------- d-----w- c:\program files\Power Commander 5
2012-10-06 04:56:27 -------- d-----w- c:\program files\pdf995
2012-10-06 04:56:27 -------- d-----w- c:\program files\pdf-tools
2012-10-06 04:56:26 -------- d-----w- c:\program files\OTHER
2012-10-06 04:55:30 -------- d-----w- c:\program files\OpenOffice.org 3
2012-10-06 04:55:30 -------- d-----w- c:\program files\Online Services
2012-10-06 04:55:30 -------- d-----w- c:\program files\NetWaiting
2012-10-06 04:55:27 -------- d-----w- c:\program files\MY DOCS
2012-10-06 04:55:27 -------- d-----w- c:\program files\MSXML 6.0
2012-10-06 04:55:27 -------- d-----w- c:\program files\MSXML 4.0
2012-10-06 04:55:27 -------- d-----w- c:\program files\MSECACHE
2012-10-06 04:55:23 -------- d-----w- c:\program files\Milgard
2012-10-06 04:55:22 -------- d-----w- c:\program files\Microsoft Windows Small Business Server
2012-10-06 04:53:21 -------- d-----w- c:\program files\Microsoft SQL Server
2012-10-06 04:53:07 -------- d-----w- c:\program files\Microsoft IntelliPoint
2012-10-06 04:53:06 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-10-06 04:52:56 -------- d-----w- c:\program files\LDQS
2012-10-06 04:48:37 -------- d-----w- c:\program files\Kolbe
2012-10-06 04:44:14 -------- d-----w- c:\program files\JELD-WEN
2012-10-06 04:43:20 -------- d-----w- c:\program files\iTunes
2012-10-06 04:43:18 -------- d-----w- c:\program files\iPod
2012-10-06 04:43:13 -------- d-----w- c:\program files\Intuit
2012-10-06 04:43:03 -------- d-----w- c:\program files\Inpractis Corporation
2012-10-06 04:42:33 -------- d-----w- c:\program files\HP
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUMB669.tmp
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUM305.tmp
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUM1181.tmp
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUM117C.tmp
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUM1179.tmp
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUM1176.tmp
2012-10-06 04:42:32 -------- d-----w- c:\program files\GUM116C.tmp
2012-10-06 04:40:10 -------- d-----w- c:\program files\Friedman Corp
2012-10-06 04:40:10 -------- d-----w- c:\program files\FAVS
2012-10-06 04:40:08 -------- d-----w- c:\program files\Dropbox
2012-10-06 04:40:08 -------- d-----w- c:\program files\DESKTOP
2012-10-06 04:40:03 -------- d-----w- c:\program files\Dell Support
2012-10-06 04:40:03 -------- d-----w- c:\program files\Dell
2012-10-06 04:38:51 -------- d-----w- c:\program files\Autodesk
2012-10-06 04:36:20 -------- d-----w- c:\program files\ATI Technologies
2012-10-06 04:35:59 -------- d-----w- c:\program files\AOL Computer Checkup
2012-10-06 04:33:36 -------- d-----w- c:\program files\Andersen iQ
2012-10-06 04:29:21 -------- d-----w- c:\windows\Hewlett-Packard
2012-10-06 04:29:06 -------- d-----w- C:\VJVod_Cache
2012-10-06 04:29:06 -------- d-----w- C:\TEMP
2012-10-06 04:28:07 -------- d-----w- C:\Quotemaster5
2012-10-06 04:27:03 -------- d-----w- C:\Quotemaster
2012-10-06 04:23:38 -------- d-----w- C:\ProQuote6Temp
2012-10-06 04:23:35 -------- d-----w- C:\optiplex 320
2012-10-06 04:23:27 -------- d-----w- C:\MQS2010PreRelease
2012-10-06 04:21:17 -------- d-----w- C:\MQS
2012-10-06 04:21:17 -------- d-----w- C:\MDT
2012-10-06 04:21:17 -------- d-----w- C:\lwnqto
2012-10-06 04:21:15 -------- d-----w- C:\iqsafe_11.0
2012-10-06 04:21:12 -------- d-----w- C:\iqsafe_10.2
2012-10-06 04:21:11 -------- d-----w- C:\Inetpub
2012-10-06 04:21:11 -------- d-----w- C:\GameRival
2012-10-06 04:20:32 -------- d-----w- C:\fleetwood
2012-10-06 04:20:32 -------- d-----w- C:\fc5d9589077aac692e6c851d52
2012-10-06 04:18:40 -------- d-----w- C:\edgenet
2012-10-06 04:18:39 -------- d-----w- C:\drivers
2012-10-06 04:18:37 -------- d-----w- C:\Downloads
2012-10-06 04:16:02 -------- d-----w- C:\DELL
2012-10-06 04:15:56 -------- d-sha-r- C:\cmdcons
2012-10-06 04:15:50 -------- d-----w- C:\BROTHER DRIVER
2012-10-06 04:15:44 -------- d-----w- C:\ATI
2012-10-06 02:54:46 -------- d-----w- c:\programdata\Laplink
2012-10-06 02:53:38 -------- d-----w- c:\program files\Laplink
2012-10-06 02:27:47 -------- d-----w- c:\windows\system32\Wat
.
==================== Find3M ====================
.
2012-10-22 21:23:15 152576 ----a-w- c:\windows\system32\msclmd.dll
2012-09-14 18:28:53 2048 ----a-w- c:\windows\system32\tzres.dll
2012-08-31 17:18:09 1211760 ----a-w- c:\windows\system32\drivers\ntfs.sys
2012-08-24 06:59:17 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-08-24 06:51:27 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-08-24 06:51:02 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-24 06:47:26 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-08-24 06:47:12 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-08-24 06:43:58 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-08-20 17:40:31 169984 ----a-w- c:\windows\system32\winsrv.dll
2012-08-20 17:40:01 293376 ----a-w- c:\windows\system32\KernelBase.dll
2012-08-20 17:37:58 271360 ----a-w- c:\windows\system32\conhost.exe
2012-08-20 15:33:28 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-08-20 15:33:28 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-08-20 15:33:28 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-08-20 15:33:28 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-08-02 16:57:20 490496 ----a-w- c:\windows\system32\d3d10level9.dll
2012-07-19 16:45:04 3993600 ----a-w- c:\program files\GUT1177.tmp
.
============= FINISH: 11:26:42.71 ===============

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-10-30 13:05:42
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST500DM002-1BD142 rev.KC45
Running: gmer.exe; Driver: C:\Users\WS-4\AppData\Local\Temp\kxldqpob.sys


---- System - GMER 1.0.15 ----

SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwCreateThread [0x908FD7F0]
SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwLoadDriver [0x908FD8B0]
SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSetSystemInformation [0x908FD870]
SSDT \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET) ZwSystemDebugControl [0x908FD830]

---- Kernel code sections - GMER 1.0.15 ----

.text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 82A81A49 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82ABB4D2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!KeRemoveQueueEx + 1203 82AC2638 4 Bytes [F0, D7, 8F, 90]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1313 82AC2748 4 Bytes [B0, D8, 8F, 90]
.text ntkrnlpa.exe!KeRemoveQueueEx + 161F 82AC2A54 4 Bytes [70, D8, 8F, 90]
.text ntkrnlpa.exe!KeRemoveQueueEx + 1667 82AC2A9C 4 Bytes [30, D8, 8F, 90]
.text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x91233000, 0x205494, 0xE8000020]
? C:\Users\WS-4\AppData\Local\Temp\mbr.sys The system cannot find the file specified. !

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1436] USER32.dll!RegisterMessagePumpHook + 2F1 75728B9E 7 Bytes JMP 520DAAB0 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1436] USER32.dll!IsDialogMessageW + 340 75734444 7 Bytes JMP 520DAA3F C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1436] USER32.dll!GetWindowInfo 75734B5E 5 Bytes JMP 51F24559 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[1436] USER32.dll!ToUnicodeEx + 71 75742223 7 Bytes JMP 51F24BB1 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[1804] kernel32.dll!SetUnhandledExceptionFilter 7548F4FB 4 Bytes [C2, 04, 00, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateFile + 6 76F155CE 4 Bytes [28, 00, 23, 00] {SUB [EAX], AL; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateFile + B 76F155D3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateKey + 6 76F1560E 4 Bytes [68, 01, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateKey + B 76F15613 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateMutant + 6 76F1564E 4 Bytes [68, 02, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateMutant + B 76F15653 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateSection + 6 76F156EE 4 Bytes [A8, 02, 23, 00] {TEST AL, 0x2; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtCreateSection + B 76F156F3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtMapViewOfSection + 6 76F15C2E 4 Bytes CALL 75F17F37 C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation)
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtMapViewOfSection + B 76F15C33 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenFile + 6 76F15CDE 4 Bytes [68, 00, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenFile + B 76F15CE3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenKey + 6 76F15D0E 4 Bytes [A8, 01, 23, 00] {TEST AL, 0x1; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenKey + B 76F15D13 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenKeyEx + 6 76F15D1E 4 Bytes CALL 75F18024 C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation)
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenKeyEx + B 76F15D23 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenMutant + 6 76F15D5E 4 Bytes [28, 02, 23, 00] {SUB [EDX], AL; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenMutant + B 76F15D63 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcess + 6 76F15D8E 1 Byte [68]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcess + 6 76F15D8E 4 Bytes [68, 03, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcess + B 76F15D93 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcessToken + 6 76F15D9E 1 Byte [A8]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcessToken + 6 76F15D9E 4 Bytes [A8, 03, 23, 00] {TEST AL, 0x3; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcessToken + B 76F15DA3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcessTokenEx + 6 76F15DAE 4 Bytes [68, 04, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenProcessTokenEx + B 76F15DB3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenSection + 6 76F15DCE 4 Bytes CALL 75F180D5 C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation)
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenSection + B 76F15DD3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThread + 6 76F15E0E 1 Byte [28]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThread + 6 76F15E0E 4 Bytes [28, 03, 23, 00] {SUB [EBX], AL; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThread + B 76F15E13 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThreadToken + 6 76F15E1E 4 Bytes [28, 04, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThreadToken + B 76F15E23 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThreadTokenEx + 6 76F15E2E 4 Bytes [A8, 04, 23, 00] {TEST AL, 0x4; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtOpenThreadTokenEx + B 76F15E33 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtQueryAttributesFile + 6 76F15F3E 4 Bytes [A8, 00, 23, 00] {TEST AL, 0x0; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtQueryAttributesFile + B 76F15F43 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtQueryFullAttributesFile + 6 76F15FEE 4 Bytes CALL 75F182F3 C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation)
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtQueryFullAttributesFile + B 76F15FF3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtSetInformationFile + 6 76F1663E 4 Bytes [28, 01, 23, 00] {SUB [ECX], AL; AND EAX, [EAX]}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtSetInformationFile + B 76F16643 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtSetInformationThread + 6 76F1669E 1 Byte [E8]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtSetInformationThread + 6 76F1669E 4 Bytes CALL 75F189A6 C:\Windows\system32\ole32.dll (Microsoft OLE for Windows/Microsoft Corporation)
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtSetInformationThread + B 76F166A3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtUnmapViewOfSection + 6 76F169BE 4 Bytes [28, 05, 23, 00]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ntdll.dll!NtUnmapViewOfSection + B 76F169C3 1 Byte [E2]
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] kernel32.dll!CreateProcessW 7544204D 5 Bytes JMP 00010030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] kernel32.dll!CreateProcessA 75442082 5 Bytes JMP 00010070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!DeleteObject 75BB5F14 5 Bytes JMP 003601B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SelectObject 75BB6640 5 Bytes JMP 003605F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetTextColor 75BB6906 5 Bytes JMP 00360A30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetBkMode 75BB69B1 5 Bytes JMP 003608F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!DeleteDC 75BB6EAA 5 Bytes JMP 00360170
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetDeviceCaps 75BB6F7F 5 Bytes JMP 003603B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!ExtSelectClipRgn 75BB7114 5 Bytes JMP 003602F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SelectClipRgn 75BB7242 5 Bytes JMP 003605B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetStretchBltMode 75BB7705 5 Bytes JMP 003606B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetCurrentObject 75BB7917 5 Bytes JMP 00360370
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextMetricsW 75BB7B8F 5 Bytes JMP 00360E30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextAlign 75BB7DAF 5 Bytes JMP 00360D70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!IntersectClipRect 75BB7DFE 5 Bytes JMP 003603F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!ExtTextOutW 75BB8192 5 Bytes JMP 00360970
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetTextAlign 75BB828E 5 Bytes JMP 003609F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetClipBox 75BB8525 5 Bytes JMP 00360330
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!MoveToEx 75BB8C21 5 Bytes JMP 00360470
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!StretchDIBits 75BBA53E 5 Bytes JMP 00360770
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!RestoreDC 75BBA67B 5 Bytes JMP 00360530
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SaveDC 75BBA74B 5 Bytes JMP 00360570
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextExtentPoint32W 75BBB4B5 5 Bytes JMP 00360670
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextFaceW 75BBB73A 2 Bytes JMP 00360D30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextFaceW + 3 75BBB73D 2 Bytes [7A, 8A] {JP 0xffffffffffffff8c}
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetFontData 75BBBCC4 5 Bytes JMP 00360C70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetWorldTransform 75BBC90A 5 Bytes JMP 003606F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!CreateDCA 75BBCCA9 5 Bytes JMP 003600B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!CreateDCW 75BBCF79 5 Bytes JMP 003600F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!CreateICW 75BBCFD0 5 Bytes JMP 00360130
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextMetricsA 75BBD0F2 5 Bytes JMP 00360DF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!Rectangle 75BBF1FF 5 Bytes JMP 003609B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!LineTo 75BBF59B 5 Bytes JMP 00360430
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetICMMode 75BBFAA4 5 Bytes JMP 00360DB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!ExtTextOutA 75BC03F9 5 Bytes JMP 00360930
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextExtentPoint32A 75BC07B0 5 Bytes JMP 00360630
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!ExtEscape 75BC2949 5 Bytes JMP 003602B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!Escape 75BC3939 5 Bytes JMP 00360270
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetTextFaceA 75BC3E6A 5 Bytes JMP 00360CF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetPolyFillMode 75BCD851 5 Bytes JMP 00360B30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SetMiterLimit 75BCDA0D 5 Bytes JMP 00360B70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!EndPage 75BD00D7 5 Bytes JMP 00360230
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!ResetDCW 75BD050D 5 Bytes JMP 00360AB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!GetGlyphOutlineW 75BDC1BA 5 Bytes JMP 00360CB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!CreateScalableFontResourceW 75BDE817 5 Bytes JMP 00360BB0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!AddFontResourceW 75BDEC13 5 Bytes JMP 00360BF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!RemoveFontResourceW 75BDF109 5 Bytes JMP 00360C30
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!AbortDoc 75BE4C63 5 Bytes JMP 00360030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!EndDoc 75BE50AA 5 Bytes JMP 003601F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!StartPage 75BE5195 5 Bytes JMP 00360730
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!StartDocW 75BE5BB0 5 Bytes JMP 003607F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!BeginPath 75BE635D 5 Bytes JMP 00360830
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!SelectClipPath 75BE63B4 5 Bytes JMP 00360AF0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!CloseFigure 75BE640F 5 Bytes JMP 00360070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!EndPath 75BE6466 5 Bytes JMP 00360A70
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!StrokePath 75BE6699 5 Bytes JMP 003607B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!FillPath 75BE6726 5 Bytes JMP 00360870
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!PolylineTo 75BE6B94 5 Bytes JMP 003604F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!PolyBezierTo 75BE6C25 5 Bytes JMP 003604B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] GDI32.dll!PolyDraw 75BE6CD7 5 Bytes JMP 003608B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!ActivateKeyboardLayout 75728203 5 Bytes JMP 003704F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!ScreenToClient 7572A506 7 Bytes JMP 00370670
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!RegisterClipboardFormatA 7572C091 5 Bytes JMP 003702F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!RegisterClipboardFormatW 7572DF8D 5 Bytes JMP 003702B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!SetCursor 75733075 5 Bytes JMP 00370530
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!MonitorFromWindow 75733622 7 Bytes JMP 00370630
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!PostMessageW 7573447B 5 Bytes JMP 003705F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!IsWindowVisible 75734D69 7 Bytes JMP 003706B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClientRect 757354DD 7 Bytes JMP 003705B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!MapWindowPoints 75735CAA 5 Bytes JMP 00370570
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetParent 75736029 7 Bytes JMP 003706F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!EmptyClipboard 7574290C 5 Bytes JMP 00370130
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!SetClipboardData 75742962 5 Bytes JMP 00370170
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClipboardData 75742BA7 5 Bytes JMP 00370030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClipboardFormatNameW 75745FD2 5 Bytes JMP 00370230
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!SetClipboardViewer 75746FF6 5 Bytes JMP 003704B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClipboardFormatNameA 7574700A 5 Bytes JMP 00370270
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!ChangeClipboardChain 7575147C 5 Bytes JMP 00370430
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetTopWindow 757524D9 7 Bytes JMP 00370730
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!CloseClipboard 7575446C 5 Bytes JMP 003700B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!OpenClipboard 7575447E 5 Bytes JMP 00370070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!IsClipboardFormatAvailable 757544FF 5 Bytes JMP 003700F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClipboardSequenceNumber 75754513 5 Bytes JMP 00370330
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClipboardOwner 75754525 5 Bytes JMP 00370370
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!CountClipboardFormats 7575470A 5 Bytes JMP 003701F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!EnumClipboardFormats 757547EC 5 Bytes JMP 003701B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetOpenClipboardWindow 7575480B 5 Bytes JMP 003703F0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!SetCursorPos 7576C1B0 5 Bytes JMP 00370770
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetClipboardViewer 75784AF7 5 Bytes JMP 00370470
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] USER32.dll!GetPriorityClipboardFormat 75784BF9 5 Bytes JMP 003703B0
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ole32.dll!OleSetClipboard 75F60045 5 Bytes JMP 00380030
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ole32.dll!OleIsCurrentClipboard 75F636B2 5 Bytes JMP 00380070
.text C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe[2612] ole32.dll!OleGetClipboard 75F8FDCD 5 Bytes JMP 003800B0
.text C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE[3648] kernel32.dll!SetUnhandledExceptionFilter 7548F4FB 5 Bytes JMP 5E117DFE C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)
.text C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE[3648] ole32.dll!OleLoadFromStream 75F06143 5 Bytes JMP 5E5E7978 C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)
.text C:\Program Files\Microsoft Office\Office14\EXCEL.EXE[4412] kernel32.dll!SetUnhandledExceptionFilter 7548F4FB 5 Bytes JMP 5E117DFE C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)
.text C:\Program Files\Microsoft Office\Office14\EXCEL.EXE[4412] ole32.dll!OleLoadFromStream 75F06143 5 Bytes JMP 5E5E7978 C:\Program Files\Common Files\Microsoft Shared\office14\mso.dll (Microsoft Office 2010 component/Microsoft Corporation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4472] ntdll.dll!LdrGetProcedureAddress + 26 76F32239 7 Bytes JMP 51DC5B00 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4472] kernel32.dll!K32GetDeviceDriverBaseNameW + 5D 7548941E 7 Bytes JMP 52007B35 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4472] kernel32.dll!QueryPerformanceCounter + 13 7548C435 7 Bytes JMP 52007B58 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4472] kernel32.dll!LoadAppInitDlls + 355 7548F4F6 7 Bytes JMP 51DCEF12 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[4472] GDI32.dll!GetViewportOrgEx + 26C 75BB884B 7 Bytes JMP 52007AB6 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

Device \Driver\ACPI_HAL \Device\0000004c halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SOFTWARE\Classes\Interface\{BC92C2AE-66C4-4245-8253-807491BEEB22}\ProxyStubClsid32@ {00020420-0000-0000-C000-000000000046}
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelColumn\CurVer@ Microsoft.AnalysisServices.MiningModelColumn.9
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelPermission
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelPermission@ Microsoft.AnalysisServices.MiningModelPermission
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelPermission\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelPermission\CLSID@ {B1E25E09-DDC9-4989-B966-C7FA86C08C16}
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelPermission\CurVer
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningModelPermission\CurVer@ Microsoft.AnalysisServices.MiningModelPermission.9
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningStructure
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningStructure@ Microsoft.AnalysisServices.MiningStructure
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningStructure\CLSID
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningStructure\CurVer
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningStructure\CurVer@ Microsoft.AnalysisServices.Minin'Structure.9
Reg HKLM\SOFTWARE\Classes\Microsoft.AnalysisServices.MiningStructureCacheMode\CurVer@ Microsoft.An!lysisSe2vices.MiningStr5ctureCacheMode.9

---- EOF - GMER 1.0.15 ----

I don't have the option anywhere to add an attachment for the other DDS log

Edited by prov1kenobi, 30 October 2012 - 04:19 PM.
Moved to log forum. ~ OB


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 31 October 2012 - 10:02 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

Please download ComboFix from any of the links below, and save it to your desktop. For information regarding this download, please visit this web page: http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

IMPORTANT....

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Do not install any other programs until this if fixed.


How to : Disable Anti-virus and Firewall...
http://www.bleepingcomputer.com/forums/topic114351.html

Double click on ComboFix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt
Note:
Do not mouse click ComboFix's window while it's running. That may cause it to stall


Note: If you have difficulty properly disabling your protective programs, refer to this link --> http://www.bleepingcomputer.com/forums/topic114351.html


Note: If after running ComboFix you get this error message "Illegal operation attempted on a registry key that has been marked for deletion." when attempting to run a program all you need to do is restart the computer to reset the registry.
===

Third party programs if not up to date can be the cause infiltration of an infection.

Please run this security check for my review.

Download Security Check by screen317 from here.
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Search.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Rn].txt (n is a number).

Please post the logs for my review.

#3 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 31 October 2012 - 11:59 AM

ComboFix 12-10-31.03 - WS-4 10/31/2012 9:28.4.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3294.1866 [GMT -7:00]
Running from: c:\users\WS-4\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 5.2 *Disabled/Outdated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 5.2 *Disabled/Outdated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\WS-4\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue
.
.
((((((((((((((((((((((((( Files Created from 2012-09-28 to 2012-10-31 )))))))))))))))))))))))))))))))
.
.
2012-10-31 16:36 . 2012-10-31 16:40 -------- d-----w- c:\users\WS-4\AppData\Local\temp
2012-10-31 16:36 . 2012-10-31 16:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-10-30 22:49 . 2012-10-30 22:49 -------- d-----w- C:\found.000
2012-10-29 17:34 . 2012-10-29 17:34 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-29 17:34 . 2012-10-29 17:34 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-29 17:34 . 2012-10-29 17:34 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-25 20:33 . 2012-10-25 20:33 -------- d-----w- c:\users\WS-4\AppData\Local\IsolatedStorage
2012-10-23 10:03 . 2012-07-04 19:45 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-10-23 10:02 . 2012-08-22 17:16 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-10-23 10:02 . 2012-08-22 17:16 1292144 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-10-23 10:02 . 2012-08-22 17:16 240496 ----a-w- c:\windows\system32\drivers\netio.sys
2012-10-23 10:02 . 2012-08-22 17:16 187760 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-10-23 10:01 . 2012-08-21 20:12 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2012-10-22 21:54 . 2011-02-19 06:30 805376 ----a-w- c:\windows\system32\FntCache.dll
2012-10-22 21:54 . 2011-02-19 06:30 739840 ----a-w- c:\windows\system32\d2d1.dll
2012-10-22 21:18 . 2012-10-22 21:18 -------- d-----w- c:\windows\system32\SPReview
2012-10-22 20:59 . 2012-10-22 20:59 -------- d-----w- c:\program files\Common Files\Skype
2012-10-22 19:46 . 2010-11-20 12:21 1159168 ----a-w- c:\windows\system32\sysmain.dll
2012-10-22 19:46 . 2010-11-20 12:21 505856 ----a-w- c:\windows\system32\taskschd.dll
2012-10-22 19:46 . 2010-11-20 12:18 863744 ----a-w- c:\windows\system32\diagperf.dll
2012-10-22 19:46 . 2010-11-20 12:17 4247040 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2012-10-22 19:46 . 2010-11-20 12:17 51200 ----a-w- c:\windows\system32\PushPrinterConnections.exe
2012-10-22 19:46 . 2010-11-20 10:24 52224 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2012-10-22 19:44 . 2010-11-20 12:21 577024 ----a-w- c:\windows\system32\wpd_ci.dll
2012-10-22 19:43 . 2010-11-20 12:21 159232 ----a-w- c:\windows\system32\syncui.dll
2012-10-22 19:43 . 2010-11-20 12:17 254976 ----a-w- c:\windows\system32\wsqmcons.exe
2012-10-22 19:43 . 2010-11-20 12:16 293888 ----a-w- c:\windows\system32\ssText3d.scr
2012-10-22 19:43 . 2010-11-20 12:17 1174016 ----a-w- c:\program files\Windows Sidebar\sidebar.exe
2012-10-22 19:43 . 2010-11-20 12:21 51712 ----a-w- c:\windows\system32\wscapi.dll
2012-10-22 19:43 . 2010-11-20 12:21 115712 ----a-w- c:\windows\system32\setupcln.dll
2012-10-22 19:43 . 2010-11-20 12:21 246272 ----a-w- c:\windows\system32\scansetting.dll
2012-10-22 19:43 . 2010-11-20 12:21 135680 ----a-w- c:\windows\system32\recovery.dll
2012-10-22 19:43 . 2010-11-20 12:16 220672 ----a-w- c:\windows\system32\Ribbons.scr
2012-10-22 19:43 . 2010-11-20 12:20 509440 ----a-w- c:\windows\system32\qedit.dll
2012-10-22 19:41 . 2010-11-20 12:20 165376 ----a-w- c:\windows\system32\provsvc.dll
2012-10-22 19:41 . 2010-11-20 12:19 194560 ----a-w- c:\windows\system32\ListSvc.dll
2012-10-22 19:41 . 2010-11-20 12:18 744448 ----a-w- c:\windows\system32\ActionCenter.dll
2012-10-22 19:41 . 2010-11-20 12:18 537600 ----a-w- c:\windows\system32\ActionCenterCPL.dll
2012-10-22 19:41 . 2010-11-20 12:20 1596416 ----a-w- c:\program files\DVD Maker\Pipeline.dll
2012-10-22 19:41 . 2010-11-20 12:19 2576384 ----a-w- c:\windows\system32\gameux.dll
2012-10-22 19:41 . 2010-11-20 12:19 68096 ----a-w- c:\windows\system32\Mcx2Svc.dll
2012-10-22 19:41 . 2010-11-20 12:19 488448 ----a-w- c:\windows\system32\evr.dll
2012-10-22 19:41 . 2010-11-05 02:11 312168 ----a-w- c:\windows\system32\MCEWMDRMNDBootstrap.dll
2012-10-22 19:41 . 2010-11-20 12:18 630784 ----a-w- c:\windows\system32\DXPTaskRingtone.dll
2012-10-22 19:40 . 2010-11-20 12:21 242176 ----a-w- c:\program files\DVD Maker\WMM2CLIP.dll
2012-10-22 19:40 . 2010-11-20 12:16 776192 ----a-w- c:\windows\system32\calc.exe
2012-10-22 19:40 . 2010-11-20 12:16 878592 ----a-w- c:\windows\system32\Bubbles.scr
2012-10-22 19:40 . 2010-11-20 12:17 257536 ----a-w- c:\windows\system32\WindowsAnytimeUpgrade.exe
2012-10-22 19:40 . 2010-11-20 12:17 292864 ----a-w- c:\windows\system32\WindowsAnytimeUpgradeResults.exe
2012-10-22 19:40 . 2010-11-20 12:20 859648 ----a-w- c:\windows\system32\OobeFldr.dll
2012-10-22 18:33 . 2010-11-05 01:58 1130824 ----a-w- c:\windows\system32\dfshim.dll
2012-10-22 18:32 . 2010-11-20 12:18 2522624 ----a-w- c:\windows\system32\dbgeng.dll
2012-10-22 18:31 . 2010-11-20 12:19 400896 ----a-w- c:\windows\system32\ipsmsnap.dll
2012-10-22 18:30 . 2010-11-20 12:18 130048 ----a-w- c:\windows\system32\wbem\dsprov.dll
2012-10-22 18:28 . 2010-11-20 12:21 351232 ----a-w- c:\windows\system32\wmicmiplugin.dll
2012-10-22 18:28 . 2010-11-20 12:21 780288 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2012-10-22 18:28 . 2010-11-20 12:21 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2012-10-22 18:28 . 2010-11-20 12:19 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2012-10-22 18:27 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\sqmapi.dll
2012-10-22 18:27 . 2010-11-20 12:21 697344 ----a-w- c:\windows\system32\SmiEngine.dll
2012-10-22 18:27 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\wdscore.dll
2012-10-22 18:27 . 2010-11-20 12:17 209920 ----a-w- c:\windows\system32\PkgMgr.exe
2012-10-22 18:25 . 2010-11-20 12:18 323072 ----a-w- c:\windows\system32\drvstore.dll
2012-10-22 18:25 . 2010-11-20 12:18 257024 ----a-w- c:\windows\system32\dpx.dll
2012-10-22 18:19 . 2012-08-24 16:57 172544 ----a-w- c:\windows\system32\wintrust.dll
2012-10-22 18:06 . 2012-08-30 17:12 3914096 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-10-22 18:06 . 2012-08-30 17:12 3968880 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-10-22 18:06 . 2012-08-10 23:56 542208 ----a-w- c:\windows\system32\kerberos.dll
2012-10-22 18:06 . 2012-05-05 07:46 400896 ----a-w- c:\windows\system32\srcore.dll
2012-10-22 18:06 . 2010-11-20 12:17 262656 ----a-w- c:\windows\system32\rstrui.exe
2012-10-22 18:06 . 2012-06-02 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2012-10-22 18:06 . 2012-06-02 04:36 1159680 ----a-w- c:\windows\system32\crypt32.dll
2012-10-22 18:06 . 2012-06-02 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll
2012-10-22 18:06 . 2012-07-04 21:14 41984 ----a-w- c:\windows\system32\browcli.dll
2012-10-22 18:06 . 2012-07-04 21:14 102912 ----a-w- c:\windows\system32\browser.dll
2012-10-22 18:06 . 2012-07-18 17:47 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-10-22 18:04 . 2012-05-14 04:33 769024 ----a-w- c:\windows\system32\localspl.dll
2012-10-22 18:04 . 2010-11-20 12:21 30208 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\winprint.dll
2012-10-22 18:00 . 2012-10-24 10:00 -------- d-----w- c:\windows\system32\catroot2
2012-10-22 17:48 . 2012-10-22 17:48 -------- d-----w- c:\windows\SoftwareDistribution.old
2012-10-22 17:26 . 2012-10-22 17:26 -------- d-----w- c:\windows\CheckSur
2012-10-22 16:53 . 2012-10-22 17:03 -------- d-----w- C:\7b4ae1f890e9a521cb01622f
2012-10-22 16:47 . 2012-10-22 16:47 -------- d-----w- c:\users\WS-4\AppData\Roaming\Malwarebytes
2012-10-22 16:47 . 2012-10-22 16:47 -------- d-----w- c:\programdata\Malwarebytes
2012-10-22 16:47 . 2012-09-30 02:54 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-10-22 15:24 . 2012-10-22 15:24 -------- d-----w- c:\windows\system32\EventProviders
2012-10-22 15:24 . 2012-10-22 15:46 -------- d-----w- C:\7533d60f6a2161adc127c2c30a75
2012-10-19 23:29 . 2012-10-29 15:37 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-10-19 23:24 . 2012-10-19 23:24 -------- d-----w- c:\users\WS-4\AppData\Local\HP
2012-10-19 22:53 . 2012-10-19 22:53 -------- d-----w- c:\programdata\HP Product Assistant
2012-10-19 22:46 . 2009-07-08 10:51 452408 ----a-w- c:\windows\system32\hpzids01.dll
2012-10-18 20:26 . 2012-10-18 20:26 -------- d-----w- c:\program files\Skillbrains
2012-10-18 20:26 . 2012-10-18 20:26 -------- d-----w- c:\users\WS-4\AppData\Local\Skillbrains
2012-10-18 16:18 . 2009-09-05 00:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2012-10-18 16:18 . 2007-04-05 01:53 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2012-10-18 16:17 . 2012-10-18 19:09 -------- d-----w- c:\program files\You Have to Win the Game
2012-10-10 20:41 . 2012-10-31 01:45 60 ----a-w- c:\windows\wpd99.drv
2012-10-10 20:41 . 2012-10-11 20:07 36864 ----a-w- c:\windows\system32\pdf995mon.dll
2012-10-10 20:41 . 2012-10-11 20:07 1667584 ----a-w- c:\windows\system32\pdfmona.dll
2012-10-10 18:10 . 2012-10-10 18:10 -------- d-----w- c:\users\WS-4\AppData\Local\Marvin Windows and Doors
2012-10-09 21:04 . 2012-10-09 21:04 -------- d-----w- c:\users\WS-4\AppData\Local\VS Revo Group
2012-10-09 21:04 . 2009-12-30 18:21 27192 ----a-w- c:\windows\system32\drivers\revoflt.sys
2012-10-09 21:04 . 2012-10-09 21:04 -------- d-----w- c:\program files\VS Revo Group
2012-10-09 16:55 . 2012-10-19 23:32 -------- d-----w- c:\users\WS-4\AppData\Local\ElevatedDiagnostics
2012-10-09 16:55 . 2012-10-09 17:06 -------- d-----w- c:\windows\softwaredistribution.bak1
2012-10-09 16:26 . 2012-10-22 16:41 -------- d-----w- c:\users\Ron
2012-10-08 16:21 . 2012-10-08 16:21 -------- d-----w- c:\users\WS-4\AppData\Local\Macromedia
2012-10-08 16:20 . 2012-10-29 18:12 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-08 16:20 . 2012-10-29 18:12 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-08 15:29 . 2012-10-08 15:29 -------- d-----w- c:\users\WS-4\AppData\Local\Mozilla
2012-10-08 00:25 . 2012-10-08 00:25 -------- d-sh--w- c:\users\WS-4\UserData
2012-10-08 00:23 . 2012-10-08 00:23 -------- d-----w- c:\program files\ESET
2012-10-08 00:19 . 2012-10-08 00:19 -------- d-sh--w- c:\users\WS-4\PrivacIE
2012-10-08 00:19 . 2012-10-08 00:19 -------- d-sh--w- c:\users\WS-4\IECompatCache
2012-10-08 00:09 . 2010-04-16 00:33 281600 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpcpp093.DLL
2012-10-08 00:09 . 2010-04-16 00:33 161280 ----a-w- c:\windows\system32\hpcpn093.dll
2012-10-08 00:09 . 2007-07-16 22:29 59928 ----a-w- c:\windows\system32\fxcompchannel.dll
2012-10-07 23:54 . 2009-07-14 01:15 90624 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\HPZPPWN7.DLL
2012-10-06 05:08 . 2012-10-06 05:08 -------- d-----w- c:\users\WS-4\AppData\Local\Laplink
2012-10-06 05:08 . 2012-10-06 05:08 -------- d--h--w- c:\users\WS-4\AppData\Roaming\yahoo!
2012-10-06 05:08 . 2012-10-06 05:08 -------- d-----w- c:\users\WS-4\AppData\Roaming\WTSParadigm
2012-10-06 05:08 . 2012-10-06 05:08 -------- d-----w- c:\users\WS-4\AppData\Roaming\WTS Paradigm
2012-10-06 05:08 . 2012-10-06 05:08 -------- d-----w- c:\users\WS-4\AppData\Roaming\Winamp
2012-10-06 05:08 . 2012-10-06 05:08 -------- d-----w- c:\users\WS-4\AppData\Roaming\WhenU
2012-10-06 05:08 . 2012-10-06 05:08 -------- d-----w- c:\users\WS-4\AppData\Roaming\U3
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-22 21:23 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2012-07-19 16:45 . 2012-07-19 16:45 3993600 ----a-w- c:\program files\GUT1177.tmp
2012-10-27 19:12 . 2012-10-19 19:16 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2007-08-13 19:28 . 2012-10-19 19:16 135680 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\WS-4\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\WS-4\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\WS-4\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-06-30 04:19 94208 ----a-w- c:\users\WS-4\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\WS-4\AppData\Local\Akamai\netsession_win.exe" [2012-05-08 3331872]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-21 213936]
"LightShot"="c:\users\WS-4\AppData\Local\Skillbrains\lightshot\LightShot.exe" [2012-02-03 220160]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2012-07-30 640480]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2012-07-31 41944]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-04-20 58656]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-21 213936]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-06 421888]
"WTSParadigmBaseCamp"="c:\program files\WTS Paradigm\BaseCamp\BaseCampTray.exe" [2012-09-29 791040]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-03-07 3117344]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-23 150528]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-24 926896]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BDARemote.lnk - c:\program files\USB TV\EM28XX\BDARemote.exe [N/A]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoWelcomeScreen"= 1 (0x1)
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Windows Search.lnk]
backup=c:\windows\pss\Windows Search.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Kolbe ProQuote® Update Manager.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Kolbe ProQuote® Update Manager.lnk
backup=c:\windows\pss\Kolbe ProQuote® Update Manager.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^WS-4^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]
path=c:\users\WS-4\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
backup=c:\windows\pss\Dropbox.lnk.Startup
backupExtension=.Startup
.
[HKLM\~\startupfolder\C:^Users^WS-4^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk]
path=c:\users\WS-4\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
backup=c:\windows\pss\OpenOffice.org 3.3.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2011-07-20 01:29 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Ati HotKey Poller"=2 (0x2)
"ATI Smart"=2 (0x2)
"avg9wd"=2 (0x2)
"Microsoft Office Groove Audit Service"=3 (0x3)
"stllssvr"=3 (0x3)
.
R1 GhPciScan;GhostPciScanner;c:\program files\Symantec\Norton Ghost 2003\ghpciscan.sys [x]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [x]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [x]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [x]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [x]
R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x]
S2 AOLDiskOptimizer;AOLDiskOptimizer;c:\program files\AOL Computer Checkup\AOLDefragSrv.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [x]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 MSSQL$PROQUOTE;SQL Server (PROQUOTE);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [x]
S2 WTS Paradigm Base Camp;WTS Paradigm Base Camp;c:\program files\WTS Paradigm\BaseCamp\BaseCampService.exe [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPService REG_MULTI_SZ HPSLPSVC
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Contents of the 'Scheduled Tasks' folder
.
2012-10-31 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-08 18:12]
.
2012-10-31 c:\windows\Tasks\update-S-1-5-21-831869398-1503142069-386256727-1001.job
- c:\program files\Skillbrains\Updater\Updater.exe [2012-10-18 05:09]
.
2012-10-31 c:\windows\Tasks\update-sys.job
- c:\program files\Skillbrains\Updater\Updater.exe [2012-10-18 05:09]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert link target to existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
Trusted Zone: localhost
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\
FF - ExtSQL: 2012-10-05 21:55; {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}; c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF - ExtSQL: 2012-10-16 16:30; {e4a8a97b-f2ed-450b-b12d-ee082ba24781}; c:\users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF - ExtSQL: 2012-10-16 16:35; {7b13ec3e-999a-4b70-b9cb-2617b8323822}; c:\users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}
FF - ExtSQL: 2012-10-16 16:57; jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack; c:\users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack
FF - ExtSQL: 2012-10-17 15:44; tineye@ideeinc.com; c:\users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\tineye@ideeinc.com.xpi
FF - ExtSQL: 2012-10-19 15:55; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - ExtSQL: 2012-10-25 10:33; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: !HIDDEN! 2012-10-19 15:55; smartwebprinting@hp.com; c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - ORPHANS REMOVED - - - -
.
MSConfigStartUp-SpybotSD TeaTimer - c:\program files\Spybot - Search & Destroy\TeaTimer.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_5891ae0.dll"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'Explorer.exe'(172)
c:\users\WS-4\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Symantec\Norton Ghost 2003\GhostStartService.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\users\WS-4\AppData\Local\Skillbrains\lightshot\3.0.0.0\LightShot.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
c:\program files\Mozilla Firefox\firefox.exe
.
**************************************************************************
.
Completion time: 2012-10-31 09:44:46 - machine was rebooted
ComboFix-quarantined-files.txt 2012-10-31 16:44
ComboFix2.txt 2010-09-29 20:49
ComboFix3.txt 2011-03-30 02:35
ComboFix4.txt 2010-09-29 20:49
.
Pre-Run: 420,641,832,960 bytes free
Post-Run: 423,843,131,392 bytes free
.
- - End Of File - - EFF2D968CE71E4674241959548E50066


# AdwCleaner v2.006 - Logfile created 10/31/2012 at 09:47:28
# Updated 30/10/2012 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : WS-4 - WS-4-PC
# Boot Mode : Normal
# Running from : C:\Users\WS-4\Desktop\AdwCleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\Trymedia
Folder Found : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\ConduitCommon
Folder Found : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\CT2438727
Folder Found : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v16.0.2 (en-US)

Profile name : default-1350429686012 [Profil par défaut]
File : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\prefs.js

Found : user_pref("CT2438727..clientLogIsEnabled", false);
Found : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Found : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Found : user_pref("CT2438727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Found : user_pref("CT2438727.BrowserCompStateIsOpen_1000515", true);
Found : user_pref("CT2438727.CT2438727", "CT2438727");
Found : user_pref("CT2438727.CurrentServerDate", "31-10-2012");
Found : user_pref("CT2438727.DSInstall", false);
Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
Found : user_pref("CT2438727.DialogsGetterLastCheckTime", "Mon Oct 29 2012 10:59:37 GMT-0700 (Pacific Daylig[...]
Found : user_pref("CT2438727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
Found : user_pref("CT2438727.FirstServerDate", "17-10-2012");
Found : user_pref("CT2438727.FirstTime", true);
Found : user_pref("CT2438727.FirstTimeFF3", true);
Found : user_pref("CT2438727.FirstTimeHiddenVer", true);
Found : user_pref("CT2438727.FixPageNotFoundErrors", true);
Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Found : user_pref("CT2438727.HPInstall", false);
Found : user_pref("CT2438727.HasUserGlobalKeys", true);
Found : user_pref("CT2438727.HomePageProtectorEnabled", false);
Found : user_pref("CT2438727.HomepageBeforeUnload", "chrome://branding/locale/browserconfig.properties");
Found : user_pref("CT2438727.Initialize", true);
Found : user_pref("CT2438727.InitializeCommonPrefs", true);
Found : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
Found : user_pref("CT2438727.InstallationType", "DirectDownload");
Found : user_pref("CT2438727.InstalledDate", "Tue Oct 16 2012 16:35:10 GMT-0700 (Pacific Daylight Time)");
Found : user_pref("CT2438727.IsAlertDBUpdated", true);
Found : user_pref("CT2438727.IsGrouping", false);
Found : user_pref("CT2438727.IsInitSetupIni", true);
Found : user_pref("CT2438727.IsMulticommunity", false);
Found : user_pref("CT2438727.IsOpenThankYouPage", true);
Found : user_pref("CT2438727.IsOpenUninstallPage", true);
Found : user_pref("CT2438727.IsProtectorsInit", true);
Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Tue Oct 30 2012 13:45:41 GMT-0700 (Pacific Dayligh[...]
Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Found : user_pref("CT2438727.LastLogin_3.15.1.0", "Wed Oct 31 2012 08:12:42 GMT-0700 (Pacific Daylight Time)[...]
Found : user_pref("CT2438727.LatestVersion", "3.15.1.0");
Found : user_pref("CT2438727.Locale", "en");
Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Found : user_pref("CT2438727.MyStuffEnabledAtInstallation", false);
Found : user_pref("CT2438727.OriginalFirstVersion", "3.15.1.0");
Found : user_pref("CT2438727.SearchCaption", "Zynga Customized Web Search");
Found : user_pref("CT2438727.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Found : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Wed Oct 31 2012 09:07:29 GMT-0700 (Pacific Dayli[...]
Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Found : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
Found : user_pref("CT2438727.SearchProtectorEnabled", false);
Found : user_pref("CT2438727.SearchProtectorToolbarDisabled", false);
Found : user_pref("CT2438727.SendProtectorDataViaLogin", true);
Found : user_pref("CT2438727.ServiceMapLastCheckTime", "Wed Oct 31 2012 09:07:30 GMT-0700 (Pacific Daylight [...]
Found : user_pref("CT2438727.SettingsLastCheckTime", "Wed Oct 31 2012 08:12:40 GMT-0700 (Pacific Daylight Ti[...]
Found : user_pref("CT2438727.SettingsLastUpdate", "1351523139");
Found : user_pref("CT2438727.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2438727&SearchSource=13");
Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Fri Oct 19 2012 08:36:21 GMT-0700 (Pacific Day[...]
Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1331805997");
Found : user_pref("CT2438727.ToolbarShrinkedFromSetup", false);
Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
Found : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Found : user_pref("CT2438727.UserID", "UN97300602766613228");
Found : user_pref("CT2438727.ValidationData_Toolbar", 2);
Found : user_pref("CT2438727.alertChannelId", "832836");
Found : user_pref("CT2438727.components.1000515", true);
Found : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Found : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Sat Oct 27 2012 10:52:40 GMT-0700 (Pacific [...]
Found : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
Found : user_pref("CT2438727.initDone", true);
Found : user_pref("CT2438727.isAppTrackingManagerOn", false);
Found : user_pref("CT2438727.myStuffEnabled", true);
Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Found : user_pref("CT2438727.navigateToUrlOnSearch", false);
Found : user_pref("CT2438727.revertSettingsEnabled", false);
Found : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
Found : user_pref("CT2438727.searchProtectorEnableByLogin", true);
Found : user_pref("CT2438727.testingCtid", "");
Found : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Tue Oct 30 2012 13:45:39 GMT-0700 (Pacific D[...]
Found : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Tue Oct 30 2012 16:43:12 GMT-0700 (Pacific D[...]
Found : user_pref("CT2438727.usagesFlag", 2);
Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2438727/CT2438727[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/US", "\"0\"")[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"2[...]
Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"f61[...]
Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\WS-4\\AppData\\Roaming\\Mozilla\\Fi[...]
Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Found : user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
Found : user_pref("CommunityToolbar.ToolbarsList4", "CT2438727");
Found : user_pref("CommunityToolbar.globalUserId", "be276ced-4132-45f1-8171-f25e8a5b646d");
Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Oct 31 2012 09:07:3[...]
Found : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Oct 16 2012 16:35:19 GMT-070[...]
Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Found : user_pref("CommunityToolbar.notifications.locale", "en");
Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Oct 31 2012 09:07:29 GMT-0700 (P[...]
Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Found : user_pref("CommunityToolbar.notifications.userId", "4e7d3dd3-81d7-42c2-a52c-278fa48f894a");
Found : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Found : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]

-\\ Google Chrome v22.0.1229.94

File : C:\Users\WS-4\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.1] : icon_url ={"apps_promo_counter":11,"backup":{"_signature":"z/jPTVsZCI7UpgM6jx7DjloLucQlz05TwXsvyWYl5Os=","_version":4,"browser":{"show_home_button":true},"extensions":{"ids":["ahfgeienlihckogmohjhadlkjgocpleb","blpcfgokakmgnkcojhhkbfbldkacnbeo","chagngapoeghhljpcnojlkonegopkimi","coobgpohoikkiipiblmjeljniedjpjpf","dnedfaenfnkikficknkklbdedlecmpgc","jmafennmmkgbibkodgmhlekfaaiddaii","kmnlgpakocffbjcgfibfdmgmfhjgepni","mbniclmhobmnbdlbpiphghaielnnpgdp","nfhopoibjodcfbppkiginpbcpekbdgln","nkfaeghnhcdmgdjjnjggpgfhlefbfcpl","pjkljhegncpnkpknbcohdijeoejaedia"]},"homepage":"","homepage_is_newtabpage":false,"session":{"restore_on_startup":4,"urls_to_restore_on_startup":["hxxp://www.google.com/"]}},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"check_default_browser":false,"clear_data":{"cookies":false,"form_data":true,"time_period":3},"clear_lso_data_enabled":true,"last_known_google_url":"hxxp://www.google.com/","last_prompted_google_url":"hxxp://www.google.com/","pepper_flash_settings_enabled":true,"show_home_button":true,"window_placement":{"bottom":994,"left":20,"maximized":true,"right":1070,"top":20,"work_area_bottom":994,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"cloud_print":{"email":""},"countryid_at_install":21843,"custom_handlers":{"enabled":true,"registered_protocol_handlers":[{"protocol":"mailto","title":"Gmail","url":"hxxps://mail.google.com/mail/ca/?extsrc=mailto&url=%s"}]},"default_apps_install_state":1,"default_search_provider":{"enabled":true,"encodings":"","","id":"14","instant_url":"","keyword":"Fastest","name":"Fastest","prepopulate_id":"0","search_url":"hxxp://fastestwebsearch.com/search?q={searchTerms}","suggest_url":""},"distribution":{"make_chrome_default_for_user":true},"dns_prefetching":{"host_referral_list":[2,["hxxp://000sweb.co.monterey.ca.us/",["hxxp://000sweb.co.monterey.ca.us/",0.3369891529946043]],["hxxp://800notes.com/",["hxxp://800notes.com/",0.23892241939278966,"hxxp://pagead2.googlesyndication.com/",0.23892241939278966,"hxxp://partner.googleadservices.com/",0.23892241939278966,"hxxp://r.octonet.com/",0.655505099359705,"hxxp://res.octonet.com/",0.27363764272336593,"hxxp://www.googletagservices.com/",0.23892241939278966]],["hxxp://a.tribalfusion.com/",["hxxp://a.tribalfusion.com/",2.4575561048895462,"hxxp://b.scorecardresearch.com/",0.1335583214095467,"hxxp://bgm.sitescout.com/",2.7693356107337425,"hxxp://secure-us.imrworldwide.com/",0.1335583214095467]],["hxxp://a1.interclick.com/",["hxxp://ad.yieldmanager.com/",2.387589482583341,"hxxp://bs.serving-sys.com/",2.084686339270529,"hxxp://cdn.interclick.com/",2.9933957692089645,"hxxp://choices-st.truste.com/",2.9933957692089645,"hxxp://choices.truste.com/",2.084686339270529,"hxxp://ds.serving-sys.com/",2.387589482583341,"hxxp://fw.adsafeprotected.com/",2.690492625896153,"hxxp://jdn.monster.com/",3.2962989125217765,"hxxp://osmsync.interclick.com/",2.387589482583341,"hxxp://view.atdmt.com/",2.084686339270529]],["hxxp://ad-emea.doubleclick.net/",["hxxp://s0.2mdn.net/",0.1420590113442259]],["hxxp://ad-g.doubleclick.net/",["hxxp://pagead2.googlesyndication.com/",0.08785424700898203,"hxxp://s0.2mdn.net/",2.066525344788971,"hxxp://www.youtube.com/",0.1043778830817343]],["hxxp://ad.doubleclick.net/",["hxxp://foxdigital.hxxp.internapcdn.net/",0.7235221157605535,"hxxp://s0.2mdn.net/",1.5607395988884]],["hxxp://ad.turn.com/",["hxxp://cdn.turn.com/",0.5837027176426497]],["hxxp://ad.yieldmanager.com/",["hxxp://a.scorecardresearch.com/",1.1719785878403643,"hxxp://ad.doubleclick.net/",0.9080893693862427,"hxxp://ad.yieldmanager.com/",1.2198688752304387,"hxxp://ar.voicefive.com/",0.9080893693862427,"hxxp://b.scorecardresearch.com/",1.0400339786133035,"hxxp://b.voicefive.com/",1.3039231970674252,"hxxp://network.realmedia.com/",0.453038801083955,"hxxp://pixel.adsafeprotected.com/",0.5105138728632627,"hxxp://pixel.exelator.com/",0.3955637293046472,"hxxp://s0.2mdn.net/",1.0400339786133035]],["hxxp://ads-svx.hxxpads.com/",["hxxp://ad.doubleclick.net/",0.18862700383145073,"hxxp://ads.adbrite.com/",1.111468728672825,"hxxp://i.w55c.net/",0.23892241939278966,"hxxp://idsync.rlcdn.com/",0.18862700383145073,"hxxp://rc.rlcdn.com/",0.18862700383145073,"hxxp://sync.mathtag.com/",0.10407460588749911]],["hxxp://ads.adbrite.com/",["hxxp://ad.yieldmanager.com/",2.084686339270529,"hxxp://ads.adbrite.com/",5.1137177723986475,"hxxp://cm.g.doubleclick.net/",2.084686339270529,"hxxp://googleads.g.doubleclick.net/",2.084686339270529,"hxxp://m.xp1.ru4.com/",2.387589482583341,"hxxp://pixel.mathtag.com/",2.084686339270529,"hxxp://um.eqads.com/",2.084686339270529,"hxxp://www.facebook.com/",2.084686339270529,"hxxp://www.googleadservices.com/",2.084686339270529,"hxxps://www.facebook.com/",2.084686339270529]],["hxxp://ads.adsonar.com/",["hxxp://ad.doubleclick.net/",0.6421007555487322,"hxxp://cdn.tacoda.at.atwola.com/",0.7353974465258984,"hxxp://s0.2mdn.net/",0.6421007555487322,"hxxp://spe.atdmt.com/",2.387589482583341,"hxxp://view.atdmt.com/",2.387589482583341]],["hxxp://ads.espn.adsonar.com/",["hxxp://ads.espn.adsonar.com/",0.583368248088602,"hxxp://cdn.tacoda.at.atwola.com/",0.6087999324569822,"hxxp://s.aolcdn.com/",2.127083409456189]],["hxxp://ads.financialcontent.com/",["hxxp://ad.yieldmanager.com/",0.30862867972278124,"hxxp://adadvisor.net/",0.19518678663548863,"hxxp://adnxs.revsci.net/",0.19518678663548863,"hxxp://ads.revsci.net/",0.22354725990731183,"hxxp://bh.contextweb.com/",0.22354725990731183,"hxxp://cm.g.doubleclick.net/",0.19518678663548863,"hxxp://cookex.amp.yahoo.com/",0.19518678663548863,"hxxp://ib.adnxs.com/",0.2802682064509579,"hxxp://pixel.quantserve.com/",0.25190773317913495,"hxxp://tag.admeld.com/",0.2802682064509579]],["hxxp://ads.lfstmedia.com/",["hxxp://ads.pubmatic.com/",2.4575561048895462,"hxxp://ajax.googleapis.com/",2.1457765990453503,"hxxp://cdn.lfstmedia.com/",3.392894622422135,"hxxp://sync.mathtag.com/",2.1457765990453503,"hxxp://tags.bluekai.com/",2.1457765990453503]],["hxxp://ads.pointroll.com/",["hxxp://ad.doubleclick.net/",0.23892241939278966,"hxxp://s0.2mdn.net/",0.23892241939278966,"hxxp://spd.pointroll.com/",0.27363764272336593,"hxxp://speed.pointroll.com/",1.176233449318348,"hxxp://t.pointroll.com/",0.23892241939278966]],["hxxp://ads.pubmatic.com/",["hxxp://ads.pubmatic.com/",2.7693356107337425,"hxxp://image2.pubmatic.com/",2.4575561048895462,"hxxp://image4.pubmatic.com/",2.4575561048895462,"hxxp://pixel.invitemedia.com/",2.4575561048895462]],["hxxp://afe.specificclick.net/",["hxxp://a.scorecardresearch.com/",2.1979879973164053,"hxxp://ad.doubleclick.net/",1.950532394969525,"hxxp://b.scorecardresearch.com/",2.4454435996632853,"hxxp://cache.specificmedia.com/",2.1979879973164053]],["hxxp://ard.ihookup.com/",["hxxp://ard.ihookup.com/",0.1826261069738414,"hxxp://cdn1.pics.cdn-ihookup.com/",0.5069918790617084,"hxxp://cdn2.pics.cdn-ihookup.com/",0.2521330581355273,"hxxp://cdn2.static.ard.cdn-ihookup.com/",0.2521330581355273,"hxxp://cdn3.pics.cdn-ihookup.com/",0.15945712325327943]],["hxxp://assets.newsinc.com/",["hxxp://ad.auditude.com/",1.9116543432291524]],["hxxp://b3.mookie1.com/",["hxxp://d.agkn.com/",0.0875149138558962,"hxxp://dm.de.mookie1.com/",0.16032474571960484,"hxxp://pix.bit.ly/",0.0875149138558962,"hxxp://segment-pixel.invitemedia.com/",0.0875149138558962,"hxxp://t.mookie1.com/",0.16380996696103636,"hxxp://www.facebook.com/",0.0875149138558962,"hxxps://ib.mookie1.com/",0.0875149138558962,"hxxps://load.s3.amazonaws.com/",0.0875149138558962,"hxxps://loadm.exelator.com/",0.0875149138558962,"hxxps://www.facebook.com/",0.0875149138558962]],["hxxp://bcp.crwdcntrl.net/",["hxxp://ad.crwdcntrl.net/",2.025335319191497,"hxxp://bcp.crwdcntrl.net/",2.025335319191497,"hxxp://d.agkn.com/",2.319614810014193,"hxxp://ib.adnxs.com/",0.3333285659829197,"hxxp://tags.bluekai.com/",2.319614810014193,"hxxp://view.atdmt.com/",2.319614810014193,"hxxp://www.bkrtx.com/",2.025335319191497]],["hxxp://bgm.sitescout.com/",["hxxp://bgm.sitescout.netdna-cdn.com/",2.1457765990453503]],["hxxp://bh.contextweb.com/",["hxxp://bh.contextweb.com/",3.5992020558345876,"hxxp://connexity.net/",2.387589482583341,"hxxp://contextweb.pixel.invitemedia.com/",2.387589482583341,"hxxp://cw-m.d.chango.com/",2.084686339270529,"hxxp://d.chango.com/",2.084686339270529,"hxxp://i.w55c.net/",2.084686339270529,"hxxp://pcm1.map.pulsemgr.com/",2.084686339270529,"hxxp://su.addthis.com/",2.084686339270529,"hxxp://tags.bluekai.com/",2.084686339270529,"hxxp://um.simpli.fi/",2.084686339270529]],["hxxp://bleacherreport.com/",["hxxp://ad.doubleclick.net/",1.0400339786133035,"hxxp://csi.gstatic.com/",0.9080893693862425,"hxxp://dynamicads.g.doubleclick.net/",1.1719785878403643,"hxxp://img.bleacherreport.net/",7.769209049193406,"hxxp://motifcdn2.doubleclick.net/",0.9080893693862425,"hxxp://s.ytimg.com/",0.9080893693862425,"hxxp://s0.2mdn.net/",1.0400339786133035,"hxxp://static.bleacherreport.net/",8.42893209532871,"hxxp://www.google-analytics.com/",1.4358678062944856,"hxxp://www.youtube.com/",1.0400339786133035]],["hxxp://bn.xp1.ru4.com/",["hxxp://ad.doubleclick.net/",0.16270006427458353,"hxxp://m.xp1.ru4.com/",0.16270006427458353]],["hxxp://bnw.xp1.ru4.com/",["hxxp://ad.doubleclick.net/",1.950532394969525,"hxxp://ads.adbrite.com/",1.950532394969525]],["hxxp://bs.serving-sys.com/",["hxxp://bleacherreport.com/",1.3062834040316024,"hxxp://ds.serving-sys.com/",0.9611500308723211,"hxxp://spe.atdmt.com/",0.9611500308723211,"hxxp://view.atdmt.com/",0.9611500308723211]],["hxxp://car-insurance.findthebest.com/",["hxxp://ads.adbrite.com/",0.15491737895425855,"hxxp://cm.g.doubleclick.net/",0.1999361044623337,"hxxp://googleads.g.doubleclick.net/",0.1999361044623337,"hxxp://ib.adnxs.com/",0.2224454672163711,"hxxp://image2.pubmatic.com/",0.15491737895425855,"hxxp://img2.findthebest.com/",0.1999361044623337,"hxxp://r.openx.net/",0.15491737895425855,"hxxp://static.ak.facebook.com/",0.2224454672163711,"hxxp://um.simpli.fi/",0.2899735554784837,"hxxp://www.googleadservices.com/",0.1999361044623337]],["hxxp://cdn-static.liverail.com/",["hxxp://ad4.liverail.com/",0.5035048324074827]],["hxxp://cdn.interclick.com/",["hxxp://cdn.interclick.com/",1.1483564578006073,"hxxp://ic.nexac.com/",0.08751772895423468,"hxxp://load.s3.amazonaws.com/",0.39556372930464734,"hxxp://osmsync.interclick.com/",0.39556372930464734,"hxxp://va.px.invitemedia.com/",0.0901699764893966]],["hxxp://cdn.optmd.com/",["hxxp://cdn.optmd.com/",0.2300981543619979,"hxxp://i.casalemedia.com/",0.2009065974653265]],["hxxp://cdn.tacoda.at.atwola.com/",["hxxp://js.adsonar.com/",0.7584938780188577]],["hxxp://cdn.turn.com/",["hxxp://ads.adbrite.com/",0.3423714495520542,"hxxp://cdn.spotxchange.com/",0.3423714495520542,"hxxp://ce.lijit.com/",0.45657319196422785,"hxxp://d.audienceiq.com/",0.39211772854679705,"hxxp://dpm.demdex.net/",0.45657319196422785,"hxxp://r.openx.net/",0.3423714495520542,"hxxp://r.turn.com/",0.7537814123677196,"hxxp://segment-pixel.invitemedia.com/",0.3423714495520542,"hxxp://tags.bluekai.com/",0.3423714495520542,"hxxps://www.facebook.com/",0.3423714495520542]],["hxxp://cdn.widgetserver.com/",["hxxp://ad.doubleclick.net/",0.2963676624135681,"hxxp://cdn.widgetserver.com/",0.8113378432664259,"hxxp://p.widgetserver.com/",0.2963676624135681,"hxxp://s0.2mdn.net/",0.2963676624135681,"hxxp://t.widgetserver.com/",0.5927353247901276]],["hxxp://classifieds.myredbook.com/",["hxxp://ajax.googleapis.com/",0.1925846066335558,"hxxp://classifieds.myredbook.com/",10.767689160313605,"hxxp://www.google-analytics.com/",0.4194534397918174]],["hxxp://cm.npc-mcclatchy.overture.com/",["hxxp://static.mcclatchyinteractive.com/",0.2009065974653265]],["hxxp://cmap.uac.ace.advertising.com/",["hxxp://ad.yieldmanager.com/",0.8254623213354741,"hxxp://cm.g.doubleclick.net/",0.7207394895242571,"hxxp://cmap.an.ace.advertising.com/",0.7207394895242571,"hxxp://cmap.at.ace.advertising.com/",0.7207394895242571,"hxxp://cmap.dc.ace.advertising.com/",0.7207394895242571,"hxxp://cmap.rm.ace.advertising.com/",0.7207394895242571,"hxxp://googleads.g.doubleclick.net/",0.7207394895242571,"hxxp://ib.adnxs.com/",0.7207394895242571,"hxxp://pixel.rubiconproject.com/",0.7207394895242571,"hxxp://view.atdmt.com/",0.7207394895242571]],["hxxp://cnsnews.com/",["hxxp://a.scorecardresearch.com/",0.15945712325327943,"hxxp://bcp.crwdcntrl.net/",0.1826261069738414,"hxxp://cdnx.tribalfusion.com/",0.1826261069738414,"hxxp://edge.sharethis.com/",0.1826261069738414,"hxxp://googleads.g.doubleclick.net/",0.15945712325327943,"hxxp://seg.sharethis.com/",0.1826261069738414,"hxxp://tap.rubiconproject.com/",0.1826261069738414,"hxxp://tap2-cdn.rubiconproject.com/",0.3216400092972129,"hxxp://w.sharethis.com/",0.437484927900023,"hxxp://www.google-analytics.com/",0.1826261069738414]],["hxxp://company.zynga.com/",["hxxp://company.zynga.com/",13.152493053603683,"hxxp://fonts.googleapis.com/",0.07148610056265642,"hxxp://platform.twitter.com/",1.15704310578434,"hxxp://s.ytimg.com/",0.07148610056265642,"hxxp://themes.googleusercontent.com/",0.13243650674359011,"hxxp://www.facebook.com/",0.7748739686501342,"hxxp://www.google-analytics.com/",0.7748739686501342,"hxxp://www.youtube-nocookie.com/",0.39270483151592855,"hxxps://ajax.googleapis.com/",0.39270483151592855,"hxxps://www.facebook.com/",0.7748739686501342]],["hxxp://configure.us.dell.com/",["hxxp://configure-cdn.us.dell.com/",0.5221289838775178,"hxxp://configure.us.dell.com/",0.3056364783673273,"hxxp://dell-dhs_us.baynote.net/",0.3056364783673273,"hxxp://dell-global.baynote.net/",0.2128539760058174,"hxxp://dellinc.tt.omtrdc.net/",0.3056364783673273,"hxxp://i.dell.com/",2.7489090405537575,"hxxp://linux.dell.com/",0.2128539760058174,"hxxp://nsm.dell.com/",0.24378147679298748,"hxxp://survey.112.2o7.net/",0.24378147679298748,"hxxps://chatpro.us.dell.com/",0.2747089775801576]],["hxxp://contextweb.pixel.invitemedia.com/",["hxxp://bh.contextweb.com/",0.4446621525949959]],["hxxp://core.insightexpressai.com/",["hxxp://core.insightexpressai.com/",0.9557813380690089]],["hxxp://craigslist.com/",["hxxp://craigslist.org/",1.7310017404546036,"hxxp://geo.craigslist.org/",1.12519545382898,"hxxp://monterey.craigslist.org/",1.7310017404546036,"hxxp://www.craigslist.org/",1.7310017404546036]],["hxxp://ct1.addthis.com/",["hxxp://cf.addthis.com/",2.066525344788971,"hxxp://ds.reson8.com/",2.066525344788971,"hxxp://ib.adnxs.com/",1.8043542189575343,"hxxp://m.addthisedge.com/",0.28775583596785153,"hxxp://segment-pixel.invitemedia.com/",1.8043542189575343]],["hxxp://cti.w55c.net/",["hxxp://i.w55c.net/",1.8043542189575343,"hxxp://tag.admeld.com/",0.32405203117298137]],["hxxp://d.agkn.com/",["hxxp://b3.mookie1.com/",0.19518678663548863,"hxxp://d.agkn.com/",0.25190773317913495,"hxxp://p.acxiom-online.com/",0.19518678663548863,"hxxp://r.nexac.com/",0.19518678663548863,"hxxp://rc.rlcdn.com/",0.22354725990731183,"hxxp://rd.rlcdn.com/",0.19518678663548863,"hxxp://su.addthis.com/",0.19518678663548863,"hxxp://t.mookie1.com/",0.22354725990731183]],["hxxp://d.yimg.com/",["hxxp://cosmos.bcst.yahoo.com/",2.690492625896153,"hxxp://d.yimg.com/",3.2962989125217765,"hxxp://geo.yahoo.com/",2.690492625896153,"hxxp://query.vap.yahoo.net/",2.387589482583341,"hxxp://static.vap.yahoo.net/",2.9933957692089645,"hxxp://yui.yahooapis.com/",2.084686339270529]],["hxxp://d3.zedo.com/",["hxxp://d14.zedo.com/",1.1669303753709767,"hxxp://d3.zedo.com/",0.6399384867976267,"hxxp://d7.zedo.com/",0.3573687792346665,"hxxp://m3.zedo.com/",1.8572295440774184]],["hxxp://dell.com/",["hxxp://www.dell.com/",0.23684101814869113]],["hxxp://disqus.com/",["hxxp://b.scorecardresearch.com/",0.12053323060273528,"hxxp://disqus.com/",0.12053323060273528,"hxxp://edge.quantserve.com/",0.1052417013471643,"hxxp://mediacdn.disqus.com/",0.943492807174622,"hxxp://pixel.quantserve.com/",0.1052417013471643,"hxxp://realtime.services.disqus.com/",0.1052417013471643,"hxxp://www.google-analytics.com/",0.12053323060273528,"hxxp://www.gravatar.com/",1.0686080444481307,"hxxps://juggler.services.disqus.com/",0.12053323060273528]],["hxxp://dm.de.mookie1.com/",["hxxp://bh.contextweb.com/",0.0875149138558962,"hxxp://ib.adnxs.com/",0.10023075604008623,"hxxp://image2.pubmatic.com/",0.10023075604008623,"hxxp://matcher-apx.bidder7.mookie1.com/",0.10023075604008623,"hxxp://matcher-cwb.bidder7.mookie1.com/",0.0875149138558962,"hxxp://matcher-pbm.bidder7.mookie1.com/",0.10023075604008623,"hxxp://matcher.bidder8.mookie1.com/",0.07626902302819853,"hxxp://pixel.rubiconproject.com/",0.2067940233089318,"hxxp://su.addthis.com/",0.0875149138558962,"hxxp://t.mookie1.com/",0.11294659822427627]],["hxxp://dp1.33across.com/",["hxxp://bcp.crwdcntrl.net/",2.066525344788971,"hxxp://ib.adnxs.com/",0.32405203117298137,"hxxp://load.s3.amazonaws.com/",0.0618809053415448,"hxxp://loadm.exelator.com/",0.0618809053415448,"hxxp://loadus.exelator.com/",0.0618809053415448,"hxxp://rc.rlcdn.com/",0.5952143996608818,"hxxp://sync.tidaltv.com/",0.0618809053415448]],["hxxp://dub.kionrightnow.com/",["hxxp://ajax.googleapis.com/",0.062228579267061594]],["hxxp://e1.cdn.qnsr.com/",["hxxp://e2.cdn.qnsr.com/",0.2446372714821726,"hxxp://l1.cdn.qnsr.com/",0.06170960484438644]],["hxxp://edge.sharethis.com/",["hxxp://edge.sharethis.com/",0.06945952288912846,"hxxp://w.sharethis.com/",0.18369760218953407]],["hxxp://embed.newsinc.com/",["hxxp://a.collective-media.net/",2.396937274834959,"hxxp://ad.auditude.com/",2.6667911402137294,"hxxp://ad.doubleclick.net/",2.127083409456189,"hxxp://ak1.abmr.net/",1.8572295440774184,"hxxp://assets.newsinc.com/",6.714599120895281,"hxxp://content.newsinc.com/",3.206498870971269,"hxxp://lt.ndnps.newsinc.com/",3.7462066017288093,"hxxp://ndn.cdn.auditude.com/",1.8572295440774184,"hxxp://sana.newsinc.com/",2.9366450055924993,"hxxp://spc.ceedpefhegafjcfggdjgjhff.vast2as3.collectivemedia-pubnet.usa.telemetryverification.net/",2.127083409456189]],["hxxp://en.wikipedia.org/",["hxxp://bits.wikimedia.org/",5.115115937007707,"hxxp://en.wikipedia.org/",1.9024199667196162,"hxxp://meta.wikimedia.org/",1.6882402353670762,"hxxp://upload.wikimedia.org/",15.824102504634682]],["hxxp://energyalmanac.ca.gov/",["hxxp://energyalmanac.ca.gov/",0.29847102557665095]],["hxxp://espn.go.com/",["hxxp://63.235.28.238/",1.8572295440774184,"hxxp://a.scorecardresearch.com/",1.8572295440774184,"hxxp://b.scorecardresearch.com/",1.8572295440774184,"hxxp://bd0dc.v.fwmrm.net/",2.9366450055924993,"hxxp://extras.ooyala.com/",1.8572295440774184,"hxxp://l.ooyala.com/",2.127083409456189,"hxxp://player.ooyala.com/",3.206498870971269,"hxxp://secure-us.imrworldwide.com/",1.8572295440774184,"hxxp://svod.espn.go.com/",1.8572295440774184,"hxxp://vod.espn.go.com/",2.9366450055924993]],["hxxp://facebook.com/",["hxxp://www.facebook.com/",1.6157368326566683,"hxxps://www.facebook.com/",0.8416155650281046]],["hxxp://facebook.mafiawars.zynga.com/",["hxxp://facebook.mafiawars.zynga.com/",0.2995740599573865,"hxxp://static.ak.facebook.com/",0.33330094087974093,"hxxp://www.google-analytics.com/",0.33330094087974093,"hxxp://www.mafiawars.zynga.com/",0.5356622264138694,"hxxp://zgn.static.zynga.com/",0.40075470272445063,"hxxp://zynga1-a.akamaihd.net/",0.2658471790350317,"hxxp://zynga2-a.akamaihd.net/",1.4462880113174465,"hxxps://fbcdn-profile-a.akamaihd.net/",0.4344815836468052,"hxxps://www.facebook.com/",0.40075470272445063,"hxxps://zyngapv.hs.llnwd.net/",4.818976103552942]],["hxxp://facebook.womenforlove.net/",["hxxp://ard.ihookup.com/",0.1999361044623337,"hxxp://banners.geotarget.info/",0.15491737895425855,"hxxp://facebook.womenforlove.net/",0.6276139967890473]],["hxxp://fantasy.nfl.com/",["hxxp://b.scorecardresearch.com/",2.084686339270529,"hxxp://dpm.demdex.net/",2.084686339270529,"hxxp://fast.nfl.demdex.net/",2.387589482583341,"hxxp://global.fantasy.nfl.com/",8.445652348839576,"hxxp://metrics.nfl.com/",2.387589482583341,"hxxp://n.pswec.com/",2.084686339270529,"hxxp://nfl.demdex.net/",2.387589482583341,"hxxp://pagead2.googlesyndication.com/",2.084686339270529,"hxxp://www.adobetag.com/",2.387589482583341,"hxxp://yui.yahooapis.com/",2.690492625896153]],["hxxp://fast.nfl.demdex.net/",["hxxp://adadvisor.net/",2.1457765990453503,"hxxp://api.bizographics.com/",2.1457765990453503,"hxxp://d.turn.com/",2.1457765990453503,"hxxp://dpm.demdex.net/",3.0811151165779384,"hxxp://i.w55c.net/",2.1457765990453503,"hxxp://load.s3.amazonaws.com/",2.1457765990453503,"hxxp://loadm.exelator.com/",2.1457765990453503,"hxxp://nexac.demdex.net/",2.4575561048895462,"hxxp://r.nexac.com/",2.4575561048895462]],["hxxp://fb.timeremove.com/",["hxxp://www.facebook.com/",0.5317198549453611,"hxxps://www.facebook.com/",0.5317198549453611]],["hxxp://fw.adsafeprotected.com/",["hxxp://ad.doubleclick.net/",0.8733116276936077,"hxxp://fw.adsafeprotected.com/",1.290593553367508]],["hxxp://game.mytopfreegames.com/",["hxxp://addirector.vindicosuite.com/",1.4554581978743492,"hxxp://afe.specificclick.net/",2.387589482583341,"hxxp://b.scorecardresearch.com/",1.4554581978743492,"hxxp://cache.vindicosuite.com/",1.8661530015694614,"hxxp://cdn-static.liverail.com/",2.687542608959687,"hxxp://game.mytopfreegames.com/",3.919627020045026,"hxxp://pixel.quantserve.com/",1.0447633941792362,"hxxp://t4.liverail.com/",1.8661530015694614,"hxxp://vox-static.liverail.com/",1.9534728241176717,"hxxps://ajax.googleapis.com/",1.4554581978743492]],["hxxp://gmail.com/",["hxxps://accounts.google.com/",0.7169186930851825,"hxxps://gmail.com/",0.7627427878815433,"hxxps://mail.google.com/",0.8085668826779039]],["hxxp://googleads.g.doubleclick.net/",["hxxp://googleads.g.doubleclick.net/",0.3035458224340415,"hxxp://pagead2.googlesyndication.com/",3.4504714771698577,"hxxp://www.google.com/",0.29939241217137535,"hxxps://accounts.google.com/",0.298769127464949,"hxxps://apis.google.com/",1.488737421835468,"hxxps://googleads.g.doubleclick.net/",0.29939241217137535,"hxxps://plusone.google.com/",1.488737421835468,"hxxps://ssl.gstatic.com/",1.080256188600598]],["hxxp://googlemaps.com/",["hxxp://maps.google.com/",0.6013740469393443,"hxxps://maps.google.com/",1.788635371284397]],["hxxp://harvestconstruction.com/",["hxxp://harvestconstruction.com/",2.923217509785694]],["hxxp://i.dell.com/",["hxxp://i.dell.com/",0.12550955157056512]],["hxxp://ib.adnxs.com/",["hxxp://game.mytopfreegames.com/",1.4554581978743492]],["hxxp://ic.nexac.com/",["hxxp://cdn.interclick.com/",1.645840265238927]],["hxxp://img-cdn.mediaplex.com/",["hxxp://a1.interclick.com/",0.2128539760058174,"hxxp://ad.doubleclick.net/",0.2128539760058174,"hxxp://ad.yieldmanager.com/",0.2128539760058174,"hxxp://api.bizographics.com/",0.2128539760058174,"hxxp://edge.aperture.displaymarketplace.com/",0.2747089775801576,"hxxp://imagen01.247realmedia.com/",0.2128539760058174,"hxxp://leadback.advertising.com/",0.2128539760058174,"hxxp://network.realmedia.com/",0.2128539760058174,"hxxp://segment-pixel.invitemedia.com/",0.2128539760058174,"hxxp://sp.fastclick.net/",0.2128539760058174]],["hxxp://imp.bid.ace.advertising.com/",["hxxp://a.scorecardresearch.com/",1.2708243791374278,"hxxp://ad.doubleclick.net/",0.4242504199628669,"hxxp://b.scorecardresearch.com/",0.8474188179806067,"hxxp://b.voicefive.com/",0.5429673340825529,"hxxp://choices.truste.com/",1.3117307451125441,"hxxp://d.agkn.com/",0.4240132568237855,"hxxp://s0.2mdn.net/",0.7417016559380577]],["hxxp://jdn.monster.com/",["hxxp://jdn.monster.com/",3.5992020558345876,"hxxp://spe.atdmt.com/",2.387589482583341,"hxxp://view.atdmt.com/",2.387589482583341]],["hxxp://kkc7u90thcq2l028di4ivt0lccd7nd0k-a-fc-opensocial.googleusercontent.com/",["hxxp://csi.gstatic.com/",0.3030125233568562,"hxxp://kkc7u90thcq2l028di4ivt0lccd7nd0k-a-fc-opensocial.googleusercontent.com/",0.3030125233568562,"hxxp://www-fc-opensocial.googleusercontent.com/",0.3030125233568562]],["hxxp://loadus.exelator.com/",["hxxp://dap.criteo.com/",0.06748201027247502,"hxxp://ib.mookie1.com/",0.07728708868813379]],["hxxp://m.xp1.ru4.com/",["hxxp://adadvisor.net/",0.1420590113442259,"hxxp://hxxp.content.ru4.com/",0.16270006427458353,"hxxp://idsync.rlcdn.com/",0.16270006427458353,"hxxp://loadm.exelator.com/",0.1420590113442259,"hxxp://m.xp1.ru4.com/",0.16270006427458353,"hxxp://pixel.exelator.com/",0.1420590113442259,"hxxp://r.nexac.com/",0.1420590113442259,"hxxp://tags.bluekai.com/",0.1420590113442259]],["hxxp://maps.google.com/",["hxxp://id.google.com/",0.08502336425841886,"hxxp://maps.google.com/",0.25797687445930495,"hxxp://maps.gstatic.com/",0.3320998074025422,"hxxp://mt0.google.com/",0.2703306966165111,"hxxp://mt1.google.com/",0.25797687445930495,"hxxp://ssl.gstatic.com/",0.09737718641562498,"hxxp://www.google.com/",0.09737718641562498]],["hxxp://mediacdn.disqus.com/",["hxxp://static.ak.facebook.com/",0.05473855904192794]],["hxxp://mig.nexac.com/",["hxxp://dm.de.mookie1.com/",0.2300981543619979,"hxxp://t.mookie1.com/",0.2300981543619979]],["hxxp://monterey.craigslist.org/",["hxxp://www.craigslist.org/",0.26688393487736445]],["hxxp://msn.foxsports.com/",["hxxp://lc.livefyre.com/",2.025335319191497,"hxxp://livefyre-avatar.s3.amazonaws.com/",3.202453282482282,"hxxp://msn.foxsports.com/",17.62214833279439,"hxxp://static.foxsports.com/",38.515992181205924,"hxxp://stream1.foxsports.fyre.co/",2.025335319191497,"hxxp://tealium.hs.llnwd.net/",3.7910122641276733,"hxxp://usea1l3lc44.livefyre.com:8080/",2.025335319191497,"hxxp://widget-cdn.rpxnow.com/",2.6138943008368893,"hxxp://www.livefyre.com/",2.319614810014193,"hxxp://zor.fyre.co/",5.556689209063849]],["hxxp://network.realmedia.com/",["hxxp://api.quova.com/",0.05957196574169533,"hxxp://e.nexac.com/",0.06822772144775363,"hxxp://ib.mookie1.com/",0.05957196574169533,"hxxp://image2.pubmatic.com/",0.3244801240770049,"hxxp://matcher.realmedia.com/",0.05957196574169533,"hxxp://network.realmedia.com/",0.06822772144775363,"hxxp://wxtarget.direct.weatherbug.com/",0.05957196574169533,"hxxps://ev.ib-ibi.com/",0.05957196574169533,"hxxps://ib.mookie1.com/",0.05957196574169533]],["hxxp://nfl.cpl.delvenetworks.com/",["hxxp://ajax.googleapis.com/",0.3832548696349097,"hxxp://assets.delvenetworks.com/",1.3062834040316024,"hxxp://cache.delvenetworks.com/",2.9891571934680523,"hxxp://img.delvenetworks.com/",3.5778745271211933,"hxxp://nfl.cpa.delvenetworks.com/",1.5654207403604671,"hxxp://nfl.cpl.delvenetworks.com/",3.9098656457968164,"hxxp://nfl.img.delvenetworks.com/",2.856642903077,"hxxp://static.delvenetworks.com/",1.6545901963366784,"hxxp://www.google-analytics.com/",0.733927263649624]],["hxxp://pixel.invitemedia.com/",["hxxp://cms.ad.yieldmanager.net/",1.2464797923883506,"hxxp://cookex.amp.yahoo.com/",2.1457765990453503,"hxxp://googleads.g.doubleclick.net/",2.1457765990453503,"hxxp://segment-pixel.invitemedia.com/",0.08229345169658468,"hxxp://tags.bluekai.com/",0.08229345169658468]],["hxxp://platform.twitter.com/",["hxxp://cdn.api.twitter.com/",0.5484120333256085,"hxxp://p.twitter.com/",0.5484181264687314,"hxxp://r.twimg.com/",0.5484181264687314]],["hxxp://player.ooyala.com/",["hxxp://bd0dc.v.fwmrm.net/",21.246539501516853,"hxxp://l.ooyala.com/",74.37895457941077]],["hxxp://premium.mookie1.com/",["hxxp://imagen04.247realmedia.com/",0.2009065974653265]],["hxxp://pubads.g.doubleclick.net/",["hxxp://b.scorecardresearch.com/",2.1457765990453503,"hxxp://cdn.interclick.com/",3.0811151165779384,"hxxp://optimized-by.rubiconproject.com/",2.1457765990453503,"hxxp://s0.2mdn.net/",3.0811151165779384,"hxxp://s2spx.interclick.com/",2.4575561048895462,"hxxp://tag.admeld.com/",4.951792151643114,"hxxp://tag.contextweb.com/",2.1457765990453503,"hxxp://tap-cdn.rubiconproject.com/",2.1457765990453503,"hxxp://um.simpli.fi/",2.1457765990453503,"hxxp://www.burstnet.com/",2.1457765990453503]],["hxxp://puma.vizu.com/",["hxxp://cheetah.vizu.com/",0.4240604410513933,"hxxp://puma.vizu.com/",0.44643375553922365]],["hxxp://r.turn.com/",["hxxp://cdn.turn.com/",0.12759309454165477]],["hxxp://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/",["hxxp://csi.gstatic.com/",0.28912644819821353,"hxxp://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/",1.0873895815959904,"hxxp://www-fc-opensocial.googleusercontent.com/",0.28912644819821353,"hxxp://www.google.com/",10.928718308200744]],["hxxp://randpacusa.com/",["hxxp://randpacusa.com/",0.1999361044623337,"hxxp://www.google-analytics.com/",0.17742674170829614,"hxxp://www.randpacusa.com/",0.17742674170829614,"hxxp://www.youtube.com/",0.17742674170829614]],["hxxp://res.octonet.com/",["hxxp://a.tribalfusion.com/",0.4124985360456709,"hxxp://ad.doubleclick.net/",0.27363764272336593,"hxxp://cdnx.tribalfusion.com/",0.30835286605394224,"hxxp://tags.expo9.exponential.com/",0.23892241939278966]],["hxxp://rs.gwallet.com/",["hxxp://ad.yieldmanager.com/",0.9080893693862427,"hxxp://bh.contextweb.com/",0.1609999694875793,"hxxp://cm.g.doubleclick.net/",0.9080893693862427,"hxxp://ib.adnxs.com/",2.1457765990453503,"hxxp://pixel.rubiconproject.com/",0.9080893693862427,"hxxp://po.st/",2.1457765990453503,"hxxp://rp.gwallet.com/",1.6635929903016957,"hxxp://tag.admeld.com/",2.1457765990453503,"hxxp://whos.amung.us/",2.1457765990453503,"hxxp://www.theblaze.com/",0.40360846144411094]],["hxxp://sacbee.disqus.com/",["hxxp://mediacdn.disqus.com/",0.2009065974653265,"hxxp://sacbee.disqus.com/",0.2009065974653265]],["hxxp://screepts.com/",["hxxp://facebook.mafiawars.zynga.com/",0.1754591381631209,"hxxp://nzhost.me/",0.1531993967543666,"hxxp://screepts.com/",0.2422383623893833]],["hxxp://secure-us.imrworldwide.com/",["hxxp://secure-us.imrworldwide.com/",5.722865508399934]],["hxxp://seg.sharethis.com/",["hxxp://b.scorecardresearch.com/",0.10417474621970483]],["hxxp://sports.yahoo.com/",["hxxp://l.yimg.com/",3.5992020558345876,"hxxp://o.analytics.yahoo.com/",2.387589482583341,"hxxp://platform.twitter.com/",4.205008342460212,"hxxp://sports.yahoo.com/",4.810814629085835,"hxxp://y.analytics.yahoo.com/",2.9933957692089645,"hxxps://apis.google.com/",2.387589482583341,"hxxps://graph.facebook.com/",2.9933957692089645,"hxxps://plusone.google.com/",2.387589482583341,"hxxps://ssl.gstatic.com/",2.084686339270529,"hxxps://www.facebook.com/",4.810814629085835]],["hxxp://static.newstogram.com/",["hxxp://aperture.displaymarketplace.com/",0.2300981543619979,"hxxp://b.scorecardresearch.com/",0.2884812681553404,"hxxp://c5.zedo.com/",0.2009065974653265,"hxxp://c7.zedo.com/",0.2592897112586693,"hxxp://ox-d.newstogram.com/",0.3760559388453545,"hxxp://pixel.quantserve.com/",0.2592897112586693,"hxxp://static.newstogram.com/",0.317672825052012,"hxxp://tag.contextweb.com/",0.2300981543619979,"hxxp://u.openx.net/",0.2009065974653265,"hxxp://view.atdmt.com/",0.2300981543619979]],["hxxp://stats.csnbayarea.com/",["hxxp://hosted.stats.com/",0.6387799509153966,"hxxp://stats.csnbayarea.com/",0.46363060953536844,"hxxps://ajax.googleapis.com/",0.2300981543619979]],["hxxp://tag.admeld.com/",["hxxp://pagead2.googlesyndication.com/",0.19518678663548863]],["hxxp://tags.bluekai.com/",["hxxp://i.i.com.com/",2.025335319191497]],["hxxp://tags.mediaforge.com/",["hxxp://adadvisor.net/",2.084686339270529,"hxxp://cm.g.doubleclick.net/",2.084686339270529,"hxxp://load.s3.amazonaws.com/",2.084686339270529,"hxxp://loadus.exelator.com/",0.44366916740365364,"hxxp://mpp.specificclick.net/",2.084686339270529,"hxxp://pixel.mathtag.com/",2.084686339270529,"hxxp://pixel.rubiconproject.com/",0.7338491289725271,"hxxp://sync.mathtag.com/",2.084686339270529,"hxxp://tags.bluekai.com/",0.06131768009397067]],["hxxp://tap2-cdn.rubiconproject.com/",["hxxp://ad.turn.com/",0.1826261069738414,"hxxp://ad.yabuka.com/",0.06945952288912846,"hxxp://cm.g.doubleclick.net/",0.06945952288912846,"hxxp://match.rtbidder.net/",0.15945712325327943,"hxxp://matcher-rbc.bidder7.mookie1.com/",0.15945712325327943,"hxxp://pe.intentiq.com/",0.20579509069440335,"hxxp://pixel.everesttech.net/",0.06945952288912846,"hxxp://pixel.rubiconproject.com/",0.20579509069440335,"hxxp://pixel2368.everesttech.net/",0.06945952288912846,"hxxp://tags.bluekai.com/",0.15945712325327943]],["hxxp://this.content.served.by.adshuffle.com/",["hxxp://media2.adshuffle.com/",2.127083409456189,"hxxp://this.content.served.by.adshuffle.com/",1.8572295440774184]],["hxxp://toolbar.zynga.com/",["hxxp://connect.facebook.net/",0.28181996733036346,"hxxp://static.ak.facebook.com/",1.1261314331917964,"hxxp://toolbar.static.zynga.com/",2.2518800543403747,"hxxps://s-static.ak.facebook.com/",0.5632571226175079,"hxxps://www.facebook.com/",0.5632571226175079]],["hxxp://tour.ihookup.com/",["hxxp://cdn2.static.cdn-ihookup.com/",0.15945712325327943,"hxxp://cdn2.static.tour.cdn-ihookup.com/",0.4606539116205844,"hxxp://googleads.g.doubleclick.net/",0.15945712325327943,"hxxp://www.googleadservices.com/",0.1826261069738414,"hxxp://www.ihookup.com/",0.15945712325327943,"hxxps://aa.online-metrix.net/",0.15945712325327943,"hxxps://h.online-metrix.net/",0.3216400092972129]],["hxxp://townshendconstruction.com/",["hxxp://townshendconstruction.com/",13.897908928470188]],["hxxp://translate.google.com/",["hxxp://csi.gstatic.com/",0.17742674170829614,"hxxp://lh4.googleusercontent.com/",0.15491737895425855,"hxxp://ssl.gstatic.com/",0.2224454672163711,"hxxp://translate.google.com/",0.3124829182325213,"hxxp://www.gstatic.com/",0.2224454672163711,"hxxps://plus.google.com/",0.1999361044623337]],["hxxp://vbp1den1.lijit.com/",["hxxp://ca.lijit.pixel.invitemedia.com/",0.1420590113442259,"hxxp://ce.lijit.com/",0.286546381856729,"hxxp://idpix.media6degrees.com/",0.1420590113442259,"hxxp://lj.d.chango.com/",0.1420590113442259,"hxxp://match.rtbidder.net/",0.1420590113442259,"hxxp://p.rfihub.com/",0.1420590113442259,"hxxp://ssp.orbengine.com/",0.1420590113442259,"hxxp://su.addthis.com/",0.1420590113442259,"hxxp://sync.mathtag.com/",0.1420590113442259,"hxxp://um.simpli.fi/",0.1420590113442259]],["hxxp://view.atdmt.com/",["hxxp://cdn.doubleverify.com/",0.4361223827266664,"hxxp://choices.truste.com/",1.5730336203857355,"hxxp://ib.adnxs.com/",0.16740196423809347,"hxxp://spe.atdmt.com/",0.5418814870897547,"hxxps://choices.truste.com/",0.4361223827266664]],["hxxp://vox-static.liverail.com/",["hxxp://ad4.liverail.com/",2.5563386815951494]],["hxxp://weather.insidebayarea.com/",["hxxp://extras.mnginteractive.com/",0.2592897112586693]],["hxxp://web.adblade.com/",["hxxp://b.scorecardresearch.com/",0.5861384337913258,"hxxp://pixel.quantserve.com/",0.29437741619543595,"hxxp://static.cdn.adblade.com/",3.899297585020856]],["hxxp://widgets.outbrain.com/",["hxxp://b.scorecardresearch.com/",0.145898027649239]],["hxxp://windowsupdate.microsoft.com/",["hxxp://windowsupdate.microsoft.com/",0.30022080501290504]],["hxxp://www.amica.com/",["hxxp://libs.coremetrics.com/",0.17742674170829614,"hxxp://www.amica.com/",2.878550272192812,"hxxps://ad.yieldmanager.com/",0.2674641927244462,"hxxps://googleads.g.doubleclick.net/",0.15491737895425855,"hxxps://seg.sharethis.com/",0.15491737895425855,"hxxps://stags.bluekai.com/",0.15491737895425855,"hxxps://switch.atdmt.com/",0.15491737895425855,"hxxps://view.atdmt.com/",0.1999361044623337,"hxxps://www.googleadservices.com/",0.15491737895425855]],["hxxp://www.amicacoverage.com/",["hxxp://ajax.googleapis.com/",0.15491737895425855,"hxxp://fast.fonts.com/",0.1999361044623337,"hxxp://googleads.g.doubleclick.net/",0.17742674170829614,"hxxp://tracker.marinsm.com/",0.17742674170829614,"hxxp://view.atdmt.com/",0.15491737895425855,"hxxp://www.amicacoverage.com/",0.44753909475674636,"hxxp://www.google-analytics.com/",0.17742674170829614,"hxxp://www.googleadservices.com/",0.1999361044623337]],["hxxp://www.blogger.com/",["hxxp://img1.blogblog.com/",0.15962184995096937,"hxxp://www.blogger.com/",0.9037235280541574,"hxxp://www.google-analytics.com/",1.1184600221883231,"hxxp://www.google.com/",0.7809157463648521,"hxxps://apis.google.com/",0.08424869995893466,"hxxps://plusone.google.com/",0.15962184995096937,"hxxps://ssl.gstatic.com/",0.5187446205334153]],["hxxp://www.callercenter.com/",["hxxp://api.solvemedia.com/",0.27363764272336593,"hxxp://b.scorecardresearch.com/",0.27363764272336593,"hxxp://i.po.st/",0.4124985360456709,"hxxp://maps.google.com/",0.30835286605394224,"hxxp://maps.gstatic.com/",0.4819289827068233,"hxxp://mt0.googleapis.com/",0.30835286605394224,"hxxp://mt1.googleapis.com/",0.4124985360456709,"hxxp://p.po.st/",0.23892241939278966,"hxxp://pixel.solvemedia.com/",0.23892241939278966,"hxxp://www.callercenter.com/",1.210948672648924]],["hxxp://www.capoliticalreview.com/",["hxxp://a0.twimg.com/",0.15945712325327943,"hxxp://pixel.quantserve.com/",0.15945712325327943,"hxxp://platform.twitter.com/",0.1826261069738414,"hxxp://static.ak.facebook.com/",0.1826261069738414,"hxxp://widgets.twimg.com/",0.1826261069738414,"hxxp://www.capoliticalreview.com/",1.2715683418402534,"hxxp://www.facebook.com/",0.1826261069738414,"hxxp://www.google-analytics.com/",0.15945712325327943,"hxxps://s-static.ak.facebook.com/",0.1826261069738414,"hxxps://www.facebook.com/",0.1826261069738414]],["hxxp://www.cbssports.com/",["hxxp://api.cbssports.com:60906/",2.084686339270529,"hxxp://bootstrap.cbssports.fyre.co/",2.084686339270529,"hxxp://livefyre-avatar.s3.amazonaws.com/",16.321134074972683,"hxxp://mads.cbs.com/",2.387589482583341,"hxxp://platform.twitter.com/",4.810814629085835,"hxxp://sports.cbsimg.net/",23.893712657792978,"hxxp://tag.admeld.com/",3.2962989125217765,"hxxp://www.livefyre.com/",2.387589482583341,"hxxp://zor.fyre.co/",4.810814629085835,"hxxp://zor.livefyre.com/",2.084686339270529]],["hxxp://www.co.monterey.ca.us/",["hxxp://www.co.monterey.ca.us/",0.3369891529946043]],["hxxp://www.csnbayarea.com/",["hxxp://adadvisor.net/",0.2009065974653265,"hxxp://link.theplatform.com/",0.2300981543619979,"hxxp://objects.tremormedia.com/",0.2592897112586693,"hxxp://pixel.quantserve.com/",0.2009065974653265,"hxxp://platform.twitter.com/",0.2884812681553404,"hxxp://r.openx.net/",0.2009065974653265,"hxxp://static.scanscout.com/",0.2300981543619979,"hxxp://tags.bluekai.com/",0.2009065974653265,"hxxp://www.csnbayarea.com/",2.4778480354056906,"hxxp://www.facebook.com/",0.2884812681553404]],["hxxp://www.dell.com/",["hxxp://dellinc.tt.omtrdc.net/",0.3570289975077283,"hxxp://i.dell.com/",1.0180628839824323,"hxxp://nsm.dell.com/",0.2668880129884505,"hxxp://survey.112.2o7.net/",0.23684101814869113,"hxxp://www-cdn.dell.com/",0.2668880129884505,"hxxp://www.dell.com/",0.2067940233089318,"hxxp://www1-cdn.dell.com/",0.32698200266796906]],["hxxp://www.docsports.com/",["hxxp://ct1.addthis.com/",2.387589482583341,"hxxp://s7.addthis.com/",2.084686339270529,"hxxp://www.docsports.com/",12.989199498531752,"hxxp://www.google-analytics.com/",2.387589482583341,"hxxps://apis.google.com/",2.387589482583341,"hxxps://plusone.google.com/",2.387589482583341,"hxxps://ssl.gstatic.com/",2.084686339270529]],["hxxp://www.ebay.com/",["hxxp://gh.ebaystatic.com/",1.7377129222639302,"hxxp://ir.ebaystatic.com/",2.839993507282095,"hxxp://merch.ebay.com/",1.5172568052602975,"hxxp://p.ebaystatic.com/",1.7377129222639302,"hxxp://pics.ebaystatic.com/",2.1786251562711962,"hxxp://srx.main.ebayrtm.com/",1.7377129222639302,"hxxp://thumbs3.ebaystatic.com/",1.5172568052602975]],["hxxp://www.facebook.com/",["hxxp://service.timelineremove.com/",0.09107490143857887,"hxxp://static.ak.fbcdn.net/",0.21817196538644631]],["hxxp://www.google.com/",["hxxp://ssl.gstatic.com/",2.2733802,"hxxp://www.google.com/",4.915941799999999]],["hxxp://www.insidebayarea.com/",["hxxp://cache-02.cleanprint.net/",0.2300981543619979,"hxxp://csc.beap.ad.yieldmanager.net/",0.2592897112586693,"hxxp://extras.mercurynews.com/",0.2009065974653265,"hxxp://extras.mnginteractive.com/",0.317672825052012,"hxxp://platform.twitter.com/",0.3468643819486833,"hxxp://scripts.bayareanewsgroup.com/",0.2300981543619979,"hxxp://scripts.chitika.net/",0.2009065974653265,"hxxp://us.bc.yahoo.com/",0.2009065974653265,"hxxp://www.facebook.com/",0.3468643819486833,"hxxps://www.facebook.com/",0.46363060953536844]],["hxxp://www.insure.com/",["hxxp://apis.google.com/",0.15491737895425855,"hxxp://ct1.addthis.com/",0.2224454672163711,"hxxp://s.clicktale.net/",0.15491737895425855,"hxxp://www.google-analytics.com/",0.15491737895425855,"hxxp://www.insure.com/",0.7874304723427137,"hxxp://www.qsstats.com/",0.15491737895425855,"hxxp://www.securerequestform.com/",0.20668891328854488,"hxxps://apis.google.com/",0.17742674170829614,"hxxps://plusone.google.com/",0.17742674170829614,"hxxps://ssl.gstatic.com/",0.15491737895425855]],["hxxp://www.jango.com/",["hxxp://a.jango.com/",2.1457765990453503,"hxxp://beacon-1.newrelic.com/",2.1457765990453503,"hxxp://cd09.128.music.static.jango.com/",2.1457765990453503,"hxxp://cd09.playlist.images.jango.com/",5.887130669175703,"hxxp://cd09.s3.static.jango.com/",12.43450029190382,"hxxp://pubads.g.doubleclick.net/",5.575351163331506,"hxxp://static.ak.facebook.com/",2.4575561048895462,"hxxp://www.jango.com/",2.4575561048895462,"hxxps://d1ros97qkrwjf5.cloudfront.net/",2.1457765990453503,"hxxps://s-static.ak.facebook.com/",2.4575561048895462]],["hxxp://www.kionrightnow.com/",["hxxp://ad.doubleclick.net/",0.24562305230209888,"hxxp://content.worldnow.com/",0.1467924750444495,"hxxp://ct1.addthis.com/",0.1220848307300373,"hxxp://ftpcontent.worldnow.com/",0.17150011935886197,"hxxp://images.worldnow.com/",0.13443865288724352,"hxxp://kion.images.worldnow.com/",0.1962077636732742,"hxxp://ping.chartbeat.net/",0.0850233642584188,"hxxp://static.chartbeat.com/",0.0850233642584188,"hxxp://www.google-analytics.com/",0.10973100857283113,"hxxp://www.kionrightnow.com/",0.0850233642584188]],["hxxp://www.lijit.com/",["hxxp://ad.turn.com/",2.066525344788971,"hxxp://ca.lijit.pixel.invitemedia.com/",1.8043542189575343,"hxxp://ce.lijit.com/",3.6395520997775903,"hxxp://idpix.media6degrees.com/",2.066525344788971,"hxxp://lj.d.chango.com/",1.8043542189575343,"hxxp://p.rfihub.com/",1.8043542189575343,"hxxp://ssp.orbengine.com/",1.8043542189575343,"hxxp://su.addthis.com/",1.8043542189575343,"hxxp://sync.mathtag.com/",2.066525344788971,"hxxp://um.simpli.fi/",1.8043542189575343]],["hxxp://www.livefyre.com/",["hxxp://cm.g.doubleclick.net/",2.084686339270529,"hxxp://cms.quantserve.com/",1.1851392083526282,"hxxp://edge.quantserve.com/",1.1851392083526282,"hxxp://ib.adnxs.com/",0.8822360650398164,"hxxp://pixel.quantserve.com/",1.1851392083526282,"hxxp://www.google-analytics.com/",1.6162304978678063]],["hxxp://www.localcrimenews.com/",["hxxp://cdn-static.liverail.com/",0.30862867972278124,"hxxp://geo-lb02.w55c.net/",0.22354725990731183,"hxxp://rtb.tubemogul.com/",0.22354725990731183,"hxxp://search.spotxchange.com/",0.25190773317913495,"hxxp://tag.contextweb.com/",0.6205938857128352,"hxxp://u-ads.adap.tv/",0.22354725990731183,"hxxp://vads.adbrite.com/",0.22354725990731183,"hxxp://vast.bp3850588.btrll.com/",0.22354725990731183,"hxxp://vox-static.liverail.com/",0.22354725990731183,"hxxp://www.localcrimenews.com/",0.7056753055283051]],["hxxp://www.lyricsmania.com/",["hxxp://ad.crwdcntrl.net/",2.9081737916595855,"hxxp://cm.g.doubleclick.net/",2.025335319191497,"hxxp://load.exelator.com/",2.025335319191497,"hxxp://mpp.specificclick.net/",2.025335319191497,"hxxp://search.spotxchange.com/",3.202453282482282,"hxxp://sm.ts.vindicosuite.com/",2.9081737916595855,"hxxp://t4.liverail.com/",4.08529175495037,"hxxp://tags.bluekai.com/",2.025335319191497,"hxxp://vox-static.liverail.com/",4.08529175495037,"hxxp://www.lyricsmania.com/",14.973632915390123]],["hxxp://www.mafiawarslootlady.com/",["hxxp://ajax.googleapis.com/",1.8043542189575343,"hxxp://ct1.addthis.com/",1.8043542189575343,"hxxp://pagead2.googlesyndication.com/",1.8043542189575343,"hxxp://s7.addthis.com/",1.8043542189575343,"hxxp://translate.google.com/",1.8043542189575343,"hxxp://www.blogblog.com/",1.8043542189575343,"hxxp://www.blogger.com/",2.066525344788971,"hxxp://www.lijit.com/",2.066525344788971,"hxxp://www.linkwithin.com/",1.8043542189575343,"hxxps://apis.google.com/",1.8043542189575343]],["hxxp://www.meebo.com/",["hxxp://rd.meebo.com/",0.2300981543619979,"hxxp://s.meebocdn.net/",0.2300981543619979,"hxxp://syndication.mmismm.com/",0.2009065974653265,"hxxp://tags.bluekai.com/",0.2009065974653265,"hxxp://www.meebo.com/",0.2300981543619979,"hxxps://www.meebo.com/",0.2300981543619979]],["hxxp://www.myredbook.com/",["hxxp://www.google-analytics.com/",2.107257362270346,"hxxp://www.myredbook.com/",4.932628707991588]],["hxxp://www.nfl.com/",["hxxp://ak1.abmr.net/",2.084686339270529,"hxxp://ds.serving-sys.com/",0.12854104243686834,"hxxp://static.nfl.com/",2.387589482583341]],["hxxp://www.nola.com/",["hxxp://bcp.crwdcntrl.net/",3.202453282482282,"hxxp://maps.googleapis.com/",2.025335319191497,"hxxp://maps.gstatic.com/",2.025335319191497,"hxxp://platform.twitter.com/",2.319614810014193,"hxxp://static.ak.facebook.com/",2.319614810014193,"hxxp://stats.nola.com/",2.319614810014193,"hxxp://www.nola.com/",16.739309860326297,"hxxps://gscounters.gigya.com/",2.025335319191497,"hxxps://s-static.ak.facebook.com/",2.319614810014193,"hxxps://www.facebook.com/",3.496732773304977]],["hxxp://www.sacbee.com/",["hxxp://gscounters.gigya.com/",0.2009065974653265,"hxxp://h.ppjol.com/",0.2009065974653265,"hxxp://media.sacbee.com/",1.4853351009188653,"hxxp://mediacdn.disqus.com/",0.9015039629854387,"hxxp://s.ppjol.net/",0.2009065974653265,"hxxp://s3.amazonaws.com/",0.2300981543619979,"hxxp://sacramentoconnect.s3.amazonaws.com/",0.2300981543619979,"hxxp://static.lingospot.com/",0.2592897112586693,"hxxp://yubanet.com/",0.2300981543619979,"hxxps://plusone.google.com/",0.3468643819486833]],["hxxp://www.sbnation.com/",["hxxp://cdn0.sbnation.com/",2.387589482583341,"hxxp://cdn1.sbnation.com/",2.084686339270529,"hxxp://cdn3.sbnation.com/",2.084686339270529,"hxxp://cloud.typography.com/",2.084686339270529,"hxxp://edge.quantserve.com/",2.084686339270529,"hxxp://fonts.voxmedia.com.s3.amazonaws.com/",2.084686339270529,"hxxp://ox-d.sbnation.com/",2.084686339270529,"hxxp://player.ooyala.com/",2.084686339270529,"hxxp://www.sbnation.com/",2.084686339270529]],["hxxp://www.theblaze.com/",["hxxp://ping.chartbeat.net/",2.396937274834959,"hxxp://platform.twitter.com/",3.206498870971269,"hxxp://reports.asn.com/",3.206498870971269,"hxxp://static.chartbeat.com/",1.8572295440774184,"hxxp://trc.taboolasyndication.com/",1.8572295440774184,"hxxp://www.facebook.com/",3.206498870971269,"hxxp://www.theblaze.com/",13.2210996398159,"hxxps://apis.google.com/",2.127083409456189,"hxxps://plusone.google.com/",3.206498870971269,"hxxps://www.facebook.com/",3.206498870971269]],["hxxp://www.timelineremove.com/",["hxxp://fb.timeremove.com/",0.5317198549453611,"hxxp://www.timelineremove.com/",0.8015478410370365]],["hxxp://www.update.microsoft.com/",["hxxp://www.update.microsoft.com/",0.37601912707061874]],["hxxp://www.youtube.com/",["hxxp://googleads.g.doubleclick.net/",0.5518182993885965,"hxxp://i2.ytimg.com/",2.387589482583341,"hxxp://o-o---preferred---sn-vgqelnez---v20---lscache2.c.youtube.com/",0.6634958123600981,"hxxp://pagead2.googlesyndication.com/",0.38430202993134404,"hxxp://pubads.g.doubleclick.net/",0.38430202993134404,"hxxp://s.youtube.com/",0.4417771017106517,"hxxp://s.ytimg.com/",2.408147222050675,"hxxp://s0.2mdn.net/",0.6693216598157613,"hxxp://s2.youtube.com/",0.4401407864170948,"hxxp://www.youtube.com/",0.38430202993134404]],["hxxp://youtube.com/",["hxxp://www.youtube.com/",1.888248979223594]],["hxxps://2542116.fls.doubleclick.net/",["hxxps://ad.yieldmanager.com/",0.28789547324017556,"hxxps://conversion-pixel.invitemedia.com/",0.28789547324017556,"hxxps://googleads.g.doubleclick.net/",0.5673371607829281,"hxxps://segment-pixel.invitemedia.com/",0.28789547324017556,"hxxps://www.googleadservices.com/",1.0045499196623475]],["hxxps://accounts.google.com/",["hxxps://accounts.youtube.com/",0.8665551756476371,"hxxps://mail.google.com/",0.8665551756476371,"hxxps://ssl.google-analytics.com/",0.8665551756476371,"hxxps://ssl.gstatic.com/",2.5677391803316296]],["hxxps://ads-dot-angrybirds-facebook.appspot.com/",["hxxps://ads-dot-angrybirds-facebook.appspot.com/",0.2511312555585852]],["hxxps://ads.pubmatic.com/",["hxxps://ads.pubmatic.com/",0.3600257591933446]],["hxxps://angrybirds-facebook.appspot.com/",["hxxps://ads-dot-angrybirds-facebook.appspot.com/",0.2521807185241619,"hxxps://ajax.googleapis.com/",0.2116230819160197,"hxxps://angrybirds-facebook.appspot.com/",0.42504516727387115,"hxxps://connect.facebook.net/",0.13050780869973555,"hxxps://graph.facebook.com/",0.13582475985830614,"hxxps://s-static.ak.facebook.com/",0.2016485038190195,"hxxps://ssl.google-analytics.com/",0.17106544530787768,"hxxps://www.adobe.com/",0.13050780869973555,"hxxps://www.facebook.com/",0.17106544530787768]],["hxxps://apis.google.com/",["hxxps://apis.google.com/",1.568677146382479]],["hxxps://apps.facebook.com/",["hxxps://0-ect.channel.facebook.com/",2.9340205999999997,"hxxps://1-ect.channel.facebook.com/",2.6037003999999997,"hxxps://apps.facebook.com/",6.567542799999998,"hxxps://fbcdn-creative-a.akamaihd.net/",3.5946609999999994,"hxxps://fbcdn-photos-a.akamaihd.net/",8.783956898768048,"hxxps://s-static.ak.facebook.com/",3.590300773359999,"hxxps://s-static.ak.fbcdn.net/",23.47961239088806,"hxxps://sphotos-b.xx.fbcdn.net/",2.2733802,"hxxps://www.facebook.com/",3.924981199999999,"hxxps://zynga1-a.akamaihd.net/",2.9340205999999997]],["hxxps://assets.farklegame.net/",["hxxps://farklegame.net/",0.6747142130039269]],["hxxps://attachments.facebook.com/",["hxxps://attachments.facebook.com/",1.5573640511409947]],["hxxps://chrome.google.com/",["hxxps://2542116.fls.doubleclick.net/",2.066525344788971,"hxxps://chrome.google.com/",2.328696470620408,"hxxps://clients1.google.com/",1.8043542189575343,"hxxps://lh3.googleusercontent.com/",11.350478467491971,"hxxps://lh4.googleusercontent.com/",13.892353649199975,"hxxps://lh5.googleusercontent.com/",9.91843175102386,"hxxps://lh6.googleusercontent.com/",12.316917289819123,"hxxps://ssl.google-analytics.com/",3.6769417212719064,"hxxps://themes.googleusercontent.com/",1.8043542189575343,"hxxps://www.google.com/",5.5275736849276145]],["hxxps://disqus.com/",["hxxps://securecdn.disqus.com/",0.4344390526386974]],["hxxps://facebook.mafiawars.zynga.com/",["hxxps://connect.facebook.net/",0.6811400964561232,"hxxps://facebook.mafiawars.zynga.com/",2.673706949365091,"hxxps://fbcdn-profile-a.akamaihd.net/",2.0860175294582466,"hxxps://graph.facebook.com/",0.6787329442773164,"hxxps://s-static.ak.facebook.com/",2.7056626892490776,"hxxps://www.facebook.com/",1.3540907315620647,"hxxps://zynga1-a.akamaihd.net/",8.036939701809526]],["hxxps://farklegame.net/",["hxxps://api-read.facebook.com/",2.5908675964518446,"hxxps://api.facebook.com/",2.066525344788971,"hxxps://assets.farklegame.net/",13.438462768678885,"hxxps://connect.facebook.net/",1.8043542189575343,"hxxps://farklegame.net/",3.377380973946154,"hxxps://fbcdn-profile-a.akamaihd.net/",8.35863236474345,"hxxps://graph.facebook.com/",11.49187386863332,"hxxps://s-static.ak.fbcdn.net/",0.36929556448747314,"hxxps://ssl.google-analytics.com/",7.525741408823125,"hxxps://www.facebook.com/",4.566468971374359]],["hxxps://id2.s.nfl.com/",["hxxps://d1ivexoxmp59q7.cloudfront.net/",0.23892241939278966,"hxxps://dpm.demdex.net/",0.23892241939278966,"hxxps://gscounters.gigya.com/",0.23892241939278966,"hxxps://id2.s.nfl.com/",0.5166442060373999,"hxxps://nfl.demdex.net/",0.5513594293679757,"hxxps://nflenterprises.tt.omtrdc.net/",0.4124985360456709,"hxxps://s-static.ak.facebook.com/",0.34306808938451816,"hxxps://smetrics.nfl.com/",0.27363764272336593,"hxxps://socialize.gigya.com/",0.27363764272336593,"hxxps://www.facebook.com/",0.34306808938451816]],["hxxps://mail-attachment.googleusercontent.com/",["hxxps://mail-attachment.googleusercontent.com/",0.616902189119142]],["hxxps://mail.google.com/",["hxxps://apis.google.com/",2.6037003999999997,"hxxps://chatenabled.mail.google.com/",2.2733802,"hxxps://clients2.google.com/",2.2733802,"hxxps://mail-attachment.googleusercontent.com/",5.753922614283542,"hxxps://mail.google.com/",36.780064973820835,"hxxps://pagead2.googleadservices.com/",0.5690209957782519,"hxxps://plus.google.com/",3.7503231570918243,"hxxps://ssl.gstatic.com/",12.75736301198742,"hxxps://static.googleusercontent.com/",0.5690209957782519,"hxxps://www.google.com/",0.753551431073117]],["hxxps://maps.google.com/",["hxxps://apis.google.com/",1.5617189435841378,"hxxps://lh4.googleusercontent.com/",1.5617189435841378,"hxxps://maps.google.com/",6.100047497589324,"hxxps://maps.gstatic.com/",6.55388035298984,"hxxps://mts0.google.com/",4.965465359088027,"hxxps://mts1.google.com/",4.7385489313877684,"hxxps://plus.google.com/",2.015551798984657,"hxxps://ssl.gstatic.com/",2.015551798984657,"hxxps://www.google.com/",1.788635371284397]],["hxxps://platform.twitter.com/",["hxxps://cdn.api.twitter.com/",0.5849466485494661,"hxxps://p.twitter.com/",0.5849466485494661,"hxxps://r.twimg.com/",0.5849466485494661]],["hxxps://plus.google.com/",["hxxps://plus.google.com/",0.20914869295701693]],["hxxps://plusone.google.com/",["hxxps://apis.google.com/",2.1457765990453503,"hxxps://plusone.google.com/",1.4570295371958708,"hxxps://ssl.gstatic.com/",2.4575561048895462]],["hxxps://static1.yourviralgames.com/",["hxxps://www1.yourviralgames.com/",0.32782848771744405]],["hxxps://www.amica.com/",["hxxps://data.coremetrics.com/",0.15491737895425855,"hxxps://libs.coremetrics.com/",0.17742674170829614,"hxxps://tracker.marinsm.com/",0.17742674170829614,"hxxps://view.atdmt.com/",0.15491737895425855,"hxxps://www.amica.com/",2.5184004681282066]],["hxxps://www.facebook.com/",["hxxps://1-ect.channel.facebook.com/",0.09506929753244939,"hxxps://fbcdn-profile-a.akamaihd.net/",1.746710572599238,"hxxps://s-static.ak.facebook.com/",2.2733802,"hxxps://s-static.ak.fbcdn.net/",1.038020165706425,"hxxps://www.facebook.com/",2.410332367267629]],["hxxps://www.google.com/",["hxxps://apis.google.com/",0.8419958483427026,"hxxps://id.google.com/",0.3167395768975274,"hxxps://lh4.googleusercontent.com/",0.5256921826449998,"hxxps://news.google.com/",0.0672731647054014,"hxxps://plus.google.com/",1.7571167213371492,"hxxps://ssl.gstatic.com/",1.89170012340804,"hxxps://www.google.com/",17.35999686811293]],["hxxps://www.youtube.com/",["hxxps://i4.ytimg.com/",0.9227124978216347,"hxxps://s.ytimg.com/",1.9067098034231897]],["hxxps://www1.yourviralgames.com/",["hxxps://api-read.facebook.com/",0.18334111720494114,"hxxps://api.facebook.com/",0.16270006427458353,"hxxps://fbcdn-profile-a.akamaihd.net/",1.8983631248274492,"hxxps://graph.facebook.com/",2.252285381981583,"hxxps://s-static.ak.facebook.com/",0.286546381856729,"hxxps://s-static.ak.fbcdn.net/",0.18334111720494114,"hxxps://ssl.google-analytics.com/",1.2153937637228204,"hxxps://static1.yourviralgames.com/",1.132829552001391,"hxxps://www.facebook.com/",0.5755211228817356,"hxxps://www1.yourviralgames.com/",0.34846954064780194]],["hxxps://zbar.zynga.com/",["hxxps://zynga2-a.akamaihd.net/",5.232491898778259]],["hxxps://zpay.static.zynga.com/",["hxxps://zpay.static.zynga.com/",0.7345446620439389]]],"startup_list":[1,"hxxp://facebook.com/","hxxp://service.timelineremove.com/","hxxp://ssl.gstatic.com/","hxxp://www.facebook.com/","hxxp://www.google.com/","hxxps://fbcdn-photos-a.akamaihd.net/","hxxps://fbcdn-profile-a.akamaihd.net/","hxxps://s-static.ak.facebook.com/","hxxps://s-static.ak.fbcdn.net/","hxxps://www.facebook.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":"","prompt_for_download":true},"extensions":{"autoupdate":{"last_check":"12993858100052875","next_check":"12993876319515875"},"blacklistupdate":{"lastpingday":"12993807762935500","version":"0.0.0.126"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"aandpgohbohmlknpjbblpmoladhoochg":{"blacklist":true},"abciiempgohamehppammbkhkicmkgkob":{"blacklist":true},"abfclfmhaemoockhhinpplncjehfpdbd":{"blacklist":true},"acmpfcamncegnhjdeiodgilikjafcamg":{"blacklist":true},"aebfkgcamgnimcbnbiopgdakknjgggnm":{"blacklist":true},"aemcjbfajnnmhblifaejadoecfoaebld":{"blacklist":true},"afenhmponmfmdmbmccbmglppcmjhmhmh":{"blacklist":true},"aglmapjbjphdidmnileogpjkgpdoliep":{"blacklist":true},"agmhonoepgcnakccfpidhjehlocaeaaj":{"blacklist":true},"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","page_ordinal":"n"},"ahjfgnikolodijnpakeknpilnemojlhc":{"blacklist":true},"aieglpnmmhleoenpbmfaffppfomgjmba":{"blacklist":true},"aifmjmboebdkdelpjenakhaodgneempp":{"blacklist":true},"alcbnnpmipohgdllkkglhkbncijplago":{"blacklist":true},"aldalonecchncedclgcndcndgilaclnk":{"blacklist":true},"aljdncnajablgppdcfbehhmidlmbndda":{"blacklist":true},"amfgdngndpfldigimkcindjalokfnmem":{"blacklist":true},"amoobcjlpgloocplpikcldcpjjdnoeii":{"blacklist":true},"anmjpohfnlopdfaojooicpemopnliimn":{"blacklist":true},"apdmgffkfhjfeejmbjidennfjdkmmmbl":{"blacklist":true},"aphncaagnlabkeipnbbicmcahnamibgb":{"blacklist":true},"bcddmcejgphfgofbpoocakaeapfomlek":{"blacklist":true},"benclngoadbppljglhphhnfknoppmjoa":{"blacklist":true},"bhdkpmneahdelgdgfhddianklldfoell":{"blacklist":true},"bilgncckogfgfipdlejkffnbkgjkmflh":{"blacklist":true},"bioeopenmokdgbekbgpgnacecjmpckbb":{"blacklist":true},"bjihddggcgnblgojnmhpnngonofbnkaj":{"blacklist":true},"bkhafliomebnpccanacmlfaemgfiofko":{"blacklist":true},"bkkchglolnigbfncnbnnbhhempjkdpkf":{"blacklist":true},"bkplhcigeaiiliajeehehiikokgocbhb":{"blacklist":true},"bldgnkigdcpgnbfehgbameigoohecdfl":{"blacklist":true},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"ack_external":true,"active_permissions":{"api":["appNotifications"]},"app_launcher_ordinal":"t","events":["experimental.runtime.onInstalled"],"from_bookmark":true,"from_webstore":true,"install_time":"12987200589182875","lastpingday":"12993807762000500","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"current_locale":"en_US","default_locale":"en","description":"The world's most popular online video community.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","permissions":["appNotifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.5"},"page_ordinal":"n","path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0","state":1},"bndahdijlcnncjbpammoedeapmlobllc":{"blacklist":true},"bnffnggkphadlnoopcoakdnkellnifjp":{"blacklist":true},"boaoagnmpennjoigkkmnjhecapibhfko":{"blacklist":true},"boclfockfmgcppbajihcgajhpggaakgl":{"blacklist":true},"bokkificjhapflinbdejegngffgkcgfe":{"blacklist":true},"caphkimknlmnhpjoneddiaakmcaajagb":{"blacklist":true},"cbbbpmlnlpnjojeplppgeilanlihoojg":{"blacklist":true},"cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true},"cdogaeccgljmkecjmoedambgiekkllij":{"blacklist":true},"cekdjgnecpoooikhmceokdhojckkkhmh":{"blacklist":true},"cepfogmgfkddnllaopgknbdfkceejmhk":{"blacklist":true},"cfbdodejdeejbkffcmiaknpmojjeibpn":{"blacklist":true},"cgnkbnaiipmfbakpmhllalggoepniemh":{"blacklist":true},"chagngapoeghhljpcnojlkonegopkimi":{"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"install_time":"12991438418789500","lastpingday":"12993807762000500","location":1,"manifest":{"browser_action":{"default_icon":"zynga_dog_19x19.png","popup":"popup.html"},"description":"Mafia Wars Game Stats","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1ZWFSYxPZJaeVqNPQJJWAvy7nKZXJ/BOXUQKZn73TRam+H8l9mTMYRKV9VdE7KaetFSpJ6F1CC/A5br/04XhbZAhe9XEgEBv9lkzh68Iherjlo+Bjf1wdR0EdzmQbmotggpWmH5uVOoM6zAR3XOVfdLHfK3+3hJ0yAmottWBG8wIDAQAB","name":"Zynga Toolbar","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1.1"},"path":"chagngapoeghhljpcnojlkonegopkimi\\1.1_0","state":1},"cihlkpohodpdkdnfalhdkhhlhmhffmbe":{"blacklist":true},"cjhklhdjonhcohlacgggcbklpnldleck":{"blacklist":true},"cjohbbapkbkkhpohinffggbphnhoblea":{"blacklist":true},"ckckpgefkpjfopjppjfcikppehdhceah":{"blacklist":true},"ckphhghhpjbfddcgkpfbelfeojcciglo":{"blacklist":true},"clapnamcglekekmamicmbahkghdcjaeh":{"blacklist":true},"cmjphjljejnfgdbkdgdlclaabimpknna":{"blacklist":true},"cmlokmkdolieoaoddlfhaidnlmiadhik":{"blacklist":true},"coajchbkdbfhmhbgcjepiofllfjjcpfp":{"blacklist":true},"coobgpohoikkiipiblmjeljniedjpjpf":{"ack_external":true,"active_bit":true,"app_launcher_ordinal":"x","events":["experimental.runtime.onInstalled"],"from_bookmark":true,"from_webstore":true,"install_time":"12987200590808875","last_active_pingday":"12993807762540500","lastpingday":"12993807762000500","location":2,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"current_locale":"en_US","default_locale":"en","description":"The fastest way to search the web.","icons":{"128":"128.png","16":"16.png","32":"32.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Google Search","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.19"},"page_ordinal":"n","path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.19_0","state":1},"copjbedljgpkaakkmbhgkpoaadeahido":{"blacklist":true},"cpiiakoibaohkfoaijaigdnocfolnmll":{"blacklist":true},"dadcalgappognjbjpalfophhcfakoeac":{"blacklist":true},"danapgfidmepmcfbjjacceiaiiioieio":{"blacklist":true},"dbanhghadfmjndnjmmejdgfdmgidlbpm":{"blacklist":true},"dbiblcmlcgdjjbdpbmbcpineegngkiip":{"blacklist":true},"dbmdicehacbaohlockjgdglcobimmjkh":{"blacklist":true},"dejippphmhbpgckbhdidnjmdcpfccbaj":{"blacklist":true},"dfafokiagoiocidlpglcanjkcdbdnioi":{"blacklist":true},"dfoegfajplmijblljfancdapbdaopebb":{"blacklist":true},"dgaehaeahdegbdlenicbmkbakhdgoeml":{"blacklist":true},"dgcfmgdfbfbgcpbendbhbkfjppboebed":{"blacklist":true},"dgkemngdheppgohkjjelnkjmdeimmfml":{"blacklist":true},"diinokaoicgobepmadnmedlhdfnpehcj":{"blacklist":true},"dinhjcapnfbffhiihdlnbdfjdjjfhcbk":{"blacklist":true},"djnahdkbfgnhgpakidinfonfcjbagkgp":{"blacklist":true},"dlobhinihbmedmheccecfnkcadpehmbf":{"blacklist":true},"dmhjdbigobajgnfoabodjgmcdgoeoljm":{"blacklist":true},"dmkdhgkknhnfpdjeicefnpmhcpbimden":{"blacklist":true},"dnedfaenfnkikficknkklbdedlecmpgc":{"active_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"install_time":"12993675543591500","lastpingday":"12993807762000500","location":1,"manifest":{"background":{"scripts":["background.js"]},"browser_action":{"default_icon":"images/icon.png","default_title":"TimelineRemove","popup":"popup.html"},"content_scripts":[{"all_frames":true,"js":["/api-utils/data/page.js"],"matches":["*://*.facebook.com/*"],"run_at":"document_start"}],"description":"TimeLineRemove.Com disable the new facebook timeline!","icons":{"128":"icon128.png","16":"icon16.png","48":"icon48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0/tEJPjNUQhOvX04efL6zdxj0jxAV7GqHY9opdDcXQwoahRu+IRpZbrncg4p2kEQeHsvyOZRkHvXPSQoW3HdkKSrPY5I91HTXaNuoSktbe3HtQnwnvtfEqA1mE4qrurC9AG4QuwtvPRGsBJh6eNKDLHcIVpVWlkDRxkuLnPmlvQIDAQAB","manifest_version":2,"name":"TimelineRemove","permissions":["bookmarks","tabs","*://*.facebook.com/*"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1.0.5"},"path":"dnedfaenfnkikficknkklbdedlecmpgc\\1.0.5_0","state":1},"dnemhlkdpajbbniphgkgceplmnkfnhfo":{"blacklist":true},"doneghboglgnflpdicnkaojmmljgejkj":{"blacklist":true},"dpgenihgggagjjggfocjceeobjkadcbc":{"blacklist":true},"dpmloehicimdjkibmobhmpgdndgbcced":{"blacklist":true},"ebdcdchjcndpjhehacedepnggfdbfkpn":{"blacklist":true},"echngajnlpjeacbanjejlhcajjfoedcc":{"blacklist":true},"edmnikahahfkfilbbjbdoiabnghbkmjc":{"blacklist":true},"efbeabpbbkahnnjalakldjfhljboclkf":{"blacklist":true},"efhjelcghjkfigiagdfbfilndaffpmdj":{"blacklist":true},"efnaljpgehfilpmkhobibbjceeeondmn":{"blacklist":true},"egljdhfnbjahogjahnigfnbpidlmdagi":{"blacklist":true},"ehgoiaffgjoinpkllmmnikghgpghnabc":{"blacklist":true},"ehmjnpjodmgeocfphkjjnheiheehcoid":{"blacklist":true},"ehomcoocpagnlcakcbecdaknmacmedld":{"blacklist":true},"eihjeehdobnpkonebmpanonopghepfle":{"blacklist":true},"eijbdinddjecmebnlienfoijpjjobkjh":{"blacklist":true},"ejijgghlncnaphklndknkbkclebfboca":{"blacklist":true},"ejlekamipdcfcfpgfepjmklllbpeecaj":{"blacklist":true},"elcaigjcaijbfpjngaekbblphmfjdhfo":{"blacklist":true},"eofejpelggimkodeojpeojnbijgiglgh":{"blacklist":true},"eopmhecjnginkckggjmhombbopmkjpam":{"blacklist":true},"epbmnbdplhcomkedpjfceakddnbgfjmf":{"blacklist":true},"fafoohpbicgbcejffcplajonhhooddle":{"blacklist":true},"fbhiehmngojjcmljddjmgpmcockbccmo":{"blacklist":true},"fcfepemfihgibdacjlnlecebknaaepmj":{"blacklist":true},"ffgfbfakpcnngelphjnppokmoicdollk":{"blacklist":true},"fhlkffpjoajppmhcakbkjndbjfljccpi":{"blacklist":true},"fiapkdjniadkodmdibdnchoifkpfoiid":{"blacklist":true},"fibgploapkhokkbncddlkcmbmiengcfp":{"blacklist":true},"fihepkmlkmciffbhijldnpmifhbkiinp":{"blacklist":true},"fjjeecfjmgfnleghoellhldedkaocjfc":{"blacklist":true},"fleljamdchegbjeiipbnmiebnhgheeld":{"blacklist":true},"flmmgcfcpbfddenepkfmgfpbaceolcoe":{"blacklist":true},"fmcccidacjgnfiafddkngmeolkoiihil":{"blacklist":true},"fmonlemffgbabjifjfaoamdflijecdbk":{"blacklist":true},"fngolbdmkneakeaoiieafkilnogbocda":{"blacklist":true},"fnhcgnmfccojojojacgeiaaeacefdohb":{"blacklist":true},"fnkaadkanmfgpfbmdcllhjdgmdbgljpi":{"blacklist":true},"fnnmbghphdnmmjdapccfobgjemjadeli":{"blacklist":true},"fnoadkjdjfgafomgmablhmffooijcfbn":{"blacklist":true},"foenbafkkmajnmfnlcmejonkfaipdmme":{"blacklist":true},"fommcgokigkhmnhlhlkckfjhefnmfohd":{"blacklist":true},"fpbippbofbmgmbojjmgfcifpmdaelcmd":{"blacklist":true},"fpmajanjndhgpifbcbnklbiehgnpkgmf":{"blacklist":true},"fpoajjnnpmledpmohlgpgbmlhbgkgahg":{"blacklist":true},"gaicmfjflflabagobdiodejfpjikheeo":{"blacklist":true},"gandihaiobadcggbfkhpbkocmiemjlnf":{"blacklist":true},"gbenikfjhilhpgagllmfgggdjaflbmbi":{"blacklist":true},"gdggdkkjecogagaffaemnbfmllcoihjp":{"blacklist":true},"gekkhpjigmckhgmgngadbeknekgpgolb":{"blacklist":true},"ghgphbmpcfgkfneodjpbdanmdoemklio":{"blacklist":true},"ghmaokcegalalefnhlfcnjhnpdbanjkj":{"blacklist":true},"gifglngcdbggmlgkcombebegdaoknkho":{"blacklist":true},"gjkbghdignnlcknknflbigpammebiolo":{"blacklist":true},"gkjeccpmibljcfpfapfljciimedljpnm":{"blacklist":true},"gkjmgdpdndoaiholejnmdbbpdaafahmm":{"blacklist":true},"gmghjgfdialcnhadahmjefeflgnhcjeb":{"blacklist":true},"gnapdhmknipknfmhhnhdmhakdfhgeing":{"blacklist":true},"gncfgndgeoddelbfhlndhljnecoednaa":{"blacklist":true},"gngmkbiihflpghldjnbpemaicedhdddk":{"blacklist":true},"gobjcjhhebpjbmjdgmejhebbleadnceo":{"blacklist":true},"gplgjmecjpbfcdikpbicknafcnfcidek":{"blacklist":true},"hbaajkahagmlkdekmbdabikbopdgpaac":{"blacklist":true},"hbdhabpmbbanaopgkbaondabkkepjfaf":{"blacklist":true},"hbmlheccjkodhfejcmblndjodllmnlnl":{"blacklist":true},"hcapokajkngndbglnfglpfdpoeidmpha":{"blacklist":true},"hcpndbchnlgojmnijaldkicigmihmdca":{"blacklist":true},"hdijkiondgomjpehfhopomicjbiodmcm":{"blacklist":true},"hdnbmmfjbblajkjkcaeofolgfnljpnim":{"blacklist":true},"hecijapnccjhonbmacmkmffooodfokoo":{"blacklist":true},"hefmoncdemhjembgbnkgglhlookbipdc":{"blacklist":true},"hfjpjodbolkmheaehcnmfhjakjileoof":{"blacklist":true},"hfpfbhnmbbigpmoodjemilggabklpopj":{"blacklist":true},"hgbaomphocgmdpmiohjclchaaljpaelp":{"blacklist":true},"hgboiaecclcbjphldpbgfgggcbihmnai":{"blacklist":true},"hgjgaeknhmidehalnmokomhpfhbfmpcm":{"blacklist":true},"hhfffemhgkginfafaoapljdllodppana":{"blacklist":true},"hhfiljkpjapjjphcocclhhaldpfkkjbi":{"blacklist":true},"hhjmkijkgojfifipdgmiemghfikbohcm":{"blacklist":true},"hhlgbfcfbkhlmajakkcjippgpcmejkko":{"blacklist":true},"hilncbjbdpnfepdidfchmdclhpnlegpj":{"blacklist":true},"hjkhligcnpfjhjlapmejaiaiigibofif":{"blacklist":true},"hkbgccpdcpbdckohbknjlamamelcnlki":{"blacklist":true},"hkjcejgfmaanpncnpoidgbhoikcaeepd":{"blacklist":true},"hkjfdgjkgpbbdmadbglcgljjjddkcdha":{"blacklist":true},"hmmoglffhpmacaacfbbmbbkcbdkjphnc":{"blacklist":true},"hnbcdmfeoldeppcbnnjmjkdofohaljbn":{"blacklist":true},"hncomkjbbkchfjelocejkbbflmjhlhfp":{"blacklist":true},"hnipgljcblpgnnojcfldehpeknhakbgj":{"blacklist":true},"hnkcpoijaeegompjgbjjhkdmljldaccg":{"blacklist":true},"hnnebfeppcbhhbhiifeaajgcjnkljlld":{"blacklist":true},"hnonhhpgjnjcjfbkjdpfbkfpaodcmncb":{"blacklist":true},"hpcdoodjfcmpcpkeendjnjkeinimhkih":{"blacklist":true},"hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true},"iablioliielnhdianpbiijaoncbmfend":{"blacklist":true},"iccblehkchfmjgfafjcpjlkjcponhdhl":{"blacklist":true},"icihfeaofpcfehanhbnjigdlpfahjlee":{"blacklist":true},"iemfpgbdjfoihicbocpbjppipdbfimeh":{"blacklist":true},"ifbkndkaolfbjjhnnhfmkbkoclpdkpli":{"blacklist":true},"ifeijfpkjckedpclgncedmgdiaoeahmk":{"blacklist":true},"igaajdmlejbjcbmpmnigopikfdaccdcm":{"blacklist":true},"igbaoknfddliiaoimhehfbkfekpmmfll":{"blacklist":true},"igghanohiioehififjoalfkdoicafjof":{"blacklist":true},"ihnembcpodnfgkafmiojebccomjekopm":{"blacklist":true},"iiiinekimabooeihccihfopoadcaaphn":{"blacklist":true},"ijecjbcgpblkacpijljpaienknanaloa":{"blacklist":true},"ijenlpgidnapbndonoinbkhekgjonojg":{"blacklist":true},"ilhjicgcglhjigdehkcehjdokmkahbjl":{"blacklist":true},"imfbomjbodpfgfhfahlgkkcllmhbelhk":{"blacklist":true},"imkffpjpdngdkpgadcmnlkhhmhdocijn":{"blacklist":true},"iobnpmeeecphddicmhhmdjbnlbdhjlne":{"blacklist":true},"iomejadoamfilglofmeaffghddcgapmf":{"blacklist":true},"jaejgaoiipdjjlbnapngknalafalbkej":{"blacklist":true},"janhdpmhnighonkkbkdpnljcoenpfkbh":{"blacklist":true},"jbmbiepnidbnhbbfdbgioomdkgnbcacj":{"blacklist":true},"jbnafcjbcfgejacaanogofkkehcomamp":{"blacklist":true},"jcmipejepoimfflnoapdmkdephgjinck":{"blacklist":true},"jfalnphfjdoalcdhlnhdpekbmmopkgkj":{"blacklist":true},"jfjagidcpadkoaonbogmbgfimmnefeie":{"blacklist":true},"jgdkappiifgomhgikcjbanhnmlekpeje":{"blacklist":true},"jgmpapdckakiohhebmeoemejibommimi":{"blacklist":true},"jhhabiomopkibeecgngiggmopkeofacl":{"blacklist":true},"jindbcpkhnnnjgcjgmkjedbibibiojjf":{"blacklist":true},"jjnkfllhcgkgnfbekpnmoikpfihpjfli":{"blacklist":true},"jkihmglffmfjedfbpbpdbbimcodjbmdh":{"blacklist":true},"jkmhalpofmlfeglboejbchpoijnkmcgh":{"blacklist":true},"jljfnkmkkdkppfndippkedacgfkafped":{"blacklist":true},"jmafennmmkgbibkodgmhlekfaaiddaii":{"active_permissions":{"api":["bookmarks","unlimitedStorage"],"explicit_host":["*://*/*"],"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["bookmarks","unlimitedStorage"],"explicit_host":["*://*/*"],"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"install_time":"12993693353623625","lastpingday":"12993634960415625","location":1,"manifest":{"background":{"scripts":["LucifersMOD.js"]},"content_scripts":[{"all_frames":true,"js":["LucifersMOD.user.js"],"matches":["hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxp://apps.facebook.com/inthemafia/*","hxxps://apps.facebook.com/inthemafia/*"]}],"description":"Lucifers MOD | Chrome Install","icons":{"128":"images/lucifer128.png","16":"images/lucifer16.png","32":"images/lucifer32.png","48":"images/lucifer48.png","64":"images/lucifer64.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDmZzkV+slgna03vZvgGol2Wu39gFygnm7xgRqC/sosrtvdCp5MSClK4vZodRfaRXz3/X1vM+xguGljRU8AqtwVyNQOe2zL8rj3M1Xsl8mMMbYexKJ7/AUOaveT7ER5OooY78fsmCyTQz0AUGY1ru5Rb97Bu72xdHR8p2UbzQit+wIDAQAB","manifest_version":2,"name":"Lucifers MOD","permissions":["bookmarks","unlimitedStorage","fileSystem","*://*/"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.6.2.6"},"path":"jmafennmmkgbibkodgmhlekfaaiddaii\\0.6.2.6_0","state":1},"jmbkhogpjgjpfjhpdikloblkbkljkgao":{"blacklist":true},"jmeanodbelbflfmnkfdjgpikmldgjjko":{"blacklist":true},"jmifipgdcllamghkhdplfjffkciekbgo":{"blacklist":true},"jpehgolpfgnknboibogccapmdcadjkbd":{"blacklist":true},"jpeijjbllejgmokmahkeommcodahoobm":{"blacklist":true},"jpgidahfcgiajlcbleeiaibpmmblcmnb":{"blacklist":true},"jpkdlckejfjidmplieobnhijmoiecbhl":{"blacklist":true},"kbipembkfhbdmkkkfbigmohilmknjnof":{"blacklist":true},"kcanfkmhccbaheheaackijegkclkaeic":{"blacklist":true},"kcfnnanmpghdnoompcfclakpacapnfbn":{"blacklist":true},"kcgplbmkmfcpngilmhjmebdgkkpbdemp":{"blacklist":true},"kdchmeaiapjkejkcbeclgjklemecieeg":{"blacklist":true},"kdfahjokahcbmecgaandpobmgiiknagf":{"blacklist":true},"kelcbonmemlciepjdmfcifnhloeammhj":{"blacklist":true},"kelljdoinjlkmkncffgadbebgpmlcang":{"blacklist":true},"kffhenjbibjnbnjhlkcdlmpeccpaohio":{"blacklist":true},"kgbkdabomfdpfoibliicpmibceaoohgh":{"blacklist":true},"kgdhnhadbnpeibkghaebmhmngobdafag":{"blacklist":true},"kgdkcodealpfjolmiagcogfbgmaamegh":{"blacklist":true},"kgdmldjagfciieddcnlhampgkajkpanc":{"blacklist":true},"kibgmcdcfmcglajcfbecilngejnfppjp":{"blacklist":true},"kiipngoehgkgkackngaidmhmnchfbmio":{"blacklist":true},"kinhljbhjmcmoddhdoodekeklmjapjff":{"blacklist":true},"kkhomejdleoonmbdhcigkhkjcghngncf":{"blacklist":true},"kleaapgdkahaekcocmkbgfainbhihccj":{"blacklist":true},"kmlebjoghkhpapfhbdikannggmmffnco":{"blacklist":true},"kmnlgpakocffbjcgfibfdmgmfhjgepni":{"active_permissions":{"api":["unlimitedStorage"],"scriptable_host":["*://facebook.mafiawars.zynga.com/mwfb/remote/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["unlimitedStorage"],"scriptable_host":["*://facebook.mafiawars.zynga.com/mwfb/remote/*"]},"install_time":"12991438418465500","lastpingday":"12993807762000500","location":1,"manifest":{"content_scripts":[{"all_frames":true,"js":["spockholm_toolbar.js"],"matches":["*://facebook.mafiawars.zynga.com/mwfb/remote/*"]}],"description":"Load spocklets with ease in Chrome","icons":{"128":"icon_128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+v61LohPWfWxhZX51LzUN9reDulLqgTnS7OSw56ZL8ly7uQzW4ohQgUKp6Vjti+eDwCUJMh8oKCoKSVrj7N/N4i5WXlLaHlP4SLWCP3MgJj6vEB4/AgzESdsMR5OOnHWdMyuWCm9H44X8fBIrQkrk3EQhTadqONz8Lo601s7SgwIDAQAB","manifest_version":2,"name":"Spockholm Mafia Toolbar","permissions":["unlimitedStorage"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1.0"},"path":"kmnlgpakocffbjcgfibfdmgmfhjgepni\\1.0_0","state":1},"kolbbghckjilleabphhgeggcgpfidofi":{"blacklist":true},"lambangeielkjcnmioccboaphdfcffib":{"blacklist":true},"lbaddolhebpnhdcdkicpcflhnfamcemn":{"blacklist":true},"lbficnmfealeidppcbgdcbemgfjodbkg":{"blacklist":true},"lceaiepehinnomgijphkmjccbigkljkj":{"blacklist":true},"lcfkojlnjnedeoepfemhdgkhiabkeadc":{"blacklist":true},"ldgfapfmnplpaohbbadnecegcpfkfall":{"blacklist":true},"lgalokbapphhklmilicdefmgbjkcmldf":{"blacklist":true},"lgcnahanhlfpceencjmlehpfklokhojk":{"blacklist":true},"likifpgnijjfbdegfepoalpamlgnfofi":{"blacklist":true},"liomofjeffddiiccaolcnllbhnipbkhe":{"blacklist":true},"ljcicfibknpmlcmcecddjlbgkejehhpa":{"blacklist":true},"ljeihpebkahejeacdalhkhmckmggppif":{"blacklist":true},"ljmjoloiepllcndinchenhomcdcgbgef":{"blacklist":true},"lkdimamelhbiijkiljlnedmhnnkkmlbl":{"blacklist":true},"lkfdchejjogilmloogbbjlnlpbhgjfab":{"blacklist":true},"lkhcbijhgfchgdmklonlobkfbcadbokg":{"blacklist":true},"lljnngafekbnkpdfophmcdlbfebcbcld":{"blacklist":true},"lnahlgmhpghkhmafjppdidhcoaomipfg":{"blacklist":true},"lnbeebaenahmkbffnimghceldeeihfak":{"blacklist":true},"lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true},"lndempehphjoeimfchjflohpmhamiamf":{"blacklist":true},"lnjgjionmhobdfdegbciceafphgemjnc":{"blacklist":true},"lnlaeblencbjjjeaanegaldcjfekeled":{"blacklist":true},"loggadfheaoeabmkgolecncpfdfioefa":{"blacklist":true},"lojppnndedobolgfepahepphhloediji":{"blacklist":true},"loldehkdjdncebfnncknlkdchjclifbn":{"blacklist":true},"lookpbabilcplifjdeifacodednpacmk":{"blacklist":true},"lpgiafapdmlapiokjnmpbbfkomiceoml":{"blacklist":true},"lplmcpcnhpbffpcfiaddbeaplhhbengd":{"blacklist":true},"maakimnachffhlgdhfomaejeeaikgjap":{"blacklist":true},"mamfageekafifnickhgkibkofcclfefe":{"blacklist":true},"mbmdaiddhfoljplpdhohimgieioblfif":{"blacklist":true},"mbniclmhobmnbdlbpiphghaielnnpgdp":{"active_permissions":{"api":["plugin"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["plugin"]},"install_time":"12992974721631000","lastpingday":"12993807762000500","location":1,"manifest":{"background":{"page":"background.html"},"browser_action":{"default_icon":"19x19.png","default_title":"Take Screenshot"},"current_locale":"en_US","default_locale":"en","description":"Easy and convenient screen capture tool. Allows you to make screenshot of any selected area (video and flash too), edit and upload it to server.","icons":{"128":"128x128.png","19":"19x19.png","24":"24x24.png","256":"256x256.png","32":"32x32.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOKViYMRyMKSxdwxQceEf9qkdgGdByfasdnPjrTXvCVI7fDzGEUjFd11CWnZmH294MS2mFNqt1ztFJSiCn7DUF3R1MnJefyCOthc4qoRr2O6ktQRa1DasN0plt8YIBalnKar2+EPaFyNOnOOWOmRm0YcR7HDCfRIut8z4Q3LynKwIDAQAB","manifest_version":2,"name":"Lightshot (screenshot tool)","plugins":[{"path":"npLightshot.dll"}],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"3.0.0"},"path":"mbniclmhobmnbdlbpiphghaielnnpgdp\\3.0.0_0","state":1},"mcbkimglepddodbiongpohpeidioafgk":{"blacklist":true},"mcknnlhkkdbcppajgefagceglahcafjd":{"blacklist":true},"mdiehnlecbjlppbpaaipmlnhhjgepfcg":{"blacklist":true},"mdngbiejioalifclonjepjjfppmbgned":{"blacklist":true},"megkcfpbmemnpkgadkoompnoajcolpni":{"blacklist":true},"mfffdpnblflpobcnekhekiahepofaane":{"blacklist":true},"mfhfkclojmdocagbmecgcnlofppebebd":{"blacklist":true},"mfncimdpmknolnnnccdmkpnpkaofonkc":{"blacklist":true},"mgdgiplcofghdmpekdeeceolepakodcb":{"blacklist":true},"mjalegijammcloleihdmooifidcjggjp":{"blacklist":true},"mjgobkikdipfikmaoakdcdbicpioljgg":{"blacklist":true},"mjolnadmlahbpepjaemohnkhpjkbhmef":{"blacklist":true},"mknjbohhleiicbpagpgmhoaigbblmnic":{"blacklist":true},"mkobblpffgbncfhijabakfafmkjdmmnm":{"blacklist":true},"mlmegahemifabfmdnndafagnncfbnahn":{"blacklist":true},"mlmmbepkgelpbenpobinockmiehdahai":{"blacklist":true},"mlnoedbhndgbjcbeadjfnmjloejlgojk":{"blacklist":true},"mmjodihhmnpkldljaifiajmlnpflfhpm":{"blacklist":true},"mndoohjdoechinpkfbkolflbonciahfo":{"blacklist":true},"mnhcgaghminpdabllkbkecahjfkdiabk":{"blacklist":true},"mnichagcickblneeijmfnmoiakigmmhf":{"blacklist":true},"mnllienogacopjnkmhgnniopjpgjpopp":{"blacklist":true},"mogepbcllienegdibkfpmombhefhcoic":{"blacklist":true},"mpgehpkneknbopplhmmkfijfiniddipf":{"blacklist":true},"mplhbhmkccidaokcelbcbcmhhedebcng":{"blacklist":true},"naopgnjebjeeedbbhcadkhkmeefmloho":{"blacklist":true},"nbieffehfdniifkgdckbndjhojohbfjj":{"blacklist":true},"nckmikohoilfkcoahbjpbgbpegcjgngm":{"blacklist":true},"ncpdanjmicnihdlijomcggnnekloephc":{"blacklist":true},"ndhkiimgbjnendpcfbiadlifmangejoa":{"blacklist":true},"ndiogongcmocdgjciemhagfhpjamehpe":{"blacklist":true},"negkalblfongjbphdcbbhddlickhlamd":{"blacklist":true},"nepfiodmbijheamafkiglonfkjebdjmf":{"blacklist":true},"nfecfkjnlkbphobjbcnphimihniieehc":{"blacklist":true},"nfhopoibjodcfbppkiginpbcpekbdgln":{"active_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"install_time":"12993675547015500","location":1,"manifest":{"background":{"scripts":["background.js"]},"browser_action":{"default_icon":"images/icon.png","default_title":"TimelineRemove","popup":"popup.html"},"content_scripts":[{"all_frames":true,"js":["/api-utils/data/page.js"],"matches":["*://*.facebook.com/*"],"run_at":"document_start"}],"description":"TimeLineRemove.Com disable the new facebook timeline!","icons":{"128":"icon128.png","16":"icon16.png","48":"icon48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDVt8s/snYdV0IAGzWeS4515hfdeW55RxbjePwJ40IKnoM/49TuneDq0F9wjT0CqRu0Q6JFAnFR/WBDJF9kuZD27ePkaxVSOxwoPuQua/VNtdYBJ8i+/tf9NRe1LTqlq6eQjEJQjXunC+xt3QWZlNFqRnC1tpUtsaHgYxXIyZ16QIDAQAB","manifest_version":2,"name":"TimelineRemove","permissions":["bookmarks","tabs","*://*.facebook.com/*"],"update_url":"hxxp://update.timelineremove.com/update_chrome.xml","version":"1.0.5"},"path":"nfhopoibjodcfbppkiginpbcpekbdgln\\1.0.5_0","state":1},"nhbfbnmmdjkjahhfdeklgphihfodfgnb":{"blacklist":true},"nhboiakpmibkbkbeehchlfkggmhphpnk":{"blacklist":true},"nhkmojkfnknbbmhbnacjdlodokeophkl":{"blacklist":true},"nibohffepnilngkecenfdgnokfhmnkod":{"blacklist":true},"nidmbljkkcbdfklgdkklgjgmhejmbojn":{"blacklist":true},"nidodbfomffkfabciljelkbdiabkeehe":{"blacklist":true},"nifbebeekindefklojhchehidpikbjfc":{"blacklist":true},"nihhbeikpchdddoillfdcdinnnnllmna":{"blacklist":true},"nkfaeghnhcdmgdjjnjggpgfhlefbfcpl":{"active_permissions":{"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"events":["experimental.runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"granted_permissions":{"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"install_time":"12987201340148875","location":1,"manifest":{"content_scripts":[{"include_globs":["hxxp://apps.facebook.com/inthemafia/*","hxxps://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"],"js":["script.js"],"matches":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"],"run_at":"document_idle"}],"converted_from_user_script":true,"description":"Bookmarklet loader for the Spockholm Mafia Tools","key":"xJM7ldbAVWBrXuj80fMctbXzqr1a58xLElHV0JYeDZE=","name":"Spockholm Mafia Toolbar","version":"1.0.0"},"path":"nkfaeghnhcdmgdjjnjggpgfhlefbfcpl\\1.0.0_0","state":1},"nlgapikcofpablcmfgaoodlhiejiehhh":{"blacklist":true},"nloaaepkhcnmoakooihnefhhggbmemed":{"blacklist":true},"nmmnodocfckpoddcgihiihcdinaonckb":{"blacklist":true},"nmphbnbmgfccfhcmibikmhcgajjpelpf":{"blacklist":true},"nnioepmjbjjlflmdgjanlcmbjahljeeo":{"blacklist":true},"nochkknnbahbhmmknnmdhagelcnfagom":{"blacklist":true},"noefghcilkpcabnhhilojimkkjplhcnd":{"blacklist":true},"npadaghbcdejfngcjpbnoikajdnongca":{"blacklist":true},"npolaghondefgiomhkbiiompikfjneep":{"blacklist":true},"oakhllhnbcpgagdafgbninlpjdemdmjk":{"blacklist":true},"oanjogmonneelfpnfmdlalfddkeckdej":{"blacklist":true},"obgljnmbldahelaakfdbjkplokjoneip":{"blacklist":true},"ocmhjnhildbnglmlfimkjnnfgddelacb":{"blacklist":true},"ocnlnkjmfnolmbclblfhfhcakldceiec":{"blacklist":true},"odnamglmogfldajnhkfodmloofeokcmm":{"blacklist":true},"oghphhcagopecifjblgdcfihjnlcbcfc":{"blacklist":true},"ogjbodghhojomghbdfnlkppdagkfjede":{"blacklist":true},"oidjdpbndkjhmhmgdoggibcjnippkcgo":{"blacklist":true},"ojglppmhgfohhfeinlhklglifnbfebak":{"blacklist":true},"omceiakkomngangmllpgbjcoeloglald":{"blacklist":true},"onfbaaifbbahonepmednhkjbhdgogkbl":{"blacklist":true},"onpnpccdagncipgnoofbhchlbajcjnkd":{"blacklist":true},"oocfbmollajebjjpkahmlnclfhkjijea":{"blacklist":true},"ookcgejbfhcmcanfkfmmmpahflnlajbl":{"blacklist":true},"opnnngnphijodjhemhdafpnnpdjggofe":{"blacklist":true},"pajgiddgjidlcajihkjoacjbplimkgfe":{"blacklist":true},"pbdgmppmccanplobanhfkjndjkmmabgk":{"blacklist":true},"pbekednmpdekknlffkiopooofokfmkla":{"blacklist":true},"pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true},"peahabnpipmmfiajjjhgfggbeigbmbgp":{"blacklist":true},"peiijdmlgbelnnmnkighhkpeihmmamio":{"blacklist":true},"pfcelnbmkeoaeicedjomcjkcammlkdbk":{"blacklist":true},"pfhlnanelpgjbhndafjamnpfhkjadoip":{"blacklist":true},"pfoiaildicnbcjojocjlpcibenphhbln":{"blacklist":true},"pfonklmafadkmcedjlodommcoipgbcde":{"blacklist":true},"pgelifedkjaohmjehecojkfldinjlamn":{"blacklist":true},"pgjpnfpidejcmjibaaohcmehfohacckf":{"blacklist":true},"pgldfhecfiofkhnbgcncepnkjkeoahlk":{"blacklist":true},"phkpgooenaonkpnabopdbjjfmphclela":{"blacklist":true},"pihcfdffalbcnmbghijdfcaanagapelf":{"blacklist":true},"pjdhkkcnlbfebiokpeghfffajaabahfo":{"blacklist":true},"pjgbfgdpkbfimabdalhjmmeeelbmkcac":{"blacklist":true},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_bit":false,"active_permissions":{"api":["notifications"]},"app_launcher_ordinal":"w","events":["experimental.runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"install_time":"12987200590149875","last_active_pingday":"12993721361723250","lastpingday":"12993807762000500","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxps://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"en_US","default_locale":"en","description":"Fast, searchable email with less spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Gmail","options_page":"hxxps://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"7"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_0","state":1},"pjloefkigphblpjminnlpbhjchjafcfc":{"blacklist":true},"pkbbbncikcipejaiiiioboongndhmjgl":{"blacklist":true},"pkbkkendemaimikinaefldfljliecapm":{"blacklist":true},"pkhidkonipdjidjglnkfcfhnkfnlefbk":{"blacklist":true},"plfijddblbcdcnammpdmfccchkbdekmm":{"blacklist":true},"pnaiiipilbpcceggeanphcpkkihnojan":{"blacklist":true},"pnnbdjcjeiobikdfikegpclkcimgafpp":{"blacklist":true},"pnpfkfanlgljpkpilhgiimfadggfmhcd":{"blacklist":true},"pnpgiaejfbdapllkchhgchjpdbcpiooa":{"blacklist":true},"pobponmhkpmphbnfhpjdagklbkmjhked":{"blacklist":true},"ppmfajacidhcjbddpgmcmigffpppcadd":{"blacklist":true}},"toolbar":["nfhopoibjodcfbppkiginpbcpekbdgln","chagngapoeghhljpcnojlkonegopkimi","dnedfaenfnkikficknkklbdedlecmpgc","mbniclmhobmnbdlbpiphghaielnnpgdp"],"toolbarsize":-1},"google":{"services":{"username":"prov1kenobi@gmail.com"}},"homepage":"","homepage_is_newtabpage":false,"invalidator":{"invalidation_state":"CicKJQoGCgQIAxABEhIJ0DXydw9ZbbkR00b5+0r0zgUaBwiDEhADGAsSFH1zCrQ+QpQKa23lEXwasJhJwYHJ"},"is_google_plus_user":false,"net":{"hxxp_server_properties":{"2542116.fls.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"accounts.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":20},{"id":6,"value":0}],"supports_spdy":true},"accounts.youtube.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":79},{"id":6,"value":0}],"supports_spdy":true},"ad-emea.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"ad.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"ads-dot-angrybirds-facebook.appspot.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"ajax.googleapis.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":28},{"id":6,"value":24}],"supports_spdy":true},"angrybirds-facebook.appspot.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"apis.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"chatenabled.mail.google.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"chrome.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":21},{"id":6,"value":0}],"supports_spdy":true},"clients1.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"clients2.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":24},{"id":6,"value":0}],"supports_spdy":true},"clients2.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":90},{"id":6,"value":0}],"supports_spdy":true},"clients4.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"cm.g.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"csi.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"encrypted-tbn0.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":28},{"id":6,"value":0}],"supports_spdy":true},"encrypted-tbn1.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"encrypted-tbn3.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"fls.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"fonts.googleapis.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"gmail.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"googleads.g.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"i.ytimg.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"id.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"images-focus-opensocial.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"khms0.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"lh3.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":7},{"id":6,"value":35}],"supports_spdy":true},"lh3.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":6},{"id":6,"value":11}],"supports_spdy":true},"lh4.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"lh4.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"lh5.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"lh5.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"lh6.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":7},{"id":6,"value":23}],"supports_spdy":true},"lh6.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":88},{"id":6,"value":0}],"supports_spdy":true},"mail-attachment.googleusercontent.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"mail.google.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":87},{"id":6,"value":0}],"supports_spdy":true},"maps.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":44},{"id":6,"value":0}],"supports_spdy":true},"mts0.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"mts1.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":26},{"id":6,"value":0}],"supports_spdy":true},"news.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-4hpxg24fey4no-7v7qpa6ep4occkbp-390885-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-4wzjbkfvsqthw-rt5izixcg2c235lt-420968-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-4wzjbkfvsqthw-rt5izixcg2c235lt-420968-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-5d5vtnuyt53cy-dh4zcqulcnywvaib-382091-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-5d5vtnuyt53cy-dh4zcqulcnywvaib-382091-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-6hm2iaym3kp2q-ka3ovnzmeg2i6gzl-231218-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-6hm2iaym3kp2q-ka3ovnzmeg2i6gzl-231218-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":2},{"id":6,"value":2}],"supports_spdy":true},"p5-7hcwu5zffwo4e-vs4ptducsb3vv7dt-594505-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-dbwfdpechtl2o-b6hydkhfnw5tpofq-570595-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-dbwfdpechtl2o-b6hydkhfnw5tpofq-570595-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-kojbcyamowme2-c753rs4uyu5vrt3n-244326-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-kojbcyamowme2-c753rs4uyu5vrt3n-244326-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-mm3ghadbcmlx4-ckljp6mlt3i7c23o-540754-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-mm3ghadbcmlx4-ckljp6mlt3i7c23o-540754-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-mrwkyqtbvmnqo-zmguvx4fpdm4kmlp-360287-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-shyds6xg26trm-43en7twdkiivcmim-597313-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-thvddgwxtf5ws-w5ead7yg7b2kpzwq-729595-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-thvddgwxtf5ws-w5ead7yg7b2kpzwq-729595-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-uum547vrftmry-cmo3eki5vpk6pvky-252058-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-vxtjmwbkluf4o-tymiaqfbnspfrpui-542708-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-vxtjmwbkluf4o-tymiaqfbnspfrpui-542708-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-vxtjmwbkluf4o-tymiaqfbnspfrpui-542708-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-w5duzbgaxy6zi-puxignecqxg4jytv-535039-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-ywy5xdflofloy-fdcssuy7xzr5gtdi-524915-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-ywy5xdflofloy-fdcssuy7xzr5gtdi-714266-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-ywy5xdflofloy-fdcssuy7xzr5gtdi-714266-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-znc7pyimw5fjg-xiygkwfaxd624ns6-781931-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"pagead2.googleadservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"pagead2.googlesyndication.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"partner.googleadservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"plus.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":51},{"id":6,"value":0}],"supports_spdy":true},"plusone.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":26},{"id":6,"value":0}],"supports_spdy":true},"r.twimg.com:443":{"supports_spdy":true},"securepubads.g.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"ssl.google-analytics.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":2},{"id":6,"value":11}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":76},{"id":6,"value":0}],"supports_spdy":true},"static.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":26},{"id":6,"value":0}],"supports_spdy":true},"static.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"themes.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":33},{"id":6,"value":0}],"supports_spdy":true},"www-gm-opensocial.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"www.google-analytics.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":87},{"id":6,"value":0}],"supports_spdy":true},"www.googleadservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"www.googleapis.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"www.googletagservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"www.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true}}},"ntp":{"app_page_names":["Apps"],"gplus_required":false,"promo_closed":false,"promo_end":1348297200,"promo_group":322,"promo_group_max":1,"promo_group_timeslice":0,"promo_increment":1,"promo_initial_segment":4,"promo_line":"What do you think of Chrome? <a href=\"hxxps://survey.googleratings.com/wix/p5963862.aspx\">Take the survey</a>","promo_num_groups":1000,"promo_resource_cache_update":"1349372813.2925","promo_start":1347865200,"promo_views":0,"promo_views_max":15},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89","plugins_list":[{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89\\gcswf32.dll","version":"11,3,300,265"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\WINDOWS\\system32\\Macromed\\Flash\\NPSWF32_11_3_300_265.dll","version":"11,3,300,265"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Google Talk Plugin","path":"C:\\Documents and Settings\\Ron\\Application Data\\Mozilla\\plugins\\npgoogletalk.dll","version":"3.1.4.8140"},{"enabled":true,"name":"Google Talk Plugin Video Accelerator","path":"C:\\Documents and Settings\\Ron\\Application Data\\Mozilla\\plugins\\npgtpo3dautoplugin.dll","version":"0,1,44,16"},{"enabled":true,"name":"Google Talk"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files\\Adobe\\Acrobat 9.0\\Acrobat\\Browser\\nppdf32.dll","version":"9.5.1.283"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.330.3","path":"C:\\WINDOWS\\system32\\npdeployJava1.dll","version":"6.0.330.3"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"Shockwave for Director","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\np32dsw.dll","version":"10.2r23"},{"enabled":true,"name":"Shockwave"},{"enabled":true,"name":"Coupons Inc., Coupon Printer Manager ","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npCouponPrinter.dll","version":"4, 0, 0, 6"},{"enabled":true,"name":"Coupons Inc., Coupon Printer Manager ","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npMozCouponPrinter.dll","version":"4, 0, 1, 3"},{"enabled":true,"name":"Coupons Inc., Coupon Printer Manager "},{"enabled":true,"name":"2007 Microsoft Office system","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\NPOFF12.DLL","version":"12.0.4518.1014"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Microsoft\u00ae DRM","path":"C:\\Program Files\\Windows Media Player\\npdrmv2.dll","version":"9.00.00.4503"},{"enabled":true,"name":"Microsoft\u00ae DRM","path":"C:\\Program Files\\Windows Media Player\\npwmsdrm.dll","version":"9.00.00.4503"},{"enabled":true,"name":"Microsoft\u00ae DRM"},{"enabled":true,"name":"Windows Media Player Plug-in Dynamic Link Library","path":"C:\\Program Files\\Windows Media Player\\npdsplay.dll","version":"3.0.2.629"},{"enabled":true,"name":"Windows Media Player"},{"enabled":true,"name":"QUAKE LIVE","path":"C:\\Documents and Settings\\All Users\\Application Data\\id Software\\QuakeLive\\npquakezero.dll","version":"0.1.0.401"},{"enabled":true,"name":"QUAKE LIVE"},{"enabled":true,"name":"Google Update","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll","version":"1.3.21.115"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Google Earth Plugin","path":"C:\\Program Files\\Google\\Google Earth\\plugin\\npgeplugin.dll","version":"6.1.0.5001"},{"enabled":true,"name":"Google Earth Plugin"},{"enabled":true,"name":"Veetle TV Player","path":"C:\\Program Files\\Veetle\\Player\\npvlc.dll","version":"0.9.18"},{"enabled":true,"name":"Veetle TV Player"},{"enabled":true,"name":"Veetle TV Core","path":"C:\\Program Files\\Veetle\\plugins\\npVeetle.dll","version":"0.9.18"},{"enabled":true,"name":"Veetle TV Core"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"},{"enabled":true,"name":"Autodesk Design Review Firefox Add-on v1.1","path":"c:\\Program Files\\Autodesk\\Autodesk Design Review Firefox Add-on v1.1\\npADRdwf.dll","version":"1.1.0.0"},{"enabled":true,"name":"Autodesk Design Review Firefox Add-on v1.1"},{"enabled":true,"name":"Silverlight Plug-In","path":"c:\\Program Files\\Microsoft Silverlight\\4.0.60831.0\\npctrl.dll","version":"4.0.60831.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Windows Presentation Foundation","path":"c:\\WINDOWS\\Microsoft.NET\\Framework\\v3.5\\Windows Presentation Foundation\\NPWPF.dll","version":"3.5.30729.1 built by: SP"},{"enabled":true,"name":"Windows Presentation Foundation"}]},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"default_content_settings":{"cookies":4},"exited_cleanly":false,"name":"First user","password_manager_enabled":false},"selectfile":{"last_directory":"C:\\Documents and Settings\\Ron\\Desktop"},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"urls_to_restore_on_startup":["hxxp://www.google.com/"]},"sync":{"acknowledged_types":["Bookmarks","Preferences","Passwords","Autofill Profiles","Autofill","Themes","Typed URLs","Extensions","Encryption keys","Search Engines","Sessions","Apps","App settings","Extension settings","App Notifications"],"app_notifications":true,"app_settings":true,"apps":true,"autofill":true,"autofill_profile":true,"bookmarks":true,"encryption_bootstrap_token":"AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAx3tKGcGNVkKHxvB4Llj0ngAAAAACAAAAAAADZgAAqAAAABAAAABoRNBURUJxiJgnfSFKuHaEAAAAAASAAACgAAAAEAAAAHQg8EAwIQCyz0guST/F8tE4AAAASXRjSfx0BvkOGfI3Z4o93323tBz17rz1OOTzNvTITQpPDyUd7Zjj6GLwB2o0DY6YyjnyShbTJj8UAAAADaYB/1NOZKoIPnwu0dyDxfbYziI=","extension_settings":true,"extensions":true,"has_setup_completed":true,"keep_everything_synced":true,"last_synced_time":"12993861596796750","max_invalidation_versions":{"10":"1342727663379000","12":"1349311791443000","2":"1347918154926000","3":"1348703171894000","4":"1342727665553000","6":"1349294481692000","8":"1349285265862000","9":"1349219594897000"},"passwords":true,"preferences":true,"search_engines":true,"session_sync_guid":"session_syncTwHM3UddznPK7gK7Jq4KxA==","sessions":true,"suppress_start":false,"themes":true,"typed_urls":true},"sync_promo":{"show_ntp_bubble":false,"startup_count":1,"user_skipped":true,"view_count":2},"translate_accepted_count":{"fr":0},"translate_denied_count":{"fr":1}}

*************************

AdwCleaner[R1].txt - [120174 octets] - [31/10/2012 09:47:28]

########## EOF - C:\AdwCleaner[R1].txt - [120236 octets] ##########


Results of screen317's Security Check version 0.99.54
Windows 7 Service Pack 1 x86 (UAC is disabled!)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
ESET NOD32 Antivirus 5.2
Antivirus out of date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Norton Ghost
Malwarebytes Anti-Malware version 1.65.1.1000
Java 7 Update 9
Adobe Flash Player 11.4.402.287
Adobe Reader 8 Adobe Reader out of Date!
Adobe Reader 9 Adobe Reader out of Date!
Mozilla Firefox (Review.)
Google Chrome 21.0.1180.83
Google Chrome 21.0.1180.89
Google Chrome 22.0.1229.79
Google Chrome 22.0.1229.92
Google Chrome 22.0.1229.94
````````Process Check: objlist.exe by Laurent````````
ESET NOD32 Antivirus egui.exe
ESET NOD32 Antivirus ekrn.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
Malwarebytes' Anti-Malware mbamscheduler.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 1%
````````````````````End of Log``````````````````````

Attached Files



#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 31 October 2012 - 01:37 PM

Remove the AdWare, PUP (Potentially Unwanted Program) installed on your computer.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Delete.
  • Everything that was found will be deleted.
  • Follow the prompts to reboot the computer. A text file will open after the restart.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number)..

If you decide to remove the PUP the tool will also delete your Default\Preferences listed under.

File : C:\Users\WS-4\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found [l.1] : icon_url ={"apps_promo_counter":11,"backup":{"_signature":"z/jPTVsZCI7UpgM6jx7DjloLucQlz05TwXsvyWYl5Os=","
etc...


If you did not create these then run the tool. If not then you decide if you want to keep them knowing that this may be the reason of you present problem.

Keep me posted.
===

Get the latest version of the Adobe Reader.
http://get.adobe.com/reader/
Before your download I suggest you unckeck the box on the top right "Yes, install McAfee Security Scan Plus - optional" this is not required if you are not a McAfee subscriber. While the installation is in progress you can also deny the installation of any other programs that may be suggested.

When installed remove your old versions of the Reader using the Add/Remove Programs applet if present.
===

If still having the problem to update Windows run this tool and post the log for my review.

Please download Farbar Service Scanner and run it on the computer with the issue.
  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action center
    • Windows Update
    • Windows Defender
  • Press "Scan".
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the log to your reply.


#5 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 31 October 2012 - 02:28 PM

Farbar Service Scanner Version: 27-10-2012
Ran by WS-4 (administrator) on 31-10-2012 at 12:24:11
Running from "C:\Users\WS-4\Desktop"
Microsoft Windows 7 Professional Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo IP is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend service is OK.
The ServiceDll of WinDefend service is OK.


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2012-10-23 03:02] - [2012-08-22 10:16] - 1292144 ____A (Microsoft Corporation) A5EBB8F648000E88B7D9390B514976BF

C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll
[2012-10-22 13:57] - [2010-11-20 05:21] - 0125952 ____A (Microsoft Corporation) 83DE1576A1B1CF44B140AD87F84C5251

C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll
[2012-10-22 11:06] - [2012-06-01 21:36] - 0140288 ____A (Microsoft Corporation) 96C0E38905CFD788313BE8E11DAE3F2F

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

# AdwCleaner v2.006 - Logfile created 10/31/2012 at 12:03:46
# Updated 30/10/2012 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : WS-4 - WS-4-PC
# Boot Mode : Normal
# Running from : C:\Users\WS-4\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Trymedia
Folder Deleted : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\ConduitCommon
Folder Deleted : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\CT2438727
Folder Deleted : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Registry is clean.

-\\ Mozilla Firefox v16.0.2 (en-US)

Profile name : default-1350429686012 [Profil par défaut]
File : C:\Users\WS-4\AppData\Roaming\Mozilla\Firefox\Profiles\maupcxrh.default-1350429686012\prefs.js

Deleted : user_pref("CT2438727..clientLogIsEnabled", false);
Deleted : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2438727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2438727.BrowserCompStateIsOpen_1000515", true);
Deleted : user_pref("CT2438727.CT2438727", "CT2438727");
Deleted : user_pref("CT2438727.CurrentServerDate", "31-10-2012");
Deleted : user_pref("CT2438727.DSInstall", false);
Deleted : user_pref("CT2438727.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2438727.DialogsGetterLastCheckTime", "Mon Oct 29 2012 10:59:37 GMT-0700 (Pacific Daylig[...]
Deleted : user_pref("CT2438727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
Deleted : user_pref("CT2438727.FirstServerDate", "17-10-2012");
Deleted : user_pref("CT2438727.FirstTime", true);
Deleted : user_pref("CT2438727.FirstTimeFF3", true);
Deleted : user_pref("CT2438727.FirstTimeHiddenVer", true);
Deleted : user_pref("CT2438727.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2438727.HPInstall", false);
Deleted : user_pref("CT2438727.HasUserGlobalKeys", true);
Deleted : user_pref("CT2438727.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2438727.HomepageBeforeUnload", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CT2438727.Initialize", true);
Deleted : user_pref("CT2438727.InitializeCommonPrefs", true);
Deleted : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2438727.InstallationType", "DirectDownload");
Deleted : user_pref("CT2438727.InstalledDate", "Tue Oct 16 2012 16:35:10 GMT-0700 (Pacific Daylight Time)");
Deleted : user_pref("CT2438727.IsAlertDBUpdated", true);
Deleted : user_pref("CT2438727.IsGrouping", false);
Deleted : user_pref("CT2438727.IsInitSetupIni", true);
Deleted : user_pref("CT2438727.IsMulticommunity", false);
Deleted : user_pref("CT2438727.IsOpenThankYouPage", true);
Deleted : user_pref("CT2438727.IsOpenUninstallPage", true);
Deleted : user_pref("CT2438727.IsProtectorsInit", true);
Deleted : user_pref("CT2438727.LanguagePackLastCheckTime", "Tue Oct 30 2012 13:45:41 GMT-0700 (Pacific Dayligh[...]
Deleted : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2438727.LastLogin_3.15.1.0", "Wed Oct 31 2012 08:12:42 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2438727.LatestVersion", "3.15.1.0");
Deleted : user_pref("CT2438727.Locale", "en");
Deleted : user_pref("CT2438727.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2438727.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2438727.MyStuffEnabledAtInstallation", false);
Deleted : user_pref("CT2438727.OriginalFirstVersion", "3.15.1.0");
Deleted : user_pref("CT2438727.SearchCaption", "Zynga Customized Web Search");
Deleted : user_pref("CT2438727.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Deleted : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
Deleted : user_pref("CT2438727.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Wed Oct 31 2012 09:07:29 GMT-0700 (Pacific Dayli[...]
Deleted : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2438727.SearchProtectorEnabled", false);
Deleted : user_pref("CT2438727.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2438727.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2438727.ServiceMapLastCheckTime", "Wed Oct 31 2012 09:07:30 GMT-0700 (Pacific Daylight [...]
Deleted : user_pref("CT2438727.SettingsLastCheckTime", "Wed Oct 31 2012 10:28:03 GMT-0700 (Pacific Daylight Ti[...]
Deleted : user_pref("CT2438727.SettingsLastUpdate", "1351515188");
Deleted : user_pref("CT2438727.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2438727&SearchSource=13");
Deleted : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Fri Oct 19 2012 08:36:21 GMT-0700 (Pacific Day[...]
Deleted : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1331805997");
Deleted : user_pref("CT2438727.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
Deleted : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2438727.UserID", "UN97300602766613228");
Deleted : user_pref("CT2438727.ValidationData_Toolbar", 2);
Deleted : user_pref("CT2438727.alertChannelId", "832836");
Deleted : user_pref("CT2438727.components.1000515", true);
Deleted : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Sat Oct 27 2012 10:52:40 GMT-0700 (Pacific [...]
Deleted : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2438727.initDone", true);
Deleted : user_pref("CT2438727.isAppTrackingManagerOn", false);
Deleted : user_pref("CT2438727.myStuffEnabled", true);
Deleted : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2438727.navigateToUrlOnSearch", false);
Deleted : user_pref("CT2438727.revertSettingsEnabled", false);
Deleted : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2438727.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2438727.testingCtid", "");
Deleted : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Tue Oct 30 2012 13:45:39 GMT-0700 (Pacific D[...]
Deleted : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Tue Oct 30 2012 16:43:12 GMT-0700 (Pacific D[...]
Deleted : user_pref("CT2438727.usagesFlag", 2);
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2438727/CT2438727[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/US", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"2[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"f61[...]
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\WS-4\\AppData\\Roaming\\Mozilla\\Fi[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2438727");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2438727");
Deleted : user_pref("CommunityToolbar.globalUserId", "be276ced-4132-45f1-8171-f25e8a5b646d");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Oct 31 2012 09:07:3[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Oct 16 2012 16:35:19 GMT-070[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Oct 31 2012 09:07:29 GMT-0700 (P[...]
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "4e7d3dd3-81d7-42c2-a52c-278fa48f894a");
Deleted : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]

-\\ Google Chrome v22.0.1229.94

File : C:\Users\WS-4\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.1] : icon_url ={"apps_promo_counter":11,"backup":{"_signature":"z/jPTVsZCI7UpgM6jx7DjloLucQlz05TwXsvyWYl5Os=","_version":4,"browser":{"show_home_button":true},"extensions":{"ids":["ahfgeienlihckogmohjhadlkjgocpleb","blpcfgokakmgnkcojhhkbfbldkacnbeo","chagngapoeghhljpcnojlkonegopkimi","coobgpohoikkiipiblmjeljniedjpjpf","dnedfaenfnkikficknkklbdedlecmpgc","jmafennmmkgbibkodgmhlekfaaiddaii","kmnlgpakocffbjcgfibfdmgmfhjgepni","mbniclmhobmnbdlbpiphghaielnnpgdp","nfhopoibjodcfbppkiginpbcpekbdgln","nkfaeghnhcdmgdjjnjggpgfhlefbfcpl","pjkljhegncpnkpknbcohdijeoejaedia"]},"homepage":"","homepage_is_newtabpage":false,"session":{"restore_on_startup":4,"urls_to_restore_on_startup":["hxxp://www.google.com/"]}},"bookmark_bar":{"show_on_all_tabs":false},"browser":{"check_default_browser":false,"clear_data":{"cookies":false,"form_data":true,"time_period":3},"clear_lso_data_enabled":true,"last_known_google_url":"hxxp://www.google.com/","last_prompted_google_url":"hxxp://www.google.com/","pepper_flash_settings_enabled":true,"show_home_button":true,"window_placement":{"bottom":994,"left":20,"maximized":true,"right":1070,"top":20,"work_area_bottom":994,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"cloud_print":{"email":""},"countryid_at_install":21843,"custom_handlers":{"enabled":true,"registered_protocol_handlers":[{"protocol":"mailto","title":"Gmail","url":"hxxps://mail.google.com/mail/ca/?extsrc=mailto&url=%s"}]},"default_apps_install_state":1,"default_search_provider":{"enabled":true,"encodings":"","","id":"14","instant_url":"","keyword":"Fastest","name":"Fastest","prepopulate_id":"0","search_url":"hxxp://fastestwebsearch.com/search?q={searchTerms}","suggest_url":""},"distribution":{"make_chrome_default_for_user":true},"dns_prefetching":{"host_referral_list":[2,["hxxp://000sweb.co.monterey.ca.us/",["hxxp://000sweb.co.monterey.ca.us/",0.3369891529946043]],["hxxp://800notes.com/",["hxxp://800notes.com/",0.23892241939278966,"hxxp://pagead2.googlesyndication.com/",0.23892241939278966,"hxxp://partner.googleadservices.com/",0.23892241939278966,"hxxp://r.octonet.com/",0.655505099359705,"hxxp://res.octonet.com/",0.27363764272336593,"hxxp://www.googletagservices.com/",0.23892241939278966]],["hxxp://a.tribalfusion.com/",["hxxp://a.tribalfusion.com/",2.4575561048895462,"hxxp://b.scorecardresearch.com/",0.1335583214095467,"hxxp://bgm.sitescout.com/",2.7693356107337425,"hxxp://secure-us.imrworldwide.com/",0.1335583214095467]],["hxxp://a1.interclick.com/",["hxxp://ad.yieldmanager.com/",2.387589482583341,"hxxp://bs.serving-sys.com/",2.084686339270529,"hxxp://cdn.interclick.com/",2.9933957692089645,"hxxp://choices-st.truste.com/",2.9933957692089645,"hxxp://choices.truste.com/",2.084686339270529,"hxxp://ds.serving-sys.com/",2.387589482583341,"hxxp://fw.adsafeprotected.com/",2.690492625896153,"hxxp://jdn.monster.com/",3.2962989125217765,"hxxp://osmsync.interclick.com/",2.387589482583341,"hxxp://view.atdmt.com/",2.084686339270529]],["hxxp://ad-emea.doubleclick.net/",["hxxp://s0.2mdn.net/",0.1420590113442259]],["hxxp://ad-g.doubleclick.net/",["hxxp://pagead2.googlesyndication.com/",0.08785424700898203,"hxxp://s0.2mdn.net/",2.066525344788971,"hxxp://www.youtube.com/",0.1043778830817343]],["hxxp://ad.doubleclick.net/",["hxxp://foxdigital.hxxp.internapcdn.net/",0.7235221157605535,"hxxp://s0.2mdn.net/",1.5607395988884]],["hxxp://ad.turn.com/",["hxxp://cdn.turn.com/",0.5837027176426497]],["hxxp://ad.yieldmanager.com/",["hxxp://a.scorecardresearch.com/",1.1719785878403643,"hxxp://ad.doubleclick.net/",0.9080893693862427,"hxxp://ad.yieldmanager.com/",1.2198688752304387,"hxxp://ar.voicefive.com/",0.9080893693862427,"hxxp://b.scorecardresearch.com/",1.0400339786133035,"hxxp://b.voicefive.com/",1.3039231970674252,"hxxp://network.realmedia.com/",0.453038801083955,"hxxp://pixel.adsafeprotected.com/",0.5105138728632627,"hxxp://pixel.exelator.com/",0.3955637293046472,"hxxp://s0.2mdn.net/",1.0400339786133035]],["hxxp://ads-svx.hxxpads.com/",["hxxp://ad.doubleclick.net/",0.18862700383145073,"hxxp://ads.adbrite.com/",1.111468728672825,"hxxp://i.w55c.net/",0.23892241939278966,"hxxp://idsync.rlcdn.com/",0.18862700383145073,"hxxp://rc.rlcdn.com/",0.18862700383145073,"hxxp://sync.mathtag.com/",0.10407460588749911]],["hxxp://ads.adbrite.com/",["hxxp://ad.yieldmanager.com/",2.084686339270529,"hxxp://ads.adbrite.com/",5.1137177723986475,"hxxp://cm.g.doubleclick.net/",2.084686339270529,"hxxp://googleads.g.doubleclick.net/",2.084686339270529,"hxxp://m.xp1.ru4.com/",2.387589482583341,"hxxp://pixel.mathtag.com/",2.084686339270529,"hxxp://um.eqads.com/",2.084686339270529,"hxxp://www.facebook.com/",2.084686339270529,"hxxp://www.googleadservices.com/",2.084686339270529,"hxxps://www.facebook.com/",2.084686339270529]],["hxxp://ads.adsonar.com/",["hxxp://ad.doubleclick.net/",0.6421007555487322,"hxxp://cdn.tacoda.at.atwola.com/",0.7353974465258984,"hxxp://s0.2mdn.net/",0.6421007555487322,"hxxp://spe.atdmt.com/",2.387589482583341,"hxxp://view.atdmt.com/",2.387589482583341]],["hxxp://ads.espn.adsonar.com/",["hxxp://ads.espn.adsonar.com/",0.583368248088602,"hxxp://cdn.tacoda.at.atwola.com/",0.6087999324569822,"hxxp://s.aolcdn.com/",2.127083409456189]],["hxxp://ads.financialcontent.com/",["hxxp://ad.yieldmanager.com/",0.30862867972278124,"hxxp://adadvisor.net/",0.19518678663548863,"hxxp://adnxs.revsci.net/",0.19518678663548863,"hxxp://ads.revsci.net/",0.22354725990731183,"hxxp://bh.contextweb.com/",0.22354725990731183,"hxxp://cm.g.doubleclick.net/",0.19518678663548863,"hxxp://cookex.amp.yahoo.com/",0.19518678663548863,"hxxp://ib.adnxs.com/",0.2802682064509579,"hxxp://pixel.quantserve.com/",0.25190773317913495,"hxxp://tag.admeld.com/",0.2802682064509579]],["hxxp://ads.lfstmedia.com/",["hxxp://ads.pubmatic.com/",2.4575561048895462,"hxxp://ajax.googleapis.com/",2.1457765990453503,"hxxp://cdn.lfstmedia.com/",3.392894622422135,"hxxp://sync.mathtag.com/",2.1457765990453503,"hxxp://tags.bluekai.com/",2.1457765990453503]],["hxxp://ads.pointroll.com/",["hxxp://ad.doubleclick.net/",0.23892241939278966,"hxxp://s0.2mdn.net/",0.23892241939278966,"hxxp://spd.pointroll.com/",0.27363764272336593,"hxxp://speed.pointroll.com/",1.176233449318348,"hxxp://t.pointroll.com/",0.23892241939278966]],["hxxp://ads.pubmatic.com/",["hxxp://ads.pubmatic.com/",2.7693356107337425,"hxxp://image2.pubmatic.com/",2.4575561048895462,"hxxp://image4.pubmatic.com/",2.4575561048895462,"hxxp://pixel.invitemedia.com/",2.4575561048895462]],["hxxp://afe.specificclick.net/",["hxxp://a.scorecardresearch.com/",2.1979879973164053,"hxxp://ad.doubleclick.net/",1.950532394969525,"hxxp://b.scorecardresearch.com/",2.4454435996632853,"hxxp://cache.specificmedia.com/",2.1979879973164053]],["hxxp://ard.ihookup.com/",["hxxp://ard.ihookup.com/",0.1826261069738414,"hxxp://cdn1.pics.cdn-ihookup.com/",0.5069918790617084,"hxxp://cdn2.pics.cdn-ihookup.com/",0.2521330581355273,"hxxp://cdn2.static.ard.cdn-ihookup.com/",0.2521330581355273,"hxxp://cdn3.pics.cdn-ihookup.com/",0.15945712325327943]],["hxxp://assets.newsinc.com/",["hxxp://ad.auditude.com/",1.9116543432291524]],["hxxp://b3.mookie1.com/",["hxxp://d.agkn.com/",0.0875149138558962,"hxxp://dm.de.mookie1.com/",0.16032474571960484,"hxxp://pix.bit.ly/",0.0875149138558962,"hxxp://segment-pixel.invitemedia.com/",0.0875149138558962,"hxxp://t.mookie1.com/",0.16380996696103636,"hxxp://www.facebook.com/",0.0875149138558962,"hxxps://ib.mookie1.com/",0.0875149138558962,"hxxps://load.s3.amazonaws.com/",0.0875149138558962,"hxxps://loadm.exelator.com/",0.0875149138558962,"hxxps://www.facebook.com/",0.0875149138558962]],["hxxp://bcp.crwdcntrl.net/",["hxxp://ad.crwdcntrl.net/",2.025335319191497,"hxxp://bcp.crwdcntrl.net/",2.025335319191497,"hxxp://d.agkn.com/",2.319614810014193,"hxxp://ib.adnxs.com/",0.3333285659829197,"hxxp://tags.bluekai.com/",2.319614810014193,"hxxp://view.atdmt.com/",2.319614810014193,"hxxp://www.bkrtx.com/",2.025335319191497]],["hxxp://bgm.sitescout.com/",["hxxp://bgm.sitescout.netdna-cdn.com/",2.1457765990453503]],["hxxp://bh.contextweb.com/",["hxxp://bh.contextweb.com/",3.5992020558345876,"hxxp://connexity.net/",2.387589482583341,"hxxp://contextweb.pixel.invitemedia.com/",2.387589482583341,"hxxp://cw-m.d.chango.com/",2.084686339270529,"hxxp://d.chango.com/",2.084686339270529,"hxxp://i.w55c.net/",2.084686339270529,"hxxp://pcm1.map.pulsemgr.com/",2.084686339270529,"hxxp://su.addthis.com/",2.084686339270529,"hxxp://tags.bluekai.com/",2.084686339270529,"hxxp://um.simpli.fi/",2.084686339270529]],["hxxp://bleacherreport.com/",["hxxp://ad.doubleclick.net/",1.0400339786133035,"hxxp://csi.gstatic.com/",0.9080893693862425,"hxxp://dynamicads.g.doubleclick.net/",1.1719785878403643,"hxxp://img.bleacherreport.net/",7.769209049193406,"hxxp://motifcdn2.doubleclick.net/",0.9080893693862425,"hxxp://s.ytimg.com/",0.9080893693862425,"hxxp://s0.2mdn.net/",1.0400339786133035,"hxxp://static.bleacherreport.net/",8.42893209532871,"hxxp://www.google-analytics.com/",1.4358678062944856,"hxxp://www.youtube.com/",1.0400339786133035]],["hxxp://bn.xp1.ru4.com/",["hxxp://ad.doubleclick.net/",0.16270006427458353,"hxxp://m.xp1.ru4.com/",0.16270006427458353]],["hxxp://bnw.xp1.ru4.com/",["hxxp://ad.doubleclick.net/",1.950532394969525,"hxxp://ads.adbrite.com/",1.950532394969525]],["hxxp://bs.serving-sys.com/",["hxxp://bleacherreport.com/",1.3062834040316024,"hxxp://ds.serving-sys.com/",0.9611500308723211,"hxxp://spe.atdmt.com/",0.9611500308723211,"hxxp://view.atdmt.com/",0.9611500308723211]],["hxxp://car-insurance.findthebest.com/",["hxxp://ads.adbrite.com/",0.15491737895425855,"hxxp://cm.g.doubleclick.net/",0.1999361044623337,"hxxp://googleads.g.doubleclick.net/",0.1999361044623337,"hxxp://ib.adnxs.com/",0.2224454672163711,"hxxp://image2.pubmatic.com/",0.15491737895425855,"hxxp://img2.findthebest.com/",0.1999361044623337,"hxxp://r.openx.net/",0.15491737895425855,"hxxp://static.ak.facebook.com/",0.2224454672163711,"hxxp://um.simpli.fi/",0.2899735554784837,"hxxp://www.googleadservices.com/",0.1999361044623337]],["hxxp://cdn-static.liverail.com/",["hxxp://ad4.liverail.com/",0.5035048324074827]],["hxxp://cdn.interclick.com/",["hxxp://cdn.interclick.com/",1.1483564578006073,"hxxp://ic.nexac.com/",0.08751772895423468,"hxxp://load.s3.amazonaws.com/",0.39556372930464734,"hxxp://osmsync.interclick.com/",0.39556372930464734,"hxxp://va.px.invitemedia.com/",0.0901699764893966]],["hxxp://cdn.optmd.com/",["hxxp://cdn.optmd.com/",0.2300981543619979,"hxxp://i.casalemedia.com/",0.2009065974653265]],["hxxp://cdn.tacoda.at.atwola.com/",["hxxp://js.adsonar.com/",0.7584938780188577]],["hxxp://cdn.turn.com/",["hxxp://ads.adbrite.com/",0.3423714495520542,"hxxp://cdn.spotxchange.com/",0.3423714495520542,"hxxp://ce.lijit.com/",0.45657319196422785,"hxxp://d.audienceiq.com/",0.39211772854679705,"hxxp://dpm.demdex.net/",0.45657319196422785,"hxxp://r.openx.net/",0.3423714495520542,"hxxp://r.turn.com/",0.7537814123677196,"hxxp://segment-pixel.invitemedia.com/",0.3423714495520542,"hxxp://tags.bluekai.com/",0.3423714495520542,"hxxps://www.facebook.com/",0.3423714495520542]],["hxxp://cdn.widgetserver.com/",["hxxp://ad.doubleclick.net/",0.2963676624135681,"hxxp://cdn.widgetserver.com/",0.8113378432664259,"hxxp://p.widgetserver.com/",0.2963676624135681,"hxxp://s0.2mdn.net/",0.2963676624135681,"hxxp://t.widgetserver.com/",0.5927353247901276]],["hxxp://classifieds.myredbook.com/",["hxxp://ajax.googleapis.com/",0.1925846066335558,"hxxp://classifieds.myredbook.com/",10.767689160313605,"hxxp://www.google-analytics.com/",0.4194534397918174]],["hxxp://cm.npc-mcclatchy.overture.com/",["hxxp://static.mcclatchyinteractive.com/",0.2009065974653265]],["hxxp://cmap.uac.ace.advertising.com/",["hxxp://ad.yieldmanager.com/",0.8254623213354741,"hxxp://cm.g.doubleclick.net/",0.7207394895242571,"hxxp://cmap.an.ace.advertising.com/",0.7207394895242571,"hxxp://cmap.at.ace.advertising.com/",0.7207394895242571,"hxxp://cmap.dc.ace.advertising.com/",0.7207394895242571,"hxxp://cmap.rm.ace.advertising.com/",0.7207394895242571,"hxxp://googleads.g.doubleclick.net/",0.7207394895242571,"hxxp://ib.adnxs.com/",0.7207394895242571,"hxxp://pixel.rubiconproject.com/",0.7207394895242571,"hxxp://view.atdmt.com/",0.7207394895242571]],["hxxp://cnsnews.com/",["hxxp://a.scorecardresearch.com/",0.15945712325327943,"hxxp://bcp.crwdcntrl.net/",0.1826261069738414,"hxxp://cdnx.tribalfusion.com/",0.1826261069738414,"hxxp://edge.sharethis.com/",0.1826261069738414,"hxxp://googleads.g.doubleclick.net/",0.15945712325327943,"hxxp://seg.sharethis.com/",0.1826261069738414,"hxxp://tap.rubiconproject.com/",0.1826261069738414,"hxxp://tap2-cdn.rubiconproject.com/",0.3216400092972129,"hxxp://w.sharethis.com/",0.437484927900023,"hxxp://www.google-analytics.com/",0.1826261069738414]],["hxxp://company.zynga.com/",["hxxp://company.zynga.com/",13.152493053603683,"hxxp://fonts.googleapis.com/",0.07148610056265642,"hxxp://platform.twitter.com/",1.15704310578434,"hxxp://s.ytimg.com/",0.07148610056265642,"hxxp://themes.googleusercontent.com/",0.13243650674359011,"hxxp://www.facebook.com/",0.7748739686501342,"hxxp://www.google-analytics.com/",0.7748739686501342,"hxxp://www.youtube-nocookie.com/",0.39270483151592855,"hxxps://ajax.googleapis.com/",0.39270483151592855,"hxxps://www.facebook.com/",0.7748739686501342]],["hxxp://configure.us.dell.com/",["hxxp://configure-cdn.us.dell.com/",0.5221289838775178,"hxxp://configure.us.dell.com/",0.3056364783673273,"hxxp://dell-dhs_us.baynote.net/",0.3056364783673273,"hxxp://dell-global.baynote.net/",0.2128539760058174,"hxxp://dellinc.tt.omtrdc.net/",0.3056364783673273,"hxxp://i.dell.com/",2.7489090405537575,"hxxp://linux.dell.com/",0.2128539760058174,"hxxp://nsm.dell.com/",0.24378147679298748,"hxxp://survey.112.2o7.net/",0.24378147679298748,"hxxps://chatpro.us.dell.com/",0.2747089775801576]],["hxxp://contextweb.pixel.invitemedia.com/",["hxxp://bh.contextweb.com/",0.4446621525949959]],["hxxp://core.insightexpressai.com/",["hxxp://core.insightexpressai.com/",0.9557813380690089]],["hxxp://craigslist.com/",["hxxp://craigslist.org/",1.7310017404546036,"hxxp://geo.craigslist.org/",1.12519545382898,"hxxp://monterey.craigslist.org/",1.7310017404546036,"hxxp://www.craigslist.org/",1.7310017404546036]],["hxxp://ct1.addthis.com/",["hxxp://cf.addthis.com/",2.066525344788971,"hxxp://ds.reson8.com/",2.066525344788971,"hxxp://ib.adnxs.com/",1.8043542189575343,"hxxp://m.addthisedge.com/",0.28775583596785153,"hxxp://segment-pixel.invitemedia.com/",1.8043542189575343]],["hxxp://cti.w55c.net/",["hxxp://i.w55c.net/",1.8043542189575343,"hxxp://tag.admeld.com/",0.32405203117298137]],["hxxp://d.agkn.com/",["hxxp://b3.mookie1.com/",0.19518678663548863,"hxxp://d.agkn.com/",0.25190773317913495,"hxxp://p.acxiom-online.com/",0.19518678663548863,"hxxp://r.nexac.com/",0.19518678663548863,"hxxp://rc.rlcdn.com/",0.22354725990731183,"hxxp://rd.rlcdn.com/",0.19518678663548863,"hxxp://su.addthis.com/",0.19518678663548863,"hxxp://t.mookie1.com/",0.22354725990731183]],["hxxp://d.yimg.com/",["hxxp://cosmos.bcst.yahoo.com/",2.690492625896153,"hxxp://d.yimg.com/",3.2962989125217765,"hxxp://geo.yahoo.com/",2.690492625896153,"hxxp://query.vap.yahoo.net/",2.387589482583341,"hxxp://static.vap.yahoo.net/",2.9933957692089645,"hxxp://yui.yahooapis.com/",2.084686339270529]],["hxxp://d3.zedo.com/",["hxxp://d14.zedo.com/",1.1669303753709767,"hxxp://d3.zedo.com/",0.6399384867976267,"hxxp://d7.zedo.com/",0.3573687792346665,"hxxp://m3.zedo.com/",1.8572295440774184]],["hxxp://dell.com/",["hxxp://www.dell.com/",0.23684101814869113]],["hxxp://disqus.com/",["hxxp://b.scorecardresearch.com/",0.12053323060273528,"hxxp://disqus.com/",0.12053323060273528,"hxxp://edge.quantserve.com/",0.1052417013471643,"hxxp://mediacdn.disqus.com/",0.943492807174622,"hxxp://pixel.quantserve.com/",0.1052417013471643,"hxxp://realtime.services.disqus.com/",0.1052417013471643,"hxxp://www.google-analytics.com/",0.12053323060273528,"hxxp://www.gravatar.com/",1.0686080444481307,"hxxps://juggler.services.disqus.com/",0.12053323060273528]],["hxxp://dm.de.mookie1.com/",["hxxp://bh.contextweb.com/",0.0875149138558962,"hxxp://ib.adnxs.com/",0.10023075604008623,"hxxp://image2.pubmatic.com/",0.10023075604008623,"hxxp://matcher-apx.bidder7.mookie1.com/",0.10023075604008623,"hxxp://matcher-cwb.bidder7.mookie1.com/",0.0875149138558962,"hxxp://matcher-pbm.bidder7.mookie1.com/",0.10023075604008623,"hxxp://matcher.bidder8.mookie1.com/",0.07626902302819853,"hxxp://pixel.rubiconproject.com/",0.2067940233089318,"hxxp://su.addthis.com/",0.0875149138558962,"hxxp://t.mookie1.com/",0.11294659822427627]],["hxxp://dp1.33across.com/",["hxxp://bcp.crwdcntrl.net/",2.066525344788971,"hxxp://ib.adnxs.com/",0.32405203117298137,"hxxp://load.s3.amazonaws.com/",0.0618809053415448,"hxxp://loadm.exelator.com/",0.0618809053415448,"hxxp://loadus.exelator.com/",0.0618809053415448,"hxxp://rc.rlcdn.com/",0.5952143996608818,"hxxp://sync.tidaltv.com/",0.0618809053415448]],["hxxp://dub.kionrightnow.com/",["hxxp://ajax.googleapis.com/",0.062228579267061594]],["hxxp://e1.cdn.qnsr.com/",["hxxp://e2.cdn.qnsr.com/",0.2446372714821726,"hxxp://l1.cdn.qnsr.com/",0.06170960484438644]],["hxxp://edge.sharethis.com/",["hxxp://edge.sharethis.com/",0.06945952288912846,"hxxp://w.sharethis.com/",0.18369760218953407]],["hxxp://embed.newsinc.com/",["hxxp://a.collective-media.net/",2.396937274834959,"hxxp://ad.auditude.com/",2.6667911402137294,"hxxp://ad.doubleclick.net/",2.127083409456189,"hxxp://ak1.abmr.net/",1.8572295440774184,"hxxp://assets.newsinc.com/",6.714599120895281,"hxxp://content.newsinc.com/",3.206498870971269,"hxxp://lt.ndnps.newsinc.com/",3.7462066017288093,"hxxp://ndn.cdn.auditude.com/",1.8572295440774184,"hxxp://sana.newsinc.com/",2.9366450055924993,"hxxp://spc.ceedpefhegafjcfggdjgjhff.vast2as3.collectivemedia-pubnet.usa.telemetryverification.net/",2.127083409456189]],["hxxp://en.wikipedia.org/",["hxxp://bits.wikimedia.org/",5.115115937007707,"hxxp://en.wikipedia.org/",1.9024199667196162,"hxxp://meta.wikimedia.org/",1.6882402353670762,"hxxp://upload.wikimedia.org/",15.824102504634682]],["hxxp://energyalmanac.ca.gov/",["hxxp://energyalmanac.ca.gov/",0.29847102557665095]],["hxxp://espn.go.com/",["hxxp://63.235.28.238/",1.8572295440774184,"hxxp://a.scorecardresearch.com/",1.8572295440774184,"hxxp://b.scorecardresearch.com/",1.8572295440774184,"hxxp://bd0dc.v.fwmrm.net/",2.9366450055924993,"hxxp://extras.ooyala.com/",1.8572295440774184,"hxxp://l.ooyala.com/",2.127083409456189,"hxxp://player.ooyala.com/",3.206498870971269,"hxxp://secure-us.imrworldwide.com/",1.8572295440774184,"hxxp://svod.espn.go.com/",1.8572295440774184,"hxxp://vod.espn.go.com/",2.9366450055924993]],["hxxp://facebook.com/",["hxxp://www.facebook.com/",1.6157368326566683,"hxxps://www.facebook.com/",0.8416155650281046]],["hxxp://facebook.mafiawars.zynga.com/",["hxxp://facebook.mafiawars.zynga.com/",0.2995740599573865,"hxxp://static.ak.facebook.com/",0.33330094087974093,"hxxp://www.google-analytics.com/",0.33330094087974093,"hxxp://www.mafiawars.zynga.com/",0.5356622264138694,"hxxp://zgn.static.zynga.com/",0.40075470272445063,"hxxp://zynga1-a.akamaihd.net/",0.2658471790350317,"hxxp://zynga2-a.akamaihd.net/",1.4462880113174465,"hxxps://fbcdn-profile-a.akamaihd.net/",0.4344815836468052,"hxxps://www.facebook.com/",0.40075470272445063,"hxxps://zyngapv.hs.llnwd.net/",4.818976103552942]],["hxxp://facebook.womenforlove.net/",["hxxp://ard.ihookup.com/",0.1999361044623337,"hxxp://banners.geotarget.info/",0.15491737895425855,"hxxp://facebook.womenforlove.net/",0.6276139967890473]],["hxxp://fantasy.nfl.com/",["hxxp://b.scorecardresearch.com/",2.084686339270529,"hxxp://dpm.demdex.net/",2.084686339270529,"hxxp://fast.nfl.demdex.net/",2.387589482583341,"hxxp://global.fantasy.nfl.com/",8.445652348839576,"hxxp://metrics.nfl.com/",2.387589482583341,"hxxp://n.pswec.com/",2.084686339270529,"hxxp://nfl.demdex.net/",2.387589482583341,"hxxp://pagead2.googlesyndication.com/",2.084686339270529,"hxxp://www.adobetag.com/",2.387589482583341,"hxxp://yui.yahooapis.com/",2.690492625896153]],["hxxp://fast.nfl.demdex.net/",["hxxp://adadvisor.net/",2.1457765990453503,"hxxp://api.bizographics.com/",2.1457765990453503,"hxxp://d.turn.com/",2.1457765990453503,"hxxp://dpm.demdex.net/",3.0811151165779384,"hxxp://i.w55c.net/",2.1457765990453503,"hxxp://load.s3.amazonaws.com/",2.1457765990453503,"hxxp://loadm.exelator.com/",2.1457765990453503,"hxxp://nexac.demdex.net/",2.4575561048895462,"hxxp://r.nexac.com/",2.4575561048895462]],["hxxp://fb.timeremove.com/",["hxxp://www.facebook.com/",0.5317198549453611,"hxxps://www.facebook.com/",0.5317198549453611]],["hxxp://fw.adsafeprotected.com/",["hxxp://ad.doubleclick.net/",0.8733116276936077,"hxxp://fw.adsafeprotected.com/",1.290593553367508]],["hxxp://game.mytopfreegames.com/",["hxxp://addirector.vindicosuite.com/",1.4554581978743492,"hxxp://afe.specificclick.net/",2.387589482583341,"hxxp://b.scorecardresearch.com/",1.4554581978743492,"hxxp://cache.vindicosuite.com/",1.8661530015694614,"hxxp://cdn-static.liverail.com/",2.687542608959687,"hxxp://game.mytopfreegames.com/",3.919627020045026,"hxxp://pixel.quantserve.com/",1.0447633941792362,"hxxp://t4.liverail.com/",1.8661530015694614,"hxxp://vox-static.liverail.com/",1.9534728241176717,"hxxps://ajax.googleapis.com/",1.4554581978743492]],["hxxp://gmail.com/",["hxxps://accounts.google.com/",0.7169186930851825,"hxxps://gmail.com/",0.7627427878815433,"hxxps://mail.google.com/",0.8085668826779039]],["hxxp://googleads.g.doubleclick.net/",["hxxp://googleads.g.doubleclick.net/",0.3035458224340415,"hxxp://pagead2.googlesyndication.com/",3.4504714771698577,"hxxp://www.google.com/",0.29939241217137535,"hxxps://accounts.google.com/",0.298769127464949,"hxxps://apis.google.com/",1.488737421835468,"hxxps://googleads.g.doubleclick.net/",0.29939241217137535,"hxxps://plusone.google.com/",1.488737421835468,"hxxps://ssl.gstatic.com/",1.080256188600598]],["hxxp://googlemaps.com/",["hxxp://maps.google.com/",0.6013740469393443,"hxxps://maps.google.com/",1.788635371284397]],["hxxp://harvestconstruction.com/",["hxxp://harvestconstruction.com/",2.923217509785694]],["hxxp://i.dell.com/",["hxxp://i.dell.com/",0.12550955157056512]],["hxxp://ib.adnxs.com/",["hxxp://game.mytopfreegames.com/",1.4554581978743492]],["hxxp://ic.nexac.com/",["hxxp://cdn.interclick.com/",1.645840265238927]],["hxxp://img-cdn.mediaplex.com/",["hxxp://a1.interclick.com/",0.2128539760058174,"hxxp://ad.doubleclick.net/",0.2128539760058174,"hxxp://ad.yieldmanager.com/",0.2128539760058174,"hxxp://api.bizographics.com/",0.2128539760058174,"hxxp://edge.aperture.displaymarketplace.com/",0.2747089775801576,"hxxp://imagen01.247realmedia.com/",0.2128539760058174,"hxxp://leadback.advertising.com/",0.2128539760058174,"hxxp://network.realmedia.com/",0.2128539760058174,"hxxp://segment-pixel.invitemedia.com/",0.2128539760058174,"hxxp://sp.fastclick.net/",0.2128539760058174]],["hxxp://imp.bid.ace.advertising.com/",["hxxp://a.scorecardresearch.com/",1.2708243791374278,"hxxp://ad.doubleclick.net/",0.4242504199628669,"hxxp://b.scorecardresearch.com/",0.8474188179806067,"hxxp://b.voicefive.com/",0.5429673340825529,"hxxp://choices.truste.com/",1.3117307451125441,"hxxp://d.agkn.com/",0.4240132568237855,"hxxp://s0.2mdn.net/",0.7417016559380577]],["hxxp://jdn.monster.com/",["hxxp://jdn.monster.com/",3.5992020558345876,"hxxp://spe.atdmt.com/",2.387589482583341,"hxxp://view.atdmt.com/",2.387589482583341]],["hxxp://kkc7u90thcq2l028di4ivt0lccd7nd0k-a-fc-opensocial.googleusercontent.com/",["hxxp://csi.gstatic.com/",0.3030125233568562,"hxxp://kkc7u90thcq2l028di4ivt0lccd7nd0k-a-fc-opensocial.googleusercontent.com/",0.3030125233568562,"hxxp://www-fc-opensocial.googleusercontent.com/",0.3030125233568562]],["hxxp://loadus.exelator.com/",["hxxp://dap.criteo.com/",0.06748201027247502,"hxxp://ib.mookie1.com/",0.07728708868813379]],["hxxp://m.xp1.ru4.com/",["hxxp://adadvisor.net/",0.1420590113442259,"hxxp://hxxp.content.ru4.com/",0.16270006427458353,"hxxp://idsync.rlcdn.com/",0.16270006427458353,"hxxp://loadm.exelator.com/",0.1420590113442259,"hxxp://m.xp1.ru4.com/",0.16270006427458353,"hxxp://pixel.exelator.com/",0.1420590113442259,"hxxp://r.nexac.com/",0.1420590113442259,"hxxp://tags.bluekai.com/",0.1420590113442259]],["hxxp://maps.google.com/",["hxxp://id.google.com/",0.08502336425841886,"hxxp://maps.google.com/",0.25797687445930495,"hxxp://maps.gstatic.com/",0.3320998074025422,"hxxp://mt0.google.com/",0.2703306966165111,"hxxp://mt1.google.com/",0.25797687445930495,"hxxp://ssl.gstatic.com/",0.09737718641562498,"hxxp://www.google.com/",0.09737718641562498]],["hxxp://mediacdn.disqus.com/",["hxxp://static.ak.facebook.com/",0.05473855904192794]],["hxxp://mig.nexac.com/",["hxxp://dm.de.mookie1.com/",0.2300981543619979,"hxxp://t.mookie1.com/",0.2300981543619979]],["hxxp://monterey.craigslist.org/",["hxxp://www.craigslist.org/",0.26688393487736445]],["hxxp://msn.foxsports.com/",["hxxp://lc.livefyre.com/",2.025335319191497,"hxxp://livefyre-avatar.s3.amazonaws.com/",3.202453282482282,"hxxp://msn.foxsports.com/",17.62214833279439,"hxxp://static.foxsports.com/",38.515992181205924,"hxxp://stream1.foxsports.fyre.co/",2.025335319191497,"hxxp://tealium.hs.llnwd.net/",3.7910122641276733,"hxxp://usea1l3lc44.livefyre.com:8080/",2.025335319191497,"hxxp://widget-cdn.rpxnow.com/",2.6138943008368893,"hxxp://www.livefyre.com/",2.319614810014193,"hxxp://zor.fyre.co/",5.556689209063849]],["hxxp://network.realmedia.com/",["hxxp://api.quova.com/",0.05957196574169533,"hxxp://e.nexac.com/",0.06822772144775363,"hxxp://ib.mookie1.com/",0.05957196574169533,"hxxp://image2.pubmatic.com/",0.3244801240770049,"hxxp://matcher.realmedia.com/",0.05957196574169533,"hxxp://network.realmedia.com/",0.06822772144775363,"hxxp://wxtarget.direct.weatherbug.com/",0.05957196574169533,"hxxps://ev.ib-ibi.com/",0.05957196574169533,"hxxps://ib.mookie1.com/",0.05957196574169533]],["hxxp://nfl.cpl.delvenetworks.com/",["hxxp://ajax.googleapis.com/",0.3832548696349097,"hxxp://assets.delvenetworks.com/",1.3062834040316024,"hxxp://cache.delvenetworks.com/",2.9891571934680523,"hxxp://img.delvenetworks.com/",3.5778745271211933,"hxxp://nfl.cpa.delvenetworks.com/",1.5654207403604671,"hxxp://nfl.cpl.delvenetworks.com/",3.9098656457968164,"hxxp://nfl.img.delvenetworks.com/",2.856642903077,"hxxp://static.delvenetworks.com/",1.6545901963366784,"hxxp://www.google-analytics.com/",0.733927263649624]],["hxxp://pixel.invitemedia.com/",["hxxp://cms.ad.yieldmanager.net/",1.2464797923883506,"hxxp://cookex.amp.yahoo.com/",2.1457765990453503,"hxxp://googleads.g.doubleclick.net/",2.1457765990453503,"hxxp://segment-pixel.invitemedia.com/",0.08229345169658468,"hxxp://tags.bluekai.com/",0.08229345169658468]],["hxxp://platform.twitter.com/",["hxxp://cdn.api.twitter.com/",0.5484120333256085,"hxxp://p.twitter.com/",0.5484181264687314,"hxxp://r.twimg.com/",0.5484181264687314]],["hxxp://player.ooyala.com/",["hxxp://bd0dc.v.fwmrm.net/",21.246539501516853,"hxxp://l.ooyala.com/",74.37895457941077]],["hxxp://premium.mookie1.com/",["hxxp://imagen04.247realmedia.com/",0.2009065974653265]],["hxxp://pubads.g.doubleclick.net/",["hxxp://b.scorecardresearch.com/",2.1457765990453503,"hxxp://cdn.interclick.com/",3.0811151165779384,"hxxp://optimized-by.rubiconproject.com/",2.1457765990453503,"hxxp://s0.2mdn.net/",3.0811151165779384,"hxxp://s2spx.interclick.com/",2.4575561048895462,"hxxp://tag.admeld.com/",4.951792151643114,"hxxp://tag.contextweb.com/",2.1457765990453503,"hxxp://tap-cdn.rubiconproject.com/",2.1457765990453503,"hxxp://um.simpli.fi/",2.1457765990453503,"hxxp://www.burstnet.com/",2.1457765990453503]],["hxxp://puma.vizu.com/",["hxxp://cheetah.vizu.com/",0.4240604410513933,"hxxp://puma.vizu.com/",0.44643375553922365]],["hxxp://r.turn.com/",["hxxp://cdn.turn.com/",0.12759309454165477]],["hxxp://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/",["hxxp://csi.gstatic.com/",0.28912644819821353,"hxxp://r1rk9np7bpcsfoeekl0khkd2juj27q3o-a-fc-opensocial.googleusercontent.com/",1.0873895815959904,"hxxp://www-fc-opensocial.googleusercontent.com/",0.28912644819821353,"hxxp://www.google.com/",10.928718308200744]],["hxxp://randpacusa.com/",["hxxp://randpacusa.com/",0.1999361044623337,"hxxp://www.google-analytics.com/",0.17742674170829614,"hxxp://www.randpacusa.com/",0.17742674170829614,"hxxp://www.youtube.com/",0.17742674170829614]],["hxxp://res.octonet.com/",["hxxp://a.tribalfusion.com/",0.4124985360456709,"hxxp://ad.doubleclick.net/",0.27363764272336593,"hxxp://cdnx.tribalfusion.com/",0.30835286605394224,"hxxp://tags.expo9.exponential.com/",0.23892241939278966]],["hxxp://rs.gwallet.com/",["hxxp://ad.yieldmanager.com/",0.9080893693862427,"hxxp://bh.contextweb.com/",0.1609999694875793,"hxxp://cm.g.doubleclick.net/",0.9080893693862427,"hxxp://ib.adnxs.com/",2.1457765990453503,"hxxp://pixel.rubiconproject.com/",0.9080893693862427,"hxxp://po.st/",2.1457765990453503,"hxxp://rp.gwallet.com/",1.6635929903016957,"hxxp://tag.admeld.com/",2.1457765990453503,"hxxp://whos.amung.us/",2.1457765990453503,"hxxp://www.theblaze.com/",0.40360846144411094]],["hxxp://sacbee.disqus.com/",["hxxp://mediacdn.disqus.com/",0.2009065974653265,"hxxp://sacbee.disqus.com/",0.2009065974653265]],["hxxp://screepts.com/",["hxxp://facebook.mafiawars.zynga.com/",0.1754591381631209,"hxxp://nzhost.me/",0.1531993967543666,"hxxp://screepts.com/",0.2422383623893833]],["hxxp://secure-us.imrworldwide.com/",["hxxp://secure-us.imrworldwide.com/",5.722865508399934]],["hxxp://seg.sharethis.com/",["hxxp://b.scorecardresearch.com/",0.10417474621970483]],["hxxp://sports.yahoo.com/",["hxxp://l.yimg.com/",3.5992020558345876,"hxxp://o.analytics.yahoo.com/",2.387589482583341,"hxxp://platform.twitter.com/",4.205008342460212,"hxxp://sports.yahoo.com/",4.810814629085835,"hxxp://y.analytics.yahoo.com/",2.9933957692089645,"hxxps://apis.google.com/",2.387589482583341,"hxxps://graph.facebook.com/",2.9933957692089645,"hxxps://plusone.google.com/",2.387589482583341,"hxxps://ssl.gstatic.com/",2.084686339270529,"hxxps://www.facebook.com/",4.810814629085835]],["hxxp://static.newstogram.com/",["hxxp://aperture.displaymarketplace.com/",0.2300981543619979,"hxxp://b.scorecardresearch.com/",0.2884812681553404,"hxxp://c5.zedo.com/",0.2009065974653265,"hxxp://c7.zedo.com/",0.2592897112586693,"hxxp://ox-d.newstogram.com/",0.3760559388453545,"hxxp://pixel.quantserve.com/",0.2592897112586693,"hxxp://static.newstogram.com/",0.317672825052012,"hxxp://tag.contextweb.com/",0.2300981543619979,"hxxp://u.openx.net/",0.2009065974653265,"hxxp://view.atdmt.com/",0.2300981543619979]],["hxxp://stats.csnbayarea.com/",["hxxp://hosted.stats.com/",0.6387799509153966,"hxxp://stats.csnbayarea.com/",0.46363060953536844,"hxxps://ajax.googleapis.com/",0.2300981543619979]],["hxxp://tag.admeld.com/",["hxxp://pagead2.googlesyndication.com/",0.19518678663548863]],["hxxp://tags.bluekai.com/",["hxxp://i.i.com.com/",2.025335319191497]],["hxxp://tags.mediaforge.com/",["hxxp://adadvisor.net/",2.084686339270529,"hxxp://cm.g.doubleclick.net/",2.084686339270529,"hxxp://load.s3.amazonaws.com/",2.084686339270529,"hxxp://loadus.exelator.com/",0.44366916740365364,"hxxp://mpp.specificclick.net/",2.084686339270529,"hxxp://pixel.mathtag.com/",2.084686339270529,"hxxp://pixel.rubiconproject.com/",0.7338491289725271,"hxxp://sync.mathtag.com/",2.084686339270529,"hxxp://tags.bluekai.com/",0.06131768009397067]],["hxxp://tap2-cdn.rubiconproject.com/",["hxxp://ad.turn.com/",0.1826261069738414,"hxxp://ad.yabuka.com/",0.06945952288912846,"hxxp://cm.g.doubleclick.net/",0.06945952288912846,"hxxp://match.rtbidder.net/",0.15945712325327943,"hxxp://matcher-rbc.bidder7.mookie1.com/",0.15945712325327943,"hxxp://pe.intentiq.com/",0.20579509069440335,"hxxp://pixel.everesttech.net/",0.06945952288912846,"hxxp://pixel.rubiconproject.com/",0.20579509069440335,"hxxp://pixel2368.everesttech.net/",0.06945952288912846,"hxxp://tags.bluekai.com/",0.15945712325327943]],["hxxp://this.content.served.by.adshuffle.com/",["hxxp://media2.adshuffle.com/",2.127083409456189,"hxxp://this.content.served.by.adshuffle.com/",1.8572295440774184]],["hxxp://toolbar.zynga.com/",["hxxp://connect.facebook.net/",0.28181996733036346,"hxxp://static.ak.facebook.com/",1.1261314331917964,"hxxp://toolbar.static.zynga.com/",2.2518800543403747,"hxxps://s-static.ak.facebook.com/",0.5632571226175079,"hxxps://www.facebook.com/",0.5632571226175079]],["hxxp://tour.ihookup.com/",["hxxp://cdn2.static.cdn-ihookup.com/",0.15945712325327943,"hxxp://cdn2.static.tour.cdn-ihookup.com/",0.4606539116205844,"hxxp://googleads.g.doubleclick.net/",0.15945712325327943,"hxxp://www.googleadservices.com/",0.1826261069738414,"hxxp://www.ihookup.com/",0.15945712325327943,"hxxps://aa.online-metrix.net/",0.15945712325327943,"hxxps://h.online-metrix.net/",0.3216400092972129]],["hxxp://townshendconstruction.com/",["hxxp://townshendconstruction.com/",13.897908928470188]],["hxxp://translate.google.com/",["hxxp://csi.gstatic.com/",0.17742674170829614,"hxxp://lh4.googleusercontent.com/",0.15491737895425855,"hxxp://ssl.gstatic.com/",0.2224454672163711,"hxxp://translate.google.com/",0.3124829182325213,"hxxp://www.gstatic.com/",0.2224454672163711,"hxxps://plus.google.com/",0.1999361044623337]],["hxxp://vbp1den1.lijit.com/",["hxxp://ca.lijit.pixel.invitemedia.com/",0.1420590113442259,"hxxp://ce.lijit.com/",0.286546381856729,"hxxp://idpix.media6degrees.com/",0.1420590113442259,"hxxp://lj.d.chango.com/",0.1420590113442259,"hxxp://match.rtbidder.net/",0.1420590113442259,"hxxp://p.rfihub.com/",0.1420590113442259,"hxxp://ssp.orbengine.com/",0.1420590113442259,"hxxp://su.addthis.com/",0.1420590113442259,"hxxp://sync.mathtag.com/",0.1420590113442259,"hxxp://um.simpli.fi/",0.1420590113442259]],["hxxp://view.atdmt.com/",["hxxp://cdn.doubleverify.com/",0.4361223827266664,"hxxp://choices.truste.com/",1.5730336203857355,"hxxp://ib.adnxs.com/",0.16740196423809347,"hxxp://spe.atdmt.com/",0.5418814870897547,"hxxps://choices.truste.com/",0.4361223827266664]],["hxxp://vox-static.liverail.com/",["hxxp://ad4.liverail.com/",2.5563386815951494]],["hxxp://weather.insidebayarea.com/",["hxxp://extras.mnginteractive.com/",0.2592897112586693]],["hxxp://web.adblade.com/",["hxxp://b.scorecardresearch.com/",0.5861384337913258,"hxxp://pixel.quantserve.com/",0.29437741619543595,"hxxp://static.cdn.adblade.com/",3.899297585020856]],["hxxp://widgets.outbrain.com/",["hxxp://b.scorecardresearch.com/",0.145898027649239]],["hxxp://windowsupdate.microsoft.com/",["hxxp://windowsupdate.microsoft.com/",0.30022080501290504]],["hxxp://www.amica.com/",["hxxp://libs.coremetrics.com/",0.17742674170829614,"hxxp://www.amica.com/",2.878550272192812,"hxxps://ad.yieldmanager.com/",0.2674641927244462,"hxxps://googleads.g.doubleclick.net/",0.15491737895425855,"hxxps://seg.sharethis.com/",0.15491737895425855,"hxxps://stags.bluekai.com/",0.15491737895425855,"hxxps://switch.atdmt.com/",0.15491737895425855,"hxxps://view.atdmt.com/",0.1999361044623337,"hxxps://www.googleadservices.com/",0.15491737895425855]],["hxxp://www.amicacoverage.com/",["hxxp://ajax.googleapis.com/",0.15491737895425855,"hxxp://fast.fonts.com/",0.1999361044623337,"hxxp://googleads.g.doubleclick.net/",0.17742674170829614,"hxxp://tracker.marinsm.com/",0.17742674170829614,"hxxp://view.atdmt.com/",0.15491737895425855,"hxxp://www.amicacoverage.com/",0.44753909475674636,"hxxp://www.google-analytics.com/",0.17742674170829614,"hxxp://www.googleadservices.com/",0.1999361044623337]],["hxxp://www.blogger.com/",["hxxp://img1.blogblog.com/",0.15962184995096937,"hxxp://www.blogger.com/",0.9037235280541574,"hxxp://www.google-analytics.com/",1.1184600221883231,"hxxp://www.google.com/",0.7809157463648521,"hxxps://apis.google.com/",0.08424869995893466,"hxxps://plusone.google.com/",0.15962184995096937,"hxxps://ssl.gstatic.com/",0.5187446205334153]],["hxxp://www.callercenter.com/",["hxxp://api.solvemedia.com/",0.27363764272336593,"hxxp://b.scorecardresearch.com/",0.27363764272336593,"hxxp://i.po.st/",0.4124985360456709,"hxxp://maps.google.com/",0.30835286605394224,"hxxp://maps.gstatic.com/",0.4819289827068233,"hxxp://mt0.googleapis.com/",0.30835286605394224,"hxxp://mt1.googleapis.com/",0.4124985360456709,"hxxp://p.po.st/",0.23892241939278966,"hxxp://pixel.solvemedia.com/",0.23892241939278966,"hxxp://www.callercenter.com/",1.210948672648924]],["hxxp://www.capoliticalreview.com/",["hxxp://a0.twimg.com/",0.15945712325327943,"hxxp://pixel.quantserve.com/",0.15945712325327943,"hxxp://platform.twitter.com/",0.1826261069738414,"hxxp://static.ak.facebook.com/",0.1826261069738414,"hxxp://widgets.twimg.com/",0.1826261069738414,"hxxp://www.capoliticalreview.com/",1.2715683418402534,"hxxp://www.facebook.com/",0.1826261069738414,"hxxp://www.google-analytics.com/",0.15945712325327943,"hxxps://s-static.ak.facebook.com/",0.1826261069738414,"hxxps://www.facebook.com/",0.1826261069738414]],["hxxp://www.cbssports.com/",["hxxp://api.cbssports.com:60906/",2.084686339270529,"hxxp://bootstrap.cbssports.fyre.co/",2.084686339270529,"hxxp://livefyre-avatar.s3.amazonaws.com/",16.321134074972683,"hxxp://mads.cbs.com/",2.387589482583341,"hxxp://platform.twitter.com/",4.810814629085835,"hxxp://sports.cbsimg.net/",23.893712657792978,"hxxp://tag.admeld.com/",3.2962989125217765,"hxxp://www.livefyre.com/",2.387589482583341,"hxxp://zor.fyre.co/",4.810814629085835,"hxxp://zor.livefyre.com/",2.084686339270529]],["hxxp://www.co.monterey.ca.us/",["hxxp://www.co.monterey.ca.us/",0.3369891529946043]],["hxxp://www.csnbayarea.com/",["hxxp://adadvisor.net/",0.2009065974653265,"hxxp://link.theplatform.com/",0.2300981543619979,"hxxp://objects.tremormedia.com/",0.2592897112586693,"hxxp://pixel.quantserve.com/",0.2009065974653265,"hxxp://platform.twitter.com/",0.2884812681553404,"hxxp://r.openx.net/",0.2009065974653265,"hxxp://static.scanscout.com/",0.2300981543619979,"hxxp://tags.bluekai.com/",0.2009065974653265,"hxxp://www.csnbayarea.com/",2.4778480354056906,"hxxp://www.facebook.com/",0.2884812681553404]],["hxxp://www.dell.com/",["hxxp://dellinc.tt.omtrdc.net/",0.3570289975077283,"hxxp://i.dell.com/",1.0180628839824323,"hxxp://nsm.dell.com/",0.2668880129884505,"hxxp://survey.112.2o7.net/",0.23684101814869113,"hxxp://www-cdn.dell.com/",0.2668880129884505,"hxxp://www.dell.com/",0.2067940233089318,"hxxp://www1-cdn.dell.com/",0.32698200266796906]],["hxxp://www.docsports.com/",["hxxp://ct1.addthis.com/",2.387589482583341,"hxxp://s7.addthis.com/",2.084686339270529,"hxxp://www.docsports.com/",12.989199498531752,"hxxp://www.google-analytics.com/",2.387589482583341,"hxxps://apis.google.com/",2.387589482583341,"hxxps://plusone.google.com/",2.387589482583341,"hxxps://ssl.gstatic.com/",2.084686339270529]],["hxxp://www.ebay.com/",["hxxp://gh.ebaystatic.com/",1.7377129222639302,"hxxp://ir.ebaystatic.com/",2.839993507282095,"hxxp://merch.ebay.com/",1.5172568052602975,"hxxp://p.ebaystatic.com/",1.7377129222639302,"hxxp://pics.ebaystatic.com/",2.1786251562711962,"hxxp://srx.main.ebayrtm.com/",1.7377129222639302,"hxxp://thumbs3.ebaystatic.com/",1.5172568052602975]],["hxxp://www.facebook.com/",["hxxp://service.timelineremove.com/",0.09107490143857887,"hxxp://static.ak.fbcdn.net/",0.21817196538644631]],["hxxp://www.google.com/",["hxxp://ssl.gstatic.com/",2.2733802,"hxxp://www.google.com/",4.915941799999999]],["hxxp://www.insidebayarea.com/",["hxxp://cache-02.cleanprint.net/",0.2300981543619979,"hxxp://csc.beap.ad.yieldmanager.net/",0.2592897112586693,"hxxp://extras.mercurynews.com/",0.2009065974653265,"hxxp://extras.mnginteractive.com/",0.317672825052012,"hxxp://platform.twitter.com/",0.3468643819486833,"hxxp://scripts.bayareanewsgroup.com/",0.2300981543619979,"hxxp://scripts.chitika.net/",0.2009065974653265,"hxxp://us.bc.yahoo.com/",0.2009065974653265,"hxxp://www.facebook.com/",0.3468643819486833,"hxxps://www.facebook.com/",0.46363060953536844]],["hxxp://www.insure.com/",["hxxp://apis.google.com/",0.15491737895425855,"hxxp://ct1.addthis.com/",0.2224454672163711,"hxxp://s.clicktale.net/",0.15491737895425855,"hxxp://www.google-analytics.com/",0.15491737895425855,"hxxp://www.insure.com/",0.7874304723427137,"hxxp://www.qsstats.com/",0.15491737895425855,"hxxp://www.securerequestform.com/",0.20668891328854488,"hxxps://apis.google.com/",0.17742674170829614,"hxxps://plusone.google.com/",0.17742674170829614,"hxxps://ssl.gstatic.com/",0.15491737895425855]],["hxxp://www.jango.com/",["hxxp://a.jango.com/",2.1457765990453503,"hxxp://beacon-1.newrelic.com/",2.1457765990453503,"hxxp://cd09.128.music.static.jango.com/",2.1457765990453503,"hxxp://cd09.playlist.images.jango.com/",5.887130669175703,"hxxp://cd09.s3.static.jango.com/",12.43450029190382,"hxxp://pubads.g.doubleclick.net/",5.575351163331506,"hxxp://static.ak.facebook.com/",2.4575561048895462,"hxxp://www.jango.com/",2.4575561048895462,"hxxps://d1ros97qkrwjf5.cloudfront.net/",2.1457765990453503,"hxxps://s-static.ak.facebook.com/",2.4575561048895462]],["hxxp://www.kionrightnow.com/",["hxxp://ad.doubleclick.net/",0.24562305230209888,"hxxp://content.worldnow.com/",0.1467924750444495,"hxxp://ct1.addthis.com/",0.1220848307300373,"hxxp://ftpcontent.worldnow.com/",0.17150011935886197,"hxxp://images.worldnow.com/",0.13443865288724352,"hxxp://kion.images.worldnow.com/",0.1962077636732742,"hxxp://ping.chartbeat.net/",0.0850233642584188,"hxxp://static.chartbeat.com/",0.0850233642584188,"hxxp://www.google-analytics.com/",0.10973100857283113,"hxxp://www.kionrightnow.com/",0.0850233642584188]],["hxxp://www.lijit.com/",["hxxp://ad.turn.com/",2.066525344788971,"hxxp://ca.lijit.pixel.invitemedia.com/",1.8043542189575343,"hxxp://ce.lijit.com/",3.6395520997775903,"hxxp://idpix.media6degrees.com/",2.066525344788971,"hxxp://lj.d.chango.com/",1.8043542189575343,"hxxp://p.rfihub.com/",1.8043542189575343,"hxxp://ssp.orbengine.com/",1.8043542189575343,"hxxp://su.addthis.com/",1.8043542189575343,"hxxp://sync.mathtag.com/",2.066525344788971,"hxxp://um.simpli.fi/",1.8043542189575343]],["hxxp://www.livefyre.com/",["hxxp://cm.g.doubleclick.net/",2.084686339270529,"hxxp://cms.quantserve.com/",1.1851392083526282,"hxxp://edge.quantserve.com/",1.1851392083526282,"hxxp://ib.adnxs.com/",0.8822360650398164,"hxxp://pixel.quantserve.com/",1.1851392083526282,"hxxp://www.google-analytics.com/",1.6162304978678063]],["hxxp://www.localcrimenews.com/",["hxxp://cdn-static.liverail.com/",0.30862867972278124,"hxxp://geo-lb02.w55c.net/",0.22354725990731183,"hxxp://rtb.tubemogul.com/",0.22354725990731183,"hxxp://search.spotxchange.com/",0.25190773317913495,"hxxp://tag.contextweb.com/",0.6205938857128352,"hxxp://u-ads.adap.tv/",0.22354725990731183,"hxxp://vads.adbrite.com/",0.22354725990731183,"hxxp://vast.bp3850588.btrll.com/",0.22354725990731183,"hxxp://vox-static.liverail.com/",0.22354725990731183,"hxxp://www.localcrimenews.com/",0.7056753055283051]],["hxxp://www.lyricsmania.com/",["hxxp://ad.crwdcntrl.net/",2.9081737916595855,"hxxp://cm.g.doubleclick.net/",2.025335319191497,"hxxp://load.exelator.com/",2.025335319191497,"hxxp://mpp.specificclick.net/",2.025335319191497,"hxxp://search.spotxchange.com/",3.202453282482282,"hxxp://sm.ts.vindicosuite.com/",2.9081737916595855,"hxxp://t4.liverail.com/",4.08529175495037,"hxxp://tags.bluekai.com/",2.025335319191497,"hxxp://vox-static.liverail.com/",4.08529175495037,"hxxp://www.lyricsmania.com/",14.973632915390123]],["hxxp://www.mafiawarslootlady.com/",["hxxp://ajax.googleapis.com/",1.8043542189575343,"hxxp://ct1.addthis.com/",1.8043542189575343,"hxxp://pagead2.googlesyndication.com/",1.8043542189575343,"hxxp://s7.addthis.com/",1.8043542189575343,"hxxp://translate.google.com/",1.8043542189575343,"hxxp://www.blogblog.com/",1.8043542189575343,"hxxp://www.blogger.com/",2.066525344788971,"hxxp://www.lijit.com/",2.066525344788971,"hxxp://www.linkwithin.com/",1.8043542189575343,"hxxps://apis.google.com/",1.8043542189575343]],["hxxp://www.meebo.com/",["hxxp://rd.meebo.com/",0.2300981543619979,"hxxp://s.meebocdn.net/",0.2300981543619979,"hxxp://syndication.mmismm.com/",0.2009065974653265,"hxxp://tags.bluekai.com/",0.2009065974653265,"hxxp://www.meebo.com/",0.2300981543619979,"hxxps://www.meebo.com/",0.2300981543619979]],["hxxp://www.myredbook.com/",["hxxp://www.google-analytics.com/",2.107257362270346,"hxxp://www.myredbook.com/",4.932628707991588]],["hxxp://www.nfl.com/",["hxxp://ak1.abmr.net/",2.084686339270529,"hxxp://ds.serving-sys.com/",0.12854104243686834,"hxxp://static.nfl.com/",2.387589482583341]],["hxxp://www.nola.com/",["hxxp://bcp.crwdcntrl.net/",3.202453282482282,"hxxp://maps.googleapis.com/",2.025335319191497,"hxxp://maps.gstatic.com/",2.025335319191497,"hxxp://platform.twitter.com/",2.319614810014193,"hxxp://static.ak.facebook.com/",2.319614810014193,"hxxp://stats.nola.com/",2.319614810014193,"hxxp://www.nola.com/",16.739309860326297,"hxxps://gscounters.gigya.com/",2.025335319191497,"hxxps://s-static.ak.facebook.com/",2.319614810014193,"hxxps://www.facebook.com/",3.496732773304977]],["hxxp://www.sacbee.com/",["hxxp://gscounters.gigya.com/",0.2009065974653265,"hxxp://h.ppjol.com/",0.2009065974653265,"hxxp://media.sacbee.com/",1.4853351009188653,"hxxp://mediacdn.disqus.com/",0.9015039629854387,"hxxp://s.ppjol.net/",0.2009065974653265,"hxxp://s3.amazonaws.com/",0.2300981543619979,"hxxp://sacramentoconnect.s3.amazonaws.com/",0.2300981543619979,"hxxp://static.lingospot.com/",0.2592897112586693,"hxxp://yubanet.com/",0.2300981543619979,"hxxps://plusone.google.com/",0.3468643819486833]],["hxxp://www.sbnation.com/",["hxxp://cdn0.sbnation.com/",2.387589482583341,"hxxp://cdn1.sbnation.com/",2.084686339270529,"hxxp://cdn3.sbnation.com/",2.084686339270529,"hxxp://cloud.typography.com/",2.084686339270529,"hxxp://edge.quantserve.com/",2.084686339270529,"hxxp://fonts.voxmedia.com.s3.amazonaws.com/",2.084686339270529,"hxxp://ox-d.sbnation.com/",2.084686339270529,"hxxp://player.ooyala.com/",2.084686339270529,"hxxp://www.sbnation.com/",2.084686339270529]],["hxxp://www.theblaze.com/",["hxxp://ping.chartbeat.net/",2.396937274834959,"hxxp://platform.twitter.com/",3.206498870971269,"hxxp://reports.asn.com/",3.206498870971269,"hxxp://static.chartbeat.com/",1.8572295440774184,"hxxp://trc.taboolasyndication.com/",1.8572295440774184,"hxxp://www.facebook.com/",3.206498870971269,"hxxp://www.theblaze.com/",13.2210996398159,"hxxps://apis.google.com/",2.127083409456189,"hxxps://plusone.google.com/",3.206498870971269,"hxxps://www.facebook.com/",3.206498870971269]],["hxxp://www.timelineremove.com/",["hxxp://fb.timeremove.com/",0.5317198549453611,"hxxp://www.timelineremove.com/",0.8015478410370365]],["hxxp://www.update.microsoft.com/",["hxxp://www.update.microsoft.com/",0.37601912707061874]],["hxxp://www.youtube.com/",["hxxp://googleads.g.doubleclick.net/",0.5518182993885965,"hxxp://i2.ytimg.com/",2.387589482583341,"hxxp://o-o---preferred---sn-vgqelnez---v20---lscache2.c.youtube.com/",0.6634958123600981,"hxxp://pagead2.googlesyndication.com/",0.38430202993134404,"hxxp://pubads.g.doubleclick.net/",0.38430202993134404,"hxxp://s.youtube.com/",0.4417771017106517,"hxxp://s.ytimg.com/",2.408147222050675,"hxxp://s0.2mdn.net/",0.6693216598157613,"hxxp://s2.youtube.com/",0.4401407864170948,"hxxp://www.youtube.com/",0.38430202993134404]],["hxxp://youtube.com/",["hxxp://www.youtube.com/",1.888248979223594]],["hxxps://2542116.fls.doubleclick.net/",["hxxps://ad.yieldmanager.com/",0.28789547324017556,"hxxps://conversion-pixel.invitemedia.com/",0.28789547324017556,"hxxps://googleads.g.doubleclick.net/",0.5673371607829281,"hxxps://segment-pixel.invitemedia.com/",0.28789547324017556,"hxxps://www.googleadservices.com/",1.0045499196623475]],["hxxps://accounts.google.com/",["hxxps://accounts.youtube.com/",0.8665551756476371,"hxxps://mail.google.com/",0.8665551756476371,"hxxps://ssl.google-analytics.com/",0.8665551756476371,"hxxps://ssl.gstatic.com/",2.5677391803316296]],["hxxps://ads-dot-angrybirds-facebook.appspot.com/",["hxxps://ads-dot-angrybirds-facebook.appspot.com/",0.2511312555585852]],["hxxps://ads.pubmatic.com/",["hxxps://ads.pubmatic.com/",0.3600257591933446]],["hxxps://angrybirds-facebook.appspot.com/",["hxxps://ads-dot-angrybirds-facebook.appspot.com/",0.2521807185241619,"hxxps://ajax.googleapis.com/",0.2116230819160197,"hxxps://angrybirds-facebook.appspot.com/",0.42504516727387115,"hxxps://connect.facebook.net/",0.13050780869973555,"hxxps://graph.facebook.com/",0.13582475985830614,"hxxps://s-static.ak.facebook.com/",0.2016485038190195,"hxxps://ssl.google-analytics.com/",0.17106544530787768,"hxxps://www.adobe.com/",0.13050780869973555,"hxxps://www.facebook.com/",0.17106544530787768]],["hxxps://apis.google.com/",["hxxps://apis.google.com/",1.568677146382479]],["hxxps://apps.facebook.com/",["hxxps://0-ect.channel.facebook.com/",2.9340205999999997,"hxxps://1-ect.channel.facebook.com/",2.6037003999999997,"hxxps://apps.facebook.com/",6.567542799999998,"hxxps://fbcdn-creative-a.akamaihd.net/",3.5946609999999994,"hxxps://fbcdn-photos-a.akamaihd.net/",8.783956898768048,"hxxps://s-static.ak.facebook.com/",3.590300773359999,"hxxps://s-static.ak.fbcdn.net/",23.47961239088806,"hxxps://sphotos-b.xx.fbcdn.net/",2.2733802,"hxxps://www.facebook.com/",3.924981199999999,"hxxps://zynga1-a.akamaihd.net/",2.9340205999999997]],["hxxps://assets.farklegame.net/",["hxxps://farklegame.net/",0.6747142130039269]],["hxxps://attachments.facebook.com/",["hxxps://attachments.facebook.com/",1.5573640511409947]],["hxxps://chrome.google.com/",["hxxps://2542116.fls.doubleclick.net/",2.066525344788971,"hxxps://chrome.google.com/",2.328696470620408,"hxxps://clients1.google.com/",1.8043542189575343,"hxxps://lh3.googleusercontent.com/",11.350478467491971,"hxxps://lh4.googleusercontent.com/",13.892353649199975,"hxxps://lh5.googleusercontent.com/",9.91843175102386,"hxxps://lh6.googleusercontent.com/",12.316917289819123,"hxxps://ssl.google-analytics.com/",3.6769417212719064,"hxxps://themes.googleusercontent.com/",1.8043542189575343,"hxxps://www.google.com/",5.5275736849276145]],["hxxps://disqus.com/",["hxxps://securecdn.disqus.com/",0.4344390526386974]],["hxxps://facebook.mafiawars.zynga.com/",["hxxps://connect.facebook.net/",0.6811400964561232,"hxxps://facebook.mafiawars.zynga.com/",2.673706949365091,"hxxps://fbcdn-profile-a.akamaihd.net/",2.0860175294582466,"hxxps://graph.facebook.com/",0.6787329442773164,"hxxps://s-static.ak.facebook.com/",2.7056626892490776,"hxxps://www.facebook.com/",1.3540907315620647,"hxxps://zynga1-a.akamaihd.net/",8.036939701809526]],["hxxps://farklegame.net/",["hxxps://api-read.facebook.com/",2.5908675964518446,"hxxps://api.facebook.com/",2.066525344788971,"hxxps://assets.farklegame.net/",13.438462768678885,"hxxps://connect.facebook.net/",1.8043542189575343,"hxxps://farklegame.net/",3.377380973946154,"hxxps://fbcdn-profile-a.akamaihd.net/",8.35863236474345,"hxxps://graph.facebook.com/",11.49187386863332,"hxxps://s-static.ak.fbcdn.net/",0.36929556448747314,"hxxps://ssl.google-analytics.com/",7.525741408823125,"hxxps://www.facebook.com/",4.566468971374359]],["hxxps://id2.s.nfl.com/",["hxxps://d1ivexoxmp59q7.cloudfront.net/",0.23892241939278966,"hxxps://dpm.demdex.net/",0.23892241939278966,"hxxps://gscounters.gigya.com/",0.23892241939278966,"hxxps://id2.s.nfl.com/",0.5166442060373999,"hxxps://nfl.demdex.net/",0.5513594293679757,"hxxps://nflenterprises.tt.omtrdc.net/",0.4124985360456709,"hxxps://s-static.ak.facebook.com/",0.34306808938451816,"hxxps://smetrics.nfl.com/",0.27363764272336593,"hxxps://socialize.gigya.com/",0.27363764272336593,"hxxps://www.facebook.com/",0.34306808938451816]],["hxxps://mail-attachment.googleusercontent.com/",["hxxps://mail-attachment.googleusercontent.com/",0.616902189119142]],["hxxps://mail.google.com/",["hxxps://apis.google.com/",2.6037003999999997,"hxxps://chatenabled.mail.google.com/",2.2733802,"hxxps://clients2.google.com/",2.2733802,"hxxps://mail-attachment.googleusercontent.com/",5.753922614283542,"hxxps://mail.google.com/",36.780064973820835,"hxxps://pagead2.googleadservices.com/",0.5690209957782519,"hxxps://plus.google.com/",3.7503231570918243,"hxxps://ssl.gstatic.com/",12.75736301198742,"hxxps://static.googleusercontent.com/",0.5690209957782519,"hxxps://www.google.com/",0.753551431073117]],["hxxps://maps.google.com/",["hxxps://apis.google.com/",1.5617189435841378,"hxxps://lh4.googleusercontent.com/",1.5617189435841378,"hxxps://maps.google.com/",6.100047497589324,"hxxps://maps.gstatic.com/",6.55388035298984,"hxxps://mts0.google.com/",4.965465359088027,"hxxps://mts1.google.com/",4.7385489313877684,"hxxps://plus.google.com/",2.015551798984657,"hxxps://ssl.gstatic.com/",2.015551798984657,"hxxps://www.google.com/",1.788635371284397]],["hxxps://platform.twitter.com/",["hxxps://cdn.api.twitter.com/",0.5849466485494661,"hxxps://p.twitter.com/",0.5849466485494661,"hxxps://r.twimg.com/",0.5849466485494661]],["hxxps://plus.google.com/",["hxxps://plus.google.com/",0.20914869295701693]],["hxxps://plusone.google.com/",["hxxps://apis.google.com/",2.1457765990453503,"hxxps://plusone.google.com/",1.4570295371958708,"hxxps://ssl.gstatic.com/",2.4575561048895462]],["hxxps://static1.yourviralgames.com/",["hxxps://www1.yourviralgames.com/",0.32782848771744405]],["hxxps://www.amica.com/",["hxxps://data.coremetrics.com/",0.15491737895425855,"hxxps://libs.coremetrics.com/",0.17742674170829614,"hxxps://tracker.marinsm.com/",0.17742674170829614,"hxxps://view.atdmt.com/",0.15491737895425855,"hxxps://www.amica.com/",2.5184004681282066]],["hxxps://www.facebook.com/",["hxxps://1-ect.channel.facebook.com/",0.09506929753244939,"hxxps://fbcdn-profile-a.akamaihd.net/",1.746710572599238,"hxxps://s-static.ak.facebook.com/",2.2733802,"hxxps://s-static.ak.fbcdn.net/",1.038020165706425,"hxxps://www.facebook.com/",2.410332367267629]],["hxxps://www.google.com/",["hxxps://apis.google.com/",0.8419958483427026,"hxxps://id.google.com/",0.3167395768975274,"hxxps://lh4.googleusercontent.com/",0.5256921826449998,"hxxps://news.google.com/",0.0672731647054014,"hxxps://plus.google.com/",1.7571167213371492,"hxxps://ssl.gstatic.com/",1.89170012340804,"hxxps://www.google.com/",17.35999686811293]],["hxxps://www.youtube.com/",["hxxps://i4.ytimg.com/",0.9227124978216347,"hxxps://s.ytimg.com/",1.9067098034231897]],["hxxps://www1.yourviralgames.com/",["hxxps://api-read.facebook.com/",0.18334111720494114,"hxxps://api.facebook.com/",0.16270006427458353,"hxxps://fbcdn-profile-a.akamaihd.net/",1.8983631248274492,"hxxps://graph.facebook.com/",2.252285381981583,"hxxps://s-static.ak.facebook.com/",0.286546381856729,"hxxps://s-static.ak.fbcdn.net/",0.18334111720494114,"hxxps://ssl.google-analytics.com/",1.2153937637228204,"hxxps://static1.yourviralgames.com/",1.132829552001391,"hxxps://www.facebook.com/",0.5755211228817356,"hxxps://www1.yourviralgames.com/",0.34846954064780194]],["hxxps://zbar.zynga.com/",["hxxps://zynga2-a.akamaihd.net/",5.232491898778259]],["hxxps://zpay.static.zynga.com/",["hxxps://zpay.static.zynga.com/",0.7345446620439389]]],"startup_list":[1,"hxxp://facebook.com/","hxxp://service.timelineremove.com/","hxxp://ssl.gstatic.com/","hxxp://www.facebook.com/","hxxp://www.google.com/","hxxps://fbcdn-photos-a.akamaihd.net/","hxxps://fbcdn-profile-a.akamaihd.net/","hxxps://s-static.ak.facebook.com/","hxxps://s-static.ak.fbcdn.net/","hxxps://www.facebook.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":"","prompt_for_download":true},"extensions":{"autoupdate":{"last_check":"12993858100052875","next_check":"12993876319515875"},"blacklistupdate":{"lastpingday":"12993807762935500","version":"0.0.0.126"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"aandpgohbohmlknpjbblpmoladhoochg":{"blacklist":true},"abciiempgohamehppammbkhkicmkgkob":{"blacklist":true},"abfclfmhaemoockhhinpplncjehfpdbd":{"blacklist":true},"acmpfcamncegnhjdeiodgilikjafcamg":{"blacklist":true},"aebfkgcamgnimcbnbiopgdakknjgggnm":{"blacklist":true},"aemcjbfajnnmhblifaejadoecfoaebld":{"blacklist":true},"afenhmponmfmdmbmccbmglppcmjhmhmh":{"blacklist":true},"aglmapjbjphdidmnileogpjkgpdoliep":{"blacklist":true},"agmhonoepgcnakccfpidhjehlocaeaaj":{"blacklist":true},"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["appNotifications","management","webstorePrivate"]},"app_launcher_ordinal":"n","page_ordinal":"n"},"ahjfgnikolodijnpakeknpilnemojlhc":{"blacklist":true},"aieglpnmmhleoenpbmfaffppfomgjmba":{"blacklist":true},"aifmjmboebdkdelpjenakhaodgneempp":{"blacklist":true},"alcbnnpmipohgdllkkglhkbncijplago":{"blacklist":true},"aldalonecchncedclgcndcndgilaclnk":{"blacklist":true},"aljdncnajablgppdcfbehhmidlmbndda":{"blacklist":true},"amfgdngndpfldigimkcindjalokfnmem":{"blacklist":true},"amoobcjlpgloocplpikcldcpjjdnoeii":{"blacklist":true},"anmjpohfnlopdfaojooicpemopnliimn":{"blacklist":true},"apdmgffkfhjfeejmbjidennfjdkmmmbl":{"blacklist":true},"aphncaagnlabkeipnbbicmcahnamibgb":{"blacklist":true},"bcddmcejgphfgofbpoocakaeapfomlek":{"blacklist":true},"benclngoadbppljglhphhnfknoppmjoa":{"blacklist":true},"bhdkpmneahdelgdgfhddianklldfoell":{"blacklist":true},"bilgncckogfgfipdlejkffnbkgjkmflh":{"blacklist":true},"bioeopenmokdgbekbgpgnacecjmpckbb":{"blacklist":true},"bjihddggcgnblgojnmhpnngonofbnkaj":{"blacklist":true},"bkhafliomebnpccanacmlfaemgfiofko":{"blacklist":true},"bkkchglolnigbfncnbnnbhhempjkdpkf":{"blacklist":true},"bkplhcigeaiiliajeehehiikokgocbhb":{"blacklist":true},"bldgnkigdcpgnbfehgbameigoohecdfl":{"blacklist":true},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"ack_external":true,"active_permissions":{"api":["appNotifications"]},"app_launcher_ordinal":"t","events":["experimental.runtime.onInstalled"],"from_bookmark":true,"from_webstore":true,"install_time":"12987200589182875","lastpingday":"12993807762000500","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"current_locale":"en_US","default_locale":"en","description":"The world's most popular online video community.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","permissions":["appNotifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.5"},"page_ordinal":"n","path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.5_0","state":1},"bndahdijlcnncjbpammoedeapmlobllc":{"blacklist":true},"bnffnggkphadlnoopcoakdnkellnifjp":{"blacklist":true},"boaoagnmpennjoigkkmnjhecapibhfko":{"blacklist":true},"boclfockfmgcppbajihcgajhpggaakgl":{"blacklist":true},"bokkificjhapflinbdejegngffgkcgfe":{"blacklist":true},"caphkimknlmnhpjoneddiaakmcaajagb":{"blacklist":true},"cbbbpmlnlpnjojeplppgeilanlihoojg":{"blacklist":true},"cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true},"cdogaeccgljmkecjmoedambgiekkllij":{"blacklist":true},"cekdjgnecpoooikhmceokdhojckkkhmh":{"blacklist":true},"cepfogmgfkddnllaopgknbdfkceejmhk":{"blacklist":true},"cfbdodejdeejbkffcmiaknpmojjeibpn":{"blacklist":true},"cgnkbnaiipmfbakpmhllalggoepniemh":{"blacklist":true},"chagngapoeghhljpcnojlkonegopkimi":{"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"install_time":"12991438418789500","lastpingday":"12993807762000500","location":1,"manifest":{"browser_action":{"default_icon":"zynga_dog_19x19.png","popup":"popup.html"},"description":"Mafia Wars Game Stats","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1ZWFSYxPZJaeVqNPQJJWAvy7nKZXJ/BOXUQKZn73TRam+H8l9mTMYRKV9VdE7KaetFSpJ6F1CC/A5br/04XhbZAhe9XEgEBv9lkzh68Iherjlo+Bjf1wdR0EdzmQbmotggpWmH5uVOoM6zAR3XOVfdLHfK3+3hJ0yAmottWBG8wIDAQAB","name":"Zynga Toolbar","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1.1"},"path":"chagngapoeghhljpcnojlkonegopkimi\\1.1_0","state":1},"cihlkpohodpdkdnfalhdkhhlhmhffmbe":{"blacklist":true},"cjhklhdjonhcohlacgggcbklpnldleck":{"blacklist":true},"cjohbbapkbkkhpohinffggbphnhoblea":{"blacklist":true},"ckckpgefkpjfopjppjfcikppehdhceah":{"blacklist":true},"ckphhghhpjbfddcgkpfbelfeojcciglo":{"blacklist":true},"clapnamcglekekmamicmbahkghdcjaeh":{"blacklist":true},"cmjphjljejnfgdbkdgdlclaabimpknna":{"blacklist":true},"cmlokmkdolieoaoddlfhaidnlmiadhik":{"blacklist":true},"coajchbkdbfhmhbgcjepiofllfjjcpfp":{"blacklist":true},"coobgpohoikkiipiblmjeljniedjpjpf":{"ack_external":true,"active_bit":true,"app_launcher_ordinal":"x","events":["experimental.runtime.onInstalled"],"from_bookmark":true,"from_webstore":true,"install_time":"12987200590808875","last_active_pingday":"12993807762540500","lastpingday":"12993807762000500","location":2,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/webhp?source=search_app"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"current_locale":"en_US","default_locale":"en","description":"The fastest way to search the web.","icons":{"128":"128.png","16":"16.png","32":"32.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Google Search","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.19"},"page_ordinal":"n","path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.19_0","state":1},"copjbedljgpkaakkmbhgkpoaadeahido":{"blacklist":true},"cpiiakoibaohkfoaijaigdnocfolnmll":{"blacklist":true},"dadcalgappognjbjpalfophhcfakoeac":{"blacklist":true},"danapgfidmepmcfbjjacceiaiiioieio":{"blacklist":true},"dbanhghadfmjndnjmmejdgfdmgidlbpm":{"blacklist":true},"dbiblcmlcgdjjbdpbmbcpineegngkiip":{"blacklist":true},"dbmdicehacbaohlockjgdglcobimmjkh":{"blacklist":true},"dejippphmhbpgckbhdidnjmdcpfccbaj":{"blacklist":true},"dfafokiagoiocidlpglcanjkcdbdnioi":{"blacklist":true},"dfoegfajplmijblljfancdapbdaopebb":{"blacklist":true},"dgaehaeahdegbdlenicbmkbakhdgoeml":{"blacklist":true},"dgcfmgdfbfbgcpbendbhbkfjppboebed":{"blacklist":true},"dgkemngdheppgohkjjelnkjmdeimmfml":{"blacklist":true},"diinokaoicgobepmadnmedlhdfnpehcj":{"blacklist":true},"dinhjcapnfbffhiihdlnbdfjdjjfhcbk":{"blacklist":true},"djnahdkbfgnhgpakidinfonfcjbagkgp":{"blacklist":true},"dlobhinihbmedmheccecfnkcadpehmbf":{"blacklist":true},"dmhjdbigobajgnfoabodjgmcdgoeoljm":{"blacklist":true},"dmkdhgkknhnfpdjeicefnpmhcpbimden":{"blacklist":true},"dnedfaenfnkikficknkklbdedlecmpgc":{"active_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"install_time":"12993675543591500","lastpingday":"12993807762000500","location":1,"manifest":{"background":{"scripts":["background.js"]},"browser_action":{"default_icon":"images/icon.png","default_title":"TimelineRemove","popup":"popup.html"},"content_scripts":[{"all_frames":true,"js":["/api-utils/data/page.js"],"matches":["*://*.facebook.com/*"],"run_at":"document_start"}],"description":"TimeLineRemove.Com disable the new facebook timeline!","icons":{"128":"icon128.png","16":"icon16.png","48":"icon48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC0/tEJPjNUQhOvX04efL6zdxj0jxAV7GqHY9opdDcXQwoahRu+IRpZbrncg4p2kEQeHsvyOZRkHvXPSQoW3HdkKSrPY5I91HTXaNuoSktbe3HtQnwnvtfEqA1mE4qrurC9AG4QuwtvPRGsBJh6eNKDLHcIVpVWlkDRxkuLnPmlvQIDAQAB","manifest_version":2,"name":"TimelineRemove","permissions":["bookmarks","tabs","*://*.facebook.com/*"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1.0.5"},"path":"dnedfaenfnkikficknkklbdedlecmpgc\\1.0.5_0","state":1},"dnemhlkdpajbbniphgkgceplmnkfnhfo":{"blacklist":true},"doneghboglgnflpdicnkaojmmljgejkj":{"blacklist":true},"dpgenihgggagjjggfocjceeobjkadcbc":{"blacklist":true},"dpmloehicimdjkibmobhmpgdndgbcced":{"blacklist":true},"ebdcdchjcndpjhehacedepnggfdbfkpn":{"blacklist":true},"echngajnlpjeacbanjejlhcajjfoedcc":{"blacklist":true},"edmnikahahfkfilbbjbdoiabnghbkmjc":{"blacklist":true},"efbeabpbbkahnnjalakldjfhljboclkf":{"blacklist":true},"efhjelcghjkfigiagdfbfilndaffpmdj":{"blacklist":true},"efnaljpgehfilpmkhobibbjceeeondmn":{"blacklist":true},"egljdhfnbjahogjahnigfnbpidlmdagi":{"blacklist":true},"ehgoiaffgjoinpkllmmnikghgpghnabc":{"blacklist":true},"ehmjnpjodmgeocfphkjjnheiheehcoid":{"blacklist":true},"ehomcoocpagnlcakcbecdaknmacmedld":{"blacklist":true},"eihjeehdobnpkonebmpanonopghepfle":{"blacklist":true},"eijbdinddjecmebnlienfoijpjjobkjh":{"blacklist":true},"ejijgghlncnaphklndknkbkclebfboca":{"blacklist":true},"ejlekamipdcfcfpgfepjmklllbpeecaj":{"blacklist":true},"elcaigjcaijbfpjngaekbblphmfjdhfo":{"blacklist":true},"eofejpelggimkodeojpeojnbijgiglgh":{"blacklist":true},"eopmhecjnginkckggjmhombbopmkjpam":{"blacklist":true},"epbmnbdplhcomkedpjfceakddnbgfjmf":{"blacklist":true},"fafoohpbicgbcejffcplajonhhooddle":{"blacklist":true},"fbhiehmngojjcmljddjmgpmcockbccmo":{"blacklist":true},"fcfepemfihgibdacjlnlecebknaaepmj":{"blacklist":true},"ffgfbfakpcnngelphjnppokmoicdollk":{"blacklist":true},"fhlkffpjoajppmhcakbkjndbjfljccpi":{"blacklist":true},"fiapkdjniadkodmdibdnchoifkpfoiid":{"blacklist":true},"fibgploapkhokkbncddlkcmbmiengcfp":{"blacklist":true},"fihepkmlkmciffbhijldnpmifhbkiinp":{"blacklist":true},"fjjeecfjmgfnleghoellhldedkaocjfc":{"blacklist":true},"fleljamdchegbjeiipbnmiebnhgheeld":{"blacklist":true},"flmmgcfcpbfddenepkfmgfpbaceolcoe":{"blacklist":true},"fmcccidacjgnfiafddkngmeolkoiihil":{"blacklist":true},"fmonlemffgbabjifjfaoamdflijecdbk":{"blacklist":true},"fngolbdmkneakeaoiieafkilnogbocda":{"blacklist":true},"fnhcgnmfccojojojacgeiaaeacefdohb":{"blacklist":true},"fnkaadkanmfgpfbmdcllhjdgmdbgljpi":{"blacklist":true},"fnnmbghphdnmmjdapccfobgjemjadeli":{"blacklist":true},"fnoadkjdjfgafomgmablhmffooijcfbn":{"blacklist":true},"foenbafkkmajnmfnlcmejonkfaipdmme":{"blacklist":true},"fommcgokigkhmnhlhlkckfjhefnmfohd":{"blacklist":true},"fpbippbofbmgmbojjmgfcifpmdaelcmd":{"blacklist":true},"fpmajanjndhgpifbcbnklbiehgnpkgmf":{"blacklist":true},"fpoajjnnpmledpmohlgpgbmlhbgkgahg":{"blacklist":true},"gaicmfjflflabagobdiodejfpjikheeo":{"blacklist":true},"gandihaiobadcggbfkhpbkocmiemjlnf":{"blacklist":true},"gbenikfjhilhpgagllmfgggdjaflbmbi":{"blacklist":true},"gdggdkkjecogagaffaemnbfmllcoihjp":{"blacklist":true},"gekkhpjigmckhgmgngadbeknekgpgolb":{"blacklist":true},"ghgphbmpcfgkfneodjpbdanmdoemklio":{"blacklist":true},"ghmaokcegalalefnhlfcnjhnpdbanjkj":{"blacklist":true},"gifglngcdbggmlgkcombebegdaoknkho":{"blacklist":true},"gjkbghdignnlcknknflbigpammebiolo":{"blacklist":true},"gkjeccpmibljcfpfapfljciimedljpnm":{"blacklist":true},"gkjmgdpdndoaiholejnmdbbpdaafahmm":{"blacklist":true},"gmghjgfdialcnhadahmjefeflgnhcjeb":{"blacklist":true},"gnapdhmknipknfmhhnhdmhakdfhgeing":{"blacklist":true},"gncfgndgeoddelbfhlndhljnecoednaa":{"blacklist":true},"gngmkbiihflpghldjnbpemaicedhdddk":{"blacklist":true},"gobjcjhhebpjbmjdgmejhebbleadnceo":{"blacklist":true},"gplgjmecjpbfcdikpbicknafcnfcidek":{"blacklist":true},"hbaajkahagmlkdekmbdabikbopdgpaac":{"blacklist":true},"hbdhabpmbbanaopgkbaondabkkepjfaf":{"blacklist":true},"hbmlheccjkodhfejcmblndjodllmnlnl":{"blacklist":true},"hcapokajkngndbglnfglpfdpoeidmpha":{"blacklist":true},"hcpndbchnlgojmnijaldkicigmihmdca":{"blacklist":true},"hdijkiondgomjpehfhopomicjbiodmcm":{"blacklist":true},"hdnbmmfjbblajkjkcaeofolgfnljpnim":{"blacklist":true},"hecijapnccjhonbmacmkmffooodfokoo":{"blacklist":true},"hefmoncdemhjembgbnkgglhlookbipdc":{"blacklist":true},"hfjpjodbolkmheaehcnmfhjakjileoof":{"blacklist":true},"hfpfbhnmbbigpmoodjemilggabklpopj":{"blacklist":true},"hgbaomphocgmdpmiohjclchaaljpaelp":{"blacklist":true},"hgboiaecclcbjphldpbgfgggcbihmnai":{"blacklist":true},"hgjgaeknhmidehalnmokomhpfhbfmpcm":{"blacklist":true},"hhfffemhgkginfafaoapljdllodppana":{"blacklist":true},"hhfiljkpjapjjphcocclhhaldpfkkjbi":{"blacklist":true},"hhjmkijkgojfifipdgmiemghfikbohcm":{"blacklist":true},"hhlgbfcfbkhlmajakkcjippgpcmejkko":{"blacklist":true},"hilncbjbdpnfepdidfchmdclhpnlegpj":{"blacklist":true},"hjkhligcnpfjhjlapmejaiaiigibofif":{"blacklist":true},"hkbgccpdcpbdckohbknjlamamelcnlki":{"blacklist":true},"hkjcejgfmaanpncnpoidgbhoikcaeepd":{"blacklist":true},"hkjfdgjkgpbbdmadbglcgljjjddkcdha":{"blacklist":true},"hmmoglffhpmacaacfbbmbbkcbdkjphnc":{"blacklist":true},"hnbcdmfeoldeppcbnnjmjkdofohaljbn":{"blacklist":true},"hncomkjbbkchfjelocejkbbflmjhlhfp":{"blacklist":true},"hnipgljcblpgnnojcfldehpeknhakbgj":{"blacklist":true},"hnkcpoijaeegompjgbjjhkdmljldaccg":{"blacklist":true},"hnnebfeppcbhhbhiifeaajgcjnkljlld":{"blacklist":true},"hnonhhpgjnjcjfbkjdpfbkfpaodcmncb":{"blacklist":true},"hpcdoodjfcmpcpkeendjnjkeinimhkih":{"blacklist":true},"hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true},"iablioliielnhdianpbiijaoncbmfend":{"blacklist":true},"iccblehkchfmjgfafjcpjlkjcponhdhl":{"blacklist":true},"icihfeaofpcfehanhbnjigdlpfahjlee":{"blacklist":true},"iemfpgbdjfoihicbocpbjppipdbfimeh":{"blacklist":true},"ifbkndkaolfbjjhnnhfmkbkoclpdkpli":{"blacklist":true},"ifeijfpkjckedpclgncedmgdiaoeahmk":{"blacklist":true},"igaajdmlejbjcbmpmnigopikfdaccdcm":{"blacklist":true},"igbaoknfddliiaoimhehfbkfekpmmfll":{"blacklist":true},"igghanohiioehififjoalfkdoicafjof":{"blacklist":true},"ihnembcpodnfgkafmiojebccomjekopm":{"blacklist":true},"iiiinekimabooeihccihfopoadcaaphn":{"blacklist":true},"ijecjbcgpblkacpijljpaienknanaloa":{"blacklist":true},"ijenlpgidnapbndonoinbkhekgjonojg":{"blacklist":true},"ilhjicgcglhjigdehkcehjdokmkahbjl":{"blacklist":true},"imfbomjbodpfgfhfahlgkkcllmhbelhk":{"blacklist":true},"imkffpjpdngdkpgadcmnlkhhmhdocijn":{"blacklist":true},"iobnpmeeecphddicmhhmdjbnlbdhjlne":{"blacklist":true},"iomejadoamfilglofmeaffghddcgapmf":{"blacklist":true},"jaejgaoiipdjjlbnapngknalafalbkej":{"blacklist":true},"janhdpmhnighonkkbkdpnljcoenpfkbh":{"blacklist":true},"jbmbiepnidbnhbbfdbgioomdkgnbcacj":{"blacklist":true},"jbnafcjbcfgejacaanogofkkehcomamp":{"blacklist":true},"jcmipejepoimfflnoapdmkdephgjinck":{"blacklist":true},"jfalnphfjdoalcdhlnhdpekbmmopkgkj":{"blacklist":true},"jfjagidcpadkoaonbogmbgfimmnefeie":{"blacklist":true},"jgdkappiifgomhgikcjbanhnmlekpeje":{"blacklist":true},"jgmpapdckakiohhebmeoemejibommimi":{"blacklist":true},"jhhabiomopkibeecgngiggmopkeofacl":{"blacklist":true},"jindbcpkhnnnjgcjgmkjedbibibiojjf":{"blacklist":true},"jjnkfllhcgkgnfbekpnmoikpfihpjfli":{"blacklist":true},"jkihmglffmfjedfbpbpdbbimcodjbmdh":{"blacklist":true},"jkmhalpofmlfeglboejbchpoijnkmcgh":{"blacklist":true},"jljfnkmkkdkppfndippkedacgfkafped":{"blacklist":true},"jmafennmmkgbibkodgmhlekfaaiddaii":{"active_permissions":{"api":["bookmarks","unlimitedStorage"],"explicit_host":["*://*/*"],"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["bookmarks","unlimitedStorage"],"explicit_host":["*://*/*"],"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"install_time":"12993693353623625","lastpingday":"12993634960415625","location":1,"manifest":{"background":{"scripts":["LucifersMOD.js"]},"content_scripts":[{"all_frames":true,"js":["LucifersMOD.user.js"],"matches":["hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxp://apps.facebook.com/inthemafia/*","hxxps://apps.facebook.com/inthemafia/*"]}],"description":"Lucifers MOD | Chrome Install","icons":{"128":"images/lucifer128.png","16":"images/lucifer16.png","32":"images/lucifer32.png","48":"images/lucifer48.png","64":"images/lucifer64.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDmZzkV+slgna03vZvgGol2Wu39gFygnm7xgRqC/sosrtvdCp5MSClK4vZodRfaRXz3/X1vM+xguGljRU8AqtwVyNQOe2zL8rj3M1Xsl8mMMbYexKJ7/AUOaveT7ER5OooY78fsmCyTQz0AUGY1ru5Rb97Bu72xdHR8p2UbzQit+wIDAQAB","manifest_version":2,"name":"Lucifers MOD","permissions":["bookmarks","unlimitedStorage","fileSystem","*://*/"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.6.2.6"},"path":"jmafennmmkgbibkodgmhlekfaaiddaii\\0.6.2.6_0","state":1},"jmbkhogpjgjpfjhpdikloblkbkljkgao":{"blacklist":true},"jmeanodbelbflfmnkfdjgpikmldgjjko":{"blacklist":true},"jmifipgdcllamghkhdplfjffkciekbgo":{"blacklist":true},"jpehgolpfgnknboibogccapmdcadjkbd":{"blacklist":true},"jpeijjbllejgmokmahkeommcodahoobm":{"blacklist":true},"jpgidahfcgiajlcbleeiaibpmmblcmnb":{"blacklist":true},"jpkdlckejfjidmplieobnhijmoiecbhl":{"blacklist":true},"kbipembkfhbdmkkkfbigmohilmknjnof":{"blacklist":true},"kcanfkmhccbaheheaackijegkclkaeic":{"blacklist":true},"kcfnnanmpghdnoompcfclakpacapnfbn":{"blacklist":true},"kcgplbmkmfcpngilmhjmebdgkkpbdemp":{"blacklist":true},"kdchmeaiapjkejkcbeclgjklemecieeg":{"blacklist":true},"kdfahjokahcbmecgaandpobmgiiknagf":{"blacklist":true},"kelcbonmemlciepjdmfcifnhloeammhj":{"blacklist":true},"kelljdoinjlkmkncffgadbebgpmlcang":{"blacklist":true},"kffhenjbibjnbnjhlkcdlmpeccpaohio":{"blacklist":true},"kgbkdabomfdpfoibliicpmibceaoohgh":{"blacklist":true},"kgdhnhadbnpeibkghaebmhmngobdafag":{"blacklist":true},"kgdkcodealpfjolmiagcogfbgmaamegh":{"blacklist":true},"kgdmldjagfciieddcnlhampgkajkpanc":{"blacklist":true},"kibgmcdcfmcglajcfbecilngejnfppjp":{"blacklist":true},"kiipngoehgkgkackngaidmhmnchfbmio":{"blacklist":true},"kinhljbhjmcmoddhdoodekeklmjapjff":{"blacklist":true},"kkhomejdleoonmbdhcigkhkjcghngncf":{"blacklist":true},"kleaapgdkahaekcocmkbgfainbhihccj":{"blacklist":true},"kmlebjoghkhpapfhbdikannggmmffnco":{"blacklist":true},"kmnlgpakocffbjcgfibfdmgmfhjgepni":{"active_permissions":{"api":["unlimitedStorage"],"scriptable_host":["*://facebook.mafiawars.zynga.com/mwfb/remote/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["unlimitedStorage"],"scriptable_host":["*://facebook.mafiawars.zynga.com/mwfb/remote/*"]},"install_time":"12991438418465500","lastpingday":"12993807762000500","location":1,"manifest":{"content_scripts":[{"all_frames":true,"js":["spockholm_toolbar.js"],"matches":["*://facebook.mafiawars.zynga.com/mwfb/remote/*"]}],"description":"Load spocklets with ease in Chrome","icons":{"128":"icon_128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+v61LohPWfWxhZX51LzUN9reDulLqgTnS7OSw56ZL8ly7uQzW4ohQgUKp6Vjti+eDwCUJMh8oKCoKSVrj7N/N4i5WXlLaHlP4SLWCP3MgJj6vEB4/AgzESdsMR5OOnHWdMyuWCm9H44X8fBIrQkrk3EQhTadqONz8Lo601s7SgwIDAQAB","manifest_version":2,"name":"Spockholm Mafia Toolbar","permissions":["unlimitedStorage"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1.0"},"path":"kmnlgpakocffbjcgfibfdmgmfhjgepni\\1.0_0","state":1},"kolbbghckjilleabphhgeggcgpfidofi":{"blacklist":true},"lambangeielkjcnmioccboaphdfcffib":{"blacklist":true},"lbaddolhebpnhdcdkicpcflhnfamcemn":{"blacklist":true},"lbficnmfealeidppcbgdcbemgfjodbkg":{"blacklist":true},"lceaiepehinnomgijphkmjccbigkljkj":{"blacklist":true},"lcfkojlnjnedeoepfemhdgkhiabkeadc":{"blacklist":true},"ldgfapfmnplpaohbbadnecegcpfkfall":{"blacklist":true},"lgalokbapphhklmilicdefmgbjkcmldf":{"blacklist":true},"lgcnahanhlfpceencjmlehpfklokhojk":{"blacklist":true},"likifpgnijjfbdegfepoalpamlgnfofi":{"blacklist":true},"liomofjeffddiiccaolcnllbhnipbkhe":{"blacklist":true},"ljcicfibknpmlcmcecddjlbgkejehhpa":{"blacklist":true},"ljeihpebkahejeacdalhkhmckmggppif":{"blacklist":true},"ljmjoloiepllcndinchenhomcdcgbgef":{"blacklist":true},"lkdimamelhbiijkiljlnedmhnnkkmlbl":{"blacklist":true},"lkfdchejjogilmloogbbjlnlpbhgjfab":{"blacklist":true},"lkhcbijhgfchgdmklonlobkfbcadbokg":{"blacklist":true},"lljnngafekbnkpdfophmcdlbfebcbcld":{"blacklist":true},"lnahlgmhpghkhmafjppdidhcoaomipfg":{"blacklist":true},"lnbeebaenahmkbffnimghceldeeihfak":{"blacklist":true},"lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true},"lndempehphjoeimfchjflohpmhamiamf":{"blacklist":true},"lnjgjionmhobdfdegbciceafphgemjnc":{"blacklist":true},"lnlaeblencbjjjeaanegaldcjfekeled":{"blacklist":true},"loggadfheaoeabmkgolecncpfdfioefa":{"blacklist":true},"lojppnndedobolgfepahepphhloediji":{"blacklist":true},"loldehkdjdncebfnncknlkdchjclifbn":{"blacklist":true},"lookpbabilcplifjdeifacodednpacmk":{"blacklist":true},"lpgiafapdmlapiokjnmpbbfkomiceoml":{"blacklist":true},"lplmcpcnhpbffpcfiaddbeaplhhbengd":{"blacklist":true},"maakimnachffhlgdhfomaejeeaikgjap":{"blacklist":true},"mamfageekafifnickhgkibkofcclfefe":{"blacklist":true},"mbmdaiddhfoljplpdhohimgieioblfif":{"blacklist":true},"mbniclmhobmnbdlbpiphghaielnnpgdp":{"active_permissions":{"api":["plugin"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"granted_permissions":{"api":["plugin"]},"install_time":"12992974721631000","lastpingday":"12993807762000500","location":1,"manifest":{"background":{"page":"background.html"},"browser_action":{"default_icon":"19x19.png","default_title":"Take Screenshot"},"current_locale":"en_US","default_locale":"en","description":"Easy and convenient screen capture tool. Allows you to make screenshot of any selected area (video and flash too), edit and upload it to server.","icons":{"128":"128x128.png","19":"19x19.png","24":"24x24.png","256":"256x256.png","32":"32x32.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOKViYMRyMKSxdwxQceEf9qkdgGdByfasdnPjrTXvCVI7fDzGEUjFd11CWnZmH294MS2mFNqt1ztFJSiCn7DUF3R1MnJefyCOthc4qoRr2O6ktQRa1DasN0plt8YIBalnKar2+EPaFyNOnOOWOmRm0YcR7HDCfRIut8z4Q3LynKwIDAQAB","manifest_version":2,"name":"Lightshot (screenshot tool)","plugins":[{"path":"npLightshot.dll"}],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"3.0.0"},"path":"mbniclmhobmnbdlbpiphghaielnnpgdp\\3.0.0_0","state":1},"mcbkimglepddodbiongpohpeidioafgk":{"blacklist":true},"mcknnlhkkdbcppajgefagceglahcafjd":{"blacklist":true},"mdiehnlecbjlppbpaaipmlnhhjgepfcg":{"blacklist":true},"mdngbiejioalifclonjepjjfppmbgned":{"blacklist":true},"megkcfpbmemnpkgadkoompnoajcolpni":{"blacklist":true},"mfffdpnblflpobcnekhekiahepofaane":{"blacklist":true},"mfhfkclojmdocagbmecgcnlofppebebd":{"blacklist":true},"mfncimdpmknolnnnccdmkpnpkaofonkc":{"blacklist":true},"mgdgiplcofghdmpekdeeceolepakodcb":{"blacklist":true},"mjalegijammcloleihdmooifidcjggjp":{"blacklist":true},"mjgobkikdipfikmaoakdcdbicpioljgg":{"blacklist":true},"mjolnadmlahbpepjaemohnkhpjkbhmef":{"blacklist":true},"mknjbohhleiicbpagpgmhoaigbblmnic":{"blacklist":true},"mkobblpffgbncfhijabakfafmkjdmmnm":{"blacklist":true},"mlmegahemifabfmdnndafagnncfbnahn":{"blacklist":true},"mlmmbepkgelpbenpobinockmiehdahai":{"blacklist":true},"mlnoedbhndgbjcbeadjfnmjloejlgojk":{"blacklist":true},"mmjodihhmnpkldljaifiajmlnpflfhpm":{"blacklist":true},"mndoohjdoechinpkfbkolflbonciahfo":{"blacklist":true},"mnhcgaghminpdabllkbkecahjfkdiabk":{"blacklist":true},"mnichagcickblneeijmfnmoiakigmmhf":{"blacklist":true},"mnllienogacopjnkmhgnniopjpgjpopp":{"blacklist":true},"mogepbcllienegdibkfpmombhefhcoic":{"blacklist":true},"mpgehpkneknbopplhmmkfijfiniddipf":{"blacklist":true},"mplhbhmkccidaokcelbcbcmhhedebcng":{"blacklist":true},"naopgnjebjeeedbbhcadkhkmeefmloho":{"blacklist":true},"nbieffehfdniifkgdckbndjhojohbfjj":{"blacklist":true},"nckmikohoilfkcoahbjpbgbpegcjgngm":{"blacklist":true},"ncpdanjmicnihdlijomcggnnekloephc":{"blacklist":true},"ndhkiimgbjnendpcfbiadlifmangejoa":{"blacklist":true},"ndiogongcmocdgjciemhagfhpjamehpe":{"blacklist":true},"negkalblfongjbphdcbbhddlickhlamd":{"blacklist":true},"nepfiodmbijheamafkiglonfkjebdjmf":{"blacklist":true},"nfecfkjnlkbphobjbcnphimihniieehc":{"blacklist":true},"nfhopoibjodcfbppkiginpbcpekbdgln":{"active_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"events":["runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"granted_permissions":{"api":["bookmarks","tabs"],"explicit_host":["*://*.facebook.com/*"],"scriptable_host":["*://*.facebook.com/*"]},"install_time":"12993675547015500","location":1,"manifest":{"background":{"scripts":["background.js"]},"browser_action":{"default_icon":"images/icon.png","default_title":"TimelineRemove","popup":"popup.html"},"content_scripts":[{"all_frames":true,"js":["/api-utils/data/page.js"],"matches":["*://*.facebook.com/*"],"run_at":"document_start"}],"description":"TimeLineRemove.Com disable the new facebook timeline!","icons":{"128":"icon128.png","16":"icon16.png","48":"icon48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDVt8s/snYdV0IAGzWeS4515hfdeW55RxbjePwJ40IKnoM/49TuneDq0F9wjT0CqRu0Q6JFAnFR/WBDJF9kuZD27ePkaxVSOxwoPuQua/VNtdYBJ8i+/tf9NRe1LTqlq6eQjEJQjXunC+xt3QWZlNFqRnC1tpUtsaHgYxXIyZ16QIDAQAB","manifest_version":2,"name":"TimelineRemove","permissions":["bookmarks","tabs","*://*.facebook.com/*"],"update_url":"hxxp://update.timelineremove.com/update_chrome.xml","version":"1.0.5"},"path":"nfhopoibjodcfbppkiginpbcpekbdgln\\1.0.5_0","state":1},"nhbfbnmmdjkjahhfdeklgphihfodfgnb":{"blacklist":true},"nhboiakpmibkbkbeehchlfkggmhphpnk":{"blacklist":true},"nhkmojkfnknbbmhbnacjdlodokeophkl":{"blacklist":true},"nibohffepnilngkecenfdgnokfhmnkod":{"blacklist":true},"nidmbljkkcbdfklgdkklgjgmhejmbojn":{"blacklist":true},"nidodbfomffkfabciljelkbdiabkeehe":{"blacklist":true},"nifbebeekindefklojhchehidpikbjfc":{"blacklist":true},"nihhbeikpchdddoillfdcdinnnnllmna":{"blacklist":true},"nkfaeghnhcdmgdjjnjggpgfhlefbfcpl":{"active_permissions":{"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"events":["experimental.runtime.onInstalled"],"from_bookmark":false,"from_webstore":false,"granted_permissions":{"scriptable_host":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"]},"install_time":"12987201340148875","location":1,"manifest":{"content_scripts":[{"include_globs":["hxxp://apps.facebook.com/inthemafia/*","hxxps://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"],"js":["script.js"],"matches":["hxxp://apps.facebook.com/inthemafia/*","hxxp://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*","hxxps://apps.facebook.com/inthemafia/*","hxxps://facebook.mafiawars.zynga.com/mwfb/remote/html_server.php*"],"run_at":"document_idle"}],"converted_from_user_script":true,"description":"Bookmarklet loader for the Spockholm Mafia Tools","key":"xJM7ldbAVWBrXuj80fMctbXzqr1a58xLElHV0JYeDZE=","name":"Spockholm Mafia Toolbar","version":"1.0.0"},"path":"nkfaeghnhcdmgdjjnjggpgfhlefbfcpl\\1.0.0_0","state":1},"nlgapikcofpablcmfgaoodlhiejiehhh":{"blacklist":true},"nloaaepkhcnmoakooihnefhhggbmemed":{"blacklist":true},"nmmnodocfckpoddcgihiihcdinaonckb":{"blacklist":true},"nmphbnbmgfccfhcmibikmhcgajjpelpf":{"blacklist":true},"nnioepmjbjjlflmdgjanlcmbjahljeeo":{"blacklist":true},"nochkknnbahbhmmknnmdhagelcnfagom":{"blacklist":true},"noefghcilkpcabnhhilojimkkjplhcnd":{"blacklist":true},"npadaghbcdejfngcjpbnoikajdnongca":{"blacklist":true},"npolaghondefgiomhkbiiompikfjneep":{"blacklist":true},"oakhllhnbcpgagdafgbninlpjdemdmjk":{"blacklist":true},"oanjogmonneelfpnfmdlalfddkeckdej":{"blacklist":true},"obgljnmbldahelaakfdbjkplokjoneip":{"blacklist":true},"ocmhjnhildbnglmlfimkjnnfgddelacb":{"blacklist":true},"ocnlnkjmfnolmbclblfhfhcakldceiec":{"blacklist":true},"odnamglmogfldajnhkfodmloofeokcmm":{"blacklist":true},"oghphhcagopecifjblgdcfihjnlcbcfc":{"blacklist":true},"ogjbodghhojomghbdfnlkppdagkfjede":{"blacklist":true},"oidjdpbndkjhmhmgdoggibcjnippkcgo":{"blacklist":true},"ojglppmhgfohhfeinlhklglifnbfebak":{"blacklist":true},"omceiakkomngangmllpgbjcoeloglald":{"blacklist":true},"onfbaaifbbahonepmednhkjbhdgogkbl":{"blacklist":true},"onpnpccdagncipgnoofbhchlbajcjnkd":{"blacklist":true},"oocfbmollajebjjpkahmlnclfhkjijea":{"blacklist":true},"ookcgejbfhcmcanfkfmmmpahflnlajbl":{"blacklist":true},"opnnngnphijodjhemhdafpnnpdjggofe":{"blacklist":true},"pajgiddgjidlcajihkjoacjbplimkgfe":{"blacklist":true},"pbdgmppmccanplobanhfkjndjkmmabgk":{"blacklist":true},"pbekednmpdekknlffkiopooofokfmkla":{"blacklist":true},"pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true},"peahabnpipmmfiajjjhgfggbeigbmbgp":{"blacklist":true},"peiijdmlgbelnnmnkighhkpeihmmamio":{"blacklist":true},"pfcelnbmkeoaeicedjomcjkcammlkdbk":{"blacklist":true},"pfhlnanelpgjbhndafjamnpfhkjadoip":{"blacklist":true},"pfoiaildicnbcjojocjlpcibenphhbln":{"blacklist":true},"pfonklmafadkmcedjlodommcoipgbcde":{"blacklist":true},"pgelifedkjaohmjehecojkfldinjlamn":{"blacklist":true},"pgjpnfpidejcmjibaaohcmehfohacckf":{"blacklist":true},"pgldfhecfiofkhnbgcncepnkjkeoahlk":{"blacklist":true},"phkpgooenaonkpnabopdbjjfmphclela":{"blacklist":true},"pihcfdffalbcnmbghijdfcaanagapelf":{"blacklist":true},"pjdhkkcnlbfebiokpeghfffajaabahfo":{"blacklist":true},"pjgbfgdpkbfimabdalhjmmeeelbmkcac":{"blacklist":true},"pjkljhegncpnkpknbcohdijeoejaedia":{"ack_external":true,"active_bit":false,"active_permissions":{"api":["notifications"]},"app_launcher_ordinal":"w","events":["experimental.runtime.onInstalled"],"from_bookmark":false,"from_webstore":true,"install_time":"12987200590149875","last_active_pingday":"12993721361723250","lastpingday":"12993807762000500","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxps://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"en_US","default_locale":"en","description":"Fast, searchable email with less spam.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Gmail","options_page":"hxxps://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"7"},"page_ordinal":"n","path":"pjkljhegncpnkpknbcohdijeoejaedia\\7_0","state":1},"pjloefkigphblpjminnlpbhjchjafcfc":{"blacklist":true},"pkbbbncikcipejaiiiioboongndhmjgl":{"blacklist":true},"pkbkkendemaimikinaefldfljliecapm":{"blacklist":true},"pkhidkonipdjidjglnkfcfhnkfnlefbk":{"blacklist":true},"plfijddblbcdcnammpdmfccchkbdekmm":{"blacklist":true},"pnaiiipilbpcceggeanphcpkkihnojan":{"blacklist":true},"pnnbdjcjeiobikdfikegpclkcimgafpp":{"blacklist":true},"pnpfkfanlgljpkpilhgiimfadggfmhcd":{"blacklist":true},"pnpgiaejfbdapllkchhgchjpdbcpiooa":{"blacklist":true},"pobponmhkpmphbnfhpjdagklbkmjhked":{"blacklist":true},"ppmfajacidhcjbddpgmcmigffpppcadd":{"blacklist":true}},"toolbar":["nfhopoibjodcfbppkiginpbcpekbdgln","chagngapoeghhljpcnojlkonegopkimi","dnedfaenfnkikficknkklbdedlecmpgc","mbniclmhobmnbdlbpiphghaielnnpgdp"],"toolbarsize":-1},"google":{"services":{"username":"prov1kenobi@gmail.com"}},"homepage":"","homepage_is_newtabpage":false,"invalidator":{"invalidation_state":"CicKJQoGCgQIAxABEhIJ0DXydw9ZbbkR00b5+0r0zgUaBwiDEhADGAsSFH1zCrQ+QpQKa23lEXwasJhJwYHJ"},"is_google_plus_user":false,"net":{"hxxp_server_properties":{"2542116.fls.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"accounts.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":20},{"id":6,"value":0}],"supports_spdy":true},"accounts.youtube.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":79},{"id":6,"value":0}],"supports_spdy":true},"ad-emea.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"ad.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"ads-dot-angrybirds-facebook.appspot.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"ajax.googleapis.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":28},{"id":6,"value":24}],"supports_spdy":true},"angrybirds-facebook.appspot.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"apis.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"chatenabled.mail.google.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"chrome.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":21},{"id":6,"value":0}],"supports_spdy":true},"clients1.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"clients2.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":24},{"id":6,"value":0}],"supports_spdy":true},"clients2.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":90},{"id":6,"value":0}],"supports_spdy":true},"clients4.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"cm.g.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"csi.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"encrypted-tbn0.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":28},{"id":6,"value":0}],"supports_spdy":true},"encrypted-tbn1.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"encrypted-tbn3.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"fls.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"fonts.googleapis.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"gmail.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"googleads.g.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"i.ytimg.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"id.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"images-focus-opensocial.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"khms0.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"lh3.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":7},{"id":6,"value":35}],"supports_spdy":true},"lh3.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":6},{"id":6,"value":11}],"supports_spdy":true},"lh4.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"lh4.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"lh5.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"lh5.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true},"lh6.ggpht.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":7},{"id":6,"value":23}],"supports_spdy":true},"lh6.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":88},{"id":6,"value":0}],"supports_spdy":true},"mail-attachment.googleusercontent.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"mail.google.com:443":{"settings":[{"id":4,"value":10},{"id":5,"value":87},{"id":6,"value":0}],"supports_spdy":true},"maps.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":44},{"id":6,"value":0}],"supports_spdy":true},"mts0.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"mts1.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":26},{"id":6,"value":0}],"supports_spdy":true},"news.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-4hpxg24fey4no-7v7qpa6ep4occkbp-390885-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-4wzjbkfvsqthw-rt5izixcg2c235lt-420968-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-4wzjbkfvsqthw-rt5izixcg2c235lt-420968-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-5d5vtnuyt53cy-dh4zcqulcnywvaib-382091-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-5d5vtnuyt53cy-dh4zcqulcnywvaib-382091-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-6hm2iaym3kp2q-ka3ovnzmeg2i6gzl-231218-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-6hm2iaym3kp2q-ka3ovnzmeg2i6gzl-231218-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":2},{"id":6,"value":2}],"supports_spdy":true},"p5-7hcwu5zffwo4e-vs4ptducsb3vv7dt-594505-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-dbwfdpechtl2o-b6hydkhfnw5tpofq-570595-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-dbwfdpechtl2o-b6hydkhfnw5tpofq-570595-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-kojbcyamowme2-c753rs4uyu5vrt3n-244326-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-kojbcyamowme2-c753rs4uyu5vrt3n-244326-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-mm3ghadbcmlx4-ckljp6mlt3i7c23o-540754-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-mm3ghadbcmlx4-ckljp6mlt3i7c23o-540754-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-mrwkyqtbvmnqo-zmguvx4fpdm4kmlp-360287-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-shyds6xg26trm-43en7twdkiivcmim-597313-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-thvddgwxtf5ws-w5ead7yg7b2kpzwq-729595-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-thvddgwxtf5ws-w5ead7yg7b2kpzwq-729595-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-uum547vrftmry-cmo3eki5vpk6pvky-252058-i2-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-vxtjmwbkluf4o-tymiaqfbnspfrpui-542708-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-vxtjmwbkluf4o-tymiaqfbnspfrpui-542708-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-vxtjmwbkluf4o-tymiaqfbnspfrpui-542708-s1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-w5duzbgaxy6zi-puxignecqxg4jytv-535039-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-ywy5xdflofloy-fdcssuy7xzr5gtdi-524915-i1-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-ywy5xdflofloy-fdcssuy7xzr5gtdi-714266-i1-v6exp3-v4.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-ywy5xdflofloy-fdcssuy7xzr5gtdi-714266-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"p5-znc7pyimw5fjg-xiygkwfaxd624ns6-781931-i2-v6exp3-ds.metric.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"pagead2.googleadservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"pagead2.googlesyndication.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"partner.googleadservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"plus.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":51},{"id":6,"value":0}],"supports_spdy":true},"plusone.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":26},{"id":6,"value":0}],"supports_spdy":true},"r.twimg.com:443":{"supports_spdy":true},"securepubads.g.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"ssl.google-analytics.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":2},{"id":6,"value":11}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":76},{"id":6,"value":0}],"supports_spdy":true},"static.doubleclick.net:443":{"settings":[{"id":4,"value":100},{"id":5,"value":26},{"id":6,"value":0}],"supports_spdy":true},"static.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"themes.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":33},{"id":6,"value":0}],"supports_spdy":true},"www-gm-opensocial.googleusercontent.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"www.google-analytics.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":87},{"id":6,"value":0}],"supports_spdy":true},"www.googleadservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"www.googleapis.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":32},{"id":6,"value":0}],"supports_spdy":true},"www.googletagservices.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":16},{"id":6,"value":0}],"supports_spdy":true},"www.gstatic.com:443":{"settings":[{"id":4,"value":100},{"id":5,"value":10},{"id":6,"value":0}],"supports_spdy":true}}},"ntp":{"app_page_names":["Apps"],"gplus_required":false,"promo_closed":false,"promo_end":1348297200,"promo_group":322,"promo_group_max":1,"promo_group_timeslice":0,"promo_increment":1,"promo_initial_segment":4,"promo_line":"What do you think of Chrome? <a href=\"hxxps://survey.googleratings.com/wix/p5963862.aspx\">Take the survey</a>","promo_num_groups":1000,"promo_resource_cache_update":"1349372813.2925","promo_start":1347865200,"promo_views":0,"promo_views_max":15},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89","plugins_list":[{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Chrome\\Application\\21.0.1180.89\\gcswf32.dll","version":"11,3,300,265"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\WINDOWS\\system32\\Macromed\\Flash\\NPSWF32_11_3_300_265.dll","version":"11,3,300,265"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Google Talk Plugin","path":"C:\\Documents and Settings\\Ron\\Application Data\\Mozilla\\plugins\\npgoogletalk.dll","version":"3.1.4.8140"},{"enabled":true,"name":"Google Talk Plugin Video Accelerator","path":"C:\\Documents and Settings\\Ron\\Application Data\\Mozilla\\plugins\\npgtpo3dautoplugin.dll","version":"0,1,44,16"},{"enabled":true,"name":"Google Talk"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files\\Adobe\\Acrobat 9.0\\Acrobat\\Browser\\nppdf32.dll","version":"9.5.1.283"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.330.3","path":"C:\\WINDOWS\\system32\\npdeployJava1.dll","version":"6.0.330.3"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"Shockwave for Director","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\np32dsw.dll","version":"10.2r23"},{"enabled":true,"name":"Shockwave"},{"enabled":true,"name":"Coupons Inc., Coupon Printer Manager ","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npCouponPrinter.dll","version":"4, 0, 0, 6"},{"enabled":true,"name":"Coupons Inc., Coupon Printer Manager ","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npMozCouponPrinter.dll","version":"4, 0, 1, 3"},{"enabled":true,"name":"Coupons Inc., Coupon Printer Manager "},{"enabled":true,"name":"2007 Microsoft Office system","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\NPOFF12.DLL","version":"12.0.4518.1014"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime Plug-in 7.7","path":"C:\\Program Files\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.7 (1680.34)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Microsoft\u00ae DRM","path":"C:\\Program Files\\Windows Media Player\\npdrmv2.dll","version":"9.00.00.4503"},{"enabled":true,"name":"Microsoft\u00ae DRM","path":"C:\\Program Files\\Windows Media Player\\npwmsdrm.dll","version":"9.00.00.4503"},{"enabled":true,"name":"Microsoft\u00ae DRM"},{"enabled":true,"name":"Windows Media Player Plug-in Dynamic Link Library","path":"C:\\Program Files\\Windows Media Player\\npdsplay.dll","version":"3.0.2.629"},{"enabled":true,"name":"Windows Media Player"},{"enabled":true,"name":"QUAKE LIVE","path":"C:\\Documents and Settings\\All Users\\Application Data\\id Software\\QuakeLive\\npquakezero.dll","version":"0.1.0.401"},{"enabled":true,"name":"QUAKE LIVE"},{"enabled":true,"name":"Google Update","path":"C:\\Documents and Settings\\Ron\\Local Settings\\Application Data\\Google\\Update\\1.3.21.115\\npGoogleUpdate3.dll","version":"1.3.21.115"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Google Earth Plugin","path":"C:\\Program Files\\Google\\Google Earth\\plugin\\npgeplugin.dll","version":"6.1.0.5001"},{"enabled":true,"name":"Google Earth Plugin"},{"enabled":true,"name":"Veetle TV Player","path":"C:\\Program Files\\Veetle\\Player\\npvlc.dll","version":"0.9.18"},{"enabled":true,"name":"Veetle TV Player"},{"enabled":true,"name":"Veetle TV Core","path":"C:\\Program Files\\Veetle\\plugins\\npVeetle.dll","version":"0.9.18"},{"enabled":true,"name":"Veetle TV Core"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"},{"enabled":true,"name":"Autodesk Design Review Firefox Add-on v1.1","path":"c:\\Program Files\\Autodesk\\Autodesk Design Review Firefox Add-on v1.1\\npADRdwf.dll","version":"1.1.0.0"},{"enabled":true,"name":"Autodesk Design Review Firefox Add-on v1.1"},{"enabled":true,"name":"Silverlight Plug-In","path":"c:\\Program Files\\Microsoft Silverlight\\4.0.60831.0\\npctrl.dll","version":"4.0.60831.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Windows Presentation Foundation","path":"c:\\WINDOWS\\Microsoft.NET\\Framework\\v3.5\\Windows Presentation Foundation\\NPWPF.dll","version":"3.5.30729.1 built by: SP"},{"enabled":true,"name":"Windows Presentation Foundation"}]},"profile":{"avatar_index":0,"content_settings":{"clear_on_exit_migrated":true,"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"default_content_settings":{"cookies":4},"exited_cleanly":false,"name":"First user","password_manager_enabled":false},"selectfile":{"last_directory":"C:\\Documents and Settings\\Ron\\Desktop"},"session":{"restore_on_startup":4,"restore_on_startup_migrated":true,"urls_to_restore_on_startup":["hxxp://www.google.com/"]},"sync":{"acknowledged_types":["Bookmarks","Preferences","Passwords","Autofill Profiles","Autofill","Themes","Typed URLs","Extensions","Encryption keys","Search Engines","Sessions","Apps","App settings","Extension settings","App Notifications"],"app_notifications":true,"app_settings":true,"apps":true,"autofill":true,"autofill_profile":true,"bookmarks":true,"encryption_bootstrap_token":"AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAx3tKGcGNVkKHxvB4Llj0ngAAAAACAAAAAAADZgAAqAAAABAAAABoRNBURUJxiJgnfSFKuHaEAAAAAASAAACgAAAAEAAAAHQg8EAwIQCyz0guST/F8tE4AAAASXRjSfx0BvkOGfI3Z4o93323tBz17rz1OOTzNvTITQpPDyUd7Zjj6GLwB2o0DY6YyjnyShbTJj8UAAAADaYB/1NOZKoIPnwu0dyDxfbYziI=","extension_settings":true,"extensions":true,"has_setup_completed":true,"keep_everything_synced":true,"last_synced_time":"12993861596796750","max_invalidation_versions":{"10":"1342727663379000","12":"1349311791443000","2":"1347918154926000","3":"1348703171894000","4":"1342727665553000","6":"1349294481692000","8":"1349285265862000","9":"1349219594897000"},"passwords":true,"preferences":true,"search_engines":true,"session_sync_guid":"session_syncTwHM3UddznPK7gK7Jq4KxA==","sessions":true,"suppress_start":false,"themes":true,"typed_urls":true},"sync_promo":{"show_ntp_bubble":false,"startup_count":1,"user_skipped":true,"view_count":2},"translate_accepted_count":{"fr":0},"translate_denied_count":{"fr":1}}

*************************

AdwCleaner[R1].txt - [120307 octets] - [31/10/2012 09:47:28]
AdwCleaner[R2].txt - [120369 octets] - [31/10/2012 12:02:41]
AdwCleaner[S1].txt - [120570 octets] - [31/10/2012 12:03:46]

########## EOF - C:\AdwCleaner[S1].txt - [120632 octets] ##########


Still having trouble installing updates. They seem to be downloading okay....just errors installing. Error code is 534, if that helps. Update that is currently failing to install is Microsoft SQL Server 2005 Express Edition, Service Pack 4. (KB2463332)

Edited by prov1kenobi, 31 October 2012 - 05:32 PM.


#6 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 01 November 2012 - 08:29 AM

Still having trouble installing updates. They seem to be downloading okay....just errors installing. Error code is 534, if that helps. Update that is currently failing to install is Microsoft SQL Server 2005 Express Edition, Service Pack 4. (KB2463332)


You can download the installer file first then install it with all Browsers, programs closed.

Go to :
http://www.microsoft.com/en-us/download/details.aspx?id=184

Download SQLEXPR32.EXE and run it.

Read the the article, look at the System requirements and Instructions sections.

Keep me posted.

#7 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 01 November 2012 - 03:33 PM

Okay...this is weird. I downloaded and installed the file you asked me to. Rebooted and went to Windows update and it's trying to install the same thing again. It downloads, but I'm still getting the error when trying to install. Machine continues to be unstable. Constant browser crashing. Sometimes machine just rebooting itself.

Edited by prov1kenobi, 01 November 2012 - 04:07 PM.


#8 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 02 November 2012 - 07:34 AM

Run the fix for Windows 7 suggested on this page.

Windows Update or Microsoft Update repeatedly offers the same update
http://support.microsoft.com/kb/910339

Keep me posted.

#9 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 02 November 2012 - 11:31 AM

Applied the fix, but still getting the same error. Still won't install that SQL server issue. Browser is still crashing randomly. I even uninstalled and reinstalled firefox, but still..... :ranting:

#10 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 02 November 2012 - 01:04 PM

Lets go back and check your Master Boot Record.

Please Download
TDSSKiller.zip

>>> Double-click on TDSSKiller.exe to run the application.
  • Click on the Start Scan button and wait for the scan and disinfection process to be over.
  • If an infected file is detected, the default action will be Cure, click on Continue
    Posted Image
  • If a suspicious file is detected, the default action will be Skip, click on Continue
    Posted Image
  • If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.
  • If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.

Download http://public.avast.com/~gmerek/aswMBR.exe (aswMBR.exe) to your desktop. Double click the aswMBR.exe to run it

  • Click the "Scan" button to start scan.
  • Upon completion of the scan, click Save log, and save it to your desktop. (Note - do not select any Fix at this time) <- IMPORTANT
  • Please post the contents of that log in your next reply.
There shall also be a file on your desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) folder. Please attach that zipped file in your next reply.

===

Please post the logs for my review.

#11 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 02 November 2012 - 01:38 PM

The first one found a suspicious file, but did not ask me to reboot, and gave me no log file. The second is attached.

aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-11-02 11:15:34
-----------------------------
11:15:34.100 OS Version: Windows 6.1.7601 Service Pack 1
11:15:34.100 Number of processors: 2 586 0xF02
11:15:34.105 ComputerName: WS-4-PC UserName: WS-4
11:15:52.024 Initialize success
11:18:47.562 AVAST engine defs: 12110200
11:19:34.483 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
11:19:34.488 Disk 0 Vendor: ST500DM002-1BD142 KC45 Size: 476940MB BusType: 3
11:19:34.493 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP1T1L0-7
11:19:34.498 Disk 1 Vendor: ST3160815AS 3.AAD Size: 152627MB BusType: 3
11:19:34.518 Disk 0 MBR read successfully
11:19:34.528 Disk 0 MBR scan
11:19:34.553 Disk 0 Windows 7 default MBR code
11:19:34.568 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 2048
11:19:34.588 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 476838 MB offset 206848
11:19:34.603 Disk 0 scanning sectors +976771072
11:19:34.673 Disk 0 scanning C:\Windows\system32\drivers
11:19:47.284 Service scanning
11:20:23.249 Modules scanning
11:20:44.859 Module: C:\Windows\System32\apisetschema.dll **SUSPICIOUS**
11:20:45.019 Disk 0 trace - called modules:
11:20:45.069 ntkrnlpa.exe CLASSPNP.SYS disk.sys ataport.SYS halmacpi.dll pciide.sys PCIIDEX.SYS atapi.sys partmgr.sys volmgr.sys fvevol.sys rdyboost.sys volsnap.sys Ntfs.sys dxgkrnl.sys atikmdag.sys dxgmms1.sys watchdog.sys fltmgr.sys fileinfo.sys eam??
11:20:45.079 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85ee9030]
11:20:45.089 3 CLASSPNP.SYS[8bbcb59e] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x85143908]
11:20:58.141 AVAST engine scan C:\Windows
11:21:19.719 AVAST engine scan C:\Windows\system32
11:27:05.162 AVAST engine scan C:\Windows\system32\drivers
11:27:23.984 AVAST engine scan C:\Users\WS-4
11:30:40.948 File: C:\Users\WS-4\Documents\i-hate-keyloggers.exe **INFECTED** Win32:AntiKeyLog-B [Tool]
11:31:00.026 AVAST engine scan C:\ProgramData
11:32:11.346 Scan finished successfully
11:33:33.288 Disk 0 MBR has been saved successfully to "C:\Users\WS-4\Desktop\MBR.dat"
11:33:33.293 The log file has been saved successfully to "C:\Users\WS-4\Desktop\aswMBR.txt"

Attached Files


Edited by nasdaq, 03 November 2012 - 07:59 AM.
aswMBR.txt posted.


#12 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 03 November 2012 - 08:08 AM

Could this .dll be the file reported by TDSSKiller?

C:\Windows\System32\apisetschema.dll **SUSPICIOUS**

>>> Run Jotti's malware scan: Please copy this line (in bold):
C:\Windows\System32\apisetschema.dll
  • Go to Jotti's malware scan and click the Browse button,
  • A window will open, right-click in the File name field and choose Paste.
  • Click the Submit button and let the scan run uninterrupted.
  • At the end right-click the Permalink button and choose "Copy the link". Posted Image
  • Open Notepad (Start => All Programs => Accessories) and click "Edition" => "Paste".
Please copy and paste these Permalink in your next reply.
If Jotti is busy, please go to http://www.virustotal.com
===

Let find out if you have more then on one copy on your hard disk.

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2


If your operating system is 64 bit download this tool:
SystemLook_x64.exe
  • Double-click SystemLook.exe to run it.
  • Copy and paste the content of the following bold text into the main textfield:


    :filefind
    apisetschema.dll

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt

===

Please post the results of the logs do not attach them.

#13 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 03 November 2012 - 07:57 PM

SystemLook 30.07.11 by jpshortstuff
Log created at 09:07 on 03/11/2012 by WS-4
Administrator - Elevation successful

========== filefind ==========

Searching for "apisetschema.dll"
C:\Windows\System32\apisetschema.dll --a---- 6656 bytes [23:10 13/07/2009] [01:03 14/07/2009] 2F03490092C032392FB6FF635222B9B2
C:\Windows\winsxs\x86_microsoft-windows-smss_31bf3856ad364e35_6.1.7600.16385_none_ac10fe207a85352b\apisetschema.dll --a---- 6656 bytes [23:10 13/07/2009] [01:03 14/07/2009] 2F03490092C032392FB6FF635222B9B2

-= EOF =-



Jotti's malware scan
This file has been scanned before. The results for this previous scan are listed below.


Filename: apisetschema.dll
Status:
Acquiring previous results...
Additional info
File size: 6656 bytes
Filetype: PE32 executable for MS Windows (DLL) (console) Intel 80386 32-bit
MD5: 2f03490092c032392fb6ff635222b9b2
SHA1: 77e86c4677b8670474bfb2dbc60a47e3b340a679




Scanners
[ArcaVir]
No result available
[F-Secure Anti-Virus]
No result available
[Avast! antivirus]
No result available
[G DATA]
No result available
[Grisoft AVG Anti-Virus]
No result available
[Ikarus]
No result available
[Avira AntiVir]
No result available
[Kaspersky Anti-Virus]
No result available
[Softwin BitDefender]
No result available
[Panda Antivirus]
No result available
[ClamAV]
No result available
[Quick Heal]
No result available
[CPsecure]
No result available
[Sophos]
No result available
[Dr.Web]
No result available
[VirusBlokAda VBA32]
No result available
[ESET]
No result available
[VirusBuster]
No result available
[Frisk F-Prot Antivirus]
No result available

#14 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:05:00 PM

Posted 04 November 2012 - 09:49 AM

Try this.
First reboot Windows. Then open Windows Update and click Check for Updates to allow Windows Update to refresh itself.

If the update is still being offered then select the update and click on Hide Update so you won't be notified about it anymore. See if that helps.

#15 prov1kenobi

prov1kenobi
  • Topic Starter

  • Members
  • 67 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 05 November 2012 - 11:06 AM

Okay. I'm doing that now. Also, in that MBR scan, the software found an infected file: "I Hate Keyloggers". Is there any reason you didn't want me to clean these files? Update: After "hiding" the SQL Server update, my Outlook program no longer works. Won't start up :censored:
And it's also now a different update that won't install: "security update for SQL Server 2005 Service Pack 3 (KB2494113)

Outlook is starting again after another reboot. But my computer is rebooting itself still at random times....

Edited by prov1kenobi, 05 November 2012 - 12:03 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users