Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Browser settings change


  • Please log in to reply
9 replies to this topic

#1 nanasbuggycar

nanasbuggycar

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 23 March 2013 - 08:42 PM

"An unknown change was detected on your browser's search settings.

Keep my current settings

I am aware of this change and approve it.

                                  Yes"

 

The above message pops up everytime I use my internet and it doesn't matter which box I check it will not close unless I go to the taskbar and right click on it and click close. I don't know where this came from but it is very frustrating and want it gone.

 

Please help, this is my first time posting just signed up tonight. Thanks



BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:17 AM

Posted 23 March 2013 - 09:40 PM

Hello and welcome to BC.. I am moving this to the Am I Infected forum from XP.

 

Looks like a browser Hijack infection.

 

What browser(s) are you using?

 

Lets also run these.

 

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:

  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

 

 

 

Please Download TDSSkiller
Launch it.
Click on change parameters-Select TDLFS file system
Click on "Scan".
Please post the LOG report(log file should be in your C drive)
 
Do not change the default options on scan results.

 

 

 


Please download AdwCleaner by Xplode onto your desktop.
•Close all open programs and internet browsers.
•Double click on adwcleaner.exe to run the tool.
•Click on Delete.
•Confirm each time with Ok.
•You will be prompted to restart your computer. A text file will open after the restart.
•Please post the contents of that logfile with your next reply.
•You can find the logfile at C:\AdwCleaner[S1].txt as well.


>>>>

Now I'd like us to scan your machine with ESET OnlineScan

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Click the Back button.
  • Click the Finish button.

NOTE:Sometimes if ESET finds no infections it will not create a log.


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 nanasbuggycar

nanasbuggycar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 23 March 2013 - 10:12 PM

Thank you boopme will try tomorrow night not at that computer right now, will post later with results.

 



#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:17 AM

Posted 24 March 2013 - 04:14 PM

OK, I'll be back later


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 nanasbuggycar

nanasbuggycar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 26 March 2013 - 06:44 AM

Hi Boopme,

I have completed all the steps you sent to me and am now posting you the results.

 


Edited by nanasbuggycar, 26 March 2013 - 06:49 AM.


#6 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:17 AM

Posted 26 March 2013 - 02:45 PM

Ok, I'll be back around 8pm Eastern


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#7 nanasbuggycar

nanasbuggycar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 26 March 2013 - 03:36 PM

I tried to e-mail you the attachments and it failed. How do I send you the reports you requested me to send you?



#8 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:17 AM

Posted 26 March 2013 - 03:40 PM

Copy/paste them in the next reply.
 


How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#9 nanasbuggycar

nanasbuggycar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:08:17 AM

Posted 26 March 2013 - 05:09 PM

I hope this is what you meant by copy/paste into the message. Will you let me know what all this stuff means. It seems to have cleared up whatever was causing the pop up box to come up all the time it hasn't shown up since I did all these things you suggested.

 

Thanks again for your help.

Karen

 

ESETScan Results

C:\Documents and Settings\brendon\.frostwire5\updates\frostwire-5.3.6.windows.exe multiple threats cleaned by deleting - quarantined
C:\Documents and Settings\brendon\Application Data\FrostWire\.AppSpecialShare\frostwire-4.21.5.windows.exe multiple threats cleaned by deleting - quarantined
C:\Documents and Settings\brendon\Local Settings\Temp\AskSLib.dll a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Documents and Settings\brendon\Local Settings\Temp\setup.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined
C:\Documents and Settings\brendon\Local Settings\Temp\NERO20100326135034074\ISSetupPrerequisites\{BF80A1C0-C3FF-4B1C-ABEF-22CD4F97A0AB}\Toolbar.exe a variant of Win32/Bundled.Toolbar.Ask.A application cleaned by deleting - quarantined
C:\Documents and Settings\brendon\My Documents\Karen's Songs\frostwire-4.21.2.windows.exe multiple threats cleaned by deleting - quarantined
C:\Downloaded Programs\frostwire-5.3.3.windows.exe multiple threats cleaned by deleting - quarantined
C:\Downloaded Programs\MediaGet2.exe a variant of Win32/Toolbar.Babylon.C application cleaned by deleting - quarantined
C:\Program Files\FrostWire 5\frostwire-installer.exe multiple threats cleaned by deleting - quarantined
C:\System Volume Information\_restore{60514738-3069-4507-97B4-19F3DE69D8C0}\RP151\A0039472.exe Win32/OpenCandy application cleaned by deleting - quarantined

 

Mini Tool Box Results

MiniToolBox by Farbar  Version:05-03-2013
Ran by brendon (administrator) on 25-03-2013 at 19:23:04
Running from "C:\Documents and Settings\brendon\Desktop"
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================


Windows IP Configuration

 

Successfully flushed the DNS Resolver Cache.


========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1       localhost

========================= IP Configuration: ================================

Realtek PCIe GBE Family Controller = Local Area Connection (Connected)


# ----------------------------------
# Interface IP Configuration        
# ----------------------------------
pushd interface ip


# Interface IP Configuration for "Local Area Connection"

set address name="Local Area Connection" source=dhcp
set dns name="Local Area Connection" source=dhcp register=PRIMARY
set wins name="Local Area Connection" source=dhcp


popd
# End of interface IP configuration


Windows IP Configuration

        Host Name . . . . . . . . . . . . : karren-f03f382f

        Primary Dns Suffix  . . . . . . . :

        Node Type . . . . . . . . . . . . : Unknown

        IP Routing Enabled. . . . . . . . : No

        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :

        Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller

        Physical Address. . . . . . . . . : 90-E6-BA-D9-26-93

        Dhcp Enabled. . . . . . . . . . . : Yes

        Autoconfiguration Enabled . . . . : Yes

        IP Address. . . . . . . . . . . . : 192.168.0.101

        Subnet Mask . . . . . . . . . . . : 255.255.255.0

        Default Gateway . . . . . . . . . : 192.168.0.1

        DHCP Server . . . . . . . . . . . : 192.168.0.1

        DNS Servers . . . . . . . . . . . : 192.168.0.1

        Lease Obtained. . . . . . . . . . : Saturday, March 23, 2013 4:56:28 PM

        Lease Expires . . . . . . . . . . : Saturday, March 30, 2013 4:56:28 PM

Server:  UnKnown
Address:  192.168.0.1

Name:    google.com
Addresses:  74.125.226.69, 74.125.226.71, 74.125.226.68, 74.125.226.70
   74.125.226.78, 74.125.226.67, 74.125.226.64, 74.125.226.65, 74.125.226.66
   74.125.226.72, 74.125.226.73

 

Pinging google.com [74.125.226.69] with 32 bytes of data:

 

Reply from 74.125.226.69: bytes=32 time=17ms TTL=54

Reply from 74.125.226.69: bytes=32 time=41ms TTL=54

Ping statistics for 74.125.226.69:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 17ms, Maximum = 41ms, Average = 29ms

Server:  UnKnown
Address:  192.168.0.1

Name:    yahoo.com
Addresses:  206.190.36.45, 98.138.253.109, 98.139.183.24

 

Pinging yahoo.com [98.139.183.24] with 32 bytes of data:

 

Reply from 98.139.183.24: bytes=32 time=397ms TTL=48

Reply from 98.139.183.24: bytes=32 time=112ms TTL=48

Ping statistics for 98.139.183.24:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 112ms, Maximum = 397ms, Average = 254ms

 

Pinging 127.0.0.1 with 32 bytes of data:

 

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Ping statistics for 127.0.0.1:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...90 e6 ba d9 26 93 ...... Realtek PCIe GBE Family Controller - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      192.168.0.1   192.168.0.101   20
     24.226.16.83  255.255.255.255      192.168.0.1   192.168.0.101   20
     24.226.16.97  255.255.255.255      192.168.0.1   192.168.0.101   20
    24.226.16.106  255.255.255.255      192.168.0.1   192.168.0.101   20
    24.226.16.114  255.255.255.255      192.168.0.1   192.168.0.101   20
       64.4.26.37  255.255.255.255      192.168.0.1   192.168.0.101   20
    65.54.165.169  255.255.255.255      192.168.0.1   192.168.0.101   20
     65.55.72.202  255.255.255.255      192.168.0.1   192.168.0.101   20
     70.37.130.35  255.255.255.255      192.168.0.1   192.168.0.101   20
   108.168.157.82  255.255.255.255      192.168.0.1   192.168.0.101   20
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1   1
   173.223.71.117  255.255.255.255      192.168.0.1   192.168.0.101   20
      192.168.0.0    255.255.255.0    192.168.0.101   192.168.0.101   20
    192.168.0.101  255.255.255.255        127.0.0.1       127.0.0.1   20
    192.168.0.255  255.255.255.255    192.168.0.101   192.168.0.101   20
        224.0.0.0        240.0.0.0    192.168.0.101   192.168.0.101   20
  255.255.255.255  255.255.255.255    192.168.0.101   192.168.0.101   1
Default Gateway:       192.168.0.1
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog5 02 C:\Windows\System32\winrnr.dll [16896] (Microsoft Corporation)
Catalog5 03 C:\Windows\System32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 01 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [245248] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\rsvpsp.dll [92672] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (03/23/2013 04:58:55 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (03/22/2013 07:42:58 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (03/13/2013 07:55:37 AM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (03/07/2013 04:03:02 PM) (Source: .NET Runtime Optimization Service) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown


System errors:
=============
Error: (03/23/2013 04:59:25 PM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for a transaction response from the  service.

Error: (03/23/2013 04:58:51 PM) (Source: Service Control Manager) (User: )
Description: The MSCamSvc service hung on starting.

Error: (03/23/2013 04:57:30 PM) (Source: Service Control Manager) (User: )
Description: The AVGIDSAgent service terminated with service-specific error 3758213660 (0xE001CA1C).

Error: (03/23/2013 04:57:30 PM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for a transaction response from the avgfws service.

Error: (03/22/2013 07:42:54 AM) (Source: Service Control Manager) (User: )
Description: The MSCamSvc service hung on starting.

Error: (03/22/2013 07:41:34 AM) (Source: Service Control Manager) (User: )
Description: The AVGIDSAgent service terminated with service-specific error 3758213660 (0xE001CA1C).

Error: (03/22/2013 07:41:34 AM) (Source: Service Control Manager) (User: )
Description: Timeout (30000 milliseconds) waiting for a transaction response from the avgfws service.


Microsoft Office Sessions:
=========================
Error: (02/25/2012 11:58:51 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 159 seconds with 60 seconds of active time.  This session ended with a crash.

Error: (11/13/2011 08:33:15 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 224 seconds with 0 seconds of active time.  This session ended with a crash.


=========================== Installed Programs ============================

µTorrent (Version: 3.1.3)
Acrobat.com (Version: 2.0.0)
Acrobat.com (Version: 2.0.0.0)
Adobe AIR (Version: 2.6.0.19140)
Adobe Common File Installer (Version: 1.00.0000)
Adobe Community Help (Version: 3.5.23)
Adobe Flash Player 11 ActiveX (Version: 11.6.602.180)
Adobe Flash Player 11 Plugin (Version: 11.6.602.180)
Adobe Help Center 1.0 (Version: 001.000.000)
Adobe Photoshop CS2 (Version: 9.0)
Adobe Photoshop Elements 10 (Version: 10.0)
Adobe Photoshop Elements 7.0 (Version: 7.0)
Adobe Photoshop Elements 7.0 (Version: 7.0.0.3)
Adobe Reader 9.5.2 (Version: 9.5.2)
Adobe Shockwave Player
Adobe Stock Photos 1.0 (Version: 001.000.000)
Apple Application Support (Version: 1.4.1)
Apple Software Update (Version: 2.1.1.116)
Avanquest update (Version: 1.23)
AVG 2012 (Version: 12.0.2221)
AVG 2012 (Version: 12.0.2639)
AVG 2012 (Version: 2012.0.2221)
AVG Security Toolbar (Version: 14.2.0.1)
AVS Update Manager 1.0
AVS Video Converter 7
AVS4YOU Software Navigator 1.4
Bing Rewards Client Installer (Version: 16.0.345.0)
Calendar Creator
Canon iP4700 series Printer Driver
Canon PhotoRecord (Version: 02.02.00013)
Canon PIXMA iP4000
Canon Utilities Easy-PhotoPrint
Canon Utilities Easy-PhotoPrint EX
Canon Utilities Easy-PrintToolBox
Canon Utilities My Printer
Canon Utilities Solution Menu
CCleaner (Version: 3.24)
CD-LabelPrint
ConvertXtoDVD 4.0.9.322 (Version: 4.0.9.322)
Corel Applications
Cricut DesignStudio
DirectX 9 Runtime (Version: 1.00.0000)
Dora Fairytale Adventure
Easy-Link internet launch pad (Version: 1.0.0.9)
Easy-WebPrint
Elements 10 Organizer (Version: 10.0)
EMC 11 Content (Version: 1.1.019)
EPSON Easy Photo Print (Version: 1.5.1.0)
EPSON Scan
Facebook Plug-In
FrostWire 5.3.6 (Version: 5.3.6.0)
FUJIFILM MyFinePix Studio 1.0
Go Diego Go! Wolf Pup Rescue
Google Earth (Version: 7.0.3.8542)
Google Update Helper (Version: 1.3.21.135)
High-Definition Video Playback 10 (Version: 7.0.11400.29.0)
HP Officejet 7500 E910 Basic Device Software (Version: 22.50.231.0)
HP Officejet 7500 E910 Help (Version: 140.0.93.93)
HP Update (Version: 5.002.006.003)
I.R.I.S. OCR (Version: 12.3.4.0)
Java™ 6 Update 37 (Version: 6.0.370)
Junk Mail filter update (Version: 14.0.8117.416)
Kyodai Mahjongg 2006 v1.0
LightScribe System Software (Version: 1.18.13.1)
LightScribe Template Designs - Seasonal Pack 1 (Version: 1.15.0.0)
LightScribe Template Designs - Winter Whimsy (Version: 1.18.8.110)
Malwarebytes Anti-Malware version 1.65.1.1000 (Version: 1.65.1.1000)
Marketsplash Shortcuts (Version: 1.0.1.7)
Microsoft .NET Framework 2.0 Service Pack 2 (Version: 2.2.30730)
Microsoft .NET Framework 3.0 Service Pack 2 (Version: 3.2.30730)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30730)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Choice Guard (Version: 2.0.48.0)
Microsoft Corporation (Version: 9.0.30729.1)
Microsoft LifeCam (Version: 3.22.270.0)
Microsoft Office 2007 Service Pack 3 (SP3)
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (Version: 12.0.6612.1000)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (Version: 14.0.5130.5003)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (Version: 2.0.4024.1)
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000)
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000)
Microsoft Primary Interoperability Assemblies 2005 (Version: 8.0.50727.42)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft Software Update for Web Folders  (English) 12 (Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Web Publishing Wizard 1.52
Motorola Driver Installation 3.4.0 (Version: 3.4.0)
Motorola Phone Tools (Version: 4.30)
Motorola Phone Tools (Version: 5.0.7a 4/01/2008)
Motorola Phone Tools (Version: 5.00)
Mozilla Firefox 19.0.2 (x86 en-US) (Version: 19.0.2)
Mozilla Maintenance Service (Version: 19.0.2)
MSVCRT (Version: 14.0.1468.721)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
Nero 10 Menu TemplatePack Basic (Version: 10.0.10600.6.0)
Nero 10 Movie ThemePack Basic (Version: 10.0.10600.6.0)
Nero BackItUp 10 (Version: 5.4.11600.19.100)
Nero BackItUp 10 Help (CHM) (Version: 1.0.10700)
Nero Burning ROM 10 (Version: 10.0.11100.10.100)
Nero BurningROM 10 Help (CHM) (Version: 1.0.10700)
Nero BurnRights 10 (Version: 4.0.11000.12.100)
Nero BurnRights 10 Help (CHM) (Version: 1.0.10600)
Nero Control Center 10 (Version: 10.0.12000.1.4)
Nero ControlCenter 10 Help (CHM) (Version: 1.0.10700)
Nero Core Components 10 (Version: 2.0.13700.0.1)
Nero CoverDesigner 10 (Version: 5.0.10900.11.100)
Nero CoverDesigner 10 Help (CHM) (Version: 1.0.10600)
Nero DiscSpeed 10 (Version: 6.0.10800.7.100)
Nero DiscSpeed 10 Help (CHM) (Version: 1.0.10600)
Nero Dolby Files 10 (Version: 2.0.11000.0.10)
Nero Express 10 (Version: 10.0.11000.10.100)
Nero Express 10 Help (CHM) (Version: 1.0.10700)
Nero InfoTool 10 (Version: 7.0.10800.8.100)
Nero InfoTool 10 Help (CHM) (Version: 1.0.10600)
Nero MediaHub 10 (Version: 1.0.13400.11.100)
Nero MediaHub 10 Help (CHM) (Version: 1.0.10700)
Nero Multimedia Suite 10 (Version: 10.0.13100)
Nero Recode 10 (Version: 4.6.10900.4.100)
Nero Recode 10 Help (CHM) (Version: 1.0.10600)
Nero RescueAgent 10 (Version: 3.0.10900.9.100)
Nero RescueAgent 10 Help (CHM) (Version: 1.0.10700)
Nero SoundTrax 10 (Version: 4.6.10600.2.100)
Nero SoundTrax 10 Help (CHM) (Version: 1.0.10600)
Nero StartSmart 10 (Version: 10.0.11200.12.100)
Nero StartSmart 10 Help (CHM) (Version: 1.0.10700)
Nero Update (Version: 1.0.0017)
Nero Vision 10 (Version: 7.0.11100.8.100)
Nero Vision 10 Help (CHM) (Version: 1.0.10600)
Nero WaveEditor 10 (Version: 5.6.10600.2.100)
Nero WaveEditor 10 Help (CHM) (Version: 1.0.10600)
Nitro PDF Reader (Version: 1.4.0.11)
NVIDIA Drivers (Version: 1.5)
Platform (Version: 1.34)
PSE10 STI Installer (Version: 10.0)
QuickTax 2009 (Version: 1.00.0000)
QuickTime (Version: 7.69.80.9)
Reader Rabbit Preschool
REALTEK GbE & FE Ethernet PCI-E NIC Driver (Version: 1.23.0000)
Roxio Activation Module (Version: 1.0)
Roxio BackOnTrack (Version: 1.3.1)
Roxio CinePlayer (Version: 5.0)
Roxio CinePlayer Decoder Pack (Version: 4.3.0)
Roxio Creator 2009 (Version: 1.1.110)
Roxio Creator 2009 (Version: 11.0)
Roxio Creator 2009 (Version: 4.5.0)
Roxio File Backup (Version: 1.3.0)
SCAL Lib It Up 2.000
Segoe UI (Version: 14.0.4327.805)
Skype Toolbars (Version: 5.2.4170)
Skype™ 5.10 (Version: 5.10.116)
SmartSound Quicktracks Plugin (Version: 3.0.8.0)
Sure Cuts A Lot 2.044
Sure Cuts A Lot 3.002
The Digital Arts and Crafts Studio (Version: 1.0.0002)
TomTom HOME 2.7.3.1894 (Version: 2.7.3.1894)
TomTom HOME Visual Studio Merge Modules (Version: 1.0.2)
TurboTax 2010 (Version: 1.00.0000)
Ultimate Mahjongg 20 (Version: 20.0)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2768024) 32-Bit Edition
Update for Windows Internet Explorer 8 (KB2598845) (Version: 1)
Update for Windows XP (KB2345886) (Version: 1)
Update for Windows XP (KB2467659) (Version: 1)
Update for Windows XP (KB2661254-v2) (Version: 2)
Update for Windows XP (KB2749655) (Version: 1)
Update for Windows XP (KB951978) (Version: 1)
Update for Windows XP (KB955759) (Version: 1)
Update for Windows XP (KB961503) (Version: 1)
Update for Windows XP (KB968389) (Version: 1)
Update for Windows XP (KB971029) (Version: 1)
Update for Windows XP (KB973815) (Version: 1)
VIA Platform Device Manager (Version: 1.34)
WebFldrs XP (Version: 9.50.7523)
Windows Driver Package - FTDI CDM Driver Package (06/27/2007 2.02.04) (Version: 06/27/2007 2.02.04)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130) (Version: 1.7.0069.2)
Windows Internet Explorer 8 (Version: 20090308.140743)
Windows Live Call (Version: 14.0.8117.0416)
Windows Live Communications Platform (Version: 14.0.8117.416)
Windows Live Essentials (Version: 14.0.8117.0416)
Windows Live Essentials (Version: 14.0.8117.416)
Windows Live Family Safety (Version: 14.0.8118.427)
Windows Live Mail (Version: 14.0.8117.0416)
Windows Live Messenger (Version: 14.0.8117.0416)
Windows Live Sign-in Assistant (Version: 5.000.818.5)
Windows Live Upload Tool (Version: 14.0.8014.1029)
Windows Media Format 11 runtime
Windows Media Player 11
Windows PowerShell™ 1.0 (Version: 2)
WinRAR archiver
Yahoo! Detect

========================= Memory info: ===================================

Percentage of memory in use: 44%
Total physical RAM: 895.11 MB
Available physical RAM: 499.37 MB
Total Pagefile: 2168.58 MB
Available Pagefile: 1686.07 MB
Total Virtual: 2047.88 MB
Available Virtual: 1975.29 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:465.75 GB) (Free:117.86 GB) NTFS

========================= Users: ========================================

User accounts for \\KARREN-F03F382F

Administrator            brendon                  Guest                   
HelpAssistant            SUPPORT_388945a0        


**** End of log ****

 

TDSSkiller Results

19:27:48.0265 0796  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
19:27:48.0593 0796  ============================================================
19:27:48.0593 0796  Current date / time: 2013/03/25 19:27:48.0593
19:27:48.0593 0796  SystemInfo:
19:27:48.0593 0796 
19:27:48.0593 0796  OS Version: 5.1.2600 ServicePack: 3.0
19:27:48.0593 0796  Product type: Workstation
19:27:48.0593 0796  ComputerName: KARREN-F03F382F
19:27:48.0609 0796  UserName: brendon
19:27:48.0609 0796  Windows directory: C:\WINDOWS
19:27:48.0609 0796  System windows directory: C:\WINDOWS
19:27:48.0609 0796  Processor architecture: Intel x86
19:27:48.0609 0796  Number of processors: 4
19:27:48.0609 0796  Page size: 0x1000
19:27:48.0609 0796  Boot type: Normal boot
19:27:48.0609 0796  ============================================================
19:27:50.0218 0796  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
19:27:50.0250 0796  ============================================================
19:27:50.0250 0796  \Device\Harddisk0\DR0:
19:27:50.0250 0796  MBR partitions:
19:27:50.0250 0796  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x3A380D41
19:27:50.0250 0796  ============================================================
19:27:50.0281 0796  C: <-> \Device\Harddisk0\DR0\Partition1
19:27:50.0281 0796  ============================================================
19:27:50.0281 0796  Initialize success
19:27:50.0281 0796  ============================================================
19:28:12.0531 2500  ============================================================
19:28:12.0531 2500  Scan started
19:28:12.0531 2500  Mode: Manual; TDLFS;
19:28:12.0531 2500  ============================================================
19:28:14.0171 2500  ================ Scan system memory ========================
19:28:14.0171 2500  System memory - ok
19:28:14.0171 2500  ================ Scan services =============================
19:28:14.0656 2500  Abiosdsk - ok
19:28:14.0671 2500  abp480n5 - ok
19:28:14.0703 2500  [ 8FD99680A539792A30E97944FDAECF17 ] ACPI            C:\WINDOWS\system32\DRIVERS\ACPI.sys
19:28:14.0750 2500  ACPI - ok
19:28:14.0796 2500  [ 9859C0F6936E723E4892D7141B1327D5 ] ACPIEC          C:\WINDOWS\system32\drivers\ACPIEC.sys
19:28:14.0812 2500  ACPIEC - ok
19:28:14.0937 2500  [ C1EB9968EC89FBA5F3A264E2E57923AB ] Adobe LM Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
19:28:14.0953 2500  Adobe LM Service - ok
19:28:15.0234 2500  [ C245E08EC469A52A622EFDC9787A0DCC ] AdobeActiveFileMonitor10.0 C:\Documents and Settings\Karen's\downloads\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
19:28:15.0250 2500  AdobeActiveFileMonitor10.0 - ok
19:28:15.0500 2500  [ 3FD8DC2C9735C2AA70155102CFB93EDA ] AdobeActiveFileMonitor7.0 C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
19:28:15.0515 2500  AdobeActiveFileMonitor7.0 - ok
19:28:15.0609 2500  [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
19:28:15.0718 2500  AdobeFlashPlayerUpdateSvc - ok
19:28:15.0718 2500  adpu160m - ok
19:28:15.0812 2500  [ 8BED39E3C35D6A489438B8141717A557 ] aec             C:\WINDOWS\system32\drivers\aec.sys
19:28:15.0828 2500  aec - ok
19:28:15.0890 2500  [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD             C:\WINDOWS\System32\drivers\afd.sys
19:28:15.0953 2500  AFD - ok
19:28:15.0953 2500  Aha154x - ok
19:28:15.0968 2500  aic78u2 - ok
19:28:15.0984 2500  aic78xx - ok
19:28:16.0031 2500  [ A9A3DAA780CA6C9671A19D52456705B4 ] Alerter         C:\WINDOWS\system32\alrsvc.dll
19:28:16.0046 2500  Alerter - ok
19:28:16.0078 2500  [ 8C515081584A38AA007909CD02020B3D ] ALG             C:\WINDOWS\System32\alg.exe
19:28:16.0140 2500  ALG - ok
19:28:16.0156 2500  AliIde - ok
19:28:16.0156 2500  amsint - ok
19:28:16.0171 2500  AppMgmt - ok
19:28:16.0187 2500  asc - ok
19:28:16.0203 2500  asc3350p - ok
19:28:16.0218 2500  asc3550 - ok
19:28:16.0406 2500  [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state    C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
19:28:16.0484 2500  aspnet_state - ok
19:28:16.0515 2500  [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
19:28:16.0531 2500  AsyncMac - ok
19:28:16.0562 2500  [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi           C:\WINDOWS\system32\DRIVERS\atapi.sys
19:28:16.0562 2500  atapi - ok
19:28:16.0578 2500  Atdisk - ok
19:28:16.0593 2500  AthDfu - ok
19:28:16.0609 2500  Atheros_btAudio - ok
19:28:16.0734 2500  [ 9916C1225104BA14794209CFA8012159 ] Atmarpc         C:\WINDOWS\system32\DRIVERS\atmarpc.sys
19:28:16.0750 2500  Atmarpc - ok
19:28:16.0781 2500  [ DEF7A7882BEC100FE0B2CE2549188F9D ] AudioSrv        C:\WINDOWS\System32\audiosrv.dll
19:28:16.0796 2500  AudioSrv - ok
19:28:16.0828 2500  [ D9F724AA26C010A217C97606B160ED68 ] audstub         C:\WINDOWS\system32\DRIVERS\audstub.sys
19:28:16.0859 2500  audstub - ok
19:28:16.0937 2500  [ 8BE661C16FBF84A73BCEC84B6B4A9DB5 ] Avgfwdx         C:\WINDOWS\system32\DRIVERS\avgfwdx.sys
19:28:16.0953 2500  Avgfwdx - ok
19:28:16.0953 2500  [ 8BE661C16FBF84A73BCEC84B6B4A9DB5 ] Avgfwfd         C:\WINDOWS\system32\DRIVERS\avgfwdx.sys
19:28:16.0953 2500  Avgfwfd - ok
19:28:17.0500 2500  [ BD5D11CEDBCDE4FA97D2387E7069B1FF ] avgfws          C:\Program Files\AVG\AVG2012\avgfws.exe
19:28:17.0703 2500  avgfws - ok
19:28:18.0562 2500  [ F6A528DE535396C2FB1A4E3C6F00CEC4 ] AVGIDSAgent     C:\Program Files\AVG\AVG2012\avgidsagent.exe
19:28:18.0859 2500  AVGIDSAgent - ok
19:28:18.0953 2500  [ 1074F787080068C71303B61FAE7E7CA4 ] AVGIDSDriver    C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys
19:28:18.0968 2500  AVGIDSDriver - ok
19:28:19.0015 2500  [ 61A7E0B02F82CFF3DB2445BBE50B3589 ] AVGIDSFilter    C:\WINDOWS\system32\DRIVERS\avgidsfilterx.sys
19:28:19.0046 2500  AVGIDSFilter - ok
19:28:19.0078 2500  [ D63D83659EEDF60B3A3E620281A888E5 ] AVGIDSHX        C:\WINDOWS\system32\DRIVERS\avgidshx.sys
19:28:19.0093 2500  AVGIDSHX - ok
19:28:19.0140 2500  [ BAF975B72062F53D327788E99D64197E ] AVGIDSShim      C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys
19:28:19.0187 2500  AVGIDSShim - ok
19:28:19.0312 2500  [ DCB09125C8B4766A88C86914B65487C1 ] Avgldx86        C:\WINDOWS\system32\DRIVERS\avgldx86.sys
19:28:19.0343 2500  Avgldx86 - ok
19:28:19.0375 2500  [ CCDD61545AAEA265977E4B1EFDC74E8C ] Avgmfx86        C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
19:28:19.0375 2500  Avgmfx86 - ok
19:28:19.0390 2500  [ 1FD90B28D2C3100BF4500199C8AD6358 ] Avgrkx86        C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
19:28:19.0406 2500  Avgrkx86 - ok
19:28:19.0468 2500  [ C0BC3B2E3FD625E7F55E1FF863E94592 ] Avgtdix         C:\WINDOWS\system32\DRIVERS\avgtdix.sys
19:28:19.0468 2500  Avgtdix - ok
19:28:19.0546 2500  [ CAE7B6E4D7EB17829C526153D19B9C95 ] avgtp           C:\WINDOWS\system32\drivers\avgtpx86.sys
19:28:19.0609 2500  avgtp - ok
19:28:19.0671 2500  [ EA1145DEBCD508FD25BD1E95C4346929 ] avgwd           C:\Program Files\AVG\AVG2012\avgwdsvc.exe
19:28:19.0687 2500  avgwd - ok
19:28:19.0812 2500  [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
19:28:19.0812 2500  Beep - ok
19:28:19.0906 2500  [ 574738F61FCA2935F5265DC4E5691314 ] BITS            C:\WINDOWS\system32\qmgr.dll
19:28:19.0921 2500  BITS - ok
19:28:19.0984 2500  [ CFD4E51402DA9838B5A04AE680AF54A0 ] Browser         C:\WINDOWS\System32\browser.dll
19:28:20.0000 2500  Browser - ok
19:28:20.0000 2500  btiaa2dp - ok
19:28:20.0015 2500  btiahcrp - ok
19:28:20.0031 2500  BTiAPan - ok
19:28:20.0046 2500  btiarcp - ok
19:28:20.0062 2500  btiaspp - ok
19:28:20.0062 2500  BTIAUSB - ok
19:28:20.0171 2500  catchme - ok
19:28:20.0218 2500  [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k         C:\WINDOWS\system32\drivers\cbidf2k.sys
19:28:20.0234 2500  cbidf2k - ok
19:28:20.0281 2500  [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE        C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
19:28:20.0296 2500  CCDECODE - ok
19:28:20.0296 2500  cd20xrnt - ok
19:28:20.0343 2500  [ C1B486A7658353D33A10CC15211A873B ] Cdaudio         C:\WINDOWS\system32\drivers\Cdaudio.sys
19:28:20.0375 2500  Cdaudio - ok
19:28:20.0453 2500  [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs            C:\WINDOWS\system32\drivers\Cdfs.sys
19:28:20.0453 2500  Cdfs - ok
19:28:20.0500 2500  [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom           C:\WINDOWS\system32\DRIVERS\cdrom.sys
19:28:20.0515 2500  Cdrom - ok
19:28:20.0531 2500  Changer - ok
19:28:20.0593 2500  [ 1CFE720EB8D93A7158A4EBC3AB178BDE ] CiSvc           C:\WINDOWS\system32\cisvc.exe
19:28:20.0609 2500  CiSvc - ok
19:28:20.0640 2500  [ 34CBE729F38138217F9C80212A2A0C82 ] ClipSrv         C:\WINDOWS\system32\clipsrv.exe
19:28:20.0656 2500  ClipSrv - ok
19:28:20.0859 2500  [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
19:28:20.0984 2500  clr_optimization_v2.0.50727_32 - ok
19:28:21.0156 2500  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
19:28:21.0171 2500  clr_optimization_v4.0.30319_32 - ok
19:28:21.0187 2500  CmdIde - ok
19:28:21.0203 2500  COMSysApp - ok
19:28:21.0218 2500  Cpqarray - ok
19:28:21.0265 2500  [ 3D4E199942E29207970E04315D02AD3B ] CryptSvc        C:\WINDOWS\System32\cryptsvc.dll
19:28:21.0312 2500  CryptSvc - ok
19:28:21.0328 2500  dac2w2k - ok
19:28:21.0343 2500  dac960nt - ok
19:28:21.0437 2500  [ 6B27A5C03DFB94B4245739065431322C ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
19:28:21.0468 2500  DcomLaunch - ok
19:28:21.0500 2500  [ 5E38D7684A49CACFB752B046357E0589 ] Dhcp            C:\WINDOWS\System32\dhcpcsvc.dll
19:28:21.0546 2500  Dhcp - ok
19:28:21.0562 2500  [ 044452051F3E02E7963599FC8F4F3E25 ] Disk            C:\WINDOWS\system32\DRIVERS\disk.sys
19:28:21.0578 2500  Disk - ok
19:28:21.0578 2500  dmadmin - ok
19:28:21.0796 2500  [ D992FE1274BDE0F84AD826ACAE022A41 ] dmboot          C:\WINDOWS\system32\drivers\dmboot.sys
19:28:21.0890 2500  dmboot - ok
19:28:21.0937 2500  [ 7C824CF7BBDE77D95C08005717A95F6F ] dmio            C:\WINDOWS\system32\drivers\dmio.sys
19:28:21.0953 2500  dmio - ok
19:28:22.0000 2500  [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload          C:\WINDOWS\system32\drivers\dmload.sys
19:28:22.0015 2500  dmload - ok
19:28:22.0031 2500  [ 57EDEC2E5F59F0335E92F35184BC8631 ] dmserver        C:\WINDOWS\System32\dmserver.dll
19:28:22.0046 2500  dmserver - ok
19:28:22.0109 2500  [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic          C:\WINDOWS\system32\drivers\DMusic.sys
19:28:22.0125 2500  DMusic - ok
19:28:22.0171 2500  [ 5F7E24FA9EAB896051FFB87F840730D2 ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
19:28:22.0218 2500  Dnscache - ok
19:28:22.0250 2500  [ 0F0F6E687E5E15579EF4DA8DD6945814 ] Dot3svc         C:\WINDOWS\System32\dot3svc.dll
19:28:22.0281 2500  Dot3svc - ok
19:28:22.0281 2500  dpti2o - ok
19:28:22.0312 2500  [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud         C:\WINDOWS\system32\drivers\drmkaud.sys
19:28:22.0312 2500  drmkaud - ok
19:28:22.0375 2500  [ 2187855A7703ADEF0CEF9EE4285182CC ] EapHost         C:\WINDOWS\System32\eapsvc.dll
19:28:22.0390 2500  EapHost - ok
19:28:22.0421 2500  [ BC93B4A066477954555966D77FEC9ECB ] ERSvc           C:\WINDOWS\System32\ersvc.dll
19:28:22.0453 2500  ERSvc - ok
19:28:22.0500 2500  [ 65DF52F5B8B6E9BBD183505225C37315 ] Eventlog        C:\WINDOWS\system32\services.exe
19:28:22.0531 2500  Eventlog - ok
19:28:22.0578 2500  [ D4991D98F2DB73C60D042F1AEF79EFAE ] EventSystem     C:\WINDOWS\system32\es.dll
19:28:22.0703 2500  EventSystem - ok
19:28:22.0750 2500  [ 38D332A6D56AF32635675F132548343E ] Fastfat         C:\WINDOWS\system32\drivers\Fastfat.sys
19:28:22.0796 2500  Fastfat - ok
19:28:22.0843 2500  [ 99BC0B50F511924348BE19C7C7313BBF ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
19:28:22.0890 2500  FastUserSwitchingCompatibility - ok
19:28:22.0921 2500  [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc             C:\WINDOWS\system32\drivers\Fdc.sys
19:28:22.0937 2500  Fdc - ok
19:28:22.0953 2500  [ D45926117EB9FA946A6AF572FBE1CAA3 ] Fips            C:\WINDOWS\system32\drivers\Fips.sys
19:28:23.0000 2500  Fips - ok
19:28:23.0140 2500  [ F76D04F7413B07DAA029F6520B64B4E8 ] FLEXnet Licensing Service C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
19:28:23.0203 2500  FLEXnet Licensing Service - ok
19:28:23.0265 2500  [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk        C:\WINDOWS\system32\drivers\Flpydisk.sys
19:28:23.0281 2500  Flpydisk - ok
19:28:23.0328 2500  [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr          C:\WINDOWS\system32\DRIVERS\fltMgr.sys
19:28:23.0359 2500  FltMgr - ok
19:28:23.0437 2500  [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
19:28:23.0468 2500  FontCache3.0.0.0 - ok
19:28:23.0515 2500  [ C6EE3A87FE609D3E1DB9DBD072A248DE ] fssfltr         C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
19:28:23.0531 2500  fssfltr - ok
19:28:23.0812 2500  [ 45B52394F9624237F33A8A3D73C0B221 ] fsssvc          C:\Program Files\Windows Live\Family Safety\fsssvc.exe
19:28:23.0875 2500  fsssvc - ok
19:28:23.0906 2500  [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
19:28:23.0906 2500  Fs_Rec - ok
19:28:23.0984 2500  [ A36E8BEEDB3AACA09BF55A1D17904BC8 ] FTDIBUS         C:\WINDOWS\system32\drivers\ftdibus.sys
19:28:24.0015 2500  FTDIBUS - ok
19:28:24.0031 2500  [ 6AC26732762483366C3969C9E4D2259D ] Ftdisk          C:\WINDOWS\system32\DRIVERS\ftdisk.sys
19:28:24.0062 2500  Ftdisk - ok
19:28:24.0093 2500  [ A14A1F4BB391DF9C233CB5DBD05FEB70 ] FTSER2K         C:\WINDOWS\system32\drivers\ftser2k.sys
19:28:24.0125 2500  FTSER2K - ok
19:28:24.0140 2500  [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc             C:\WINDOWS\system32\DRIVERS\msgpc.sys
19:28:24.0140 2500  Gpc - ok
19:28:24.0250 2500  [ F02A533F517EB38333CB12A9E8963773 ] gupdate         C:\Program Files\Google\Update\GoogleUpdate.exe
19:28:24.0296 2500  gupdate - ok
19:28:24.0312 2500  [ F02A533F517EB38333CB12A9E8963773 ] gupdatem        C:\Program Files\Google\Update\GoogleUpdate.exe
19:28:24.0312 2500  gupdatem - ok
19:28:24.0343 2500  [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus        C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
19:28:24.0375 2500  HDAudBus - ok
19:28:24.0484 2500  [ 4FCCA060DFE0C51A09DD5C3843888BCD ] helpsvc         C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
19:28:24.0500 2500  helpsvc - ok
19:28:24.0531 2500  [ DEB04DA35CC871B6D309B77E1443C796 ] HidServ         C:\WINDOWS\System32\hidserv.dll
19:28:24.0593 2500  HidServ - ok
19:28:24.0687 2500  [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb          C:\WINDOWS\system32\DRIVERS\hidusb.sys
19:28:24.0703 2500  hidusb - ok
19:28:24.0734 2500  [ 8878BD685E490239777BFE51320B88E9 ] hkmsvc          C:\WINDOWS\System32\kmsvc.dll
19:28:24.0750 2500  hkmsvc - ok
19:28:24.0750 2500  hpn - ok
19:28:24.0812 2500  [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP            C:\WINDOWS\system32\Drivers\HTTP.sys
19:28:24.0890 2500  HTTP - ok
19:28:24.0937 2500  [ 6100A808600F44D999CEBDEF8841C7A3 ] HTTPFilter      C:\WINDOWS\System32\w3ssl.dll
19:28:24.0968 2500  HTTPFilter - ok
19:28:24.0984 2500  i2omgmt - ok
19:28:25.0000 2500  i2omp - ok
19:28:25.0031 2500  [ 4A0B06AA8943C1E332520F7440C0AA30 ] i8042prt        C:\WINDOWS\system32\DRIVERS\i8042prt.sys
19:28:25.0062 2500  i8042prt - ok
19:28:25.0140 2500  [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc           c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
19:28:25.0187 2500  idsvc - ok
19:28:25.0218 2500  [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi           C:\WINDOWS\system32\DRIVERS\imapi.sys
19:28:25.0234 2500  Imapi - ok
19:28:25.0296 2500  [ 30DEAF54A9755BB8546168CFE8A6B5E1 ] ImapiService    C:\WINDOWS\system32\imapi.exe
19:28:25.0328 2500  ImapiService - ok
19:28:25.0343 2500  ini910u - ok
19:28:25.0359 2500  IntelIde - ok
19:28:25.0390 2500  [ 8C953733D8F36EB2133F5BB58808B66B ] intelppm        C:\WINDOWS\system32\DRIVERS\intelppm.sys
19:28:25.0406 2500  intelppm - ok
19:28:25.0437 2500  [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw           C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
19:28:25.0468 2500  Ip6Fw - ok
19:28:25.0515 2500  [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
19:28:25.0531 2500  IpFilterDriver - ok
19:28:25.0625 2500  [ B87AB476DCF76E72010632B5550955F5 ] IpInIp          C:\WINDOWS\system32\DRIVERS\ipinip.sys
19:28:25.0625 2500  IpInIp - ok
19:28:25.0687 2500  [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat           C:\WINDOWS\system32\DRIVERS\ipnat.sys
19:28:25.0734 2500  IpNat - ok
19:28:25.0765 2500  [ 23C74D75E36E7158768DD63D92789A91 ] IPSec           C:\WINDOWS\system32\DRIVERS\ipsec.sys
19:28:25.0765 2500  IPSec - ok
19:28:25.0828 2500  [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM          C:\WINDOWS\system32\DRIVERS\irenum.sys
19:28:25.0828 2500  IRENUM - ok
19:28:25.0890 2500  [ 05A299EC56E52649B1CF2FC52D20F2D7 ] isapnp          C:\WINDOWS\system32\DRIVERS\isapnp.sys
19:28:25.0906 2500  isapnp - ok
19:28:26.0078 2500  [ 691B9B7C0CC1653732717D292D6B305D ] JavaQuickStarterService C:\Program Files\Java\jre6\bin\jqs.exe
19:28:26.0093 2500  JavaQuickStarterService - ok
19:28:26.0109 2500  [ 463C1EC80CD17420A542B7F36A36F128 ] Kbdclass        C:\WINDOWS\system32\DRIVERS\kbdclass.sys
19:28:26.0140 2500  Kbdclass - ok
19:28:26.0171 2500  [ 9EF487A186DEA361AA06913A75B3FA99 ] kbdhid          C:\WINDOWS\system32\DRIVERS\kbdhid.sys
19:28:26.0187 2500  kbdhid - ok
19:28:26.0234 2500  [ 692BCF44383D056AED41B045A323D378 ] kmixer          C:\WINDOWS\system32\drivers\kmixer.sys
19:28:26.0265 2500  kmixer - ok
19:28:26.0312 2500  [ B467646C54CC746128904E1654C750C1 ] KSecDD          C:\WINDOWS\system32\drivers\KSecDD.sys
19:28:26.0328 2500  KSecDD - ok
19:28:26.0375 2500  [ 3A7C3CBE5D96B8AE96CE81F0B22FB527 ] LanmanServer    C:\WINDOWS\System32\srvsvc.dll
19:28:26.0390 2500  LanmanServer - ok
19:28:26.0468 2500  [ A8888A5327621856C0CEC4E385F69309 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
19:28:26.0484 2500  lanmanworkstation - ok
19:28:26.0484 2500  lbrtfdc - ok
19:28:26.0593 2500  [ AC2E68E3421AF857B8D438414E7AE31C ] LightScribeService C:\Program Files\Common Files\LightScribe\LSSrvc.exe
19:28:26.0593 2500  LightScribeService - ok
19:28:26.0750 2500  [ A7DB739AE99A796D91580147E919CC59 ] LmHosts         C:\WINDOWS\System32\lmhsvc.dll
19:28:26.0765 2500  LmHosts - ok
19:28:26.0796 2500  [ 986B1FF5814366D71E0AC5755C88F2D3 ] Messenger       C:\WINDOWS\System32\msgsvc.dll
19:28:26.0828 2500  Messenger - ok
19:28:27.0015 2500  [ 123271BD5237AB991DC5C21FDF8835EB ] Microsoft Office Groove Audit Service C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
19:28:27.0046 2500  Microsoft Office Groove Audit Service - ok
19:28:27.0078 2500  [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd           C:\WINDOWS\system32\drivers\mnmdd.sys
19:28:27.0125 2500  mnmdd - ok
19:28:27.0171 2500  [ D18F1F0C101D06A1C1ADF26EED16FCDD ] mnmsrvc         C:\WINDOWS\system32\mnmsrvc.exe
19:28:27.0187 2500  mnmsrvc - ok
19:28:27.0250 2500  [ DFCBAD3CEC1C5F964962AE10E0BCC8E1 ] Modem           C:\WINDOWS\system32\drivers\Modem.sys
19:28:27.0265 2500  Modem - ok
19:28:27.0328 2500  [ FE80C18BA448DDD76B7BEAD9EB203D37 ] motmodem        C:\WINDOWS\system32\DRIVERS\motmodem.sys
19:28:27.0343 2500  motmodem - ok
19:28:27.0359 2500  [ 35C9E97194C8CFB8430125F8DBC34D04 ] Mouclass        C:\WINDOWS\system32\DRIVERS\mouclass.sys
19:28:27.0406 2500  Mouclass - ok
19:28:27.0437 2500  [ B1C303E17FB9D46E87A98E4BA6769685 ] mouhid          C:\WINDOWS\system32\DRIVERS\mouhid.sys
19:28:27.0453 2500  mouhid - ok
19:28:27.0484 2500  [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr        C:\WINDOWS\system32\drivers\MountMgr.sys
19:28:27.0531 2500  MountMgr - ok
19:28:27.0625 2500  [ 8A7C8F4C713E70D73946833D76B77035 ] MozillaMaintenance C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
19:28:27.0859 2500  MozillaMaintenance - ok
19:28:27.0859 2500  mraid35x - ok
19:28:27.0953 2500  [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV          C:\WINDOWS\system32\DRIVERS\mrxdav.sys
19:28:27.0968 2500  MRxDAV - ok
19:28:28.0125 2500  [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
19:28:28.0187 2500  MRxSmb - ok
19:28:28.0312 2500  [ D98350792A7CE82E7459A7C36481BEDA ] MSCamSvc        C:\Program Files\Microsoft LifeCam\MSCamS32.exe
19:28:28.0328 2500  MSCamSvc - ok
19:28:28.0359 2500  [ A137F1470499A205ABBB9AAFB3B6F2B1 ] MSDTC           C:\WINDOWS\system32\msdtc.exe
19:28:28.0406 2500  MSDTC - ok
19:28:28.0437 2500  [ C941EA2454BA8350021D774DAF0F1027 ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
19:28:28.0453 2500  Msfs - ok
19:28:28.0468 2500  MSIServer - ok
19:28:28.0515 2500  [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV         C:\WINDOWS\system32\drivers\MSKSSRV.sys
19:28:28.0531 2500  MSKSSRV - ok
19:28:28.0546 2500  [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
19:28:28.0734 2500  MSPCLOCK - ok
19:28:28.0750 2500  [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM           C:\WINDOWS\system32\drivers\MSPQM.sys
19:28:28.0765 2500  MSPQM - ok
19:28:28.0812 2500  [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios        C:\WINDOWS\system32\DRIVERS\mssmbios.sys
19:28:28.0812 2500  mssmbios - ok
19:28:28.0890 2500  [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE           C:\WINDOWS\system32\drivers\MSTEE.sys
19:28:28.0921 2500  MSTEE - ok
19:28:28.0953 2500  [ D48659BB24C48345D926ECB45C1EBDF5 ] MTsensor        C:\WINDOWS\system32\DRIVERS\ASACPI.sys
19:28:28.0953 2500  MTsensor - ok
19:28:29.0031 2500  [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup             C:\WINDOWS\system32\drivers\Mup.sys
19:28:29.0046 2500  Mup - ok
19:28:29.0078 2500  [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC        C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
19:28:29.0093 2500  NABTSFEC - ok
19:28:29.0187 2500  [ 0102140028FAD045756796E1C685D695 ] napagent        C:\WINDOWS\System32\qagentrt.dll
19:28:29.0203 2500  napagent - ok
19:28:29.0375 2500  [ E4534BCCDD1EA7A7A256BB9D6688A5FC ] NAUpdate        C:\Program Files\Nero\Update\NASvc.exe
19:28:29.0421 2500  NAUpdate - ok
19:28:29.0500 2500  [ 1DF7F42665C94B825322FAE71721130D ] NDIS            C:\WINDOWS\system32\drivers\NDIS.sys
19:28:29.0515 2500  NDIS - ok
19:28:29.0546 2500  [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP          C:\WINDOWS\system32\DRIVERS\NdisIP.sys
19:28:29.0625 2500  NdisIP - ok
19:28:29.0687 2500  [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
19:28:29.0796 2500  NdisTapi - ok
19:28:29.0828 2500  [ F927A4434C5028758A842943EF1A3849 ] Ndisuio         C:\WINDOWS\system32\DRIVERS\ndisuio.sys
19:28:29.0843 2500  Ndisuio - ok
19:28:29.0890 2500  [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan         C:\WINDOWS\system32\DRIVERS\ndiswan.sys
19:28:29.0921 2500  NdisWan - ok
19:28:29.0984 2500  [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy         C:\WINDOWS\system32\drivers\NDProxy.sys
19:28:30.0000 2500  NDProxy - ok
19:28:30.0046 2500  [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS         C:\WINDOWS\system32\DRIVERS\netbios.sys
19:28:30.0062 2500  NetBIOS - ok
19:28:30.0093 2500  [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT           C:\WINDOWS\system32\DRIVERS\netbt.sys
19:28:30.0140 2500  NetBT - ok
19:28:30.0156 2500  [ B857BA82860D7FF85AE29B095645563B ] NetDDE          C:\WINDOWS\system32\netdde.exe
19:28:30.0171 2500  NetDDE - ok
19:28:30.0203 2500  [ B857BA82860D7FF85AE29B095645563B ] NetDDEdsdm      C:\WINDOWS\system32\netdde.exe
19:28:30.0203 2500  NetDDEdsdm - ok
19:28:30.0234 2500  [ BF2466B3E18E970D8A976FB95FC1CA85 ] Netlogon        C:\WINDOWS\system32\lsass.exe
19:28:30.0265 2500  Netlogon - ok
19:28:30.0296 2500  [ 13E67B55B3ABD7BF3FE7AAE5A0F9A9DE ] Netman          C:\WINDOWS\System32\netman.dll
19:28:30.0343 2500  Netman - ok
19:28:30.0375 2500  [ 562E15CE8A98282F241E03829657E344 ] NetTcpPortSharing c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
19:28:30.0406 2500  NetTcpPortSharing - ok
19:28:30.0531 2500  [ 9CCBCA1FE056F67960C9420FCE635691 ] NitroReaderDriverReadSpool C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe
19:28:30.0546 2500  NitroReaderDriverReadSpool - ok
19:28:30.0687 2500  [ 943337D786A56729263071623BBB9DE5 ] Nla             C:\WINDOWS\System32\mswsock.dll
19:28:30.0718 2500  Nla - ok
19:28:30.0750 2500  [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
19:28:30.0812 2500  Npfs - ok
19:28:30.0890 2500  [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
19:28:30.0937 2500  Ntfs - ok
19:28:30.0968 2500  [ BF2466B3E18E970D8A976FB95FC1CA85 ] NtLmSsp         C:\WINDOWS\system32\lsass.exe
19:28:30.0968 2500  NtLmSsp - ok
19:28:31.0046 2500  [ 156F64A3345BD23C600655FB4D10BC08 ] NtmsSvc         C:\WINDOWS\system32\ntmssvc.dll
19:28:31.0093 2500  NtmsSvc - ok
19:28:31.0140 2500  [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null            C:\WINDOWS\system32\drivers\Null.sys
19:28:31.0156 2500  Null - ok
19:28:32.0640 2500  [ DA8C5723AD3A73F57FFD4DD64ABA2C77 ] nv              C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
19:28:34.0828 2500  nv - ok
19:28:34.0875 2500  [ D8D01CB94E1312BB64F78392D9617714 ] NVHDA           C:\WINDOWS\system32\drivers\nvhda32.sys
19:28:34.0937 2500  NVHDA - ok
19:28:34.0968 2500  [ F13618F0CB1E95232F4C2401592A59E9 ] nvsmu           C:\WINDOWS\system32\DRIVERS\nvsmu.sys
19:28:35.0046 2500  nvsmu - ok
19:28:35.0109 2500  [ ED0A578227B9FB97AD3BABC7FA6CD756 ] nvsvc           C:\WINDOWS\system32\nvsvc32.exe
19:28:35.0109 2500  nvsvc - ok
19:28:35.0156 2500  [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt        C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
19:28:35.0187 2500  NwlnkFlt - ok
19:28:35.0203 2500  [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd        C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
19:28:35.0203 2500  NwlnkFwd - ok
19:28:35.0484 2500  [ 785F487A64950F3CB8E9F16253BA3B7B ] odserv          C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
19:28:35.0500 2500  odserv - ok
19:28:35.0609 2500  [ 5A432A042DAE460ABE7199B758E8606C ] ose             C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
19:28:35.0625 2500  ose - ok
19:28:35.0656 2500  [ 5575FAF8F97CE5E713D108C2A58D7C7C ] Parport         C:\WINDOWS\system32\drivers\Parport.sys
19:28:35.0750 2500  Parport - ok
19:28:35.0781 2500  [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr         C:\WINDOWS\system32\drivers\PartMgr.sys
19:28:35.0828 2500  PartMgr - ok
19:28:35.0859 2500  [ 70E98B3FD8E963A6A46A2E6247E0BEA1 ] ParVdm          C:\WINDOWS\system32\drivers\ParVdm.sys
19:28:35.0859 2500  ParVdm - ok
19:28:35.0906 2500  [ A219903CCF74233761D92BEF471A07B1 ] PCI             C:\WINDOWS\system32\DRIVERS\pci.sys
19:28:35.0921 2500  PCI - ok
19:28:35.0921 2500  PCIDump - ok
19:28:35.0968 2500  [ CCF5F451BB1A5A2A522A76E670000FF0 ] PCIIde          C:\WINDOWS\system32\DRIVERS\pciide.sys
19:28:36.0000 2500  PCIIde - ok
19:28:36.0078 2500  [ 9E89EF60E9EE05E3F2EEF2DA7397F1C1 ] Pcmcia          C:\WINDOWS\system32\drivers\Pcmcia.sys
19:28:36.0078 2500  Pcmcia - ok
19:28:36.0140 2500  [ 5B6C11DE7E839C05248CED8825470FEF ] pcouffin        C:\WINDOWS\system32\Drivers\pcouffin.sys
19:28:36.0140 2500  pcouffin - ok
19:28:36.0156 2500  PDCOMP - ok
19:28:36.0171 2500  PDFRAME - ok
19:28:36.0187 2500  PDRELI - ok
19:28:36.0187 2500  PDRFRAME - ok
19:28:36.0203 2500  perc2 - ok
19:28:36.0218 2500  perc2hib - ok
19:28:36.0265 2500  [ 65DF52F5B8B6E9BBD183505225C37315 ] PlugPlay        C:\WINDOWS\system32\services.exe
19:28:36.0281 2500  PlugPlay - ok
19:28:36.0296 2500  [ BF2466B3E18E970D8A976FB95FC1CA85 ] PolicyAgent     C:\WINDOWS\system32\lsass.exe
19:28:36.0296 2500  PolicyAgent - ok
19:28:36.0328 2500  [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
19:28:36.0359 2500  PptpMiniport - ok
19:28:36.0390 2500  [ BF2466B3E18E970D8A976FB95FC1CA85 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
19:28:36.0390 2500  ProtectedStorage - ok
19:28:36.0406 2500  [ 09298EC810B07E5D582CB3A3F9255424 ] PSched          C:\WINDOWS\system32\DRIVERS\psched.sys
19:28:36.0406 2500  PSched - ok
19:28:36.0437 2500  [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink         C:\WINDOWS\system32\DRIVERS\ptilink.sys
19:28:36.0484 2500  Ptilink - ok
19:28:36.0531 2500  [ E42E3433DBB4CFFE8FDD91EAB29AEA8E ] PxHelp20        C:\WINDOWS\system32\Drivers\PxHelp20.sys
19:28:36.0609 2500  PxHelp20 - ok
19:28:36.0625 2500  ql1080 - ok
19:28:36.0640 2500  Ql10wnt - ok
19:28:36.0640 2500  ql12160 - ok
19:28:36.0656 2500  ql1240 - ok
19:28:36.0671 2500  ql1280 - ok
19:28:36.0750 2500  [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
19:28:36.0750 2500  RasAcd - ok
19:28:36.0796 2500  [ AD188BE7BDF94E8DF4CA0A55C00A5073 ] RasAuto         C:\WINDOWS\System32\rasauto.dll
19:28:36.0828 2500  RasAuto - ok
19:28:36.0859 2500  [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp         C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
19:28:36.0875 2500  Rasl2tp - ok
19:28:36.0953 2500  [ 76A9A3CBEADD68CC57CDA5E1D7448235 ] RasMan          C:\WINDOWS\System32\rasmans.dll
19:28:37.0000 2500  RasMan - ok
19:28:37.0031 2500  [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
19:28:37.0078 2500  RasPppoe - ok
19:28:37.0093 2500  [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti          C:\WINDOWS\system32\DRIVERS\raspti.sys
19:28:37.0093 2500  Raspti - ok
19:28:37.0156 2500  [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss           C:\WINDOWS\system32\DRIVERS\rdbss.sys
19:28:37.0156 2500  Rdbss - ok
19:28:37.0218 2500  [ 4912D5B403614CE99C28420F75353332 ] RDPCDD          C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
19:28:37.0218 2500  RDPCDD - ok
19:28:37.0265 2500  [ 43AF5212BD8FB5BA6EED9754358BD8F7 ] RDPWD           C:\WINDOWS\system32\drivers\RDPWD.sys
19:28:37.0312 2500  RDPWD - ok
19:28:37.0359 2500  [ 3C37BF86641BDA977C3BF8A840F3B7FA ] RDSessMgr       C:\WINDOWS\system32\sessmgr.exe
19:28:37.0421 2500  RDSessMgr - ok
19:28:37.0453 2500  [ F828DD7E1419B6653894A8F97A0094C5 ] redbook         C:\WINDOWS\system32\DRIVERS\redbook.sys
19:28:37.0453 2500  redbook - ok
19:28:37.0500 2500  [ 7E699FF5F59B5D9DE5390E3C34C67CF5 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
19:28:37.0515 2500  RemoteAccess - ok
19:28:37.0750 2500  [ 805393D80291C53085BCE10868E54AD5 ] Roxio UPnP Renderer 11 C:\Program Files\Roxio Creator 2009\Digital Home 11\RoxioUPnPRenderer11.exe
19:28:37.0859 2500  Roxio UPnP Renderer 11 - ok
19:28:37.0921 2500  [ 96A3D9197F4D8A7E456018B809BF2AC1 ] Roxio Upnp Server 11 C:\Program Files\Roxio Creator 2009\Digital Home 11\RoxioUpnpService11.exe
19:28:37.0937 2500  Roxio Upnp Server 11 - ok
19:28:38.0156 2500  [ 8AF842F4C84BDAA882216A01F8825402 ] RoxLiveShare11  C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxLiveShare11.exe
19:28:38.0171 2500  RoxLiveShare11 - ok
19:28:38.0296 2500  [ DB6FB620B9538981A4745C1472AFEFED ] RoxMediaDB11    C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxMediaDB11.exe
19:28:38.0359 2500  RoxMediaDB11 - ok
19:28:38.0437 2500  [ 3E8DF3DD655CCE064CF952066DDFF248 ] RoxWatch11      C:\Program Files\Common Files\Roxio Shared\11.0\SharedCOM\RoxWatch11.exe
19:28:38.0484 2500  RoxWatch11 - ok
19:28:38.0546 2500  [ AAED593F84AFA419BBAE8572AF87CF6A ] RpcLocator      C:\WINDOWS\system32\locator.exe
19:28:38.0562 2500  RpcLocator - ok
19:28:38.0718 2500  [ 6B27A5C03DFB94B4245739065431322C ] RpcSs           C:\WINDOWS\System32\rpcss.dll
19:28:38.0718 2500  RpcSs - ok
19:28:38.0812 2500  [ 471B3F9741D762ABE75E9DEEA4787E47 ] RSVP            C:\WINDOWS\system32\rsvp.exe
19:28:38.0828 2500  RSVP - ok
19:28:39.0000 2500  [ 7BFDF13721F0366212AB8E94361A05BD ] RTL8192su       C:\WINDOWS\system32\DRIVERS\RTL8192su.sys
19:28:39.0031 2500  RTL8192su - ok
19:28:39.0109 2500  [ B0E1648AAE1E59BDD0854AF07A605399 ] RTLE8023xp      C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
19:28:39.0125 2500  RTLE8023xp - ok
19:28:39.0156 2500  [ 0501074A2F29250932E34CA4A844A0F5 ] RxFilter        C:\WINDOWS\system32\DRIVERS\RxFilter.sys
19:28:39.0171 2500  RxFilter - ok
19:28:39.0187 2500  [ BF2466B3E18E970D8A976FB95FC1CA85 ] SamSs           C:\WINDOWS\system32\lsass.exe
19:28:39.0187 2500  SamSs - ok
19:28:39.0265 2500  [ 86D007E7A654B9A71D1D7D856B104353 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.exe
19:28:39.0281 2500  SCardSvr - ok
19:28:39.0359 2500  [ 0A9A7365A1CA4319AA7C1D6CD8E4EAFA ] Schedule        C:\WINDOWS\system32\schedsvc.dll
19:28:39.0406 2500  Schedule - ok
19:28:39.0437 2500  [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv          C:\WINDOWS\system32\DRIVERS\secdrv.sys
19:28:39.0453 2500  Secdrv - ok
19:28:39.0515 2500  [ CBE612E2BB6A10E3563336191EDA1250 ] seclogon        C:\WINDOWS\System32\seclogon.dll
19:28:39.0562 2500  seclogon - ok
19:28:39.0593 2500  [ 7FDD5D0684ECA8C1F68B4D99D124DCD0 ] SENS            C:\WINDOWS\system32\sens.dll
19:28:39.0625 2500  SENS - ok
19:28:39.0640 2500  [ 0F29512CCD6BEAD730039FB4BD2C85CE ] Serenum         C:\WINDOWS\system32\DRIVERS\serenum.sys
19:28:39.0750 2500  Serenum - ok
19:28:39.0796 2500  [ CCA207A8896D4C6A0C9CE29A4AE411A7 ] Serial          C:\WINDOWS\system32\drivers\Serial.sys
19:28:39.0812 2500  Serial - ok
19:28:39.0890 2500  [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy         C:\WINDOWS\system32\drivers\Sfloppy.sys
19:28:39.0906 2500  Sfloppy - ok
19:28:40.0015 2500  [ 83F41D0D89645D7235C051AB1D9523AC ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
19:28:40.0078 2500  SharedAccess - ok
19:28:40.0125 2500  [ 99BC0B50F511924348BE19C7C7313BBF ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
19:28:40.0125 2500  ShellHWDetection - ok
19:28:40.0140 2500  Simbad - ok
19:28:40.0281 2500  [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate     C:\Program Files\Skype\Updater\Updater.exe
19:28:40.0312 2500  SkypeUpdate - ok
19:28:40.0343 2500  [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP            C:\WINDOWS\system32\DRIVERS\SLIP.sys
19:28:40.0359 2500  SLIP - ok
19:28:40.0406 2500  [ A1ECEEAA5C5E74B2499EB51D38185B84 ] SONYPVU1        C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
19:28:40.0437 2500  SONYPVU1 - ok
19:28:40.0453 2500  Sparrow - ok
19:28:40.0500 2500  [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter        C:\WINDOWS\system32\drivers\splitter.sys
19:28:40.0515 2500  splitter - ok
19:28:40.0625 2500  [ 60784F891563FB1B767F70117FC2428F ] Spooler         C:\WINDOWS\system32\spoolsv.exe
19:28:40.0703 2500  Spooler - ok
19:28:40.0734 2500  [ 76BB022C2FB6902FD5BDD4F78FC13A5D ] sr              C:\WINDOWS\system32\DRIVERS\sr.sys
19:28:40.0734 2500  sr - ok
19:28:40.0781 2500  [ 3805DF0AC4296A34BA4BF93B346CC378 ] srservice       C:\WINDOWS\system32\srsvc.dll
19:28:40.0843 2500  srservice - ok
19:28:40.0921 2500  [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv             C:\WINDOWS\system32\DRIVERS\srv.sys
19:28:40.0968 2500  Srv - ok
19:28:41.0015 2500  [ 0A5679B3714EDAB99E357057EE88FCA6 ] SSDPSRV         C:\WINDOWS\System32\ssdpsrv.dll
19:28:41.0031 2500  SSDPSRV - ok
19:28:41.0156 2500  [ 8BAD69CBAC032D4BBACFCE0306174C30 ] stisvc          C:\WINDOWS\system32\wiaservc.dll
19:28:41.0171 2500  stisvc - ok
19:28:41.0218 2500  [ 77813007BA6265C4B6098187E6ED79D2 ] streamip        C:\WINDOWS\system32\DRIVERS\StreamIP.sys
19:28:41.0265 2500  streamip - ok
19:28:41.0296 2500  [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum          C:\WINDOWS\system32\DRIVERS\swenum.sys
19:28:41.0296 2500  swenum - ok
19:28:41.0343 2500  [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi          C:\WINDOWS\system32\drivers\swmidi.sys
19:28:41.0343 2500  swmidi - ok
19:28:41.0359 2500  SwPrv - ok
19:28:41.0375 2500  symc810 - ok
19:28:41.0375 2500  symc8xx - ok
19:28:41.0390 2500  sym_hi - ok
19:28:41.0406 2500  sym_u3 - ok
19:28:41.0453 2500  [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio        C:\WINDOWS\system32\drivers\sysaudio.sys
19:28:41.0468 2500  sysaudio - ok
19:28:41.0484 2500  [ C7ABBC59B43274B1109DF6B24D617051 ] SysmonLog       C:\WINDOWS\system32\smlogsvc.exe
19:28:41.0500 2500  SysmonLog - ok
19:28:41.0531 2500  [ 3CB78C17BB664637787C9A1C98F79C38 ] TapiSrv         C:\WINDOWS\System32\tapisrv.dll
19:28:41.0578 2500  TapiSrv - ok
19:28:41.0671 2500  [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip           C:\WINDOWS\system32\DRIVERS\tcpip.sys
19:28:41.0906 2500  Tcpip - ok
19:28:41.0953 2500  [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE          C:\WINDOWS\system32\drivers\TDPIPE.sys
19:28:41.0968 2500  TDPIPE - ok
19:28:41.0984 2500  [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP           C:\WINDOWS\system32\drivers\TDTCP.sys
19:28:41.0984 2500  TDTCP - ok
19:28:42.0015 2500  [ 88155247177638048422893737429D9E ] TermDD          C:\WINDOWS\system32\DRIVERS\termdd.sys
19:28:42.0062 2500  TermDD - ok
19:28:42.0093 2500  [ FF3477C03BE7201C294C35F684B3479F ] TermService     C:\WINDOWS\System32\termsrv.dll
19:28:42.0109 2500  TermService - ok
19:28:42.0171 2500  [ 99BC0B50F511924348BE19C7C7313BBF ] Themes          C:\WINDOWS\System32\shsvcs.dll
19:28:42.0171 2500  Themes - ok
19:28:42.0281 2500  [ FBD16717FD68B206C4CE3BB3C9EE5CB3 ] TomTomHOMEService C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
19:28:42.0296 2500  TomTomHOMEService - ok
19:28:42.0312 2500  TosIde - ok
19:28:42.0343 2500  [ 55BCA12F7F523D35CA3CB833C725F54E ] TrkWks          C:\WINDOWS\system32\trkwks.dll
19:28:42.0375 2500  TrkWks - ok
19:28:42.0421 2500  [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs            C:\WINDOWS\system32\drivers\Udfs.sys
19:28:42.0421 2500  Udfs - ok
19:28:42.0437 2500  ultra - ok
19:28:42.0484 2500  [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update          C:\WINDOWS\system32\DRIVERS\update.sys
19:28:42.0531 2500  Update - ok
19:28:42.0562 2500  [ 1EBAFEB9A3FBDC41B8D9C7F0F687AD91 ] upnphost        C:\WINDOWS\System32\upnphost.dll
19:28:42.0671 2500  upnphost - ok
19:28:42.0687 2500  [ 05365FB38FCA1E98F7A566AAAF5D1815 ] UPS             C:\WINDOWS\System32\ups.exe
19:28:42.0703 2500  UPS - ok
19:28:42.0750 2500  [ E919708DB44ED8543A7C017953148330 ] usbaudio        C:\WINDOWS\system32\drivers\usbaudio.sys
19:28:42.0843 2500  usbaudio - ok
19:28:42.0875 2500  [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp         C:\WINDOWS\system32\DRIVERS\usbccgp.sys
19:28:42.0890 2500  usbccgp - ok
19:28:42.0921 2500  [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci         C:\WINDOWS\system32\DRIVERS\usbehci.sys
19:28:42.0937 2500  usbehci - ok
19:28:42.0984 2500  [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub          C:\WINDOWS\system32\DRIVERS\usbhub.sys
19:28:43.0000 2500  usbhub - ok
19:28:43.0046 2500  [ 0DAECCE65366EA32B162F85F07C6753B ] usbohci         C:\WINDOWS\system32\DRIVERS\usbohci.sys
19:28:43.0046 2500  usbohci - ok
19:28:43.0125 2500  [ A717C8721046828520C9EDF31288FC00 ] usbprint        C:\WINDOWS\system32\DRIVERS\usbprint.sys
19:28:43.0140 2500  usbprint - ok
19:28:43.0171 2500  [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan         C:\WINDOWS\system32\DRIVERS\usbscan.sys
19:28:43.0187 2500  usbscan - ok
19:28:43.0218 2500  [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR         C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
19:28:43.0250 2500  USBSTOR - ok
19:28:43.0281 2500  [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave         C:\WINDOWS\System32\drivers\vga.sys
19:28:43.0281 2500  VgaSave - ok
19:28:43.0546 2500  [ 8586D10602FF4994E0F56A13A47D2B28 ] VIAHdAudAddService C:\WINDOWS\system32\drivers\viahduaa.sys
19:28:43.0843 2500  VIAHdAudAddService - ok
19:28:43.0859 2500  ViaIde - ok
19:28:43.0937 2500  [ 4C8FCB5CC53AAB716D810740FE59D025 ] VolSnap         C:\WINDOWS\system32\drivers\VolSnap.sys
19:28:43.0968 2500  VolSnap - ok
19:28:44.0031 2500  [ 7A9DB3A67C333BF0BD42E42B8596854B ] VSS             C:\WINDOWS\System32\vssvc.exe
19:28:44.0062 2500  VSS - ok
19:28:44.0359 2500  [ 3AD1E72748978D8B0B3B674741E4C3E2 ] vToolbarUpdater14.2.0 C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe
19:28:44.0421 2500  vToolbarUpdater14.2.0 - ok
19:28:44.0906 2500  [ E26744E5DD71A16E80D4DD5A286B8423 ] VX3000          C:\WINDOWS\system32\DRIVERS\VX3000.sys
19:28:45.0078 2500  VX3000 - ok
19:28:45.0156 2500  [ 54AF4B1D5459500EF0937F6D33B1914F ] W32Time         C:\WINDOWS\system32\w32time.dll
19:28:45.0171 2500  W32Time - ok
19:28:45.0203 2500  [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
19:28:45.0234 2500  Wanarp - ok
19:28:45.0343 2500  [ FD47474BD21794508AF449D9D91AF6E6 ] Wdf01000        C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
19:28:45.0390 2500  Wdf01000 - ok
19:28:45.0406 2500  WDICA - ok
19:28:45.0484 2500  [ 6768ACF64B18196494413695F0C3A00F ] wdmaud          C:\WINDOWS\system32\drivers\wdmaud.sys
19:28:45.0500 2500  wdmaud - ok
19:28:45.0531 2500  [ 77A354E28153AD2D5E120A5A8687BC06 ] WebClient       C:\WINDOWS\System32\webclnt.dll
19:28:45.0546 2500  WebClient - ok
19:28:45.0687 2500  [ 2D0E4ED081963804CCC196A0929275B5 ] winmgmt         C:\WINDOWS\system32\wbem\WMIsvc.dll
19:28:45.0703 2500  winmgmt - ok
19:28:45.0828 2500  [ C7E39EA41233E9F5B86C8DA3A9F1E4A8 ] WmdmPmSN        C:\WINDOWS\system32\mspmsnsv.dll
19:28:45.0843 2500  WmdmPmSN - ok
19:28:45.0875 2500  [ C42584FD66CE9E17403AEBCA199F7BDB ] WmiAcpi         C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
19:28:45.0906 2500  WmiAcpi - ok
19:28:45.0937 2500  [ E0673F1106E62A68D2257E376079F821 ] WmiApSrv        C:\WINDOWS\system32\wbem\wmiapsrv.exe
19:28:45.0968 2500  WmiApSrv - ok
19:28:46.0093 2500  [ 6BAB4DC65515A098505F8B3D01FB6FE5 ] WMPNetworkSvc   C:\Program Files\Windows Media Player\WMPNetwk.exe
19:28:46.0125 2500  WMPNetworkSvc - ok
19:28:46.0343 2500  [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
19:28:46.0421 2500  WPFFontCache_v0400 - ok
19:28:46.0453 2500  [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL         C:\WINDOWS\System32\drivers\ws2ifsl.sys
19:28:46.0484 2500  WS2IFSL - ok
19:28:46.0531 2500  [ 7C278E6408D1DCE642230C0585A854D5 ] wscsvc          C:\WINDOWS\system32\wscsvc.dll
19:28:46.0562 2500  wscsvc - ok
19:28:46.0609 2500  [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC        C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
19:28:46.0609 2500  WSTCODEC - ok
19:28:46.0656 2500  [ 35321FB577CDC98CE3EB3A3EB9E4610A ] wuauserv        C:\WINDOWS\system32\wuauserv.dll
19:28:46.0765 2500  wuauserv - ok
19:28:46.0812 2500  [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf          C:\WINDOWS\system32\DRIVERS\WudfPf.sys
19:28:46.0812 2500  WudfPf - ok
19:28:46.0859 2500  [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc         C:\WINDOWS\System32\WUDFSvc.dll
19:28:46.0859 2500  WudfSvc - ok
19:28:46.0968 2500  [ 81DC3F549F44B1C1FFF022DEC9ECF30B ] WZCSVC          C:\WINDOWS\System32\wzcsvc.dll
19:28:47.0015 2500  WZCSVC - ok
19:28:47.0078 2500  [ 295D21F14C335B53CB8154E5B1F892B9 ] xmlprov         C:\WINDOWS\System32\xmlprov.dll
19:28:47.0109 2500  xmlprov - ok
19:28:47.0125 2500  ================ Scan global ===============================
19:28:47.0171 2500  [ 42F1F4C0AFB08410E5F02D4B13EBB623 ] C:\WINDOWS\system32\basesrv.dll
19:28:47.0250 2500  [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
19:28:47.0296 2500  [ 8C7DCA4B158BF16894120786A7A5F366 ] C:\WINDOWS\system32\winsrv.dll
19:28:47.0328 2500  [ 65DF52F5B8B6E9BBD183505225C37315 ] C:\WINDOWS\system32\services.exe
19:28:47.0328 2500  [Global] - ok
19:28:47.0328 2500  ================ Scan MBR ==================================
19:28:47.0343 2500  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
19:28:48.0046 2500  \Device\Harddisk0\DR0 - ok
19:28:48.0046 2500  ================ Scan VBR ==================================
19:28:48.0078 2500  [ 09747CB98D1A5847E64B81565E743B20 ] \Device\Harddisk0\DR0\Partition1
19:28:48.0093 2500  \Device\Harddisk0\DR0\Partition1 - ok
19:28:48.0093 2500  ============================================================
19:28:48.0093 2500  Scan finished
19:28:48.0093 2500  ============================================================
19:28:48.0109 0888  Detected object count: 0
19:28:48.0109 0888  Actual detected object count: 0
19:29:52.0109 2528  Deinitialize success

 

AdwCleaner Results

# AdwCleaner v2.115 - Logfile created 03/25/2013 at 19:32:33
# Updated 17/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : brendon - KARREN-F03F382F
# Boot Mode : Normal
# Running from : C:\Documents and Settings\brendon\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Program Files\Common Files\AVG Secure Search
File Deleted : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\searchplugins\Conduit.xml
File Deleted : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\searchplugins\mywebsearch.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
File Deleted : C:\WINDOWS\system32\conduitEngine.tmp
Folder Deleted : C:\DOCUME~1\brendon\LOCALS~1\Temp\AskSearch
Folder Deleted : C:\DOCUME~1\brendon\LOCALS~1\Temp\boost_interprocess
Folder Deleted : C:\DOCUME~1\brendon\LOCALS~1\Temp\OpenCandy
Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Application Data\InstallMate
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Premium
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Tarma Installer
Folder Deleted : C:\Documents and Settings\brendon\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\brendon\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\brendon\Application Data\BabylonToolbar
Folder Deleted : C:\Documents and Settings\brendon\Application Data\facemoods.com
Folder Deleted : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\Conduit
Folder Deleted : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\ConduitCommon
Folder Deleted : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\CT2786678
Folder Deleted : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Deleted : C:\Documents and Settings\brendon\Application Data\OpenCandy
Folder Deleted : C:\Documents and Settings\brendon\Application Data\PriceGong
Folder Deleted : C:\Documents and Settings\brendon\Application Data\Zwinky_5q
Folder Deleted : C:\Documents and Settings\brendon\Local Settings\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\brendon\Local Settings\Application Data\AVG Security Toolbar
Folder Deleted : C:\Documents and Settings\brendon\Local Settings\Application Data\Babylon
Folder Deleted : C:\Documents and Settings\brendon\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\brendon\Local Settings\Application Data\OpenCandy
Folder Deleted : C:\Documents and Settings\NetworkService\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\NetworkService\Local Settings\Application Data\Vuze_Remote
Folder Deleted : C:\Program Files\2YourFace
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com

***** [Registry] *****

Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\facemoods.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{27488090-768A-4D20-A938-F223F71C344C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3033124F-06BF-4829-873A-310A125B4D4C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BD3EA7C2-3AF8-4463-9A9C-6EB8E136CB02}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{27488090-768A-4D20-A938-F223F71C344C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3033124F-06BF-4829-873A-310A125B4D4C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD3EA7C2-3AF8-4463-9A9C-6EB8E136CB02}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC2E2B99-14D3-4516-883C-9EA147F594EF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.xtrnl
Key Deleted : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1
Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore
Key Deleted : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9}
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.eb_explorerbar
Key Deleted : HKLM\SOFTWARE\Classes\toolband.eb_explorerbar.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem
Key Deleted : HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_launcher
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_launcher.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_printmanager
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pm_printmanager.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler
Key Deleted : HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.tbtoolband
Key Deleted : HKLM\SOFTWARE\Classes\toolband.tbtoolband.1
Key Deleted : HKLM\SOFTWARE\Classes\toolband.useroptions
Key Deleted : HKLM\SOFTWARE\Classes\toolband.useroptions.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\facemoods.com
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\lmblfngognklgemafekefcdjcnkdhmdm
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567}
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\facemoods
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F464A68D-1CF2-4991-93AB-A84351D7F676}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Mozilla Firefox v19.0.2 (en-US)

File : C:\Documents and Settings\LocalService\Application Data\Mozilla\Firefox\Profiles\2xwq44th.default\prefs.js

[OK] File is clean.

File : C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\prefs.js

C:\Documents and Settings\brendon\Application Data\Mozilla\Firefox\Profiles\19e5vjg3.default\user.js ... Deleted !

Deleted : user_pref("CT2504091..clientLogIsEnabled", false);
Deleted : user_pref("CT2504091..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2504091..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2504091.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2504091.CTID", "CT2504091");
Deleted : user_pref("CT2504091.CurrentServerDate", "13-1-2011");
Deleted : user_pref("CT2504091.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2504091.DownloadReferralCookieData", "");
Deleted : user_pref("CT2504091.EMailNotifierPollDate", "Wed Jan 12 2011 20:28:47 GMT-0500 (Eastern Standard Ti[...]
Deleted : user_pref("CT2504091.FeedLastCount129079840422964131", 9);
Deleted : user_pref("CT2504091.FeedPollDate128891351169457140", "Wed Jan 12 2011 20:28:51 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2504091.FeedPollDate129079840422964131", "Wed Jan 12 2011 20:28:51 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2504091.FeedTTL128891351169457140", 40);
Deleted : user_pref("CT2504091.FirstServerDate", "10-1-2011");
Deleted : user_pref("CT2504091.FirstTime", true);
Deleted : user_pref("CT2504091.FirstTimeFF3", true);
Deleted : user_pref("CT2504091.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2504091.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2504091.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2504091.Initialize", true);
Deleted : user_pref("CT2504091.InitializeCommonPrefs", true);
Deleted : user_pref("CT2504091.InstallationAndCookieDataSentCount", 2);
Deleted : user_pref("CT2504091.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2504091.InstalledDate", "Sun Jan 09 2011 18:39:49 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2504091.IsGrouping", false);
Deleted : user_pref("CT2504091.IsMulticommunity", false);
Deleted : user_pref("CT2504091.IsOpenThankYouPage", false);
Deleted : user_pref("CT2504091.IsOpenUninstallPage", false);
Deleted : user_pref("CT2504091.LanguagePackLastCheckTime", "Wed Jan 12 2011 20:28:50 GMT-0500 (Eastern Standar[...]
Deleted : user_pref("CT2504091.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2504091.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2504091.LastLogin_3.2.5.2", "Wed Jan 12 2011 20:28:50 GMT-0500 (Eastern Standard Time)"[...]
Deleted : user_pref("CT2504091.LatestVersion", "2.7.2.0");
Deleted : user_pref("CT2504091.Locale", "en-us");
Deleted : user_pref("CT2504091.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2504091.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2504091.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2504091.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
Deleted : user_pref("CT2504091.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2504091.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT250[...]
Deleted : user_pref("CT2504091.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2504091.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2504091.SearchInNewTabLastCheckTime", "Wed Jan 12 2011 20:28:45 GMT-0500 (Eastern Stand[...]
Deleted : user_pref("CT2504091.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2504091.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2504091.ServiceMapLastCheckTime", "Sun Jan 09 2011 18:39:29 GMT-0500 (Eastern Standard [...]
Deleted : user_pref("CT2504091.SettingsLastCheckTime", "Wed Jan 12 2011 20:28:45 GMT-0500 (Eastern Standard Ti[...]
Deleted : user_pref("CT2504091.SettingsLastUpdate", "1292441626");
Deleted : user_pref("CT2504091.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2504091.ThirdPartyComponentsLastCheck", "Sun Jan 09 2011 18:39:29 GMT-0500 (Eastern Sta[...]
Deleted : user_pref("CT2504091.ThirdPartyComponentsLastUpdate", "1246790578");
Deleted : user_pref("CT2504091.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
Deleted : user_pref("CT2504091.UserID", "UN17596941662851695");
Deleted : user_pref("CT2504091.ValidationData_Toolbar", 0);
Deleted : user_pref("CT2504091.alertChannelId", "897164");
Deleted : user_pref("CT2504091.myStuffEnabled", true);
Deleted : user_pref("CT2504091.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2504091.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2504091.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2504091.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2504091.toolbarAppMetaDataLastCheckTime", "Wed Jan 12 2011 20:28:50 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2504091.toolbarContextMenuLastCheckTime", "Sun Jan 09 2011 18:39:59 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678..clientLogIsEnabled", true);
Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_130067977588633691", true);
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_1359634298000", true);
Deleted : user_pref("CT2786678.CTID", "CT2786678");
Deleted : user_pref("CT2786678.CurrentServerDate", "26-3-2013");
Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Mon Mar 25 2013 07:43:19 GMT-0400 (Eastern Daylig[...]
Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Sat Jan 08 2011 19:13:03 GMT-0500 (Eastern Standard Ti[...]
Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 550);
Deleted : user_pref("CT2786678.FeedPollDate129301619375443753", "Sat Jan 21 2012 13:06:10 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375443759", "Sat Jan 21 2012 13:06:10 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444699", "Sat Jan 21 2012 13:06:09 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444705", "Sat Jan 21 2012 13:06:09 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444711", "Sat Jan 21 2012 13:06:09 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444717", "Sat Jan 21 2012 13:06:09 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444723", "Sat Jan 21 2012 13:06:09 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444729", "Sat Jan 21 2012 13:06:10 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444735", "Sat Jan 21 2012 13:06:10 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444741", "Sat Jan 21 2012 13:06:10 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate129301619375444747", "Sat Jan 21 2012 13:06:10 GMT-0500 (Eastern St[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156812186649977", "Fri Feb 10 2012 19:20:52 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813040823546", "Fri Feb 10 2012 19:20:50 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813130095866", "Fri Feb 10 2012 19:20:50 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813224203613", "Fri Feb 10 2012 19:20:50 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813230837251", "Fri Feb 10 2012 19:20:51 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813454291735", "Fri Feb 10 2012 19:20:51 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813729834876", "Fri Feb 10 2012 19:20:50 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813860870021", "Fri Feb 10 2012 19:20:53 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156814264681793", "Fri Feb 10 2012 19:20:52 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156814863075366", "Fri Feb 10 2012 19:20:51 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156815257761081", "Fri Feb 10 2012 19:20:50 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Deleted : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Deleted : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Deleted : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Deleted : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
Deleted : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
Deleted : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
Deleted : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
Deleted : user_pref("CT2786678.FirstServerDate", "9-1-2011");
Deleted : user_pref("CT2786678.FirstTime", true);
Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Deleted : user_pref("CT2786678.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Deleted : user_pref("CT2786678.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2786678.HomepageBeforeUnload", "hxxp://www.msn.com/");
Deleted : user_pref("CT2786678.Initialize", true);
Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Deleted : user_pref("CT2786678.InstalledDate", "Sat Jan 08 2011 19:13:03 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2786678.IsAlertDBUpdated", true);
Deleted : user_pref("CT2786678.IsGrouping", false);
Deleted : user_pref("CT2786678.IsMulticommunity", false);
Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Mon Mar 25 2013 08:25:48 GMT-0400 (Eastern Dayligh[...]
Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2786678.LastLogin_3.12.0.7", "Wed Apr 25 2012 08:23:40 GMT-0400 (Eastern Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.12.2.3", "Wed May 30 2012 18:01:00 GMT-0400 (Eastern Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.13.0.6", "Mon Jul 23 2012 08:19:44 GMT-0400 (Eastern Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.14.1.0", "Mon Aug 27 2012 09:20:07 GMT-0400 (Eastern Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.15.1.0", "Thu Nov 08 2012 15:09:16 GMT-0500 (Eastern Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.16.0.3", "Sat Feb 09 2013 08:57:25 GMT-0500 (Eastern Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.18.0.7", "Mon Mar 25 2013 17:28:18 GMT-0400 (Eastern Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.2.5.2", "Wed Jan 12 2011 20:28:45 GMT-0500 (Eastern Standard Time)"[...]
Deleted : user_pref("CT2786678.LastLogin_3.9.0.3", "Fri Feb 10 2012 19:20:49 GMT-0500 (Eastern Standard Time)"[...]
Deleted : user_pref("CT2786678.LatestVersion", "3.18.0.7");
Deleted : user_pref("CT2786678.Locale", "en");
Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2786678.MCDetectTooltipShow", false);
Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2786678.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT2866295&SearchSource=13");
Deleted : user_pref("CT2786678.SearchEngineBeforeUnload", "Facemoods Search");
Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Mon Mar 25 2013 08:25:44 GMT-0400 (Eastern Dayli[...]
Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Deleted : user_pref("CT2786678.SearchProtectorEnabled", false);
Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Mon Mar 25 2013 08:25:48 GMT-0400 (Eastern Daylight [...]
Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Mon Mar 25 2013 19:19:52 GMT-0400 (Eastern Daylight Ti[...]
Deleted : user_pref("CT2786678.SettingsLastUpdate", "1364217460");
Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sat Jan 21 2012 13:06:07 GMT-0500 (Eastern Sta[...]
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246790578");
Deleted : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Deleted : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2786678.UserID", "UN36056960314681785");
Deleted : user_pref("CT2786678.WeatherNetwork", "");
Deleted : user_pref("CT2786678.WeatherPollDate", "Sat Jan 08 2011 19:13:07 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2786678.WeatherUnit", "F");
Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Deleted : user_pref("CT2786678.backendstorage.cbfirsttime", "53756E204A616E20323920323031322031383A33363A35382[...]
Deleted : user_pref("CT2786678.components.1000034", false);
Deleted : user_pref("CT2786678.components.1000234", false);
Deleted : user_pref("CT2786678.components.129295698017012804", false);
Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed Feb 01 2012 20:03:10 GMT-0500 (Eastern [...]
Deleted : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2786678.initDone", true);
Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2786678.myStuffEnabled", true);
Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2786678.oldAppsList", "129295695672325902,129295695672325903,1000234,129295698017012804[...]
Deleted : user_pref("CT2786678.revertSettingsEnabled", false);
Deleted : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2786678.testingCtid", "");
Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Mon Mar 25 2013 08:25:48 GMT-0400 (Eastern D[...]
Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sun Jan 29 2012 18:36:56 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2856415.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2856415.BrowserCompStateIsOpen_129502651137682069", true);
Deleted : user_pref("CT2856415.BrowserCompStateIsOpen_129560745131733767", true);
Deleted : user_pref("CT2856415.BrowserCompStateIsOpen_129683315081957463", true);
Deleted : user_pref("CT2856415.DSInstall", false);
Deleted : user_pref("CT2856415.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2856415.DialogsGetterLastCheckTime", "Sat Nov 17 2012 17:06:56 GMT-0500 (Eastern Standa[...]
Deleted : user_pref("CT2856415.ExternalComponentPollDate129400801613475328", "Sat Nov 17 2012 17:06:56 GMT-050[...]
Deleted : user_pref("CT2856415.FirstTimeFF3", true);
Deleted : user_pref("CT2856415.HPInstall", false);
Deleted : user_pref("CT2856415.HasUserGlobalKeys", true);
Deleted : user_pref("CT2856415.Initialize", true);
Deleted : user_pref("CT2856415.InitializeCommonPrefs", true);
Deleted : user_pref("CT2856415.InstalledDate", "Sat Nov 17 2012 17:09:34 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2856415.InvalidateCache", false);
Deleted : user_pref("CT2856415.IsGrouping", false);
Deleted : user_pref("CT2856415.IsInitSetupIni", true);
Deleted : user_pref("CT2856415.IsMulticommunity", false);
Deleted : user_pref("CT2856415.IsOpenThankYouPage", true);
Deleted : user_pref("CT2856415.IsOpenUninstallPage", true);
Deleted : user_pref("CT2856415.LanguagePackLastCheckTime", "Sat Nov 17 2012 17:07:04 GMT-0500 (Eastern Standar[...]
Deleted : user_pref("CT2856415.Locale", "en");
Deleted : user_pref("CT2856415.MAX_NUMBER_OF_ALERTS_129560745131733767", "1_1353190078788");
Deleted : user_pref("CT2856415.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2856415.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2856415.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2856415.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2856415.RadioIsPodcast", false);
Deleted : user_pref("CT2856415.RadioLastCheckTime", "Sat Nov 17 2012 17:07:57 GMT-0500 (Eastern Standard Time)[...]
Deleted : user_pref("CT2856415.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2856415.RadioLastUpdateServer", "129400869186670000");
Deleted : user_pref("CT2856415.RadioMediaID", "21753721");
Deleted : user_pref("CT2856415.RadioMediaType", "Media Player");
Deleted : user_pref("CT2856415.RadioMenuSelectedID", "EBRadioMenu_CT285641521753721");
Deleted : user_pref("CT2856415.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2856415.RadioStationName", "California%20Rock%20-%20Rock");
Deleted : user_pref("CT2856415.RadioStationURL", "hxxp://www.feedlive.net/california.asx");
Deleted : user_pref("CT2856415.SearchCaption", "Elf 1 Customized Web Search");
Deleted : user_pref("CT2856415.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2856415.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2856415.ServiceMapLastCheckTime", "Sat Nov 17 2012 17:06:52 GMT-0500 (Eastern Standard [...]
Deleted : user_pref("CT2856415.SettingsLastCheckTime", "Sat Nov 17 2012 17:06:52 GMT-0500 (Eastern Standard Ti[...]
Deleted : user_pref("CT2856415.SettingsLastUpdate", "1352141592");
Deleted : user_pref("CT2856415.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2856415&SearchSource=13");
Deleted : user_pref("CT2856415.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2856415.ThirdPartyComponentsLastCheck", "Sat Nov 17 2012 17:06:52 GMT-0500 (Eastern Sta[...]
Deleted : user_pref("CT2856415.ThirdPartyComponentsLastUpdate", "1331805997");
Deleted : user_pref("CT2856415.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2856415.WeatherNetwork", "");
Deleted : user_pref("CT2856415.WeatherPollDate", "Sat Nov 17 2012 17:07:02 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2856415.WeatherUnit", "C");
Deleted : user_pref("CT2856415.alertChannelId", "1248439");
Deleted : user_pref("CT2856415.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e.:2z527", "2423");
Deleted : user_pref("CT2856415.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e06cg5el8:", "6E6D6C6F726B75767273");
Deleted : user_pref("CT2856415.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473727578717B7C7879242F4B4947[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Deleted : user_pref("CT2856415.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934235[...]
Deleted : user_pref("CT2856415.backendstorage./9b-0?3g>d", "696D6B3C6A6C6D717A7071454620797A7D7C254C4E24252A26[...]
Deleted : user_pref("CT2856415.backendstorage./9b-0?3g@6:5;", "");
Deleted : user_pref("CT2856415.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]
Deleted : user_pref("CT2856415.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Deleted : user_pref("CT2856415.backendstorage./9b3=>@44i48?", "372C2D32697576334236334148477B213F3E484F4E4D464[...]
Deleted : user_pref("CT2856415.backendstorage./9b5ba==9cjag", "3A69717242723F427A437771754977754A7C4E4F20");
Deleted : user_pref("CT2856415.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6C6F726B7576737173767A");
Deleted : user_pref("CT2856415.backendstorage./9b9643g3/9e", "6A");
Deleted : user_pref("CT2856415.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Deleted : user_pref("CT2856415.backendstorage./9b<:222h64<", "393F352F3E");
Deleted : user_pref("CT2856415.backendstorage./9b<:222h64<l8daj", "6D7070707673747976712A7879727D77757D7C");
Deleted : user_pref("CT2856415.backendstorage./9b=+03eh8h8j?:", "4443");
Deleted : user_pref("CT2856415.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Deleted : user_pref("CT2856415.backendstorage./9b?b0d:8aj62<h", "6D");
Deleted : user_pref("CT2856415.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Deleted : user_pref("CT2856415.backendstorage.cbcountry_001", "4341");
Deleted : user_pref("CT2856415.backendstorage.cbfirsttime", "536174204E6F7620313720323031322031373A30373A31352[...]
Deleted : user_pref("CT2856415.backendstorage.cbopenmamsettings", "30");
Deleted : user_pref("CT2856415.backendstorage.sf_just_installed", "46414C5345");
Deleted : user_pref("CT2856415.backendstorage.sf_status", "454E41424C4544");
Deleted : user_pref("CT2856415.backendstorage.sf_user_id", "6369645F3137313132303132313737313831363032303236")[...]
Deleted : user_pref("CT2856415.globalFirstTimeInfoLastCheckTime", "Sat Nov 17 2012 17:06:55 GMT-0500 (Eastern [...]
Deleted : user_pref("CT2856415.initDone", true);
Deleted : user_pref("CT2856415.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2856415.isFirstRadioInstallation", false);
Deleted : user_pref("CT2856415.navigateToUrlOnSearch", false);
Deleted : user_pref("CT2856415.revertSettingsEnabled", false);
Deleted : user_pref("CT2856415.testingCtid", "");
Deleted : user_pref("CT2856415.toolbarAppMetaDataLastCheckTime", "Sat Nov 17 2012 17:06:55 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2856415.toolbarContextMenuLastCheckTime", "Sat Nov 17 2012 17:07:04 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2857572..clientLogIsEnabled", false);
Deleted : user_pref("CT2857572..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2857572..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2857572.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2857572.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2857572.BrowserCompStateIsOpen_129560746443258808", true);
Deleted : user_pref("CT2857572.BrowserCompStateIsOpen_129973804428603989", true);
Deleted : user_pref("CT2857572.CT2857572", "CT2857572");
Deleted : user_pref("CT2857572.CurrentServerDate", "18-11-2012");
Deleted : user_pref("CT2857572.DSInstall", false);
Deleted : user_pref("CT2857572.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2857572.DialogsGetterLastCheckTime", "Sat Nov 17 2012 17:07:02 GMT-0500 (Eastern Standa[...]
Deleted : user_pref("CT2857572.DownloadReferralCookieData", "");
Deleted : user_pref("CT2857572.ExternalComponentPollDate129356796046694434", "Sat Nov 17 2012 17:06:58 GMT-050[...]
Deleted : user_pref("CT2857572.FirstServerDate", "18-11-2012");
Deleted : user_pref("CT2857572.FirstTime", true);
Deleted : user_pref("CT2857572.FirstTimeFF3", true);
Deleted : user_pref("CT2857572.FirstTimeHiddenVer", true);
Deleted : user_pref("CT2857572.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2857572.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2857572.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2857572.HPInstall", false);
Deleted : user_pref("CT2857572.HasUserGlobalKeys", true);
Deleted : user_pref("CT2857572.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2857572.HomepageBeforeUnload", "hxxp://www.msn.com/");
Deleted : user_pref("CT2857572.Initialize", true);
Deleted : user_pref("CT2857572.InitializeCommonPrefs", true);
Deleted : user_pref("CT2857572.InstallationAndCookieDataSentCount", 1);
Deleted : user_pref("CT2857572.InstallationType", "Unknown");
Deleted : user_pref("CT2857572.InstalledDate", "Sat Nov 17 2012 17:10:04 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2857572.InvalidateCache", false);
Deleted : user_pref("CT2857572.IsGrouping", false);
Deleted : user_pref("CT2857572.IsInitSetupIni", true);
Deleted : user_pref("CT2857572.IsMulticommunity", false);
Deleted : user_pref("CT2857572.IsOpenThankYouPage", true);
Deleted : user_pref("CT2857572.IsOpenUninstallPage", true);
Deleted : user_pref("CT2857572.IsProtectorsInit", true);
Deleted : user_pref("CT2857572.LanguagePackLastCheckTime", "Sat Nov 17 2012 17:07:37 GMT-0500 (Eastern Standar[...]
Deleted : user_pref("CT2857572.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2857572.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2857572.LastLogin_3.16.0.3", "Sat Nov 17 2012 17:10:14 GMT-0500 (Eastern Standard Time)[...]
Deleted : user_pref("CT2857572.LatestVersion", "3.16.0.3");
Deleted : user_pref("CT2857572.Locale", "en");
Deleted : user_pref("CT2857572.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2857572.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2857572.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2857572.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2857572.OriginalFirstVersion", "3.16.0.3");
Deleted : user_pref("CT2857572.RadioIsPodcast", false);
Deleted : user_pref("CT2857572.RadioLastCheckTime", "Sat Nov 17 2012 17:08:09 GMT-0500 (Eastern Standard Time)[...]
Deleted : user_pref("CT2857572.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2857572.RadioLastUpdateServer", "129400870958430000");
Deleted : user_pref("CT2857572.RadioMediaID", "21753723");
Deleted : user_pref("CT2857572.RadioMediaType", "Media Player");
Deleted : user_pref("CT2857572.RadioMenuSelectedID", "EBRadioMenu_CT285757221753723");
Deleted : user_pref("CT2857572.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2857572.RadioStationName", "California%20Rock%20-%20Rock");
Deleted : user_pref("CT2857572.RadioStationURL", "hxxp://www.feedlive.net/california.asx");
Deleted : user_pref("CT2857572.SearchCaption", "Elf 1.12 Customized Web Search");
Deleted : user_pref("CT2857572.SearchEngineBeforeUnload", "Search the web (Babylon)");
Deleted : user_pref("CT2857572.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2857572.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]
Deleted : user_pref("CT2857572.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2857572.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2857572.SearchInNewTabLastCheckTime", "Sat Nov 17 2012 17:10:17 GMT-0500 (Eastern Stand[...]
Deleted : user_pref("CT2857572.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2857572.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2857572.SearchProtectorEnabled", false);
Deleted : user_pref("CT2857572.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2857572.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2857572.ServiceMapLastCheckTime", "Sat Nov 17 2012 17:06:53 GMT-0500 (Eastern Standard [...]
Deleted : user_pref("CT2857572.SettingsLastCheckTime", "Sat Nov 17 2012 17:06:53 GMT-0500 (Eastern Standard Ti[...]
Deleted : user_pref("CT2857572.SettingsLastUpdate", "1352906854");
Deleted : user_pref("CT2857572.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2857572&SearchSource=13");
Deleted : user_pref("CT2857572.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2857572.ThirdPartyComponentsLastCheck", "Sat Nov 17 2012 17:06:53 GMT-0500 (Eastern Sta[...]
Deleted : user_pref("CT2857572.ThirdPartyComponentsLastUpdate", "1331805997");
Deleted : user_pref("CT2857572.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2857572.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2857572");
Deleted : user_pref("CT2857572.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2857572.UserID", "UN62004130511082189");
Deleted : user_pref("CT2857572.WeatherNetwork", "");
Deleted : user_pref("CT2857572.WeatherPollDate", "Sat Nov 17 2012 17:07:03 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2857572.WeatherUnit", "C");
Deleted : user_pref("CT2857572.alertChannelId", "1249594");
Deleted : user_pref("CT2857572.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e.:2z527", "2423");
Deleted : user_pref("CT2857572.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e06cg5el8:", "6E6D6C6F726B75767475");
Deleted : user_pref("CT2857572.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473727578717B7C7A7B242F4B4947[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Deleted : user_pref("CT2857572.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934235[...]
Deleted : user_pref("CT2857572.backendstorage./9b-0?3g>d", "6B3D3D72706C43427A4246717620764B497A257C4F23202A54[...]
Deleted : user_pref("CT2857572.backendstorage./9b-0?3g@6:5;", "");
Deleted : user_pref("CT2857572.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]
Deleted : user_pref("CT2857572.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Deleted : user_pref("CT2857572.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484776213F3E484F4E4D464[...]
Deleted : user_pref("CT2857572.backendstorage./9b5ba==9cjag", "3B3E6A6C727043437A45774973734C484C7A4F207A");
Deleted : user_pref("CT2857572.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6C6F726B7576737174767B");
Deleted : user_pref("CT2857572.backendstorage./9b9643g3/9e", "6A");
Deleted : user_pref("CT2857572.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Deleted : user_pref("CT2857572.backendstorage./9b<:222h64<", "393F352F3E");
Deleted : user_pref("CT2857572.backendstorage./9b<:222h64<l8daj", "6D7070707673747976712A7879727D7775207E");
Deleted : user_pref("CT2857572.backendstorage./9b=+03eh8h8j?:", "4443");
Deleted : user_pref("CT2857572.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Deleted : user_pref("CT2857572.backendstorage./9b?b0d:8aj62<h", "6D");
Deleted : user_pref("CT2857572.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Deleted : user_pref("CT2857572.backendstorage.cbcountry_001", "4341");
Deleted : user_pref("CT2857572.backendstorage.cbfirsttime", "536174204E6F7620313720323031322031373A30373A31352[...]
Deleted : user_pref("CT2857572.backendstorage.cbopenmamsettings", "30");
Deleted : user_pref("CT2857572.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2857572.globalFirstTimeInfoLastCheckTime", "Sat Nov 17 2012 17:06:59 GMT-0500 (Eastern [...]
Deleted : user_pref("CT2857572.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2857572.initDone", true);
Deleted : user_pref("CT2857572.isAppTrackingManagerOn", false);
Deleted : user_pref("CT2857572.isFirstRadioInstallation", false);
Deleted : user_pref("CT2857572.myStuffEnabled", true);
Deleted : user_pref("CT2857572.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2857572.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2857572.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2857572.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2857572.navigateToUrlOnSearch", false);
Deleted : user_pref("CT2857572.revertSettingsEnabled", false);
Deleted : user_pref("CT2857572.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2857572.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2857572.testingCtid", "");
Deleted : user_pref("CT2857572.toolbarAppMetaDataLastCheckTime", "Sat Nov 17 2012 17:06:55 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2857572.toolbarContextMenuLastCheckTime", "Sat Nov 17 2012 17:07:12 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2866295.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2866295.BrowserCompStateIsOpen_129560747349445958", true);
Deleted : user_pref("CT2866295.BrowserCompStateIsOpen_129683316834382694", true);
Deleted : user_pref("CT2866295.CT2866295", "CT2866295");
Deleted : user_pref("CT2866295.DSInstall", false);
Deleted : user_pref("CT2866295.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2866295.DialogsGetterLastCheckTime", "Sat Nov 17 2012 17:07:07 GMT-0500 (Eastern Standa[...]
Deleted : user_pref("CT2866295.ExternalComponentPollDate129363730260381540", "Sat Nov 17 2012 17:06:57 GMT-050[...]
Deleted : user_pref("CT2866295.FirstTime", true);
Deleted : user_pref("CT2866295.FirstTimeFF3", true);
Deleted : user_pref("CT2866295.FirstTimeHiddenVer", true);
Deleted : user_pref("CT2866295.FixPageNotFoundErrors", false);
Deleted : user_pref("CT2866295.HPInstall", false);
Deleted : user_pref("CT2866295.HasUserGlobalKeys", true);
Deleted : user_pref("CT2866295.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2866295.HomepageBeforeUnload", "hxxp://www.msn.com/");
Deleted : user_pref("CT2866295.Initialize", true);
Deleted : user_pref("CT2866295.InitializeCommonPrefs", true);
Deleted : user_pref("CT2866295.InstalledDate", "Sat Nov 17 2012 17:10:13 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2866295.InvalidateCache", false);
Deleted : user_pref("CT2866295.IsGrouping", false);
Deleted : user_pref("CT2866295.IsInitSetupIni", true);
Deleted : user_pref("CT2866295.IsMulticommunity", false);
Deleted : user_pref("CT2866295.IsOpenThankYouPage", true);
Deleted : user_pref("CT2866295.IsOpenUninstallPage", true);
Deleted : user_pref("CT2866295.IsProtectorsInit", true);
Deleted : user_pref("CT2866295.LanguagePackLastCheckTime", "Sat Nov 17 2012 17:07:35 GMT-0500 (Eastern Standar[...]
Deleted : user_pref("CT2866295.Locale", "en");
Deleted : user_pref("CT2866295.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2866295.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2866295.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2866295.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2866295.OriginalFirstVersion", "3.16.0.3");
Deleted : user_pref("CT2866295.RadioIsPodcast", false);
Deleted : user_pref("CT2866295.RadioLastCheckTime", "Sat Nov 17 2012 17:07:31 GMT-0500 (Eastern Standard Time)[...]
Deleted : user_pref("CT2866295.RadioLastUpdateIPServer", "3");
Deleted : user_pref("CT2866295.RadioLastUpdateServer", "129400872459600000");
Deleted : user_pref("CT2866295.RadioMediaID", "21753727");
Deleted : user_pref("CT2866295.RadioMediaType", "Media Player");
Deleted : user_pref("CT2866295.RadioMenuSelectedID", "EBRadioMenu_CT286629521753727");
Deleted : user_pref("CT2866295.RadioShrinkedFromSetup", false);
Deleted : user_pref("CT2866295.RadioStationName", "California%20Rock%20-%20Rock");
Deleted : user_pref("CT2866295.RadioStationURL", "hxxp://www.feedlive.net/california.asx");
Deleted : user_pref("CT2866295.SearchCaption", "Elf 1.15 Customized Web Search");
Deleted : user_pref("CT2866295.SearchEngineBeforeUnload", "Search the web (Babylon)");
Deleted : user_pref("CT2866295.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2866295.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT286[...]
Deleted : user_pref("CT2866295.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2866295.SearchProtectorEnabled", false);
Deleted : user_pref("CT2866295.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2866295.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2866295.ServiceMapLastCheckTime", "Sat Nov 17 2012 17:06:53 GMT-0500 (Eastern Standard [...]
Deleted : user_pref("CT2866295.SettingsLastCheckTime", "Sat Nov 17 2012 17:06:53 GMT-0500 (Eastern Standard Ti[...]
Deleted : user_pref("CT2866295.SettingsLastUpdate", "1352142344");
Deleted : user_pref("CT2866295.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2866295&SearchSource=13");
Deleted : user_pref("CT2866295.ThirdPartyComponentsLastCheck", "Sat Nov 17 2012 17:06:53 GMT-0500 (Eastern Sta[...]
Deleted : user_pref("CT2866295.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2866295.WeatherNetwork", "");
Deleted : user_pref("CT2866295.WeatherPollDate", "Sat Nov 17 2012 17:07:03 GMT-0500 (Eastern Standard Time)");
Deleted : user_pref("CT2866295.WeatherUnit", "C");
Deleted : user_pref("CT2866295.alertChannelId", "1258292");
Deleted : user_pref("CT2866295.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e.:2z527", "2423");
Deleted : user_pref("CT2866295.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e06cg5el8:", "6E6D6C6F726B75767475");
Deleted : user_pref("CT2866295.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473727578717B7C7A7B242F4B4947[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Deleted : user_pref("CT2866295.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934235[...]
Deleted : user_pref("CT2866295.backendstorage./9b-0?3g>d", "6E6B6A3F3D406E407A4747717620787C7E4F254F7D4E512A54[...]
Deleted : user_pref("CT2866295.backendstorage./9b-0?3g@6:5;", "");
Deleted : user_pref("CT2866295.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E424[...]
Deleted : user_pref("CT2866295.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Deleted : user_pref("CT2866295.backendstorage./9b3=>@44i48?", "372C2D32697576334236334148477A213F3E484F4E4D464[...]
Deleted : user_pref("CT2866295.backendstorage./9b5ba==9cjag", "673F6D6B6C7042707A4677784A794879777E507E21");
Deleted : user_pref("CT2866295.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6C6F726B7576737172737A");
Deleted : user_pref("CT2866295.backendstorage./9b9643g3/9e", "6A");
Deleted : user_pref("CT2866295.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Deleted : user_pref("CT2866295.backendstorage./9b<:222h64<", "393F352F3E");
Deleted : user_pref("CT2866295.backendstorage./9b<:222h64<l8daj", "6D7070707673747976712A7879727D7775207E");
Deleted : user_pref("CT2866295.backendstorage./9b=+03eh8h8j?:", "4443");
Deleted : user_pref("CT2866295.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Deleted : user_pref("CT2866295.backendstorage./9b?b0d:8aj62<h", "6D");
Deleted : user_pref("CT2866295.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Deleted : user_pref("CT2866295.backendstorage.cbcountry_001", "4341");
Deleted : user_pref("CT2866295.backendstorage.cbfirsttime", "536174204E6F7620313720323031322031373A30373A31352[...]
Deleted : user_pref("CT2866295.backendstorage.cbopenmamsettings", "30");
Deleted : user_pref("CT2866295.globalFirstTimeInfoLastCheckTime", "Sat Nov 17 2012 17:07:03 GMT-0500 (Eastern [...]
Deleted : user_pref("CT2866295.initDone", true);
Deleted : user_pref("CT2866295.isAppTrackingManagerOn", false);
Deleted : user_pref("CT2866295.isFirstRadioInstallation", false);
Deleted : user_pref("CT2866295.navigateToUrlOnSearch", false);
Deleted : user_pref("CT2866295.revertSettingsEnabled", false);
Deleted : user_pref("CT2866295.testingCtid", "");
Deleted : user_pref("CT2866295.toolbarAppMetaDataLastCheckTime", "Sat Nov 17 2012 17:06:55 GMT-0500 (Eastern S[...]
Deleted : user_pref("CT2866295.toolbarContextMenuLastCheckTime", "Sat Nov 17 2012 17:07:10 GMT-0500 (Eastern S[...]
Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2856415,CT2866295,CT2786678");
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2856415/CT2856415[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2857572/CT2857572[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2866295/CT2866295[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/CA", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1248439/1244112/CA", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1249594/1245267/CA", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1258292/1253965/CA", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/897164/892962/CA", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CA", "\"0\"")[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2504091", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2856415", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2857572", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2866295", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.0[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2856415",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2857572",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2866295",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63428984078257[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2504091/CT2504091[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2856415/CT2856415[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2857572/CT2857572[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2866295/CT2866295[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"70f[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...]
Deleted : user_pref("CommunityToolbar.EngineHiddenByUser", false);
Deleted : user_pref("CommunityToolbar.EngineOwner", "");
Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{38542454-dfb6-44f5-b052-d4e071a3d073}");
Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "elf_1.12");
Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\brendon\\Applicati[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.16.0.3");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2857572");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{38542454-dfb6-44f5-b052-d4e071a3d073}");
Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "elf_1.12");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2786678,CT2504091,CT2856415,CT2866295,CT2857572");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678,CT2504091,CT2857572,CT2866295");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2856415,CT2866295,CT2857572");
Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat Mar 26 2011 08:22:02 GMT-04[...]
Deleted : user_pref("CommunityToolbar.alert.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jan 21 2012 08:22:10 GMT-0500 (Easte[...]
Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Jan 21 2012 08:21:58 GMT-0500 (Eastern S[...]
Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.alert.userId", "51683c1d-5dee-4b82-b2d5-e4643d4a372b");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Jan 08 2011 19:13:15 GMT-0500 (Eas[...]
Deleted : user_pref("CommunityToolbar.globalUserId", "4eaa0c84-be98-415d-9930-cb1758f7b0de");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678");
Deleted : user_pref("CommunityToolbar.killedEngine", true);
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Nov 17 2012 17:06:5[...]
Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sat Nov 17 2012 17:07:12 GMT-050[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sat Nov 17 2012 17:06:54 GMT-0500 (E[...]
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "5e2423b7-0fc8-46e7-91a9-289a9bb7325c");
Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.msn.com/");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Search the web (Babylon)");
Deleted : user_pref("CommunityToolbar.undefined", "");
Deleted : user_pref("avg.install.installDirPath", "C:\\Documents and Settings\\All Users\\Application Data\\AV[...]
Deleted : user_pref("avg.install.userSPSettings", "AVG Secure Search");
Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&Sea[...]
Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Deleted : user_pref("extensions.BabylonToolbar.admin", false);
Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Deleted : user_pref("extensions.BabylonToolbar.bbDpng", 25);
Deleted : user_pref("extensions.BabylonToolbar.dfltSrch", false);
Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false);
Deleted : user_pref("extensions.BabylonToolbar.firstRun", false);
Deleted : user_pref("extensions.BabylonToolbar.hmpg", false);
Deleted : user_pref("extensions.BabylonToolbar.id", "1cdf316e00000000000090e6bad92693");
Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15190");
Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Deleted : user_pref("extensions.BabylonToolbar.lastActv", "31");
Deleted : user_pref("extensions.BabylonToolbar.lastDP", 25);
Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.4.31.621:53:17");
Deleted : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "19.0");
Deleted : user_pref("extensions.BabylonToolbar.newTab", true);
Deleted : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP");
Deleted : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Deleted : user_pref("extensions.BabylonToolbar.propectorlck", 102814875);
Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Deleted : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Deleted : user_pref("extensions.BabylonToolbar.srchPrvdr", "Search the web (Babylon)");
Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.4.31.6");
Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.4.31.621:53:17");
Deleted : user_pref("extensions.enabledAddons", "%7B20a82645-c095-46ed-80e3-08825760534b%7D:0.0.0,jqs%40sun.co[...]
Deleted : user_pref("extensions.facemoods.aflt", "_#bf2");
Deleted : user_pref("extensions.facemoods.firstRun", false);
Deleted : user_pref("extensions.facemoods.lastActv", "31");
Deleted : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea[...]
Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.babylon.com/?babsrc=SP_FFUP&mntrId=1cd[...]
Deleted : user_pref("extensions.toolbar.mindspark._5qMembers_.homepage", "hxxp://home.mywebsearch.com/index.jh[...]

-\\ Google Chrome v [Unable to get version]

File : C:\Documents and Settings\brendon\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Deleted [l.1] : search_url ={"backup":{"_signature":"IFAtzHGxMr7h4bMwFQvQvCLMtMcJY2xp92DjdxvwRbQ=","_version":4,"extensions":{"i[...]

*************************

AdwCleaner[S1].txt - [82001 octets] - [25/03/2013 19:32:33]

########## EOF - C:\AdwCleaner[S1].txt - [82062 octets] ##########



#10 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,565 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:07:17 AM

Posted 26 March 2013 - 08:24 PM

Thanks Karen, It looks like you are infecting yourself from infected torrents and FrostWire downloads.
Also when you install apps be careful and look at what ELSE they are installing such as Toolbars and browser add ons.. Un check those things.
 
Please note this...
Important Note: Using any torrent, peer-to-peer (P2P) file sharing program (i.e. Limewire, eMule, Kontiki, BitTorrent, BitComet, uTorrent, BitLord, BearShare, Azureus/Vuze) or visiting such sites is a security risk which can make your system susceptible to a smörgåsbord of malware infections, remote attacks, and exposure of personal information. File sharing networks are thoroughly infected and infested with malware according to Senior Virus Analyst, Norman ASA. As such, it is not uncommon for some anti-virus/anti-malware disinfection tools to detect torrent related files and programs as a threat and attempt to remove them.

The reason for this is that file sharing relies on its members giving and gaining unfettered access to computers across the P2P network. This practice can make you vulnerable to data and identity theft, system infection and remote access exploit by attackers who can take control of your computer without your knowledge. Even if you change the risky default settings to a safer configuration, downloading files from an anonymous source increases your exposure to infection because the files you are downloading may actually contain a disguised threat. Users visiting such pages may see innocuous-looking banner ads containing code which can trigger pop-up ads and malicious Flash ads that install malware. Many malicious worms and Trojans, such as the Storm Worm, target and spread across P2P files sharing networks because of their known vulnerabilities. In some instances the infection may cause so much damage to your system that recovery is not possible and a Repair Install will NOT help!. In those cases, the only option is to wipe your drive, reformat and reinstall the OS.

Even the safest P2P file sharing programs that do not contain bundled spyware, still expose you to risks because of the very nature of the P2P file sharing process. By default, most P2P file sharing programs are configured to automatically launch at startup. They are also configured to allow other P2P users on the same network open access to a shared directory on your computer. The best way to eliminate these risks is to avoid using P2P applications and torrent web sites.
  • Risks of File-Sharing Technology
  • P2P file sharing: Anticipate the risks...
  • Using such programs or browsing torrent sites is almost a guaranteed way to get yourself infected!!
     
     
     
    Please go into Control Panel Add/Remove programs
    Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.
    Remove
    Adobe Reader 9.5.2 (Version: 9.5.2)
    Java™ 6 Update 37 (Version: 6.0.370)
    Reboot
     
    Install
    Adobe Reader XI
    Version 7 Update 17
     
     
    Now let get anything else.
     
    Please Download[url="http://www.bleepingcomputer.com/download/tdsskiller/dl/4/"] TDSSkiller
    Launch it.
    Click on change parameters-Select TDLFS file system
    Click on "Scan".
    Please post the LOG report(log file should be in your C drive)
     
    Do not change the default options on scan results.
     
     
    Please download and scan with SUPERAntiSpyware Free
    • Double-click SUPERAntiSypware.exe and use the default settings for installation.
      For instructions with screenshots, please refer to the How to use SUPERAntiSpyware to scan and remove malware from your computer Guide.
    • An icon will be created on your desktop. Double-click that icon to launch the program.
    • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
    • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.
    • )
    • In the Main Menu, click the Preferences... button.
    • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
    • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all other options as they are set):
      • Close browsers before scanning.
      • Scan for tracking cookies.
      • Terminate memory threats before quarantining.
    • Click the "Close" button to leave the Control Center screen.
      • Back on the main screen, under "Select Scan Type" check the box for Complete Scan.
      • If your computer is badly infected, be sure to check the box next to Enable Rescue Scan (Highly Infected Systems ONLY).
      • Click the Scan your computer... button.
      • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
      • Make sure everything has a checkmark next to it and click "Next".
      • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
      • If asked if you want to reboot, click "Yes" and reboot normally.
    • To retrieve the scan log after reboot, launch SUPERAntiSpyware again.
      • Click the View Scan Logs button at the bottom.
      • This will open the Scanner Logs Window.
      • Click on the log to highlight it and then click on View Selected Log to open it.
      • Copy and paste the scan log results in your next reply.
      -- Some types of malware will disable security tools. If SUPERAntiSpyware will not install, please refer to these instructions for using the SUPERAntiSpyware Installer. If SUPERAntiSpyware is already installed but will not run, then follow the instructions for using RUNSAS.EXE to launch the program.

Edited by boopme, 26 March 2013 - 08:25 PM.

How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users