Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Malwarebytes log help


  • Please log in to reply
13 replies to this topic

#1 bubblez2000

bubblez2000

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 29 June 2013 - 05:10 PM

My computer has been running slow and freezing up in firefox mainly but has also when I am not online. So I ran Malwarebytes and this is what came up.  Can someone help me with this? I do not know enough to delete all thats in the detailed report. When I see anything that says registry, I don't mess with it. More or less a beginner.  I would really appreciate some help.  Thank you in advance for any help you can give me.

 

 

 

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.06.27.09

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16580
Marlene :: 1SEXYbleep [administrator]

Protection: Enabled

6/27/2013 12:47:51 PM
MBAM-log-2013-06-27 (19-36-32).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 224436
Time elapsed: 10 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 11
HKCR\AppID\{F85FA3F2-D2C8-4D4D-BB1C-3181E691AF2B} (PUP.FaceThemes) -> No action taken.
HKCR\CLSID\{2A28729E-2280-4986-BDB4-EC2623EAFBA4} (PUP.FaceThemes) -> No action taken.
HKCR\TypeLib\{A3F56272-CDB4-4310-9BB1-9A0D0757A3B3} (PUP.FaceThemes) -> No action taken.
HKCR\Interface\{D6975F9E-15B2-4FE7-9D16-FC2E85CB201B} (PUP.FaceThemes) -> No action taken.
HKCR\SelectionLinks.SelectionLinksBHO.1 (PUP.FaceThemes) -> No action taken.
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> No action taken.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> No action taken.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> No action taken.
HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> No action taken.
HKCR\Updater.AmiUpd (PUP.Software.Updater) -> No action taken.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 20
C:\Users\Marlene\AppData\Local\SwvUpdater\Updater.exe (PUP.Software.Updater) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\7-zip_037\DomaIQ.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\7-zip_037\DomaIQ10.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\7-zip_037\exes.zip (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\DomaIQ.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\DomaIQ10.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\exes.zip (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\FlashPlayer_151\DomaIQ.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\FlashPlayer_151\DomaIQ10.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\DomaIQ.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\DomaIQ10.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\exes.zip (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\7-zip_V.107391196b.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\firefox_V.98613806b.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\FlashPlayer_V.48766452b.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\FlashPlayer_V.48767091b.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\FlashPlayer_V.48868977b.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\FlashPlayer_V.96560137b.exe (Adware.DomaIQ) -> No action taken.
C:\Users\Marlene\Downloads\unlocker_V.b.exe (PUP.DomaIQ) -> No action taken.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> No action taken.

(end)
 

 



BC AdBot (Login to Remove)

 


#2 dev00790

dev00790

    Bleeping Chocoholic


  • Members
  • 5,037 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:03:03 AM

Posted 30 June 2013 - 02:11 AM

Hello,

I will be helping you with your problems. Please be patient while I assist you.

Some points for you to keep in mind while I am helping you to make things go easier and faster for both of us
 

  • Please do NOT run, install or uninstall any programs,  unless instructed to do so.
    • We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.
          
  • Please do not attach logs or use code boxes, just copy and paste the text. 
    • Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.
          
  • Please read every post completely before doing anything.     
    • Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.
          
  • Please provide feedback about your experience as we go.   
    • A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.   

 

NOTE: At the top of your post, click on the Watch Topic Button, select Immediate Notification, and click on Proceed. This will send you an e-mail as soon as I reply to your topic, allowing us to resolve the issue faster.

NOTE: Backup any files that cannot be replaced. Removing malware can be unpredictable and this step can save a lot of heartaches if things don't go as planed. You can put them on a CD/DVD, external drive or a pen drive, anywhere except on the computer.
- Do NOT backup any unknown files ending in .exe, .com, .scr, .pif, and .bat since files of these types are more likely to be infected.

NOTE: It is good practice to copy and paste the instructions into notepad and print them in case it is necessary for you to go offline during the cleanup process. To open notepad, navigate to Start Menu > All Programs > Accessories > Notepad. Please remember to copy the entire post so you do not miss any instructions.

----------------------------------------------

Please do the following:

:step1:

Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!


  • Double-click on TDSSKiller.exe on your desktop to run the tool for known TDSS variants.
    Vista/Windows 7 users right-click and select Run As Administrator.
  • If TDSSKiller does not run, try renaming it.
  • To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.
  • Click on change parameters
  • Under Objects to scan, check the boxes next to Verify file digital signatures, Detect TDLFS file system, then click OK.
  • Click the Start Scan button.
  • Do not use the computer during the scan
  • If the scan completes with nothing found, click Close to exit.
  • If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.
  • Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.
    Note: If Cure is not an option, Skip instead, do NOT choose Delete or Quarantine unless instructed.
  • A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).
  • Copy and paste the full contents of that file in your next reply. - If the log is too long, then split it into multiple posts.



:step2:

Please download AdwCleaner by Xplode onto your desktop.


  • Double click on AdwCleaner.exe to run the tool.
  • Click on Search.
  • A logfile will automatically open after the scan has finished.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[R1].txt as well.



:step3:

Please download Farbar Service Scanner and run it on the computer with the issue.


  • Make sure the following options are checked:
    • Internet Services
    • Windows Firewall
    • System Restore
    • Security Center/Action Center
    • Windows Update
    • Windows Defender
    • Other Services
  • Press Scan.
  • It will create a log (FSS.txt) in the same directory the tool is run.
  • Please copy and paste the full contents of the log in your next reply.



:step4:

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following checkboxes:


  • Flush DNS
  • Report IE Proxy Settings
  • Reset IE Proxy Settings
  • Report FF Proxy Settings
  • Reset FF Proxy Settings
  • List content of Hosts
  • List IP configuration
  • List Winsock Entries
  • List last 10 Event Viewer log
  • List Installed Programs
  • List Devices (Only Problems)
  • List Users, Partitions and Memory size.
  • List Minidump Files
  • List Restore points

NOTE: When using "Reset FF Proxy Settings" option Firefox should be closed.

Click Go and post the full contents of the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.


Edited by dev00790, 30 June 2013 - 02:12 AM.

Regards, dev00790

---------------------------------------

Marge: "Homer, the plant called. They said if you don't show up tomorrow don't bother showing up on Monday." Homer: "Woo-hoo! Four-day weekend!"I do not reply to Private Messages (PMs) asking for assistance - please use the forums instead. If I have been helping you, and I have not replied to your latest post in 48 hours please send me a PM. My Blog


#3 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 01 July 2013 - 08:57 AM

Here are the reports you asked for.

 

06:45:49.0920 1924  TDSS rootkit removing tool 2.8.18.0 Jun 10 2013 21:44:19
06:45:49.0920 1924  UEFI system
06:45:50.0439 1924  ============================================================
06:45:50.0439 1924  Current date / time: 2013/07/01 06:45:50.0439
06:45:50.0439 1924  SystemInfo:
06:45:50.0439 1924  
06:45:50.0439 1924  OS Version: 6.2.9200 ServicePack: 0.0
06:45:50.0439 1924  Product type: Workstation
06:45:50.0439 1924  ComputerName: 1SEXYbleep
06:45:50.0440 1924  UserName: Marlene
06:45:50.0440 1924  Windows directory: C:\windows
06:45:50.0440 1924  System windows directory: C:\windows
06:45:50.0440 1924  Running under WOW64
06:45:50.0440 1924  Processor architecture: Intel x64
06:45:50.0440 1924  Number of processors: 4
06:45:50.0440 1924  Page size: 0x1000
06:45:50.0440 1924  Boot type: Normal boot
06:45:50.0440 1924  ============================================================
06:45:50.0848 1924  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
06:45:50.0848 1924  Drive \Device\Harddisk1\DR1 - Size: 0x3BA816000 (14.91 Gb), SectorSize: 0x200, Cylinders: 0x79A, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
06:45:50.0851 1924  Drive \Device\Harddisk2\DR2 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
06:45:51.0326 1924  Drive \Device\Harddisk3\DR3 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
06:45:51.0342 1924  ============================================================
06:45:51.0342 1924  \Device\Harddisk0\DR0:
06:45:51.0342 1924  GPT partitions:
06:45:51.0343 1924  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {6FDCD764-9D31-4434-962B-3FB700E36220}, Name: Basic data partition, StartLBA 0x800, BlocksNum 0x1FF800
06:45:51.0343 1924  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {02990F6B-F58D-440F-A61E-DAB686BCEA65}, Name: EFI system partition, StartLBA 0x200000, BlocksNum 0xB4000
06:45:51.0343 1924  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {81F0CA1B-0651-4ED6-9DFA-A53FD5CA4B56}, Name: Microsoft reserved partition, StartLBA 0x2B4000, BlocksNum 0x40000
06:45:51.0343 1924  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {CA5DAF10-9266-4519-AFB9-6C9AEE53FAA3}, Name: Basic data partition, StartLBA 0x2F4000, BlocksNum 0x38136000
06:45:51.0343 1924  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {D8BE6F18-5000-428B-86CD-5507B27F8B65}, Name: Basic data partition, StartLBA 0x3842A000, BlocksNum 0x1F5C000
06:45:51.0343 1924  MBR partitions:
06:45:51.0343 1924  \Device\Harddisk1\DR1:
06:45:51.0343 1924  MBR partitions:
06:45:51.0343 1924  \Device\Harddisk2\DR2:
06:45:51.0344 1924  MBR partitions:
06:45:51.0344 1924  \Device\Harddisk2\DR2\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xAEA86702
06:45:51.0344 1924  \Device\Harddisk3\DR3:
06:45:51.0344 1924  MBR partitions:
06:45:51.0344 1924  \Device\Harddisk3\DR3\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x12A18A82
06:45:51.0344 1924  ============================================================
06:45:51.0389 1924  C: <-> \Device\Harddisk0\DR0\Partition4
06:45:51.0477 1924  D: <-> \Device\Harddisk0\DR0\Partition5
06:45:51.0502 1924  F: <-> \Device\Harddisk2\DR2\Partition1
06:45:51.0561 1924  H: <-> \Device\Harddisk3\DR3\Partition1
06:45:51.0561 1924  ============================================================
06:45:51.0561 1924  Initialize success
06:45:51.0561 1924  ============================================================
06:46:08.0272 4024  ============================================================
06:46:08.0272 4024  Scan started
06:46:08.0272 4024  Mode: Manual; SigCheck; TDLFS;
06:46:08.0272 4024  ============================================================
06:46:09.0049 4024  ================ Scan system memory ========================
06:46:09.0049 4024  System memory - ok
06:46:09.0049 4024  ================ Scan services =============================
06:46:09.0153 4024  [ E890C46E4754F0DF51BAFCC8D2E07498 ] 1394ohci        C:\windows\System32\drivers\1394ohci.sys
06:46:09.0212 4024  1394ohci - ok
06:46:09.0228 4024  [ 4F18D4C7EA14F11A7211F60D553C03DB ] 3ware           C:\windows\system32\drivers\3ware.sys
06:46:09.0238 4024  3ware - ok
06:46:09.0269 4024  [ 975AABEB243B800C23626D6B652C5A9C ] ACPI            C:\windows\system32\drivers\ACPI.sys
06:46:09.0287 4024  ACPI - ok
06:46:09.0295 4024  [ DC968C37822117E576B933F34A2D130C ] acpiex          C:\windows\system32\Drivers\acpiex.sys
06:46:09.0303 4024  acpiex - ok
06:46:09.0313 4024  [ 0CA9F7C3A78227C21A0A7854E245CFB2 ] acpipagr        C:\windows\System32\drivers\acpipagr.sys
06:46:09.0321 4024  acpipagr - ok
06:46:09.0326 4024  [ 8EB8DA03B142D3DD1EB9ED8107A76C43 ] AcpiPmi         C:\windows\System32\drivers\acpipmi.sys
06:46:09.0334 4024  AcpiPmi - ok
06:46:09.0361 4024  [ CBCE725C5D86ABA7D2604E22951AA9B8 ] acpitime        C:\windows\System32\drivers\acpitime.sys
06:46:09.0368 4024  acpitime - ok
06:46:09.0415 4024  [ ADDA5E1951B90D3D23C56D3CF0622ADC ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
06:46:09.0422 4024  AdobeARMservice - ok
06:46:09.0489 4024  [ 249A44DCFA2500EB1C020E33A3E9F25B ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
06:46:09.0493 4024  AdobeFlashPlayerUpdateSvc ( UnsignedFile.Multi.Generic ) - warning
06:46:09.0493 4024  AdobeFlashPlayerUpdateSvc - detected UnsignedFile.Multi.Generic (1)
06:46:09.0521 4024  [ 93C6388592B99925C1D1576E465BC80F ] adp94xx         C:\windows\system32\drivers\adp94xx.sys
06:46:09.0537 4024  adp94xx - ok
06:46:09.0560 4024  [ D27763E0247292654E7F7D16444C7C72 ] adpahci         C:\windows\system32\drivers\adpahci.sys
06:46:09.0576 4024  adpahci - ok
06:46:09.0597 4024  [ 67B90070FF48F794AF19F9FCF0080D75 ] adpu320         C:\windows\system32\drivers\adpu320.sys
06:46:09.0609 4024  adpu320 - ok
06:46:09.0637 4024  [ 974AE60BF5B90E31412D93596C968E5B ] AeLookupSvc     C:\windows\System32\aelupsvc.dll
06:46:09.0648 4024  AeLookupSvc - ok
06:46:09.0699 4024  [ A6FB9DB8F1A86861D955FD6975977AE0 ] AESTFilters     C:\Program Files\IDT\WDM\AESTSr64.exe
06:46:09.0722 4024  AESTFilters ( UnsignedFile.Multi.Generic ) - warning
06:46:09.0722 4024  AESTFilters - detected UnsignedFile.Multi.Generic (1)
06:46:09.0755 4024  [ 36D6A3201721558A8AFBCC09C2DA4C2C ] AFD             C:\windows\system32\drivers\afd.sys
06:46:09.0777 4024  AFD - ok
06:46:09.0791 4024  [ 01590377A5AB19E792528C628A2A68F9 ] agp440          C:\windows\system32\drivers\agp440.sys
06:46:09.0805 4024  agp440 - ok
06:46:09.0829 4024  [ D1BE8E6E5B3AF23A4393AF1BF867977A ] ALG             C:\windows\System32\alg.exe
06:46:09.0851 4024  ALG - ok
06:46:09.0864 4024  [ 025E8C755BE293E50854D26D1BBE5133 ] AllUserInstallAgent C:\windows\system32\AUInstallAgent.dll
06:46:09.0880 4024  AllUserInstallAgent - ok
06:46:09.0905 4024  [ 5A81054B824004B1ECC04F0034A1CDF9 ] AmdK8           C:\windows\System32\drivers\amdk8.sys
06:46:09.0915 4024  AmdK8 - ok
06:46:09.0927 4024  [ B849D453E644FAB9BC8EF6DC8CA9C4C6 ] AmdPPM          C:\windows\System32\drivers\amdppm.sys
06:46:09.0937 4024  AmdPPM - ok
06:46:09.0950 4024  [ 35A0EB5AECB0FA3C41A2FB514A562304 ] amdsata         C:\windows\system32\drivers\amdsata.sys
06:46:09.0959 4024  amdsata - ok
06:46:09.0970 4024  [ 00452671904F5EE94B50BF0219C97164 ] amdsbs          C:\windows\system32\drivers\amdsbs.sys
06:46:09.0985 4024  amdsbs - ok
06:46:10.0000 4024  [ EA3FFE53E92E59C87E3ECA9BEB20D9B7 ] amdxata         C:\windows\system32\drivers\amdxata.sys
06:46:10.0007 4024  amdxata - ok
06:46:10.0053 4024  [ 823F34D1DEF120A657BB7529ABF4461F ] AppHostSvc      C:\windows\system32\inetsrv\apphostsvc.dll
06:46:10.0061 4024  AppHostSvc - ok
06:46:10.0072 4024  [ 83B3682CE922FB0F415734B26D9D6233 ] AppID           C:\windows\system32\drivers\appid.sys
06:46:10.0093 4024  AppID - ok
06:46:10.0112 4024  [ CE2BEAD7F31816FF0AC490D048C969F9 ] AppIDSvc        C:\windows\System32\appidsvc.dll
06:46:10.0123 4024  AppIDSvc - ok
06:46:10.0150 4024  [ 4F750B7EFCB6520AE01E01D082D7D476 ] Appinfo         C:\windows\System32\appinfo.dll
06:46:10.0160 4024  Appinfo - ok
06:46:10.0176 4024  [ E933401B392387F4BE34DE8BAF1722A7 ] arc             C:\windows\system32\drivers\arc.sys
06:46:10.0186 4024  arc - ok
06:46:10.0206 4024  [ 07CA323EF2E8247A568AB0F3662AD644 ] arcsas          C:\windows\system32\drivers\arcsas.sys
06:46:10.0217 4024  arcsas - ok
06:46:10.0290 4024  [ 108FB6DDB69E537A2EA53F425363FAE5 ] aspnet_state    C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
06:46:10.0299 4024  aspnet_state - ok
06:46:10.0311 4024  [ 74DBAEC35366C4EE7670428808715A6A ] AsyncMac        C:\windows\system32\DRIVERS\asyncmac.sys
06:46:10.0321 4024  AsyncMac - ok
06:46:10.0330 4024  [ A721FF570C2387E383BDDEA9632863C9 ] atapi           C:\windows\system32\drivers\atapi.sys
06:46:10.0337 4024  atapi - ok
06:46:10.0369 4024  [ BCD7A47EF587DC00DD61D12D9C2D1E44 ] AudioEndpointBuilder C:\windows\System32\AudioEndpointBuilder.dll
06:46:10.0380 4024  AudioEndpointBuilder - ok
06:46:10.0395 4024  [ 810F30FF8490ED5ED510621DF10DE320 ] Audiosrv        C:\windows\System32\Audiosrv.dll
06:46:10.0412 4024  Audiosrv - ok
06:46:10.0435 4024  [ 89491EF71D5EA011127832C588002853 ] AxInstSV        C:\windows\System32\AxInstSV.dll
06:46:10.0445 4024  AxInstSV - ok
06:46:10.0469 4024  [ 87AB5BB072A3F128541D5B815F82FFDD ] b06bdrv         C:\windows\system32\drivers\bxvbda.sys
06:46:10.0486 4024  b06bdrv - ok
06:46:10.0500 4024  [ 81703BC5D68DEDBB086C2368FBE7B334 ] BasicDisplay    C:\windows\System32\drivers\BasicDisplay.sys
06:46:10.0508 4024  BasicDisplay - ok
06:46:10.0518 4024  [ 5EC68164E14D25675C98BBB5F09E8606 ] BasicRender     C:\windows\System32\drivers\BasicRender.sys
06:46:10.0526 4024  BasicRender - ok
06:46:10.0557 4024  [ 89143A7BA7850F5C7E61B43BB44B6418 ] BDESVC          C:\windows\System32\bdesvc.dll
06:46:10.0575 4024  BDESVC - ok
06:46:10.0587 4024  [ 9E7AEA59776D904607985AFFE7E5E183 ] Beep            C:\windows\system32\drivers\Beep.sys
06:46:10.0600 4024  Beep - ok
06:46:10.0638 4024  [ 9E6A544F465C582AB42444A217CF04DC ] BFE             C:\windows\System32\bfe.dll
06:46:10.0662 4024  BFE - ok
06:46:10.0686 4024  [ D598C44A7072D3108D8D8102EC5E07F7 ] BITS            C:\windows\System32\qmgr.dll
06:46:10.0704 4024  BITS - ok
06:46:10.0792 4024  [ 9107A70A499B237A842F83FCE4DE4FBB ] BlueSoleilCS    C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
06:46:10.0826 4024  BlueSoleilCS ( UnsignedFile.Multi.Generic ) - warning
06:46:10.0826 4024  BlueSoleilCS - detected UnsignedFile.Multi.Generic (1)
06:46:10.0852 4024  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
06:46:10.0863 4024  Bonjour Service - ok
06:46:10.0878 4024  [ B17AC10B47C7FCB44D22A1F06415840E ] bowser          C:\windows\system32\DRIVERS\bowser.sys
06:46:10.0891 4024  bowser - ok
06:46:10.0952 4024  [ 038FA1B55531E7020DB705B42FCCE373 ] BrokerInfrastructure C:\windows\System32\bisrv.dll
06:46:10.0962 4024  BrokerInfrastructure - ok
06:46:10.0987 4024  [ 310068BDA80B1D55C36580FD8A873FAF ] Browser         C:\windows\System32\browser.dll
06:46:11.0000 4024  Browser - ok
06:46:11.0014 4024  [ BB9D6227BA756239BCA2C84A4CCDF77A ] BsHelpCS        C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
06:46:11.0019 4024  BsHelpCS ( UnsignedFile.Multi.Generic ) - warning
06:46:11.0019 4024  BsHelpCS - detected UnsignedFile.Multi.Generic (1)
06:46:11.0070 4024  [ 34AAF6FD68B8403E76F0D08A8C1C1DA3 ] BtAudioBusSrv   C:\windows\System32\Drivers\BtAudioBus.sys
06:46:11.0079 4024  BtAudioBusSrv - ok
06:46:11.0108 4024  [ F17DEEAC7D51D44CF1BFF8DD4F0A2B6D ] BthAvrcpTg      C:\windows\System32\drivers\BthAvrcpTg.sys
06:46:11.0123 4024  BthAvrcpTg - ok
06:46:11.0144 4024  [ A8B20D852B07AE19A13B5D47EC4E4C3B ] BthEnum         C:\windows\System32\drivers\BthEnum.sys
06:46:11.0158 4024  BthEnum - ok
06:46:11.0183 4024  [ 616EB8748C988AEE98D93DA141C3D3B4 ] BthHFEnum       C:\windows\System32\drivers\bthhfenum.sys
06:46:11.0229 4024  BthHFEnum - ok
06:46:11.0245 4024  [ DCB4EBD928A6FB368BE6CAE522412DE1 ] bthhfhid        C:\windows\System32\drivers\BthHFHid.sys
06:46:11.0252 4024  bthhfhid - ok
06:46:11.0264 4024  [ 9C09D5F1257F1748A4EAB0E8584FAF61 ] BthL2caScoIfSrv C:\windows\System32\Drivers\BtL2caScoIf.sys
06:46:11.0269 4024  BthL2caScoIfSrv - ok
06:46:11.0299 4024  [ 42201C346F0B8C458E1E9CDE04D68A2C ] BthLEEnum       C:\windows\system32\DRIVERS\BthLEEnum.sys
06:46:11.0317 4024  BthLEEnum - ok
06:46:11.0333 4024  [ 033916CE8784A848B9A3D686B7F66D97 ] BTHMODEM        C:\windows\System32\drivers\bthmodem.sys
06:46:11.0349 4024  BTHMODEM - ok
06:46:11.0364 4024  [ 091BB978E9504D0AD14586929431A957 ] BthPan          C:\windows\system32\DRIVERS\bthpan.sys
06:46:11.0374 4024  BthPan - ok
06:46:11.0409 4024  [ 13795CAA34239D97A7211E7F9D96E012 ] BTHPORT         C:\windows\System32\Drivers\BTHport.sys
06:46:11.0431 4024  BTHPORT - ok
06:46:11.0450 4024  [ A4387C3D271959313E2577DB7BE8BA7A ] bthserv         C:\windows\system32\bthserv.dll
06:46:11.0459 4024  bthserv - ok
06:46:11.0485 4024  [ 1F715957F5236D30B6020A19A4271F6A ] BTHUSB          C:\windows\System32\Drivers\BTHUSB.sys
06:46:11.0493 4024  BTHUSB - ok
06:46:11.0516 4024  [ C47C5D1BD9E6206A7DEABEF79FAB9ACF ] btUrbFilterDrv  C:\windows\System32\Drivers\IvtUrbBtFlt.sys
06:46:11.0520 4024  btUrbFilterDrv - ok
06:46:11.0539 4024  [ 990B1BABE6E81FB18E65A87EBEFB1772 ] cdfs            C:\windows\system32\DRIVERS\cdfs.sys
06:46:11.0553 4024  cdfs - ok
06:46:11.0567 4024  [ 339BFF85D788268752DA8C9644B188EE ] cdrom           C:\windows\System32\drivers\cdrom.sys
06:46:11.0580 4024  cdrom - ok
06:46:11.0593 4024  [ BAF8F0F55BC300E5F882E521F054E345 ] CertPropSvc     C:\windows\System32\certprop.dll
06:46:11.0606 4024  CertPropSvc - ok
06:46:11.0620 4024  [ F64B7D1A37CC1D5F421D5359EEC81E2E ] circlass        C:\windows\System32\drivers\circlass.sys
06:46:11.0636 4024  circlass - ok
06:46:11.0643 4024  [ 9905168708DB68849B879B5548F68AB3 ] CLFS            C:\windows\system32\drivers\CLFS.sys
06:46:11.0663 4024  CLFS - ok
06:46:11.0694 4024  [ 075CCE75090786F124573A788C8656E6 ] CLVirtualDrive  C:\windows\system32\DRIVERS\CLVirtualDrive.sys
06:46:11.0713 4024  CLVirtualDrive - ok
06:46:11.0729 4024  [ 2DC8538A2260647484A6C921CA837313 ] CmBatt          C:\windows\System32\drivers\CmBatt.sys
06:46:11.0743 4024  CmBatt - ok
06:46:11.0773 4024  [ E708BFF0473EC6B271EA46B65B16CA56 ] CNG             C:\windows\system32\Drivers\cng.sys
06:46:11.0792 4024  CNG - ok
06:46:11.0800 4024  [ 0E5B1E9E7122EDAAF1F6CE047965CA92 ] CompositeBus    C:\windows\System32\drivers\CompositeBus.sys
06:46:11.0815 4024  CompositeBus - ok
06:46:11.0818 4024  COMSysApp - ok
06:46:11.0827 4024  [ D9CB0782AF819548072AA45B70F8B22D ] condrv          C:\windows\system32\drivers\condrv.sys
06:46:11.0835 4024  condrv - ok
06:46:11.0889 4024  [ 135A9B898FBA94736E6CF17BAB26723B ] cphs            C:\windows\SysWow64\IntelCpHeciSvc.exe
06:46:11.0898 4024  cphs - ok
06:46:11.0923 4024  [ AFA426B0E7975CEB21F8B6711EFA8945 ] CryptSvc        C:\windows\system32\cryptsvc.dll
06:46:11.0944 4024  CryptSvc - ok
06:46:11.0972 4024  [ C4D01BD86D6B207275FC143EEA951D75 ] dam             C:\windows\system32\drivers\dam.sys
06:46:11.0979 4024  dam - ok
06:46:12.0003 4024  [ 1EC6E533C954BDDF2A37E7851A7E58FD ] DcomLaunch      C:\windows\system32\rpcss.dll
06:46:12.0019 4024  DcomLaunch - ok
06:46:12.0123 4024  [ 34AE0DFA3EE3B5B9975042D87332D0B7 ] DefaultTabUpdate C:\Users\Marlene\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
06:46:12.0139 4024  DefaultTabUpdate ( UnsignedFile.Multi.Generic ) - warning
06:46:12.0139 4024  DefaultTabUpdate - detected UnsignedFile.Multi.Generic (1)
06:46:12.0167 4024  [ C8650D1F61149AA546BDBC99172EBBC1 ] defragsvc       C:\windows\System32\defragsvc.dll
06:46:12.0198 4024  defragsvc - ok
06:46:12.0211 4024  [ 5EAEF67AE2AF4D2DC664B649DB7B2E16 ] DeviceAssociationService C:\windows\system32\das.dll
06:46:12.0227 4024  DeviceAssociationService - ok
06:46:12.0256 4024  [ 799BE46D45D486704CE0F37CA5385262 ] DeviceInstall   C:\windows\system32\umpnpmgr.dll
06:46:12.0269 4024  DeviceInstall - ok
06:46:12.0284 4024  [ 09D9EB9E7898F8E6561473A20CC808B9 ] Dfsc            C:\windows\system32\Drivers\dfsc.sys
06:46:12.0300 4024  Dfsc - ok
06:46:12.0335 4024  [ 9E0E72222264745ADEB0E5AC680B0ED6 ] Dhcp            C:\windows\system32\dhcpcore.dll
06:46:12.0347 4024  Dhcp - ok
06:46:12.0360 4024  [ 3C736FAE17BA6F91BA37594AAB139CD0 ] discache        C:\windows\system32\drivers\discache.sys
06:46:12.0374 4024  discache - ok
06:46:12.0388 4024  [ 560495FF4CA22E1D9B1972FA18F43B6F ] disk            C:\windows\system32\drivers\disk.sys
06:46:12.0401 4024  disk - ok
06:46:12.0413 4024  [ 82A7C72593793FE1EADA7A305BD1567A ] dmvsc           C:\windows\System32\drivers\dmvsc.sys
06:46:12.0422 4024  dmvsc - ok
06:46:12.0434 4024  [ 066B9710B36AB550E01EEFCA52155968 ] Dnscache        C:\windows\System32\dnsrslvr.dll
06:46:12.0445 4024  Dnscache - ok
06:46:12.0465 4024  [ 9949AD2ABA168A618D46C799D6CC898C ] dot3svc         C:\windows\System32\dot3svc.dll
06:46:12.0479 4024  dot3svc - ok
06:46:12.0493 4024  [ 109FC3F80BF4F4DC5A071058074F13C1 ] DPS             C:\windows\system32\dps.dll
06:46:12.0509 4024  DPS - ok
06:46:12.0539 4024  [ 9C7C183F937951AE17C5B8B3259CF3FF ] drmkaud         C:\windows\system32\drivers\drmkaud.sys
06:46:12.0547 4024  drmkaud - ok
06:46:12.0557 4024  [ BF48F32EE248C3D371DA5DC93BBEADA7 ] DsmSvc          C:\windows\System32\DeviceSetupManager.dll
06:46:12.0568 4024  DsmSvc - ok
06:46:12.0631 4024  [ 9D55CF2DFD98DF65EBFDDE8DBEE2FE7A ] DTSRVC          C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe
06:46:12.0642 4024  DTSRVC - ok
06:46:12.0688 4024  [ 6D1B8A9A2C0BD4851D8AF1AB43E67AD9 ] DXGKrnl         C:\windows\System32\drivers\dxgkrnl.sys
06:46:12.0730 4024  DXGKrnl - ok
06:46:12.0750 4024  [ 651FBD69A9713D623D456A240F96179C ] e1iexpress      C:\windows\system32\DRIVERS\e1i63x64.sys
06:46:12.0770 4024  e1iexpress - ok
06:46:12.0790 4024  [ 58BA473DD88F5FC1932282BA683AA03E ] Eaphost         C:\windows\System32\eapsvc.dll
06:46:12.0800 4024  Eaphost - ok
06:46:12.0862 4024  [ 5AB97B3282D7D6114949D1EB5C8598E4 ] ebdrv           C:\windows\system32\drivers\evbda.sys
06:46:12.0957 4024  ebdrv - ok
06:46:12.0983 4024  [ F702AB6181513303AB0FC8D59E52708B ] EFS             C:\windows\System32\lsass.exe
06:46:12.0993 4024  EFS - ok
06:46:13.0004 4024  [ 66D60BD9A4C05616ABECA2A901475098 ] EhStorClass     C:\windows\system32\drivers\EhStorClass.sys
06:46:13.0012 4024  EhStorClass - ok
06:46:13.0028 4024  [ A61D0F543024E458C0FE32352E1978E2 ] EhStorTcgDrv    C:\windows\system32\drivers\EhStorTcgDrv.sys
06:46:13.0037 4024  EhStorTcgDrv - ok
06:46:13.0049 4024  [ D790D058D67582DB9C84C2D33695FE6B ] ErrDev          C:\windows\System32\drivers\errdev.sys
06:46:13.0057 4024  ErrDev - ok
06:46:13.0084 4024  [ F9E01C2D9F8BC049E04CF5DC24A5F638 ] EventSystem     C:\windows\system32\es.dll
06:46:13.0095 4024  EventSystem - ok
06:46:13.0127 4024  [ D2EAA04AF43154B62FA85B08BAD0A7CA ] excfs           C:\windows\system32\DRIVERS\excfs.sys
06:46:13.0131 4024  excfs - ok
06:46:13.0143 4024  [ E6082A6C109238A725D83184724C4A36 ] excsd           C:\windows\system32\DRIVERS\excsd.sys
06:46:13.0149 4024  excsd - ok
06:46:13.0162 4024  [ 7A4D6FEB8C52B3FE855E4DCDF9107E03 ] exfat           C:\windows\system32\drivers\exfat.sys
06:46:13.0177 4024  exfat - ok
06:46:13.0227 4024  [ 68030FF4B7669E15916910885E2E6160 ] ExpressCache    C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
06:46:13.0236 4024  ExpressCache - ok
06:46:13.0259 4024  [ 60996602A7111FD2D086E803F33E4282 ] fastfat         C:\windows\system32\drivers\fastfat.sys
06:46:13.0278 4024  fastfat - ok
06:46:13.0313 4024  [ F0E7F8382ED5E138B0DFA4CB5058BCFE ] Fax             C:\windows\system32\fxssvc.exe
06:46:13.0331 4024  Fax - ok
06:46:13.0338 4024  [ 73B2D11DF0B6E03A0CB0323218ACB3E4 ] fdc             C:\windows\System32\drivers\fdc.sys
06:46:13.0346 4024  fdc - ok
06:46:13.0361 4024  [ 0828E3E7BD77C89149EAD3232BFD38DB ] fdPHost         C:\windows\system32\fdPHost.dll
06:46:13.0374 4024  fdPHost - ok
06:46:13.0387 4024  [ 872506AAB591E8908DF4461475AF92DF ] FDResPub        C:\windows\system32\fdrespub.dll
06:46:13.0402 4024  FDResPub - ok
06:46:13.0446 4024  [ 0588950D93A426F97C7AAADB1A9B0458 ] fhsvc           C:\windows\system32\fhsvc.dll
06:46:13.0454 4024  fhsvc - ok
06:46:13.0472 4024  [ 88A9EBACD1058ABB237A6B4E96E7F397 ] FileInfo        C:\windows\system32\drivers\fileinfo.sys
06:46:13.0479 4024  FileInfo - ok
06:46:13.0491 4024  [ 9E4EE3A0B00FF7D5F42A4AF9744CBA02 ] Filetrace       C:\windows\system32\drivers\filetrace.sys
06:46:13.0502 4024  Filetrace - ok
06:46:13.0519 4024  [ B1D4C168FF7B8579E3745888658FFB1D ] flpydisk        C:\windows\System32\drivers\flpydisk.sys
06:46:13.0527 4024  flpydisk - ok
06:46:13.0542 4024  [ B33EC133AE4E6C1881D2302D93D2467D ] FltMgr          C:\windows\system32\drivers\fltmgr.sys
06:46:13.0556 4024  FltMgr - ok
06:46:13.0591 4024  [ 0BCDC0FF11B984162B0CF0FF6E9E0146 ] FontCache       C:\windows\system32\FntCache.dll
06:46:13.0614 4024  FontCache - ok
06:46:13.0712 4024  [ 0B56259F5611787222A04A8F254E51D4 ] FontCache3.0.0.0 C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
06:46:13.0724 4024  FontCache3.0.0.0 - ok
06:46:13.0739 4024  [ A5F7873A39E4E9FAAAE59B7E9E36B705 ] FsDepends       C:\windows\system32\drivers\FsDepends.sys
06:46:13.0753 4024  FsDepends - ok
06:46:13.0778 4024  [ A6DD7D491F587F4BC13FB972977DC8E8 ] Fs_Rec          C:\windows\system32\drivers\Fs_Rec.sys
06:46:13.0791 4024  Fs_Rec - ok
06:46:13.0824 4024  [ FA228F4BB10DC7ED7E7D131C034E2331 ] fvevol          C:\windows\system32\DRIVERS\fvevol.sys
06:46:13.0853 4024  fvevol - ok
06:46:13.0878 4024  [ A969D92973DFA895E7776B4BFE36DBB2 ] FxPPM           C:\windows\System32\drivers\fxppm.sys
06:46:13.0885 4024  FxPPM - ok
06:46:13.0899 4024  [ 52BC441E07A827EBAB70CDC7EAEDB28D ] gagp30kx        C:\windows\system32\drivers\gagp30kx.sys
06:46:13.0907 4024  gagp30kx - ok
06:46:13.0921 4024  [ 721F8EEF5E9747F32670DEFF7FB92541 ] gencounter      C:\windows\System32\drivers\vmgencounter.sys
06:46:13.0928 4024  gencounter - ok
06:46:13.0945 4024  [ CA18ECFCFFDD638ECE80799A9056B238 ] GPIOClx0101     C:\windows\system32\Drivers\msgpioclx.sys
06:46:13.0955 4024  GPIOClx0101 - ok
06:46:13.0989 4024  [ 5358678C6370F2ADC5291849F6503262 ] gpsvc           C:\windows\System32\gpsvc.dll
06:46:14.0015 4024  gpsvc - ok
06:46:14.0050 4024  [ C1B577B2169900F4CF7190C39F085794 ] gusvc           C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
06:46:14.0060 4024  gusvc - ok
06:46:14.0085 4024  [ C2504AA983B5D411F7D31402E8B57725 ] HdAudAddService C:\windows\system32\drivers\HdAudio.sys
06:46:14.0098 4024  HdAudAddService - ok
06:46:14.0130 4024  [ 7D87B5B6C7188D553E11B59DC7F0B111 ] HDAudBus        C:\windows\System32\drivers\HDAudBus.sys
06:46:14.0138 4024  HDAudBus - ok
06:46:14.0155 4024  [ 3F76BBA53D65E85A7F53E7A71082082C ] HidBatt         C:\windows\System32\drivers\HidBatt.sys
06:46:14.0162 4024  HidBatt - ok
06:46:14.0187 4024  [ 085F150D002B7F0153D3C06DDF33A143 ] HidBth          C:\windows\System32\drivers\hidbth.sys
06:46:14.0196 4024  HidBth - ok
06:46:14.0223 4024  [ CC4A07E51D89575CAB6F4EB590D87CD4 ] hidi2c          C:\windows\System32\drivers\hidi2c.sys
06:46:14.0233 4024  hidi2c - ok
06:46:14.0244 4024  [ DC96F7DACB777CDEAEF9958A50BFDA06 ] HidIr           C:\windows\System32\drivers\hidir.sys
06:46:14.0260 4024  HidIr - ok
06:46:14.0274 4024  [ FAC37D7B3D6354A5A5E19A45B50B4008 ] hidserv         C:\windows\system32\hidserv.dll
06:46:14.0283 4024  hidserv - ok
06:46:14.0309 4024  [ 012C354B4AB48E9A7A657DF39E3A2073 ] HidUsb          C:\windows\System32\drivers\hidusb.sys
06:46:14.0319 4024  HidUsb - ok
06:46:14.0338 4024  [ 43F884B61A24377567CD0FEB35236334 ] hkmsvc          C:\windows\system32\kmsvc.dll
06:46:14.0350 4024  hkmsvc - ok
06:46:14.0381 4024  [ 33DFC14DFDCCFA7AA10E392F6A8EC1CF ] HomeGroupListener C:\windows\system32\ListSvc.dll
06:46:14.0395 4024  HomeGroupListener - ok
06:46:14.0421 4024  [ E0D9F6FE18FA7F53ADD29AF719CE2B7E ] HomeGroupProvider C:\windows\system32\provsvc.dll
06:46:14.0434 4024  HomeGroupProvider - ok
06:46:14.0506 4024  [ E2550FBBBA31E2D4F9757E0A533689F0 ] HPConnectedRemote c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
06:46:14.0512 4024  HPConnectedRemote - ok
06:46:14.0528 4024  [ 64DB7A8D97CA53DCCF93D0A1E08342CF ] HpSAMD          C:\windows\system32\drivers\HpSAMD.sys
06:46:14.0537 4024  HpSAMD - ok
06:46:14.0580 4024  [ F4A91D985EB9D1D2717D538F3424603C ] HTTP            C:\windows\system32\drivers\HTTP.sys
06:46:14.0598 4024  HTTP - ok
06:46:14.0605 4024  [ 2A98301068801700906C06649860FE94 ] hwpolicy        C:\windows\system32\drivers\hwpolicy.sys
06:46:14.0611 4024  hwpolicy - ok
06:46:14.0622 4024  [ DC76901D82097C9E297F20C287CB9A27 ] hyperkbd        C:\windows\System32\drivers\hyperkbd.sys
06:46:14.0629 4024  hyperkbd - ok
06:46:14.0638 4024  [ 716413AB3CA12DE0A7222D28C1C9352C ] HyperVideo      C:\windows\system32\DRIVERS\HyperVideo.sys
06:46:14.0647 4024  HyperVideo - ok
06:46:14.0661 4024  [ C9E9CBF73AFFBFE3E801EFB516787BA3 ] i8042prt        C:\windows\System32\drivers\i8042prt.sys
06:46:14.0672 4024  i8042prt - ok
06:46:14.0687 4024  [ 5E394EBD26FD68AA9300332C46BEDD62 ] iaStorV         C:\windows\system32\drivers\iaStorV.sys
06:46:14.0701 4024  iaStorV - ok
06:46:14.0859 4024  [ 11A31FC2481BFE69B0507ED8C80215F4 ] igfx            C:\windows\system32\DRIVERS\igdkmd64.sys
06:46:14.0993 4024  igfx - ok
06:46:15.0005 4024  [ 24847A06B84339FEEDE5CABF3D27D320 ] iirsp           C:\windows\system32\drivers\iirsp.sys
06:46:15.0012 4024  iirsp - ok
06:46:15.0060 4024  [ 531B5A98145DA689741A0AC18F14EA94 ] IKEEXT          C:\windows\System32\ikeext.dll
06:46:15.0091 4024  IKEEXT - ok
06:46:15.0142 4024  [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC ] Intel® Capability Licensing Service Interface c:\Program Files\Intel\iCLS Client\HeciServer.exe
06:46:15.0398 4024  Intel® Capability Licensing Service Interface - ok
06:46:15.0448 4024  [ 30E9FAC23E2537D82F2836CB81AEE186 ] Intel® ME Service C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe
06:46:18.0097 4024  Intel® ME Service - ok
06:46:18.0118 4024  [ 4F37726CF764CA18A8A84F85EF3A7F24 ] intelide        C:\windows\system32\drivers\intelide.sys
06:46:18.0897 4024  intelide - ok
06:46:18.0929 4024  [ E15CDF68DD73423F15D4AC404793AF0D ] intelppm        C:\windows\System32\drivers\intelppm.sys
06:46:18.0943 4024  intelppm - ok
06:46:18.0960 4024  [ 8FCA66234A0933D796BB780B7953BAB9 ] IpFilterDriver  C:\windows\system32\DRIVERS\ipfltdrv.sys
06:46:19.0443 4024  IpFilterDriver - ok
06:46:19.0479 4024  [ C217B8D2E58C57A319B16125C3D4B69C ] iphlpsvc        C:\windows\System32\iphlpsvc.dll
06:46:19.0505 4024  iphlpsvc - ok
06:46:19.0523 4024  [ 6E98A046A12AA113F8898AA5D612BD6E ] IPMIDRV         C:\windows\System32\drivers\IPMIDrv.sys
06:46:19.0532 4024  IPMIDRV - ok
06:46:19.0563 4024  [ 3969B9C218DD3FAA9F4ED2FFC3651C02 ] IPNAT           C:\windows\system32\drivers\ipnat.sys
06:46:19.0704 4024  IPNAT - ok
06:46:19.0717 4024  [ 25CD7C4BB2863FFC2B0B311F0AEBF77C ] IRENUM          C:\windows\system32\drivers\irenum.sys
06:46:19.0726 4024  IRENUM - ok
06:46:19.0743 4024  [ D940C5BB9DC92E588533C19ABCC3D2C2 ] isapnp          C:\windows\system32\drivers\isapnp.sys
06:46:19.0751 4024  isapnp - ok
06:46:19.0790 4024  [ 69C8BF0BC2B0EA10F130F4D3104DC2EF ] iScsiPrt        C:\windows\System32\drivers\msiscsi.sys
06:46:19.0982 4024  iScsiPrt - ok
06:46:20.0016 4024  [ 3C4002D339491AF73D663FFC7F6E5ECB ] jhi_service     C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
06:46:20.0243 4024  jhi_service - ok
06:46:20.0268 4024  [ 3FE43C2F5B5C08657A1B547AFBE2118E ] JMCR            C:\windows\System32\drivers\jmcr.sys
06:46:20.0283 4024  JMCR - ok
06:46:20.0293 4024  [ 8FBD94B69D6423E20ABCD59D86368B21 ] kbdclass        C:\windows\System32\drivers\kbdclass.sys
06:46:20.0301 4024  kbdclass - ok
06:46:20.0322 4024  [ E88C932ABDF8185A62C8F2FC7B051FB6 ] kbdhid          C:\windows\System32\drivers\kbdhid.sys
06:46:20.0328 4024  kbdhid - ok
06:46:20.0334 4024  [ FB6C185092E18011EF49989425C2AA87 ] kdnic           C:\windows\system32\DRIVERS\kdnic.sys
06:46:20.0342 4024  kdnic - ok
06:46:20.0350 4024  [ F702AB6181513303AB0FC8D59E52708B ] KeyIso          C:\windows\system32\lsass.exe
06:46:20.0358 4024  KeyIso - ok
06:46:20.0383 4024  [ DFA480F6DED551464F3A5B959F437800 ] KSecDD          C:\windows\system32\Drivers\ksecdd.sys
06:46:20.0404 4024  KSecDD - ok
06:46:20.0434 4024  [ 127FB0AAD232BAAD2C9BBACD374F4FC5 ] KSecPkg         C:\windows\system32\Drivers\ksecpkg.sys
06:46:20.0453 4024  KSecPkg - ok
06:46:20.0457 4024  [ 81492FEEBF2F26455B00EE8DBAE8A1B0 ] ksthunk         C:\windows\system32\drivers\ksthunk.sys
06:46:20.0464 4024  ksthunk - ok
06:46:20.0490 4024  [ 5825DBACEDC3812B5CF8D40B997BF210 ] KtmRm           C:\windows\system32\msdtckrm.dll
06:46:20.0511 4024  KtmRm - ok
06:46:20.0539 4024  [ 256EE31588257E8A555DBFAA13F1908E ] LanmanServer    C:\windows\system32\srvsvc.dll
06:46:20.0557 4024  LanmanServer - ok
06:46:20.0575 4024  [ 16650912BE5A94B40E0B3B4C39652B56 ] LanmanWorkstation C:\windows\System32\wkssvc.dll
06:46:20.0593 4024  LanmanWorkstation - ok
06:46:20.0608 4024  [ CEEFD29FC551F289810B0B9381B321DC ] lltdio          C:\windows\system32\DRIVERS\lltdio.sys
06:46:20.0626 4024  lltdio - ok
06:46:20.0642 4024  [ BCF53485E0A94722CDE3C4A93CD8EB8C ] lltdsvc         C:\windows\System32\lltdsvc.dll
06:46:20.0663 4024  lltdsvc - ok
06:46:20.0679 4024  [ 5A2F7F1CBC2E631A497DAD16164E06D2 ] lmhosts         C:\windows\System32\lmhsvc.dll
06:46:20.0687 4024  lmhosts - ok
06:46:20.0705 4024  [ 4269D44BB47A6DA5D80B11F4C8536458 ] LMS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
06:46:20.0722 4024  LMS - ok
06:46:20.0753 4024  [ 022CDD12161B063D7852B1075BF3FFF2 ] LSI_SAS         C:\windows\system32\drivers\lsi_sas.sys
06:46:20.0777 4024  LSI_SAS - ok
06:46:20.0792 4024  [ 07AD59D669B996F29F91817F0ECFA34F ] LSI_SAS2        C:\windows\system32\drivers\lsi_sas2.sys
06:46:20.0805 4024  LSI_SAS2 - ok
06:46:20.0823 4024  [ 216FB796AA4E252ACCE93B1BCB80B5EC ] LSI_SCSI        C:\windows\system32\drivers\lsi_scsi.sys
06:46:20.0840 4024  LSI_SCSI - ok
06:46:20.0851 4024  [ 5E80530AF37102488EE980B4A92AF99F ] LSI_SSS         C:\windows\system32\drivers\lsi_sss.sys
06:46:20.0867 4024  LSI_SSS - ok
06:46:20.0895 4024  [ A57BA284F5996FFD32DCDBC41A4657DB ] LSM             C:\windows\System32\lsm.dll
06:46:20.0917 4024  LSM - ok
06:46:20.0926 4024  [ 2BDC5D711FA61307CE6190D47C956368 ] luafv           C:\windows\system32\drivers\luafv.sys
06:46:20.0941 4024  luafv - ok
06:46:20.0944 4024  lxcg_device - ok
06:46:20.0963 4024  [ 0BB97D43299910CBFBA59C461B99B910 ] MBAMProtector   C:\windows\system32\drivers\mbam.sys
06:46:20.0968 4024  MBAMProtector - ok
06:46:21.0018 4024  [ 65085456FD9A74D7F1A999520C299ECB ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
06:46:21.0039 4024  MBAMScheduler - ok
06:46:21.0075 4024  [ E0D7732F2D2E24B2DB3F67B6750295B8 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
06:46:21.0109 4024  MBAMService - ok
06:46:21.0123 4024  [ 9B0D829C3BE4E7472DB9DD2B79908E3C ] megasas         C:\windows\system32\drivers\megasas.sys
06:46:21.0140 4024  megasas - ok
06:46:21.0164 4024  [ ECC3F54C7AFC318271C4F0B4606D8DB0 ] MegaSR          C:\windows\system32\drivers\MegaSR.sys
06:46:21.0179 4024  MegaSR - ok
06:46:21.0195 4024  [ 772A1DEEDFDBC244183B5C805D1B7D85 ] MEIx64          C:\windows\System32\drivers\HECIx64.sys
06:46:21.0200 4024  MEIx64 - ok
06:46:21.0230 4024  [ EEE908BE7143FCA48CF0CB87214E2AB8 ] MMCSS           C:\windows\system32\mmcss.dll
06:46:21.0243 4024  MMCSS - ok
06:46:21.0259 4024  [ 780098AD5DA8A4822E2563984C85EF7B ] Modem           C:\windows\system32\drivers\modem.sys
06:46:21.0272 4024  Modem - ok
06:46:21.0298 4024  [ EA8EAD3F5B762F889CC7F3966625B48B ] monitor         C:\windows\System32\drivers\monitor.sys
06:46:21.0314 4024  monitor - ok
06:46:21.0324 4024  [ 618446B98C79776654340CE27C73485E ] mouclass        C:\windows\System32\drivers\mouclass.sys
06:46:21.0340 4024  mouclass - ok
06:46:21.0363 4024  [ C0ADEBED913295803B579ED288936CBB ] mouhid          C:\windows\System32\drivers\mouhid.sys
06:46:21.0371 4024  mouhid - ok
06:46:21.0385 4024  [ 89D263DBF08119CE16273991C120D6DD ] mountmgr        C:\windows\system32\drivers\mountmgr.sys
06:46:21.0400 4024  mountmgr - ok
06:46:21.0427 4024  [ 528A5C2570F468155A1B3CF0A2FF5EBD ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
06:46:21.0440 4024  MozillaMaintenance - ok
06:46:21.0465 4024  [ 0D1609DD82C7440F5D5BF21A9D4D5C0C ] mpsdrv          C:\windows\system32\drivers\mpsdrv.sys
06:46:21.0479 4024  mpsdrv - ok
06:46:21.0515 4024  [ 3031573A739DBEE8923851929D0AF423 ] MpsSvc          C:\windows\system32\mpssvc.dll
06:46:21.0529 4024  MpsSvc - ok
06:46:21.0544 4024  [ 3D70147F55F1EC84EB9139ED7FFE48BC ] MRxDAV          C:\windows\system32\drivers\mrxdav.sys
06:46:21.0555 4024  MRxDAV - ok
06:46:21.0585 4024  [ 93179D48066918323628CB016D8C94DC ] mrxsmb          C:\windows\system32\DRIVERS\mrxsmb.sys
06:46:21.0601 4024  mrxsmb - ok
06:46:21.0613 4024  [ 06D5F2FA3C61E8EA91648EA8E9F99FD3 ] mrxsmb10        C:\windows\system32\DRIVERS\mrxsmb10.sys
06:46:21.0632 4024  mrxsmb10 - ok
06:46:21.0642 4024  [ 5C7DD2E5759FFCCD2C7341C1B90F2B26 ] mrxsmb20        C:\windows\system32\DRIVERS\mrxsmb20.sys
06:46:21.0653 4024  mrxsmb20 - ok
06:46:21.0668 4024  [ 98487487D6B3797CA927E9D7B030AE13 ] MsBridge        C:\windows\system32\DRIVERS\bridge.sys
06:46:21.0683 4024  MsBridge - ok
06:46:21.0704 4024  [ 4A07458EB4F17573BD39F22029A991C1 ] MSDTC           C:\windows\System32\msdtc.exe
06:46:22.0013 4024  MSDTC - ok
06:46:22.0024 4024  [ 3886F1F2A4D2900ABAA7E4486BEEE6A2 ] Msfs            C:\windows\system32\drivers\Msfs.sys
06:46:22.0031 4024  Msfs - ok
06:46:22.0062 4024  [ C32A7A39B960A42BA9D4FBE47213CA03 ] msgpiowin32     C:\windows\System32\drivers\msgpiowin32.sys
06:46:22.0269 4024  msgpiowin32 - ok
06:46:22.0286 4024  [ D3857A767B91A061B408CCAB02DA4F40 ] mshidkmdf       C:\windows\System32\drivers\mshidkmdf.sys
06:46:22.0299 4024  mshidkmdf - ok
06:46:22.0306 4024  [ 839B48910FB1E887635C48F3EC11A05E ] mshidumdf       C:\windows\System32\drivers\mshidumdf.sys
06:46:22.0320 4024  mshidumdf - ok
06:46:22.0338 4024  [ 55C0DB741E3AB7463242B185B1C2997C ] msisadrv        C:\windows\system32\drivers\msisadrv.sys
06:46:22.0347 4024  msisadrv - ok
06:46:22.0372 4024  [ 216C6B035A4BA5560E1255BD8E5BB89F ] MSiSCSI         C:\windows\system32\iscsiexe.dll
06:46:22.0382 4024  MSiSCSI - ok
06:46:22.0385 4024  msiserver - ok
06:46:22.0392 4024  [ 509809566E49F4411055864EA8D437CD ] MSKSSRV         C:\windows\system32\drivers\MSKSSRV.sys
06:46:22.0399 4024  MSKSSRV - ok
06:46:22.0412 4024  [ 63145201D6458E4958E572E7D6FC2604 ] MsLldp          C:\windows\system32\DRIVERS\mslldp.sys
06:46:22.0419 4024  MsLldp - ok
06:46:22.0442 4024  [ 99D526E803DB6D7FF290FD98B6204641 ] MSPCLOCK        C:\windows\system32\drivers\MSPCLOCK.sys
06:46:22.0448 4024  MSPCLOCK - ok
06:46:22.0462 4024  [ 06FA77C3E2A491ADCD704C5E73006269 ] MSPQM           C:\windows\system32\drivers\MSPQM.sys
06:46:22.0470 4024  MSPQM - ok
06:46:22.0492 4024  [ E134EC4DE11CF78CB01432D180710D84 ] MsRPC           C:\windows\system32\drivers\MsRPC.sys
06:46:22.0506 4024  MsRPC - ok
06:46:22.0516 4024  [ B5AECF12F09DEE97C9FCAA5BA016CE1E ] mssmbios        C:\windows\System32\drivers\mssmbios.sys
06:46:22.0523 4024  mssmbios - ok
06:46:22.0535 4024  [ 72D66A05E0F99F2528F6C6204FD22AA1 ] MSTEE           C:\windows\system32\drivers\MSTEE.sys
06:46:22.0544 4024  MSTEE - ok
06:46:22.0575 4024  [ 8AAAE399FC255FA105D4158CBA289001 ] MTConfig        C:\windows\System32\drivers\MTConfig.sys
06:46:22.0583 4024  MTConfig - ok
06:46:22.0611 4024  [ 3BCB702F3E6CC622DCAFCAA45D7CDE0A ] Mup             C:\windows\system32\Drivers\mup.sys
06:46:22.0618 4024  Mup - ok
06:46:22.0636 4024  [ 3A1E095277BBD406CEA8EA6B76950664 ] mvumis          C:\windows\system32\drivers\mvumis.sys
06:46:22.0644 4024  mvumis - ok
06:46:22.0720 4024  [ 78AE3B953A6D93F748AAB36D449AF34A ] NanoServiceMain C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSANHost.exe
06:46:22.0735 4024  NanoServiceMain - ok
06:46:22.0765 4024  [ 4B18840511D720BA118D3017E8165875 ] napagent        C:\windows\system32\qagentRT.dll
06:46:22.0798 4024  napagent - ok
06:46:22.0823 4024  [ 43D7388A90A4C6EA346A4D6FF0377479 ] NativeWifiP     C:\windows\system32\DRIVERS\nwifi.sys
06:46:22.0845 4024  NativeWifiP - ok
06:46:22.0866 4024  [ 6A0C3996DA7DAE6D6939676D786EEEC4 ] NcaSvc          C:\windows\System32\ncasvc.dll
06:46:22.0879 4024  NcaSvc - ok
06:46:22.0890 4024  [ C982FE4CC91DECE2259F494FCEB4030F ] NcdAutoSetup    C:\windows\System32\NcdAutoSetup.dll
06:46:22.0900 4024  NcdAutoSetup - ok
06:46:22.0937 4024  [ 03CFE4108D1DE16D6C59455B5C73319C ] NDIS            C:\windows\system32\drivers\ndis.sys
06:46:23.0031 4024  NDIS - ok
06:46:23.0045 4024  [ 39C8A1D9D46F5E83A016BCAB72455284 ] NdisCap         C:\windows\system32\DRIVERS\ndiscap.sys
06:46:23.0055 4024  NdisCap - ok
06:46:23.0075 4024  [ 762941932B7E4C588E48A577BA9D6440 ] NdisImPlatform  C:\windows\system32\DRIVERS\NdisImPlatform.sys
06:46:23.0082 4024  NdisImPlatform - ok
06:46:23.0106 4024  [ 7A6F8A6D0E01432EBA294EF29CDD0FA7 ] NdisTapi        C:\windows\system32\DRIVERS\ndistapi.sys
06:46:23.0114 4024  NdisTapi - ok
06:46:23.0125 4024  [ 79AB68BB3FFF974AD4F41FA559F4EC67 ] Ndisuio         C:\windows\system32\DRIVERS\ndisuio.sys
06:46:23.0132 4024  Ndisuio - ok
06:46:23.0144 4024  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8 ] NdisWan         C:\windows\system32\DRIVERS\ndiswan.sys
06:46:23.0156 4024  NdisWan - ok
06:46:23.0159 4024  [ 62C7DBF4F9301F76CF87D4B9D8F57BF8 ] NDISWANLEGACY   C:\windows\system32\DRIVERS\ndiswan.sys
06:46:23.0169 4024  NDISWANLEGACY - ok
06:46:23.0201 4024  [ 3730942D7DB2F8BB5F84542B7FF6F650 ] NDProxy         C:\windows\system32\drivers\NDProxy.sys
06:46:23.0209 4024  NDProxy - ok
06:46:23.0218 4024  [ D3F60A4345FCA9C1BE68AD7D0D6DE770 ] Ndu             C:\windows\system32\drivers\Ndu.sys
06:46:23.0234 4024  Ndu - ok
06:46:23.0244 4024  [ 7C203A76394F9AE68F69EEE5F9612C4A ] NetBIOS         C:\windows\system32\DRIVERS\netbios.sys
06:46:23.0263 4024  NetBIOS - ok
06:46:23.0272 4024  [ 7CEC25C682D319D484630B3952C31A11 ] NetBT           C:\windows\system32\DRIVERS\netbt.sys
06:46:23.0310 4024  NetBT - ok
06:46:23.0322 4024  [ F702AB6181513303AB0FC8D59E52708B ] Netlogon        C:\windows\system32\lsass.exe
06:46:23.0330 4024  Netlogon - ok
06:46:23.0354 4024  [ 89519D29CBEC2121CA65CC29C4D345E0 ] Netman          C:\windows\System32\netman.dll
06:46:23.0368 4024  Netman - ok
06:46:23.0400 4024  [ 79FA9393C67EBBF92A56923592CF7A7C ] netprofm        C:\windows\System32\netprofmsvc.dll
06:46:23.0415 4024  netprofm - ok
06:46:23.0469 4024  [ 080417AC9E51B2B29656EC26B62E87F1 ] netr28x         C:\windows\system32\DRIVERS\netr28x.sys
06:46:23.0528 4024  netr28x - ok
06:46:23.0566 4024  [ 5243CFC2E7161C91C2B355240035B9E4 ] NetTcpPortSharing C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
06:46:23.0575 4024  NetTcpPortSharing - ok
06:46:23.0596 4024  [ 12DD2800E4EEA37DC9AE256AD62423B4 ] nfrd960         C:\windows\system32\drivers\nfrd960.sys
06:46:23.0605 4024  nfrd960 - ok
06:46:23.0633 4024  [ 80ABCD4C2DE9FD832477303AE0CA3BE5 ] NlaSvc          C:\windows\System32\nlasvc.dll
06:46:23.0647 4024  NlaSvc - ok
06:46:23.0682 4024  [ 37B93643A2A003EE25308DDF4EAF8C54 ] NNSALPC         C:\windows\system32\DRIVERS\NNSALPC.sys
06:46:23.0688 4024  NNSALPC - ok
06:46:23.0695 4024  [ B0FA8C7F0451145C1BDB79484FEC3586 ] NNSHTTP         C:\windows\system32\DRIVERS\NNSHTTP.sys
06:46:23.0703 4024  NNSHTTP - ok
06:46:23.0715 4024  [ 1E599DA97D1A09F54969430AAA106BFA ] NNSHTTPS        C:\windows\system32\DRIVERS\NNSHTTPS.sys
06:46:23.0726 4024  NNSHTTPS - ok
06:46:23.0740 4024  [ 98BDEC322082187674F9764B6C3D3F37 ] NNSIDS          C:\windows\system32\DRIVERS\NNSIDS.sys
06:46:23.0748 4024  NNSIDS - ok
06:46:23.0774 4024  [ B14E495DB9D3C5C3BBF466F054F1AD05 ] NNSNAHSL        C:\windows\system32\DRIVERS\NNSNAHSL.sys
06:46:23.0779 4024  NNSNAHSL - ok
06:46:23.0791 4024  [ 148616C45CC9AB911049CBC8E2B705E9 ] NNSPICC         C:\windows\system32\DRIVERS\NNSPICC.sys
06:46:23.0797 4024  NNSPICC - ok
06:46:23.0806 4024  [ 47E510F2699F745581184DBBA24D2148 ] NNSPIHSW        C:\windows\system32\DRIVERS\NNSPIHSW.sys
06:46:23.0811 4024  NNSPIHSW - ok
06:46:23.0825 4024  [ 6CD7D0B3F8F1C1B0CC8D5EA700C16DA5 ] NNSPOP3         C:\windows\system32\DRIVERS\NNSPOP3.sys
06:46:23.0831 4024  NNSPOP3 - ok
06:46:23.0881 4024  [ 6D94915B8EB8FF01664C4170D3AAC994 ] NNSPROT         C:\windows\system32\DRIVERS\NNSPROT.sys
06:46:23.0890 4024  NNSPROT - ok
06:46:23.0902 4024  [ 8CDCAD81FB4C3CAA95A6D5F1F189AF4D ] NNSPRV          C:\windows\system32\DRIVERS\NNSPRV.sys
06:46:23.0913 4024  NNSPRV - ok
06:46:23.0930 4024  [ 22F8E36B153CD61B5FB2A9FE63D0561A ] NNSSMTP         C:\windows\system32\DRIVERS\NNSSMTP.sys
06:46:23.0941 4024  NNSSMTP - ok
06:46:23.0959 4024  [ 64734FB9136A009E15E01125D11A893A ] NNSSTRM         C:\windows\system32\DRIVERS\NNSSTRM.sys
06:46:23.0976 4024  NNSSTRM - ok
06:46:23.0988 4024  [ FA76C90C664963BE96E243E109415717 ] NNSTLSC         C:\windows\system32\DRIVERS\NNSTLSC.sys
06:46:23.0996 4024  NNSTLSC - ok
06:46:24.0004 4024  [ 17E19A742FB30C002F8B43575451DBE1 ] Npfs            C:\windows\system32\drivers\Npfs.sys
06:46:24.0013 4024  Npfs - ok
06:46:24.0033 4024  [ 8ED299C30792544264E558BEA79F0947 ] npsvctrig       C:\windows\System32\drivers\npsvctrig.sys
06:46:24.0047 4024  npsvctrig - ok
06:46:24.0068 4024  [ 832B5FDF0B5577713FD7F2465FCD0ACE ] nsi             C:\windows\system32\nsisvc.dll
06:46:24.0077 4024  nsi - ok
06:46:24.0088 4024  [ 689B3B1E95C70ABF7AFF29F9406EF1E0 ] nsiproxy        C:\windows\system32\drivers\nsiproxy.sys
06:46:24.0096 4024  nsiproxy - ok
06:46:24.0151 4024  [ 76929F4A69E425911A63B407E26C2589 ] Ntfs            C:\windows\system32\drivers\Ntfs.sys
06:46:24.0201 4024  Ntfs - ok
06:46:24.0214 4024  [ 4163ADE07DB51843AE31F65B94F5398D ] Null            C:\windows\system32\drivers\Null.sys
06:46:24.0221 4024  Null - ok
06:46:24.0235 4024  [ D6D34118263412D3AAA8348A9572B7F2 ] nvraid          C:\windows\system32\drivers\nvraid.sys
06:46:24.0245 4024  nvraid - ok
06:46:24.0255 4024  [ 27AFC428D1D32ABD04A86763A4EDDEA9 ] nvstor          C:\windows\system32\drivers\nvstor.sys
06:46:24.0269 4024  nvstor - ok
06:46:24.0285 4024  [ 051CFB5107BAAE510419BDC41F8C4036 ] nv_agp          C:\windows\system32\drivers\nv_agp.sys
06:46:24.0294 4024  nv_agp - ok
06:46:24.0375 4024  [ E0506331F0454C347B28B2AE4BD14636 ] OfficeSvc       C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe
06:46:24.0426 4024  OfficeSvc - ok
06:46:24.0454 4024  [ 30B5F9FB0C35AE6B4A0851D24CE2EE8B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
06:46:24.0464 4024  ose - ok
06:46:24.0489 4024  [ AB76700D764A342D7475FB8F47CAB18C ] p2pimsvc        C:\windows\system32\pnrpsvc.dll
06:46:24.0501 4024  p2pimsvc - ok
06:46:24.0525 4024  [ 4319FD931DCD796435ECB5DB4A04FBA5 ] p2psvc          C:\windows\system32\p2psvc.dll
06:46:24.0538 4024  p2psvc - ok
06:46:24.0561 4024  [ 4563DAF8C6A740AD7F501E219BD10766 ] Parport         C:\windows\System32\drivers\parport.sys
06:46:24.0570 4024  Parport - ok
06:46:24.0593 4024  [ D6ACCF9F2EEEEA711C14EFD976E573F3 ] partmgr         C:\windows\system32\drivers\partmgr.sys
06:46:24.0600 4024  partmgr - ok
06:46:24.0628 4024  [ 4811D9EC53649105A5A8BEA661B0F936 ] PcaSvc          C:\windows\System32\pcasvc.dll
06:46:24.0641 4024  PcaSvc - ok
06:46:24.0655 4024  [ 4A003E8F718C1E6A2050CA98CD53E3E2 ] pci             C:\windows\system32\drivers\pci.sys
06:46:24.0666 4024  pci - ok
06:46:24.0681 4024  [ F9908D274D458220F91E89B54D78D837 ] pciide          C:\windows\system32\drivers\pciide.sys
06:46:24.0687 4024  pciide - ok
06:46:24.0702 4024  [ 84D19CB6102627932DCB5DFDF89FE269 ] pcmcia          C:\windows\system32\drivers\pcmcia.sys
06:46:24.0714 4024  pcmcia - ok
06:46:24.0726 4024  [ CEBBAD5391C2644560C55628A40BFD27 ] pcw             C:\windows\system32\drivers\pcw.sys
06:46:24.0734 4024  pcw - ok
06:46:24.0763 4024  [ 0698DEDEAD6A00AD0D468C687D830FBF ] pdc             C:\windows\system32\drivers\pdc.sys
06:46:24.0771 4024  pdc - ok
06:46:24.0809 4024  [ E5521EAC956162AB72A5468837FBFCEA ] PdiService      C:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
06:46:24.0819 4024  PdiService - ok
06:46:24.0860 4024  [ 61FE70659CD43E07F94DA4DC31DEC493 ] PEAUTH          C:\windows\system32\drivers\peauth.sys
06:46:24.0881 4024  PEAUTH - ok
06:46:24.0941 4024  [ EB88FA19F0EA05DD04BE9C5FFEEFFE1A ] PerfHost        C:\windows\SysWow64\perfhost.exe
06:46:24.0948 4024  PerfHost - ok
06:46:24.0990 4024  [ 6E84BFF58F7643499277F29DFA2F8C8D ] pla             C:\windows\system32\pla.dll
06:46:25.0028 4024  pla - ok
06:46:25.0051 4024  [ 799BE46D45D486704CE0F37CA5385262 ] PlugPlay        C:\windows\system32\umpnpmgr.dll
06:46:25.0060 4024  PlugPlay - ok
06:46:25.0077 4024  [ 8E2414E818C26C4A9C70CB2B8567F04F ] PNRPAutoReg     C:\windows\system32\pnrpauto.dll
06:46:25.0085 4024  PNRPAutoReg - ok
06:46:25.0096 4024  [ AB76700D764A342D7475FB8F47CAB18C ] PNRPsvc         C:\windows\system32\pnrpsvc.dll
06:46:25.0105 4024  PNRPsvc - ok
06:46:25.0124 4024  [ 0108C8E5176D590F242701EF5A62CC26 ] PolicyAgent     C:\windows\System32\ipsecsvc.dll
06:46:25.0142 4024  PolicyAgent - ok
06:46:25.0176 4024  [ F1E067F56373F11EA4B785CAE823740A ] Power           C:\windows\system32\umpo.dll
06:46:25.0187 4024  Power - ok
06:46:25.0213 4024  [ 362D47E5B4D67270DE4B8606036F4ADD ] PptpMiniport    C:\windows\system32\DRIVERS\raspptp.sys
06:46:25.0223 4024  PptpMiniport - ok
06:46:25.0305 4024  [ 9D59831262CAD44E709D695FC9D5E7AB ] PrintNotify     C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll
06:46:25.0350 4024  PrintNotify - ok
06:46:25.0380 4024  [ DD979EB6A7212F60E4AFBE96EDC7AE6D ] Processor       C:\windows\System32\drivers\processr.sys
06:46:25.0388 4024  Processor - ok
06:46:25.0405 4024  [ 429E8502AD2227CF88F8840FC5BD590D ] ProfSvc         C:\windows\system32\profsvc.dll
06:46:25.0425 4024  ProfSvc - ok
06:46:25.0439 4024  [ EB8034147D4820CD31BFCB11A2A652DF ] Psched          C:\windows\system32\DRIVERS\pacer.sys
06:46:25.0452 4024  Psched - ok
06:46:25.0483 4024  [ AF3D4E1AA6CF1835DC477D15E01BC2B5 ] PSINAflt        C:\windows\system32\DRIVERS\PSINAflt.sys
06:46:25.0493 4024  PSINAflt - ok
06:46:25.0527 4024  [ C7CC887F2CC0AAAED0CD4987DCD043F3 ] PSINFile        C:\windows\system32\DRIVERS\PSINFile.sys
06:46:25.0538 4024  PSINFile - ok
06:46:25.0569 4024  [ 7613FADD18702860EE9D8CC2D588FCCB ] PSINKNC         C:\windows\system32\DRIVERS\PSINKNC.sys
06:46:25.0583 4024  PSINKNC - ok
06:46:25.0596 4024  [ 73F0EE716AC461A401F9971FBA2C7F52 ] PSINProc        C:\windows\system32\DRIVERS\PSINProc.sys
06:46:25.0607 4024  PSINProc - ok
06:46:25.0622 4024  [ 2659EB9112565858CB64209BACED42BE ] PSINProt        C:\windows\system32\DRIVERS\PSINProt.sys
06:46:25.0634 4024  PSINProt - ok
06:46:25.0654 4024  [ 9AAEAD6F389D00D298FBD5968A9A0954 ] PSINReg         C:\windows\system32\DRIVERS\PSINReg.sys
06:46:25.0665 4024  PSINReg - ok
06:46:25.0704 4024  [ D6C6BAE38CFEDCF3F7E046A5A72528FD ] PSKMAD          C:\windows\system32\DRIVERS\PSKMAD.sys
06:46:25.0714 4024  PSKMAD - ok
06:46:25.0749 4024  [ 73D04CB99627401455F5AD4011A6FAEE ] PSUAService     C:\Program Files (x86)\Panda Security\Panda Cloud Antivirus\PSUAService.exe
06:46:25.0757 4024  PSUAService - ok
06:46:25.0792 4024  [ 0AFBF333B6F87A2F598EAB379AF100B8 ] QWAVE           C:\windows\system32\qwave.dll
06:46:25.0813 4024  QWAVE - ok
06:46:25.0838 4024  [ 13D47BB0CCA2FC51BD15F8E85C6A078E ] QWAVEdrv        C:\windows\system32\drivers\qwavedrv.sys
06:46:25.0848 4024  QWAVEdrv - ok
06:46:25.0862 4024  [ 873C60F8178100557740A832FCE10B5F ] RasAcd          C:\windows\system32\DRIVERS\rasacd.sys
06:46:25.0875 4024  RasAcd - ok
06:46:25.0920 4024  [ 69B93F623B130976243ECA3D84CC99CA ] RasAgileVpn     C:\windows\system32\DRIVERS\AgileVpn.sys
06:46:25.0938 4024  RasAgileVpn - ok
06:46:25.0953 4024  [ 005F6E54C4A2DA4EBF68FB0392CE8BB0 ] RasAuto         C:\windows\System32\rasauto.dll
06:46:25.0974 4024  RasAuto - ok
06:46:25.0986 4024  [ A14D625C5AEE5FFE0F47D1A1D419FAAE ] Rasl2tp         C:\windows\system32\DRIVERS\rasl2tp.sys
06:46:25.0998 4024  Rasl2tp - ok
06:46:26.0008 4024  [ C923C785A2DE0B396AD6D13ACAFF2DE9 ] RasMan          C:\windows\System32\rasmans.dll
06:46:26.0024 4024  RasMan - ok
06:46:26.0030 4024  [ 00695B9C2DB6111064499C529E90C042 ] RasPppoe        C:\windows\system32\DRIVERS\raspppoe.sys
06:46:26.0040 4024  RasPppoe - ok
06:46:26.0051 4024  [ A7F24D8CD1956B0A1FDCB86CC5114DE4 ] RasSstp         C:\windows\system32\DRIVERS\rassstp.sys
06:46:26.0062 4024  RasSstp - ok
06:46:26.0093 4024  [ CA03D642ACE58E1BA54E4B383F91CD69 ] rdbss           C:\windows\system32\DRIVERS\rdbss.sys
06:46:26.0106 4024  rdbss - ok
06:46:26.0129 4024  [ CA7DF5EC95D8DE0DD24BE7FF97369F68 ] rdpbus          C:\windows\System32\drivers\rdpbus.sys
06:46:26.0136 4024  rdpbus - ok
06:46:26.0150 4024  [ B2A3AD74FF2E2FFA73AF2567108231B3 ] RDPDR           C:\windows\system32\drivers\rdpdr.sys
06:46:26.0160 4024  RDPDR - ok
06:46:26.0188 4024  [ 57F4787E4602A3FCA719C0A33137C6DA ] RdpVideoMiniport C:\windows\system32\drivers\rdpvideominiport.sys
06:46:26.0195 4024  RdpVideoMiniport - ok
06:46:26.0209 4024  [ B3CB0721E81E30419CE7D837EF4EA151 ] RDPWD           C:\windows\system32\drivers\RDPWD.sys
06:46:26.0220 4024  RDPWD - ok
06:46:26.0234 4024  [ 62C1F8A0685FE07E998AA296C4F697C4 ] rdyboost        C:\windows\system32\drivers\rdyboost.sys
06:46:26.0245 4024  rdyboost - ok
06:46:26.0288 4024  [ B2D01290C0E0465ACA54C2088E947823 ] RealNetworks Downloader Resolver Service C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
06:46:26.0293 4024  RealNetworks Downloader Resolver Service - ok
06:46:26.0310 4024  [ 3663CCF243EE0C04E9F6F91ED1737273 ] RemoteAccess    C:\windows\System32\mprdim.dll
06:46:26.0320 4024  RemoteAccess - ok
06:46:26.0338 4024  [ E80DD61E52EDFFF9DA1ED7260A68855B ] RemoteRegistry  C:\windows\system32\regsvc.dll
06:46:26.0353 4024  RemoteRegistry - ok
06:46:26.0377 4024  [ CCBFCABDFE2BC22F0645CEAADDB36004 ] RFCOMM          C:\windows\System32\drivers\rfcomm.sys
06:46:26.0385 4024  RFCOMM - ok
06:46:26.0416 4024  [ 73F2E030B5C24E4E41401B5F0D59E6FD ] RpcEptMapper    C:\windows\System32\RpcEpMap.dll
06:46:26.0425 4024  RpcEptMapper - ok
06:46:26.0443 4024  [ 10B21284B3D964AB3DC45490E57D422E ] RpcLocator      C:\windows\system32\locator.exe
06:46:26.0450 4024  RpcLocator - ok
06:46:26.0472 4024  [ 1EC6E533C954BDDF2A37E7851A7E58FD ] RpcSs           C:\windows\system32\rpcss.dll
06:46:26.0489 4024  RpcSs - ok
06:46:26.0506 4024  [ E04E770DD198B9399640717145E79EBF ] rspndr          C:\windows\system32\DRIVERS\rspndr.sys
06:46:26.0517 4024  rspndr - ok
06:46:26.0549 4024  [ 79FF8A60B981CC4F07335DF98F95EBB7 ] rtbth           C:\windows\System32\drivers\rtbth.sys
06:46:26.0564 4024  rtbth - ok
06:46:26.0594 4024  [ 7D9DA8EC6784A9EE213C676709D46BE6 ] RTL8168         C:\windows\system32\DRIVERS\Rt630x64.sys
06:46:26.0609 4024  RTL8168 - ok
06:46:26.0622 4024  [ 752EC7DCD2F96871A3857EEE6AFE965A ] s3cap           C:\windows\System32\drivers\vms3cap.sys
06:46:26.0629 4024  s3cap - ok
06:46:26.0651 4024  [ F702AB6181513303AB0FC8D59E52708B ] SamSs           C:\windows\system32\lsass.exe
06:46:26.0659 4024  SamSs - ok
06:46:26.0668 4024  [ 9C7B28CE0D136DB226E24DB3BC817F92 ] sbp2port        C:\windows\system32\drivers\sbp2port.sys
06:46:26.0677 4024  sbp2port - ok
06:46:26.0698 4024  [ 14316954FCE79C9DE5A0AFF9D42C83AA ] SCardSvr        C:\windows\System32\SCardSvr.dll
06:46:26.0714 4024  SCardSvr - ok
06:46:26.0720 4024  [ 5D7733A12756B267FCA021672B26BC9E ] scfilter        C:\windows\system32\DRIVERS\scfilter.sys
06:46:26.0730 4024  scfilter - ok
06:46:26.0817 4024  [ ED40ED9A65F3E79A8C43DD50C5FDADBF ] Schedule        C:\windows\system32\schedsvc.dll
06:46:26.0849 4024  Schedule - ok
06:46:26.0868 4024  [ BAF8F0F55BC300E5F882E521F054E345 ] SCPolicySvc     C:\windows\System32\certprop.dll
06:46:26.0879 4024  SCPolicySvc - ok
06:46:26.0905 4024  [ 047315E75392CEA447ACC86257824C16 ] sdbus           C:\windows\System32\drivers\sdbus.sys
06:46:26.0915 4024  sdbus - ok
06:46:26.0926 4024  [ 92968277ED491E4B3DDA361E3952361E ] SDRSVC          C:\windows\System32\SDRSVC.dll
06:46:26.0934 4024  SDRSVC - ok
06:46:26.0964 4024  [ BB107AA9980B0DA4E19A3A90C3BD4460 ] sdstor          C:\windows\System32\drivers\sdstor.sys
06:46:26.0981 4024  sdstor - ok
06:46:27.0010 4024  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\windows\system32\drivers\secdrv.sys
06:46:27.0017 4024  secdrv - ok
06:46:27.0024 4024  [ CD282626738B6BC92B6E7CD0AAE95B63 ] seclogon        C:\windows\system32\seclogon.dll
06:46:27.0034 4024  seclogon - ok
06:46:27.0041 4024  [ 9C51620998F0763039DFA6BF68E475ED ] SENS            C:\windows\System32\sens.dll
06:46:27.0053 4024  SENS - ok
06:46:27.0067 4024  [ 0D50B4B860DAB65241628D04CD33ACAE ] SensrSvc        C:\windows\system32\sensrsvc.dll
06:46:27.0079 4024  SensrSvc - ok
06:46:27.0092 4024  [ 87C46B239A7EEF30FDFDD5E9BD46130C ] SerCx           C:\windows\system32\drivers\SerCx.sys
06:46:27.0100 4024  SerCx - ok
06:46:27.0116 4024  [ 7A1F9347C85FD55E39B8A76B3A25C5AD ] Serenum         C:\windows\System32\drivers\serenum.sys
06:46:27.0124 4024  Serenum - ok
06:46:27.0137 4024  [ F640A0A218BBF857F1D04A15D7D939F6 ] Serial          C:\windows\System32\drivers\serial.sys
06:46:27.0146 4024  Serial - ok
06:46:27.0156 4024  [ F1A5F56B2620B862CC28FF96A0A6DAAB ] sermouse        C:\windows\System32\drivers\sermouse.sys
06:46:27.0163 4024  sermouse - ok
06:46:27.0179 4024  [ CB60A60340788C8D6DE2A269D28086AB ] SessionEnv      C:\windows\system32\sessenv.dll
06:46:27.0191 4024  SessionEnv - ok
06:46:27.0207 4024  [ 7EE65419B29302C795714FF8073969A1 ] sfloppy         C:\windows\System32\drivers\sfloppy.sys
06:46:27.0214 4024  sfloppy - ok
06:46:27.0243 4024  [ 090AE16F79C8EAD04E6031F863DA85F3 ] SharedAccess    C:\windows\System32\ipnathlp.dll
06:46:27.0256 4024  SharedAccess - ok
06:46:27.0270 4024  [ A77F3ABE13FCC698511E5DEC7ACEBD5F ] ShellHWDetection C:\windows\System32\shsvcs.dll
06:46:27.0295 4024  ShellHWDetection - ok
06:46:27.0306 4024  [ 2560721D6F16D5B611C36A3A9D28C1B2 ] SiSRaid2        C:\windows\system32\drivers\SiSRaid2.sys
06:46:27.0313 4024  SiSRaid2 - ok
06:46:27.0333 4024  [ 3AA8FDE1DBF65BB8B88B053529554A0D ] SiSRaid4        C:\windows\system32\drivers\sisraid4.sys
06:46:27.0341 4024  SiSRaid4 - ok
06:46:27.0368 4024  [ E660156A4588A84305CB772FD2C0DB21 ] SNMPTRAP        C:\windows\System32\snmptrap.exe
06:46:27.0378 4024  SNMPTRAP - ok
06:46:27.0410 4024  [ FD3AF5575B99871BADB94E7699DBCE08 ] spaceport       C:\windows\system32\drivers\spaceport.sys
06:46:27.0429 4024  spaceport - ok
06:46:27.0441 4024  [ 3D8679C8DF52EB26EB7583A4E0A29202 ] SpbCx           C:\windows\system32\drivers\SpbCx.sys
06:46:27.0451 4024  SpbCx - ok
06:46:27.0471 4024  [ 3F215BF2D4D8D6756298B25B579772C2 ] Spooler         C:\windows\System32\spoolsv.exe
06:46:27.0496 4024  Spooler - ok
06:46:27.0560 4024  [ EC84D961501054F87A6878EC5D53388F ] sppsvc          C:\windows\system32\sppsvc.exe
06:46:27.0627 4024  sppsvc - ok
06:46:27.0640 4024  [ 0F1FCD575A03ABDE13FCA9D0ADE4DDA6 ] srv             C:\windows\system32\DRIVERS\srv.sys
06:46:27.0652 4024  srv - ok
06:46:27.0683 4024  [ 56218A571ECF8D55E0CDFF8DF2546CF1 ] srv2            C:\windows\system32\DRIVERS\srv2.sys
06:46:27.0708 4024  srv2 - ok
06:46:27.0739 4024  [ 14FC338B80CFF7E04215133B568D15C4 ] srvnet          C:\windows\system32\DRIVERS\srvnet.sys
06:46:27.0749 4024  srvnet - ok
06:46:27.0764 4024  [ 7A20882D76D4A78240A5AC9F2C2EBA21 ] SSDPSRV         C:\windows\System32\ssdpsrv.dll
06:46:27.0778 4024  SSDPSRV - ok
06:46:27.0786 4024  [ D233B16999A8E626F6004BD7814C57EC ] SstpSvc         C:\windows\system32\sstpsvc.dll
06:46:27.0798 4024  SstpSvc - ok
06:46:27.0858 4024  [ 97F839E8AEC48EE271509BF4BC764C24 ] STacSV          C:\Program Files\IDT\WDM\STacSV64.exe
06:46:27.0869 4024  STacSV ( UnsignedFile.Multi.Generic ) - warning
06:46:27.0869 4024  STacSV - detected UnsignedFile.Multi.Generic (1)
06:46:27.0906 4024  [ 0A58D5D074014EEB4D0C66963F7E88AF ] StartMenuXService C:\Program Files\Start Menu X\StartMenuXService.exe
06:46:27.0915 4024  StartMenuXService - ok
06:46:27.0932 4024  [ 4E85355B94CFCB67C135F6521A4895A7 ] stexstor        C:\windows\system32\drivers\stexstor.sys
06:46:27.0945 4024  stexstor - ok
06:46:27.0969 4024  [ 7E89F65EB250463EE8665CFE19566FC3 ] STHDA           C:\windows\system32\DRIVERS\stwrt64.sys
06:46:27.0998 4024  STHDA - ok
06:46:28.0026 4024  [ BAC8A721736AECC55A4F71523AEAB65F ] stisvc          C:\windows\System32\wiaservc.dll
06:46:28.0044 4024  stisvc - ok
06:46:28.0072 4024  [ B240874B2CA0CD02E8CD11E140B14C57 ] storahci        C:\windows\system32\drivers\storahci.sys
06:46:28.0080 4024  storahci - ok
06:46:28.0095 4024  [ F74DBC95A57B1EE866D3732EB5F79BE2 ] storflt         C:\windows\system32\DRIVERS\vmstorfl.sys
06:46:28.0103 4024  storflt - ok
06:46:28.0125 4024  [ 5337E138B49ED1F44CCBA4073BC35C20 ] StorSvc         C:\windows\system32\storsvc.dll
06:46:28.0136 4024  StorSvc - ok
06:46:28.0148 4024  [ 543CD3CC0E05B8D8815E0D4F040B6F59 ] storvsc         C:\windows\system32\drivers\storvsc.sys
06:46:28.0161 4024  storvsc - ok
06:46:28.0175 4024  [ 8BC1C1ED6EF9C985A3FAA6A72F41679A ] svsvc           C:\windows\system32\svsvc.dll
06:46:28.0189 4024  svsvc - ok
06:46:28.0218 4024  [ E7C9BA71F5567E4A63D45791A4E6FBA8 ] SWDUMon         C:\windows\system32\DRIVERS\SWDUMon.sys
06:46:28.0223 4024  SWDUMon - ok
06:46:28.0239 4024  [ 4AFD66AAE74FFB5986BC240744DC5FC9 ] swenum          C:\windows\System32\drivers\swenum.sys
06:46:28.0248 4024  swenum - ok
06:46:28.0265 4024  [ 502F9488540051F3E6C39889ECFA76BB ] swprv           C:\windows\System32\swprv.dll
06:46:28.0283 4024  swprv - ok
06:46:28.0330 4024  [ A06CB9269D29EE3D0F3F5630ABB660B8 ] SysMain         C:\windows\system32\sysmain.dll
06:46:28.0352 4024  SysMain - ok
06:46:28.0391 4024  [ 6FB88606C4A71E1BFAF97D63A676C673 ] SystemEventsBroker C:\windows\System32\SystemEventsBrokerServer.dll
06:46:28.0400 4024  SystemEventsBroker - ok
06:46:28.0413 4024  [ A6C06C45C44AD06C70AF8899AEC15BDC ] TabletInputService C:\windows\System32\TabSvc.dll
06:46:28.0422 4024  TabletInputService - ok
06:46:28.0433 4024  [ 88B7721AB551C4325036B25A34A2BF7B ] TapiSrv         C:\windows\System32\tapisrv.dll
06:46:28.0445 4024  TapiSrv - ok
06:46:28.0492 4024  [ D750CE2A52F1B95E654CF2904C88EF1F ] Tcpip           C:\windows\system32\drivers\tcpip.sys
06:46:28.0530 4024  Tcpip - ok
06:46:28.0567 4024  [ D750CE2A52F1B95E654CF2904C88EF1F ] TCPIP6          C:\windows\system32\DRIVERS\tcpip.sys
06:46:28.0605 4024  TCPIP6 - ok
06:46:28.0631 4024  [ 8F2A13A5DF99D72FDDE87F502A66F989 ] tcpipreg        C:\windows\system32\drivers\tcpipreg.sys
06:46:28.0640 4024  tcpipreg - ok
06:46:28.0655 4024  [ 73DC722CE5DF26D7638CE2446F2655C7 ] tdx             C:\windows\system32\DRIVERS\tdx.sys
06:46:28.0674 4024  tdx - ok
06:46:28.0686 4024  [ F7C8AB5D8AFFAA318D6A21093D139BF4 ] terminpt        C:\windows\System32\drivers\terminpt.sys
06:46:28.0695 4024  terminpt - ok
06:46:28.0716 4024  [ 541EE228D0DEF392F7B2DFD885DD021B ] TermService     C:\windows\System32\termsrv.dll
06:46:28.0733 4024  TermService - ok
06:46:28.0743 4024  [ 519A6F672FFF56B7D8EE8C730CEC8ECD ] Themes          C:\windows\system32\themeservice.dll
06:46:28.0756 4024  Themes - ok
06:46:28.0789 4024  [ EEE908BE7143FCA48CF0CB87214E2AB8 ] THREADORDER     C:\windows\system32\mmcss.dll
06:46:28.0797 4024  THREADORDER - ok
06:46:28.0830 4024  [ 4515B9E4140F04FB3907692DF89FCA87 ] TimeBroker      C:\windows\System32\TimeBrokerServer.dll
06:46:28.0840 4024  TimeBroker - ok
06:46:28.0865 4024  [ 6F0BFF80EE2A5BC841286A51F893CBAD ] TPM             C:\windows\system32\drivers\tpm.sys
06:46:28.0875 4024  TPM - ok
06:46:28.0887 4024  [ 8C8CF3041B27E7657ADD0EE17F6DBFCA ] TrkWks          C:\windows\System32\trkwks.dll
06:46:28.0897 4024  TrkWks - ok
06:46:28.0937 4024  [ 8ABBB5CE0C62E0A6D28F32F44B7F865C ] TrustedInstaller C:\windows\servicing\TrustedInstaller.exe
06:46:28.0945 4024  TrustedInstaller - ok
06:46:28.0962 4024  [ 4E7C5FB10A50435523DE0CAA37DE2BD3 ] TsUsbFlt        C:\windows\system32\drivers\tsusbflt.sys
06:46:28.0970 4024  TsUsbFlt - ok
06:46:28.0984 4024  [ 16D684A820872EE54F6370703AC0B513 ] TsUsbGD         C:\windows\System32\drivers\TsUsbGD.sys
06:46:28.0991 4024  TsUsbGD - ok
06:46:29.0015 4024  [ 78C9EE193AC2B4CBDBC48B620314D740 ] tunnel          C:\windows\system32\DRIVERS\tunnel.sys
06:46:29.0031 4024  tunnel - ok
06:46:29.0046 4024  [ 6D4F67CA56ACA2085DFA2CD89EAFBC1A ] uagp35          C:\windows\system32\drivers\uagp35.sys
06:46:29.0054 4024  uagp35 - ok
06:46:29.0070 4024  [ 6FD6D03B7752C78712E5CFF29A305026 ] UASPStor        C:\windows\System32\drivers\uaspstor.sys
06:46:29.0078 4024  UASPStor - ok
06:46:29.0109 4024  [ 7C33D8B8A5EA2321B84A1B6653CBD0DB ] UCX01000        C:\windows\System32\drivers\ucx01000.sys
06:46:29.0120 4024  UCX01000 - ok
06:46:29.0140 4024  [ DC5A461591C71AF7F19DC048A81E3F88 ] udfs            C:\windows\system32\DRIVERS\udfs.sys
06:46:29.0156 4024  udfs - ok
06:46:29.0184 4024  [ FB3475FEA1CCB0DAEA1EBE44D0E3BB7D ] UI0Detect       C:\windows\system32\UI0Detect.exe
06:46:29.0195 4024  UI0Detect - ok
06:46:29.0207 4024  [ 07FEBCDF24FABA0D47B635D85A0FFB7A ] uliagpkx        C:\windows\system32\drivers\uliagpkx.sys
06:46:29.0215 4024  uliagpkx - ok
06:46:29.0226 4024  [ 02CEB3FE6152668A7BA420B93B664860 ] umbus           C:\windows\System32\drivers\umbus.sys
06:46:29.0234 4024  umbus - ok
06:46:29.0249 4024  [ 991EE6B5FC41EAEF99C8AF5B92F2CA09 ] UmPass          C:\windows\System32\drivers\umpass.sys
06:46:29.0256 4024  UmPass - ok
06:46:29.0272 4024  [ 43FEFB040A0CC30F795FBF544169594D ] UmRdpService    C:\windows\System32\umrdp.dll
06:46:29.0284 4024  UmRdpService - ok
06:46:29.0319 4024  [ BB879DCFD22926EFBEB3298129898CBB ] UnlockerDriver5 C:\Program Files (x86)\Unlocker\UnlockerDriver5.sys
06:46:29.0322 4024  UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - warning
06:46:29.0322 4024  UnlockerDriver5 - detected UnsignedFile.Multi.Generic (1)
06:46:29.0374 4024  [ DBE2E6388379D5CC78099650541E9566 ] UNS             C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
06:46:29.0384 4024  UNS - ok
06:46:29.0395 4024  [ 14D22C411854AA2560AFC94CD2D5E61F ] upnphost        C:\windows\System32\upnphost.dll
06:46:29.0412 4024  upnphost - ok
06:46:29.0431 4024  [ 2AF9F0E16D75B8F783A1ACE74EF51C9B ] usbccgp         C:\windows\System32\drivers\usbccgp.sys
06:46:29.0441 4024  usbccgp - ok
06:46:29.0455 4024  [ B395B62B62F28106218FA6FB17F4C797 ] usbcir          C:\windows\System32\drivers\usbcir.sys
06:46:29.0471 4024  usbcir - ok
06:46:29.0493 4024  [ 52F267AEE8CA5AA5CEB88C6A71EE1E86 ] usbehci         C:\windows\System32\drivers\usbehci.sys
06:46:29.0501 4024  usbehci - ok
06:46:29.0516 4024  [ ADBF89B8E0BB372FEFE2E4B84E1E20AE ] usbhub          C:\windows\System32\drivers\usbhub.sys
06:46:29.0533 4024  usbhub - ok
06:46:29.0546 4024  [ EA040D4C6C94F315A85F3D0EAA884B37 ] USBHUB3         C:\windows\System32\drivers\UsbHub3.sys
06:46:29.0562 4024  USBHUB3 - ok
06:46:29.0580 4024  [ 325F6179009B5A7F6118951A5BA422AB ] usbohci         C:\windows\System32\drivers\usbohci.sys
06:46:29.0589 4024  usbohci - ok
06:46:29.0601 4024  [ BA3ABE0CD1C14B3295BAD0F076B84CAC ] usbprint        C:\windows\System32\drivers\usbprint.sys
06:46:29.0610 4024  usbprint - ok
06:46:29.0633 4024  [ A9858597B6DB695F78A37F6755A6FF98 ] usbscan         C:\windows\System32\drivers\usbscan.sys
06:46:29.0641 4024  usbscan - ok
06:46:29.0653 4024  [ F77177F6C95B2116EE7AD23B5EF57007 ] USBSTOR         C:\windows\System32\drivers\USBSTOR.SYS
06:46:29.0662 4024  USBSTOR - ok
06:46:29.0686 4024  [ D25EF4A6EC244C5DE85D88A05B7C149D ] usbuhci         C:\windows\System32\drivers\usbuhci.sys
06:46:29.0694 4024  usbuhci - ok
06:46:29.0710 4024  [ 09799E701B4327097E9F63D3FE221083 ] usbvideo        C:\windows\System32\Drivers\usbvideo.sys
06:46:29.0721 4024  usbvideo - ok
06:46:29.0757 4024  [ 11C0CF143D246E2F0E9BDBF17A0CC70B ] USBXHCI         C:\windows\System32\drivers\USBXHCI.SYS
06:46:29.0769 4024  USBXHCI - ok
06:46:29.0781 4024  [ F702AB6181513303AB0FC8D59E52708B ] VaultSvc        C:\windows\system32\lsass.exe
06:46:29.0789 4024  VaultSvc - ok
06:46:29.0796 4024  [ BACECBFF9C97F7627A60B0E0F1FE7EE8 ] vdrvroot        C:\windows\system32\drivers\vdrvroot.sys
06:46:29.0803 4024  vdrvroot - ok
06:46:29.0840 4024  [ 8A8CDA9E3CF2E0B4C6CC19FBC6FB9A71 ] vds             C:\windows\System32\vds.exe
06:46:29.0868 4024  vds - ok
06:46:29.0883 4024  [ 74FA2D4368DE6F6CE14393EDF1F342BE ] VerifierExt     C:\windows\system32\drivers\VerifierExt.sys
06:46:29.0891 4024  VerifierExt - ok
06:46:29.0913 4024  [ 500BE6B2E49883720D0AE8BB859ED7A3 ] vhdmp           C:\windows\System32\drivers\vhdmp.sys
06:46:29.0930 4024  vhdmp - ok
06:46:29.0942 4024  [ F5B4A14B00E89250C50982AC762DDD1D ] viaide          C:\windows\system32\drivers\viaide.sys
06:46:29.0949 4024  viaide - ok
06:46:29.0966 4024  [ 78DB50F7329F6D1311658DABFFFC8BE0 ] vmbus           C:\windows\system32\drivers\vmbus.sys
06:46:29.0975 4024  vmbus - ok
06:46:29.0988 4024  [ ECFEE2F2BA3932C7880D1A8F67D68F91 ] VMBusHID        C:\windows\System32\drivers\VMBusHID.sys
06:46:29.0997 4024  VMBusHID - ok
06:46:30.0027 4024  [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicheartbeat   C:\windows\System32\ICSvc.dll
06:46:30.0040 4024  vmicheartbeat - ok
06:46:30.0045 4024  [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmickvpexchange C:\windows\System32\ICSvc.dll
06:46:30.0054 4024  vmickvpexchange - ok
06:46:30.0059 4024  [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicrdv         C:\windows\System32\ICSvc.dll
06:46:30.0068 4024  vmicrdv - ok
06:46:30.0073 4024  [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicshutdown    C:\windows\System32\ICSvc.dll
06:46:30.0082 4024  vmicshutdown - ok
06:46:30.0087 4024  [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmictimesync    C:\windows\System32\ICSvc.dll
06:46:30.0096 4024  vmictimesync - ok
06:46:30.0101 4024  [ B8FF4248103E6EA47B9D85C55673ABA3 ] vmicvss         C:\windows\System32\ICSvc.dll
06:46:30.0111 4024  vmicvss - ok
06:46:30.0125 4024  [ CB60FAAED8B49B812EBBF77EB87D9B18 ] volmgr          C:\windows\system32\drivers\volmgr.sys
06:46:30.0132 4024  volmgr - ok
06:46:30.0144 4024  [ A74101DA9809251BCD0E5A26BAE0F824 ] volmgrx         C:\windows\system32\drivers\volmgrx.sys
06:46:30.0163 4024  volmgrx - ok
06:46:30.0170 4024  [ 2FB3CDFD5EAF4CD9D4AFAF96877D13AE ] volsnap         C:\windows\system32\drivers\volsnap.sys
06:46:30.0184 4024  volsnap - ok
06:46:30.0195 4024  [ A8DA1C1B52ECEA3726DEBED4FF1B700D ] vpci            C:\windows\System32\drivers\vpci.sys
06:46:30.0202 4024  vpci - ok
06:46:30.0214 4024  [ 38A60CD9C009C55C6D3B5586F8E6A353 ] vsmraid         C:\windows\system32\drivers\vsmraid.sys
06:46:30.0224 4024  vsmraid - ok
06:46:30.0262 4024  [ D0C69E44BC1E1D4AD290FD84104623D8 ] VSS             C:\windows\system32\vssvc.exe
06:46:30.0282 4024  VSS - ok
06:46:30.0295 4024  [ A0F6FE0FC2F647C22BBFD6BD4249DBCC ] VSTXRAID        C:\windows\system32\drivers\vstxraid.sys
06:46:30.0308 4024  VSTXRAID - ok
06:46:30.0397 4024  [ 654D358F8DC18167F31A01166B4CA9D6 ] vToolbarUpdater15.3.0 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
06:46:30.0432 4024  vToolbarUpdater15.3.0 - ok
06:46:30.0441 4024  [ 62460A45435A26A334907E3F2EA45611 ] vwifibus        C:\windows\System32\drivers\vwifibus.sys
06:46:30.0448 4024  vwifibus - ok
06:46:30.0461 4024  [ 095E943D27025E4D588AF0A72CC2318F ] vwififlt        C:\windows\system32\DRIVERS\vwififlt.sys
06:46:30.0469 4024  vwififlt - ok
06:46:30.0490 4024  [ 73FA1A41A97A5C34ADC03B3577FF1A86 ] vwifimp         C:\windows\system32\DRIVERS\vwifimp.sys
06:46:30.0498 4024  vwifimp - ok
06:46:30.0515 4024  [ F690B6EEAA94576727B24376D7ED3601 ] W32Time         C:\windows\system32\w32time.dll
06:46:30.0530 4024  W32Time - ok
06:46:30.0545 4024  [ 6B806E893714019969E2B50D7EF6A4D9 ] WacomPen        C:\windows\System32\drivers\wacompen.sys
06:46:30.0552 4024  WacomPen - ok
06:46:30.0583 4024  [ 61F6972FF9AC9A8D0B4D62076DC30051 ] Wanarp          C:\windows\system32\DRIVERS\wanarp.sys
06:46:30.0591 4024  Wanarp - ok
06:46:30.0595 4024  [ 61F6972FF9AC9A8D0B4D62076DC30051 ] Wanarpv6        C:\windows\system32\DRIVERS\wanarp.sys
06:46:30.0605 4024  Wanarpv6 - ok
06:46:30.0651 4024  [ 901CC968412F8155B08D7ABE0171166A ] WAS             C:\windows\system32\inetsrv\iisw3adm.dll
06:46:30.0673 4024  WAS - ok
06:46:30.0712 4024  [ 42DF22F8C448E7CD219F6D63743505E2 ] wbengine        C:\windows\system32\wbengine.exe
06:46:30.0752 4024  wbengine - ok
06:46:30.0764 4024  [ 31D37B2F6069C631EF0557D322924812 ] WbioSrvc        C:\windows\System32\wbiosrvc.dll
06:46:30.0779 4024  WbioSrvc - ok
06:46:30.0791 4024  [ D9C1E82651BF19C6FF69CEC6FD400124 ] Wcmsvc          C:\windows\System32\wcmsvc.dll
06:46:30.0805 4024  Wcmsvc - ok
06:46:30.0836 4024  [ 5B5FEAB51172F5513C2CF7B39CFA6A01 ] wcncsvc         C:\windows\System32\wcncsvc.dll
06:46:30.0861 4024  wcncsvc - ok
06:46:30.0868 4024  [ E19556D414332E2BEBA1F368229006B4 ] WcsPlugInService C:\windows\System32\WcsPlugInService.dll
06:46:30.0880 4024  WcsPlugInService - ok
06:46:30.0897 4024  [ B3A4D918DAB90505B6BC7B70632913CB ] Wd              C:\windows\system32\drivers\wd.sys
06:46:30.0904 4024  Wd - ok
06:46:30.0928 4024  [ 6F4B5DDDC3B86091E94BC47347A78AF7 ] WdBoot          C:\windows\system32\drivers\WdBoot.sys
06:46:30.0936 4024  WdBoot - ok
06:46:30.0968 4024  [ 2ADC985B85A71BD7D99712EC0C24358B ] Wdf01000        C:\windows\system32\drivers\Wdf01000.sys
06:46:30.0990 4024  Wdf01000 - ok
06:46:31.0011 4024  [ 99D404A9A0AFC4734E014EBEBAC13F8F ] WdFilter        C:\windows\system32\drivers\WdFilter.sys
06:46:31.0023 4024  WdFilter - ok
06:46:31.0042 4024  [ 240FC332484572227CD1DF82407F33E5 ] WdiServiceHost  C:\windows\system32\wdi.dll
06:46:31.0056 4024  WdiServiceHost - ok
06:46:31.0060 4024  [ 240FC332484572227CD1DF82407F33E5 ] WdiSystemHost   C:\windows\system32\wdi.dll
06:46:31.0073 4024  WdiSystemHost - ok
06:46:31.0084 4024  [ F2002DA5E6B78C15B2CD48CFF8F0FBB6 ] WebClient       C:\windows\System32\webclnt.dll
06:46:31.0097 4024  WebClient - ok
06:46:31.0110 4024  [ 35FD720943D4FCD75C3275BF062FF140 ] Wecsvc          C:\windows\system32\wecsvc.dll
06:46:31.0123 4024  Wecsvc - ok
06:46:31.0135 4024  [ 4D2612E3C462B68F499D840B1133263E ] wercplsupport   C:\windows\System32\wercplsupport.dll
06:46:31.0168 4024  wercplsupport - ok
06:46:31.0199 4024  [ 5F70EBFC1F75B487DE79501E3CCBDB54 ] WerSvc          C:\windows\System32\WerSvc.dll
06:46:31.0213 4024  WerSvc - ok
06:46:31.0233 4024  [ FE762D3498719C3A23471BBA62F747B4 ] WFPLWFS         C:\windows\system32\DRIVERS\wfplwfs.sys
06:46:31.0242 4024  WFPLWFS - ok
06:46:31.0248 4024  [ 60E0C220593DA4F7C289CB909D2DBAE0 ] WiaRpc          C:\windows\System32\wiarpc.dll
06:46:31.0257 4024  WiaRpc - ok
06:46:31.0274 4024  [ A3C7624A42A3447EF5EDD1ED37FE4E60 ] WIMMount        C:\windows\system32\drivers\wimmount.sys
06:46:31.0281 4024  WIMMount - ok
06:46:31.0303 4024  WinDefend - ok
06:46:31.0345 4024  [ 7911470B6018059A880469A63B65700A ] WinHttpAutoProxySvc C:\windows\system32\winhttp.dll
06:46:31.0362 4024  WinHttpAutoProxySvc - ok
06:46:31.0401 4024  [ 3D6B518B71C75C8FA4115A33615C107A ] Winmgmt         C:\windows\system32\wbem\WMIsvc.dll
06:46:31.0410 4024  Winmgmt - ok
06:46:31.0465 4024  [ 8E212A627F33F6FC3B5F3BB47212F66E ] WinRM           C:\windows\system32\WsmSvc.dll
06:46:31.0509 4024  WinRM - ok
06:46:31.0554 4024  [ 6351724B8FA0255C2DBD970297F00B93 ] WlanSvc         C:\windows\System32\wlansvc.dll
06:46:31.0579 4024  WlanSvc - ok
06:46:31.0630 4024  [ B330CE47FB74A6BE9A3FFFF4B3F64D9B ] wlidsvc         C:\windows\system32\wlidsvc.dll
06:46:31.0663 4024  wlidsvc - ok
06:46:31.0674 4024  [ E2A596CACFC6504306CDB7B593B90084 ] WmiAcpi         C:\windows\System32\drivers\wmiacpi.sys
06:46:31.0681 4024  WmiAcpi - ok
06:46:31.0698 4024  [ D113499052C5E541906B727779F0F959 ] wmiApSrv        C:\windows\system32\wbem\WmiApSrv.exe
06:46:31.0709 4024  wmiApSrv - ok
06:46:31.0729 4024  WMPNetworkSvc - ok
06:46:31.0743 4024  [ C6FF953D5D6F2EAE3B8883474D5076B3 ] wpcfltr         C:\windows\system32\DRIVERS\wpcfltr.sys
06:46:31.0751 4024  wpcfltr - ok
06:46:31.0759 4024  [ A6ED163169876BFD2437E872FE2F1509 ] WPCSvc          C:\windows\System32\wpcsvc.dll
06:46:31.0767 4024  WPCSvc - ok
06:46:31.0798 4024  [ 3013658A4D327854BEEC4A08D9655194 ] WPDBusEnum      C:\windows\system32\wpdbusenum.dll
06:46:31.0844 4024  WPDBusEnum - ok
06:46:31.0858 4024  [ 0346CAFC181C91C6E2330332EB332ED6 ] WpdUpFltr       C:\windows\system32\drivers\WpdUpFltr.sys
06:46:31.0865 4024  WpdUpFltr - ok
06:46:31.0887 4024  [ BC8B5CB336E63BB25EAD1CE8EDD34B81 ] ws2ifsl         C:\windows\system32\drivers\ws2ifsl.sys
06:46:31.0895 4024  ws2ifsl - ok
06:46:31.0922 4024  [ 012CFE7F0F95266F554EE3B91EE2128A ] wscsvc          C:\windows\System32\wscsvc.dll
06:46:31.0932 4024  wscsvc - ok
06:46:31.0935 4024  WSearch - ok
06:46:31.0990 4024  [ C10BFFEE7E0D7A1366E84F251796C51D ] WSService       C:\windows\System32\WSService.dll
06:46:32.0042 4024  WSService - ok
06:46:32.0115 4024  [ BE302BABE45EC05995F8DC66E37BBB3D ] wuauserv        C:\windows\system32\wuaueng.dll
06:46:32.0150 4024  wuauserv - ok
06:46:32.0170 4024  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\windows\system32\drivers\WudfPf.sys
06:46:32.0178 4024  WudfPf - ok
06:46:32.0190 4024  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\windows\System32\drivers\WUDFRd.sys
06:46:32.0199 4024  WUDFRd - ok
06:46:32.0219 4024  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\windows\System32\WUDFSvc.dll
06:46:32.0228 4024  wudfsvc - ok
06:46:32.0233 4024  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFWpdFs       C:\windows\system32\DRIVERS\WUDFRd.sys
06:46:32.0241 4024  WUDFWpdFs - ok
06:46:32.0277 4024  [ F9D8D2E6ECE08B278621D5BF3A7240A6 ] WwanSvc         C:\windows\System32\wwansvc.dll
06:46:32.0290 4024  WwanSvc - ok
06:46:32.0302 4024  ================ Scan global ===============================
06:46:32.0323 4024  [ DDC1AFBF9DDF880CE9BD3896114D8DED ] C:\windows\system32\basesrv.dll
06:46:32.0344 4024  [ E9343076AE704D20BB0D01F3AF3EFFEF ] C:\windows\system32\winsrv.dll
06:46:32.0358 4024  [ BD7C6949984D19AAA609896B675E7357 ] C:\windows\system32\sxssrv.dll
06:46:32.0386 4024  [ 8F226143046435C75C033B0C52E90FFE ] C:\windows\system32\services.exe
06:46:32.0389 4024  [Global] - ok
06:46:32.0389 4024  ================ Scan MBR ==================================
06:46:32.0395 4024  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
06:46:32.0490 4024  \Device\Harddisk0\DR0 - ok
06:46:32.0492 4024  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
06:46:32.0532 4024  \Device\Harddisk1\DR1 - ok
06:46:32.0534 4024  [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk2\DR2
06:46:34.0059 4024  \Device\Harddisk2\DR2 - ok
06:46:34.0072 4024  [ DBAE2D9D3DAF77F43BEC3269A0C1E08B ] \Device\Harddisk3\DR3
06:46:35.0655 4024  \Device\Harddisk3\DR3 - ok
06:46:35.0655 4024  ================ Scan VBR ==================================
06:46:35.0665 4024  [ 117762BBF15F8B1AFC39498711C2D7E8 ] \Device\Harddisk0\DR0\Partition1
06:46:35.0667 4024  \Device\Harddisk0\DR0\Partition1 - ok
06:46:35.0678 4024  [ 96CE4B561C2E816E7131ECE35EBC0A87 ] \Device\Harddisk0\DR0\Partition2
06:46:35.0680 4024  \Device\Harddisk0\DR0\Partition2 - ok
06:46:35.0687 4024  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition3
06:46:35.0688 4024  \Device\Harddisk0\DR0\Partition3 - ok
06:46:35.0692 4024  [ 11CDB7893C5DB4121D102207CA5688F3 ] \Device\Harddisk0\DR0\Partition4
06:46:35.0693 4024  \Device\Harddisk0\DR0\Partition4 - ok
06:46:35.0719 4024  [ A2BC912470FD41639AF34633E3448F46 ] \Device\Harddisk0\DR0\Partition5
06:46:35.0721 4024  \Device\Harddisk0\DR0\Partition5 - ok
06:46:35.0724 4024  [ 27F17E406E2A5D73EFDBE2769ADEF8A4 ] \Device\Harddisk2\DR2\Partition1
06:46:35.0725 4024  \Device\Harddisk2\DR2\Partition1 - ok
06:46:35.0729 4024  [ FEB664E36CEF32D24CDB05E5C5F1672E ] \Device\Harddisk3\DR3\Partition1
06:46:35.0731 4024  \Device\Harddisk3\DR3\Partition1 - ok
06:46:35.0731 4024  ============================================================
06:46:35.0731 4024  Scan finished
06:46:35.0731 4024  ============================================================
06:46:35.0740 6500  Detected object count: 7
06:46:35.0740 6500  Actual detected object count: 7
 

# AdwCleaner v2.303 - Logfile created 07/01/2013 at 06:28:55
# Updated 08/06/2013 by Xplode
# Operating system : Windows 8  (64 bits)
# User : Marlene - 1SEXYbleep
# Boot Mode : Normal
# Running from : C:\Users\Marlene\Desktop\AdwCleaner.exe
# Option [Search]


***** [Services] *****

Found : DefaultTabUpdate

***** [Files / Folders] *****

File Found : C:\END
File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\addon@defaulttab.com.xpi
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\addon@defaulttab.com.xpi
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\Babylon.xml
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\BrowserProtect.xml
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\Conduit.xml
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\delta.xml
File Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\search.xml
File Found : C:\Users\Public\Desktop\eBay.lnk
File Found : C:\windows\Tasks\AmiUpdXp.job
Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\OApps
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\Users\Marlene\AppData\Local\Conduit
Folder Found : C:\Users\Marlene\AppData\Local\PackageAware
Folder Found : C:\Users\Marlene\AppData\Local\SwvUpdater
Folder Found : C:\Users\Marlene\AppData\Local\Temp\CT3284668
Folder Found : C:\Users\Marlene\AppData\Local\Temp\CT3289847
Folder Found : C:\Users\Marlene\AppData\Local\Temp\CT3294791
Folder Found : C:\Users\Marlene\AppData\Local\Temp\CT3298581
Folder Found : C:\Users\Marlene\AppData\LocalLow\Conduit
Folder Found : C:\Users\Marlene\AppData\LocalLow\Delta
Folder Found : C:\Users\Marlene\AppData\LocalLow\PriceGong
Folder Found : C:\Users\Marlene\AppData\Roaming\Babylon
Folder Found : C:\Users\Marlene\AppData\Roaming\DefaultTab
Folder Found : C:\Users\Marlene\AppData\Roaming\file scout
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3284668
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3289847
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3294791
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3298581
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{65f9f6b7-2dae-46fc-bfaf-f88e4af1beca}
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{d2cf9842-af95-48cd-b873-bfbb48cd7f5e}
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\Smartbar
Folder Found : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\StumbleUpon

***** [Registry] *****

Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\DefaultTab
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\Default Tab
Key Found : HKCU\Software\DefaultTab
Key Found : HKCU\Software\delta LTD
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKCU\Software\968cd8b03aea48
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\Software\BabylonToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\S
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3284668
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3289847
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3294791
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3298581
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Found : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\Default Tab
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\Wow6432Node\968cd8b03aea48
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKLM\SOFTWARE\Tarma Installer
Key Found : HKU\S-1-5-21-3493013868-20574234-2027898036-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKU\S-1-5-21-3493013868-20574234-2027898036-1001\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Found : HKU\S-1-5-21-3493013868-20574234-2027898036-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKU\S-1-5-21-3493013868-20574234-2027898036-1001\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Found : HKU\S-1-5-21-3493013868-20574234-2027898036-1001\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
 



#4 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 01 July 2013 - 08:59 AM

Here is the second part of the reports that you asked for

 

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16599

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&CUI=UN21548011051786314&UM=2&ctid=CT3289847&SSPV=TB_T5
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={E615ABD7-9AE4-11E2-BE71-9C2A70398CCA}

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\prefs.js

Found : user_pref("CT3284668.1000082.isPlayDisplay", "true");
Found : user_pref("CT3284668.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3284668.BBActive.enc", "eWVz");
Found : user_pref("CT3284668.BBID.enc", "NGNmN2RmMDhjNTlhNTc2NA==");
Found : user_pref("CT3284668.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3284668.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3284668.FF19Solved", "true");
Found : user_pref("CT3284668.FirstTime", "true");
Found : user_pref("CT3284668.FirstTimeFF3", "true");
Found : user_pref("CT3284668.LAST_CLIENT_STATS_SUBMIT_2.enc", "MTM2NzcwNzczMw==");
Found : user_pref("CT3284668.LOCAL_COOKIE_STATS_LAST_SUBMIT_6.enc", "MTM2NzcwNzc0NA==");
Found : user_pref("CT3284668.LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT.enc", "MQ==");
Found : user_pref("CT3284668.LOCAL_COOKIE_THROTTLE_BASEadd_stats|0|LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT.[...]
Found : user_pref("CT3284668.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Found : user_pref("CT3284668.UserID", "UN14890412782192456");
Found : user_pref("CT3284668.acp_personal.appstate.enc", "ZW5hYmxl");
Found : user_pref("CT3284668.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3284668.autoDisableScopes", -1);
Found : user_pref("CT3284668.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3284668.countryCode", "US");
Found : user_pref("CT3284668.defaultSearch", "true");
Found : user_pref("CT3284668.enableAlerts", "true");
Found : user_pref("CT3284668.enableFix404ByUser", "TRUE");
Found : user_pref("CT3284668.enableSearchFromAddressBar", "true");
Found : user_pref("CT3284668.firstTimeDialogOpened", "true");
Found : user_pref("CT3284668.fixPageNotFoundError", "true");
Found : user_pref("CT3284668.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3284668.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3284668.fixUrls", true);
Found : user_pref("CT3284668.fullUserID", "UN14890412782192456.UP.20130625232243");
Found : user_pref("CT3284668.homepageuserchanged", true);
Found : user_pref("CT3284668.installDate", "4/5/2013 15:32:16");
Found : user_pref("CT3284668.installId", "conduitinstaller.exe");
Found : user_pref("CT3284668.installSessionId", "-1");
Found : user_pref("CT3284668.installSp", "TRUE");
Found : user_pref("CT3284668.installType", "conduitnsisintegration");
Found : user_pref("CT3284668.installerVersion", "1.4.1.3");
Found : user_pref("CT3284668.isCheckedStartAsHidden", true);
Found : user_pref("CT3284668.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3284668.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3284668.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3284668.keyword", "true");
Found : user_pref("CT3284668.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3284668.lastVersion", "10.16.4.519");
Found : user_pref("CT3284668.mam_gk_appStateReportTime.enc", "MTM2NzcwNjc2NzUwMw==");
Found : user_pref("CT3284668.mam_gk_appState_ACplus.enc", "b24=");
Found : user_pref("CT3284668.mam_gk_appState_Discover.enc", "b24=");
Found : user_pref("CT3284668.mam_gk_appState_Find-a-Pro.enc", "b24=");
Found : user_pref("CT3284668.mam_gk_appState_PriceGrabber.enc", "b24=");
Found : user_pref("CT3284668.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IkFDcGx1cyIsInVybCI6Imh0dHA6Ly9jZG4u[...]
Found : user_pref("CT3284668.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Found : user_pref("CT3284668.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR3JhYmJlciI[...]
Found : user_pref("CT3284668.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Found : user_pref("CT3284668.mam_gk_eventsCache.enc", "eyI1ZDU4MWY2Ni1jZWM4LTRiYmUtYWMxOC02ZDhkZTEyZTEwMWIiO[...]
Found : user_pref("CT3284668.mam_gk_first_time.enc", "MQ==");
Found : user_pref("CT3284668.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Found : user_pref("CT3284668.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Found : user_pref("CT3284668.mam_gk_lastLoginTime.enc", "MTM2NzcwNjc2MzU0Ng==");
Found : user_pref("CT3284668.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Found : user_pref("CT3284668.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Found : user_pref("CT3284668.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3284668.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Found : user_pref("CT3284668.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Found : user_pref("CT3284668.mam_gk_userId.enc", "NGVmMDBiNzYtMjBjNC00NDNhLWE5ODMtMDBiZGU0NzIzODQw");
Found : user_pref("CT3284668.migrateAppsAndComponents", true);
Found : user_pref("CT3284668.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Found : user_pref("CT3284668.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT3284668.openThankYouPage", "false");
Found : user_pref("CT3284668.openUninstallPage", "true");
Found : user_pref("CT3284668.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT32[...]
Found : user_pref("CT3284668.originalSearchEngine", "KeyBar 1.6 Customized Web Search");
Found : user_pref("CT3284668.revertSettingsEnabled", "false");
Found : user_pref("CT3284668.sac-country-code.enc", "IlVTIg==");
Found : user_pref("CT3284668.sac-experiments-animation.enc", "eyJuYW1lIjoiMC43NSIsInZlcnNpb24iOjN9");
Found : user_pref("CT3284668.sac-experiments-hover_effect.enc", "eyJuYW1lIjoic2hvcnQiLCJ2ZXJzaW9uIjoyfQ==");
Found : user_pref("CT3284668.sac-experiments-image_analysis.enc", "eyJuYW1lIjoid2l0aG91dFN1YnRpdGxlIiwidmVyc[...]
Found : user_pref("CT3284668.sac-experiments-placement.enc", "eyJuYW1lIjoid3JlY2std2lkZSIsInZlcnNpb24iOjZ9")[...]
Found : user_pref("CT3284668.sac-experiments-play_icon.enc", "eyJuYW1lIjoibm8iLCJ2ZXJzaW9uIjoyfQ==");
Found : user_pref("CT3284668.sac-periodic-reports.enc", "eyJ5dHRfcGluZ18wIjpbMTM2NzcwNjc2ODYxOSwxNDQwMDAwMF1[...]
Found : user_pref("CT3284668.sac-user-id.enc", "IjI4ZWNlMWY1LTM2NmUtNDliYy1iYjVlLTJhMzdmYzU2OWFjZiI=");
Found : user_pref("CT3284668.sac-yt-first-ping.enc", "MTM2NzcwNjc2ODYwNg==");
Found : user_pref("CT3284668.search.searchAppId", "130047021665254342");
Found : user_pref("CT3284668.search.searchCount", "0");
Found : user_pref("CT3284668.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3284668.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3284668.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3284668.searchRevert", "false");
Found : user_pref("CT3284668.searchSuggestEnabledByUser", "false");
Found : user_pref("CT3284668.searchUserMode", "2");
Found : user_pref("CT3284668.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3284668.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3284668.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3284668.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Found : user_pref("CT3284668.serviceLayer_services_Configuration_lastUpdate", "1372622814823");
Found : user_pref("CT3284668.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1367706759239");
Found : user_pref("CT3284668.serviceLayer_services_appsMetadata_lastUpdate", "1367706758391");
Found : user_pref("CT3284668.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1367706758304");
Found : user_pref("CT3284668.serviceLayer_services_location_lastUpdate", "1372227506134");
Found : user_pref("CT3284668.serviceLayer_services_login_10.15.2.23_lastUpdate", "1367780088238");
Found : user_pref("CT3284668.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368110028202");
Found : user_pref("CT3284668.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368534840526");
Found : user_pref("CT3284668.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372227502807");
Found : user_pref("CT3284668.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372680538784");
Found : user_pref("CT3284668.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1367706758329");
Found : user_pref("CT3284668.serviceLayer_services_searchAPI_lastUpdate", "1372622814744");
Found : user_pref("CT3284668.serviceLayer_services_serviceMap_lastUpdate", "1372622814707");
Found : user_pref("CT3284668.serviceLayer_services_setupAPI_lastUpdate", "1367706757352");
Found : user_pref("CT3284668.serviceLayer_services_toolbarContextMenu_lastUpdate", "1367706758231");
Found : user_pref("CT3284668.serviceLayer_services_toolbarSettings_lastUpdate", "1372680536698");
Found : user_pref("CT3284668.serviceLayer_services_translation_lastUpdate", "1372313905909");
Found : user_pref("CT3284668.settingsINI", true);
Found : user_pref("CT3284668.shouldFirstTimeDialog", "false");
Found : user_pref("CT3284668.showToolbarPermission", "false");
Found : user_pref("CT3284668.smartbar.CTID", "CT3284668");
Found : user_pref("CT3284668.smartbar.Uninstall", "0");
Found : user_pref("CT3284668.smartbar.homepage", "true");
Found : user_pref("CT3284668.smartbar.isHidden", true);
Found : user_pref("CT3284668.smartbar.toolbarName", "KeyBar 1.6 ");
Found : user_pref("CT3284668.startPage", "true");
Found : user_pref("CT3284668.toolbarBornServerTime", "5-5-2013");
Found : user_pref("CT3284668.toolbarCurrentServerTime", "1-7-2013");
Found : user_pref("CT3284668.toolbarLoginClientTime", "Sat May 04 2013 15:32:38 GMT-0700 (Pacific Daylight T[...]
Found : user_pref("CT3284668.whitelist.enc", "W3sibmFtZSI6IlRpbWUiLCJkb21haW5fcmVneCI6IiguKlxcLik/dGltZS5jb2[...]
Found : user_pref("CT3284668.whitelist_ts.enc", "MTM2NzcwNzczMzU0Mw==");
Found : user_pref("CT3284668.wreck-country-code.enc", "IlVTIg==");
Found : user_pref("CT3284668.wreck-experiments-design.enc", "eyJuYW1lIjoiYWN0dWFsbHlMaWdodCIsInZlcnNpb24iOjN[...]
Found : user_pref("CT3284668.wreck-experiments-feed.enc", "eyJuYW1lIjoid3JlY2tBbmRUYWJvb2xhIiwidmVyc2lvbiI6M[...]
Found : user_pref("CT3284668.wreck-experiments-hover_effect.enc", "eyJuYW1lIjoiaGFsZiIsInZlcnNpb24iOjF9");
Found : user_pref("CT3284668.wreck-experiments-trigger.enc", "eyJuYW1lIjoieDAuNSIsInZlcnNpb24iOjF9");
Found : user_pref("CT3284668.wreck-periodic-reports.enc", "eyJ3cmVja19waW5nXzAiOlsxMzY3NzA2NzY4NDY3LDE0NDAwM[...]
Found : user_pref("CT3284668.wreck-user-id.enc", "ImUwOTliODBjLWZhNjYtNGYzOC05M2VmLTA0MTRhM2IxMWIzNCI=");
Found : user_pref("CT3284668_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("CT3289847.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3289847.FF19Solved", "true");
Found : user_pref("CT3289847.FirstTime", "true");
Found : user_pref("CT3289847.FirstTimeFF3", "true");
Found : user_pref("CT3289847.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Found : user_pref("CT3289847.UserID", "UN34459155091188831");
Found : user_pref("CT3289847.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3289847.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3289847.countryCode", "US");
Found : user_pref("CT3289847.defaultSearch", "true");
Found : user_pref("CT3289847.enableAlerts", "true");
Found : user_pref("CT3289847.enableFix404ByUser", "TRUE");
Found : user_pref("CT3289847.enableSearchFromAddressBar", "true");
Found : user_pref("CT3289847.firstTimeDialogOpened", "true");
Found : user_pref("CT3289847.fixPageNotFoundError", "true");
Found : user_pref("CT3289847.fixPageNotFoundErrorByUser", "TRUE");
Found : user_pref("CT3289847.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3289847.fixUrls", true);
Found : user_pref("CT3289847.fullUserID", "UN34459155091188831.UP.20130620163325");
Found : user_pref("CT3289847.homepageuserchanged", true);
Found : user_pref("CT3289847.installDate", "30/4/2013 15:06:20");
Found : user_pref("CT3289847.installId", "9818");
Found : user_pref("CT3289847.installSessionId", "-1");
Found : user_pref("CT3289847.installSp", "false");
Found : user_pref("CT3289847.installType", "conduitnsisintegration");
Found : user_pref("CT3289847.installUsage", "20/06/2013 16:33:18");
Found : user_pref("CT3289847.installUsageEarly", "20/06/2013 16:33:18");
Found : user_pref("CT3289847.installerVersion", "1.5.2.1");
Found : user_pref("CT3289847.isCheckedStartAsHidden", true);
Found : user_pref("CT3289847.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3289847.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3289847.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3289847.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT3289847.keyword", "true");
Found : user_pref("CT3289847.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3289847.lastVersion", "10.16.4.519");
Found : user_pref("CT3289847.mam_gk_installer_preapproved.enc", "VFJVRQ==");
Found : user_pref("CT3289847.migrateAppsAndComponents", true);
Found : user_pref("CT3289847.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Found : user_pref("CT3289847.openThankYouPage", "false");
Found : user_pref("CT3289847.openUninstallPage", "true");
Found : user_pref("CT3289847.originalSearchAddressUrl", "chrome://defaulttab/content/keywordURL.xul?");
Found : user_pref("CT3289847.revertSettingsEnabled", "true");
Found : user_pref("CT3289847.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3289847.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3289847.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3289847.searchRevert", "true");
Found : user_pref("CT3289847.searchSuggestEnabledByUser", "false");
Found : user_pref("CT3289847.searchUserMode", "2");
Found : user_pref("CT3289847.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3289847.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3289847.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3289847.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Found : user_pref("CT3289847.serviceLayer_services_Configuration_lastUpdate", "1372622814436");
Found : user_pref("CT3289847.serviceLayer_services_location_lastUpdate", "1372090964430");
Found : user_pref("CT3289847.serviceLayer_services_login_10.15.0.562_lastUpdate", "1367282266936");
Found : user_pref("CT3289847.serviceLayer_services_login_10.16.2.600_lastUpdate", "1372098164814");
Found : user_pref("CT3289847.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372680538719");
Found : user_pref("CT3289847.serviceLayer_services_searchAPI_lastUpdate", "1372622814360");
Found : user_pref("CT3289847.serviceLayer_services_serviceMap_lastUpdate", "1372622814322");
Found : user_pref("CT3289847.serviceLayer_services_setupAPI_lastUpdate", "1367151068312");
Found : user_pref("CT3289847.serviceLayer_services_toolbarSettings_lastUpdate", "1372680536193");
Found : user_pref("CT3289847.serviceLayer_services_translation_lastUpdate", "1372271374690");
Found : user_pref("CT3289847.settingsINI", true);
Found : user_pref("CT3289847.shouldFirstTimeDialog", "false");
Found : user_pref("CT3289847.showToolbarPermission", "false");
Found : user_pref("CT3289847.smartbar.CTID", "CT3289847");
Found : user_pref("CT3289847.smartbar.Uninstall", "0");
Found : user_pref("CT3289847.smartbar.homepage", "true");
Found : user_pref("CT3289847.smartbar.toolbarName", "WhiteSmoke New ");
Found : user_pref("CT3289847.startPage", "true");
Found : user_pref("CT3289847.toolbarBornServerTime", "28-4-2013");
Found : user_pref("CT3289847.toolbarCurrentServerTime", "1-7-2013");
Found : user_pref("CT3289847.toolbarLoginClientTime", "Sun Apr 28 2013 05:09:07 GMT-0700 (Pacific Daylight T[...]
Found : user_pref("CT3289847.versionFromInstaller", "10.14.380.14");
Found : user_pref("CT3289847_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("CT3294791.1000082.isPlayDisplay", "true");
Found : user_pref("CT3294791.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3294791.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3294791.FF19Solved", "true");
Found : user_pref("CT3294791.FirstTime", "true");
Found : user_pref("CT3294791.FirstTimeFF3", "true");
Found : user_pref("CT3294791.PG_ENABLE", "dHJ1ZQ==");
Found : user_pref("CT3294791.PG_ENABLE.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Found : user_pref("CT3294791.SF_STATUS.enc", "RU5BQkxFRA==");
Found : user_pref("CT3294791.SF_USER_ID.enc", "Y2lkXzI5NDIwMTMyMjIwNTE3MjA0MTQz");
Found : user_pref("CT3294791.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Found : user_pref("CT3294791.UserID", "UN18281645110338105");
Found : user_pref("CT3294791.YTbyClickFavorites.enc", "W10=");
Found : user_pref("CT3294791.YTbyClickRecent.enc", "W10=");
Found : user_pref("CT3294791.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3294791.autoDisableScopes", -1);
Found : user_pref("CT3294791.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3294791.cb_experience_000.enc", "NA==");
Found : user_pref("CT3294791.cb_firstuse0100.enc", "MQ==");
Found : user_pref("CT3294791.cb_user_id_000.enc", "Q0I3MDM4ODM4NTk5NzZfMTM2NzM0MTQ1MzY5Ml9GaXJlZm94");
Found : user_pref("CT3294791.cbfirsttime.enc", "VHVlIEFwciAzMCAyMDEzIDEwOjA0OjEzIEdNVC0wNzAwIChQYWNpZmljIERh[...]
Found : user_pref("CT3294791.countryCode", "US");
Found : user_pref("CT3294791.defaultSearch", "true");
Found : user_pref("CT3294791.enableAlerts", "true");
Found : user_pref("CT3294791.enableFix404ByUser", "TRUE");
Found : user_pref("CT3294791.enableSearchFromAddressBar", "true");
Found : user_pref("CT3294791.firstTimeDialogOpened", "true");
Found : user_pref("CT3294791.fixPageNotFoundError", "true");
Found : user_pref("CT3294791.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3294791.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3294791.fixUrls", true);
Found : user_pref("CT3294791.fullUserID", "UN18281645110338105.UP.20130623013058");
Found : user_pref("CT3294791.homepageuserchanged", true);
Found : user_pref("CT3294791.installDate", "29/4/2013 20:39:51");
Found : user_pref("CT3294791.installId", "stub.exe");
Found : user_pref("CT3294791.installSessionId", "{81162D71-82E6-48F3-9C9B-2549A0B374FB}");
Found : user_pref("CT3294791.installSp", "TRUE");
Found : user_pref("CT3294791.installType", "conduitnsisintegration");
Found : user_pref("CT3294791.installUsage", "2013-04-30T06:42:01.183521+03:00");
Found : user_pref("CT3294791.installUsageEarly", "2013-04-30T06:42:00.3411048+03:00");
Found : user_pref("CT3294791.installerVersion", "1.4.1.3");
Found : user_pref("CT3294791.isCheckedStartAsHidden", true);
Found : user_pref("CT3294791.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3294791.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3294791.keyword", "true");
Found : user_pref("CT3294791.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3294791.lastVersion", "10.16.4.519");
Found : user_pref("CT3294791.mam_gk_appStateReportTime.enc", "MTM3MDE0MDQ2NTIzMQ==");
Found : user_pref("CT3294791.mam_gk_appState_CouponBuddy.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_Easytobook.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_PriceGong.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_WindowShopper.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Found : user_pref("CT3294791.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Found : user_pref("CT3294791.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGF[...]
Found : user_pref("CT3294791.mam_gk_currentVersion.enc", "MS42LjAuMQ==");
Found : user_pref("CT3294791.mam_gk_eventsCache.enc", "eyI5NjNlMDk1OC01MTgzLTQzZGYtODMzOS03Zjc0MmUwZjQ2NjkiO[...]
Found : user_pref("CT3294791.mam_gk_first_time.enc", "MQ==");
Found : user_pref("CT3294791.mam_gk_gadgetOpen.enc", "MA==");
Found : user_pref("CT3294791.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Found : user_pref("CT3294791.mam_gk_lastLoginTime.enc", "MTM3MDE0MDQ2MjA5NA==");
Found : user_pref("CT3294791.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Found : user_pref("CT3294791.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3294791.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3294791.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Found : user_pref("CT3294791.mam_gk_userId.enc", "ZGM5Mjc5YjktM2QwOC00ODVkLWJiNzAtMTJjMmZkNTljMTY1");
Found : user_pref("CT3294791.migrateAppsAndComponents", true);
Found : user_pref("CT3294791.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.bleepingcomp[...]
Found : user_pref("CT3294791.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Found : user_pref("CT3294791.openThankYouPage", "false");
Found : user_pref("CT3294791.openUninstallPage", "true");
Found : user_pref("CT3294791.originalHomepage", "igoogle.com");
Found : user_pref("CT3294791.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT32[...]
Found : user_pref("CT3294791.revertSettingsEnabled", "false");
Found : user_pref("CT3294791.search.searchAppId", "130089396748860745");
Found : user_pref("CT3294791.search.searchCount", "1");
Found : user_pref("CT3294791.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3294791.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3294791.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3294791.searchRevert", "false");
Found : user_pref("CT3294791.searchSuggestEnabledByUser", "false");
Found : user_pref("CT3294791.searchUserMode", "2");
Found : user_pref("CT3294791.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3294791.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3294791.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Found : user_pref("CT3294791.serviceLayer_services_Configuration_lastUpdate", "1372622813359");
Found : user_pref("CT3294791.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1370140453410");
Found : user_pref("CT3294791.serviceLayer_services_appsMetadata_lastUpdate", "1370140452578");
Found : user_pref("CT3294791.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1370140453382");
Found : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1367293317[...]
Found : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1367293318534")[...]
Found : user_pref("CT3294791.serviceLayer_services_location_lastUpdate", "1371966833244");
Found : user_pref("CT3294791.serviceLayer_services_login_10.15.2.23_lastUpdate", "1367293319863");
Found : user_pref("CT3294791.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368110027955");
Found : user_pref("CT3294791.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368534840472");
Found : user_pref("CT3294791.serviceLayer_services_login_10.16.2.509_lastUpdate", "1371966833491");
Found : user_pref("CT3294791.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372680538317");
Found : user_pref("CT3294791.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1370140453349");
Found : user_pref("CT3294791.serviceLayer_services_searchAPI_lastUpdate", "1372622813300");
Found : user_pref("CT3294791.serviceLayer_services_serviceMap_lastUpdate", "1372622813236");
Found : user_pref("CT3294791.serviceLayer_services_toolbarContextMenu_lastUpdate", "1370140453416");
Found : user_pref("CT3294791.serviceLayer_services_toolbarSettings_lastUpdate", "1372680536207");
Found : user_pref("CT3294791.serviceLayer_services_translation_lastUpdate", "1372313904579");
Found : user_pref("CT3294791.settingsINI", true);
Found : user_pref("CT3294791.shouldFirstTimeDialog", "false");
Found : user_pref("CT3294791.showToolbarPermission", "false");
Found : user_pref("CT3294791.smartbar.CTID", "CT3294791");
Found : user_pref("CT3294791.smartbar.Uninstall", "0");
Found : user_pref("CT3294791.smartbar.homepage", "true");
Found : user_pref("CT3294791.smartbar.isHidden", true);
Found : user_pref("CT3294791.smartbar.toolbarName", "Vafmusic2 ");
Found : user_pref("CT3294791.startPage", "true");
Found : user_pref("CT3294791.toolbarBornServerTime", "30-4-2013");
Found : user_pref("CT3294791.toolbarCurrentServerTime", "1-7-2013");
Found : user_pref("CT3294791.toolbarLoginClientTime", "Mon Apr 29 2013 20:41:59 GMT-0700 (Pacific Daylight T[...]
Found : user_pref("CT3294791.url_history0001.enc", "aHR0cDovL25ld3MueWFob28uY29tL2Jsb2dzL3NpZGVzaG93L21hbi10[...]
Found : user_pref("CT3294791.versionFromInstaller", "10.15.2.23");
Found : user_pref("CT3294791_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("CT3298581.1000082.isPlayDisplay", "true");
Found : user_pref("CT3298581.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3298581.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3298581.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3298581.FF19Solved", "true");
Found : user_pref("CT3298581.FirstTime", "true");
Found : user_pref("CT3298581.FirstTimeFF3", "true");
Found : user_pref("CT3298581.PG_ENABLE", "dHJ1ZQ==");
Found : user_pref("CT3298581.PG_ENABLE.enc", "dHJ1ZQ==");
Found : user_pref("CT3298581.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Found : user_pref("CT3298581.SF_STATUS.enc", "RU5BQkxFRA==");
Found : user_pref("CT3298581.SF_USER_ID.enc", "Y2lkXzI4NDIwMTM4NDI0MDMxMzUyOTc=");
Found : user_pref("CT3298581.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Found : user_pref("CT3298581.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC[...]
Found : user_pref("CT3298581.UserID", "UN25184612442170825");
Found : user_pref("CT3298581.YTbyClickFavorites.enc", "W10=");
Found : user_pref("CT3298581.YTbyClickRecent.enc", "W10=");
Found : user_pref("CT3298581.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3298581.autoDisableScopes", -1);
Found : user_pref("CT3298581.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3298581.countryCode", "US");
Found : user_pref("CT3298581.defaultSearch", "true");
Found : user_pref("CT3298581.enableAlerts", "true");
Found : user_pref("CT3298581.enableFix404ByUser", "TRUE");
Found : user_pref("CT3298581.enableSearchFromAddressBar", "true");
Found : user_pref("CT3298581.firstTimeDialogOpened", "true");
Found : user_pref("CT3298581.fixPageNotFoundError", "true");
Found : user_pref("CT3298581.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3298581.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3298581.fixUrls", true);
Found : user_pref("CT3298581.fullUserID", "UN25184612442170825.UP.20130625051148");
Found : user_pref("CT3298581.homepageuserchanged", true);
Found : user_pref("CT3298581.installDate", "28/4/2013 4:41:49");
Found : user_pref("CT3298581.installId", "cid134_111");
Found : user_pref("CT3298581.installSessionId", "{74F3DD8B-C157-4521-B32B-525C76BC5DCB}");
Found : user_pref("CT3298581.installSp", "TRUE");
Found : user_pref("CT3298581.installType", "conduitnsisintegration");
Found : user_pref("CT3298581.installUsage", "2013-04-28T18:42:34.0452421+03:00");
Found : user_pref("CT3298581.installUsageEarly", "2013-04-28T18:42:33.0608419+03:00");
Found : user_pref("CT3298581.isCheckedStartAsHidden", true);
Found : user_pref("CT3298581.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3298581.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3298581.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3298581.keyword", "true");
Found : user_pref("CT3298581.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3298581.lastVersion", "10.16.4.519");
Found : user_pref("CT3298581.mam_gk_appStateReportTime.enc", "MTM2NzE2Mzc2MDEyNg==");
Found : user_pref("CT3298581.mam_gk_appState_CouponBuddy.enc", "b24=");
Found : user_pref("CT3298581.mam_gk_appState_Easytobook.enc", "b24=");
Found : user_pref("CT3298581.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Found : user_pref("CT3298581.mam_gk_appState_PriceGong.enc", "b24=");
Found : user_pref("CT3298581.mam_gk_appState_WindowShopper.enc", "b24=");
Found : user_pref("CT3298581.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Found : user_pref("CT3298581.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Found : user_pref("CT3298581.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Found : user_pref("CT3298581.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Found : user_pref("CT3298581.mam_gk_eventsCache.enc", "eyJkOGY5Njk5OS1jMTRiLTQ0NjktYjExNC03ZTUyYTM5NzEwODMiO[...]
Found : user_pref("CT3298581.mam_gk_first_time.enc", "MQ==");
Found : user_pref("CT3298581.mam_gk_gadgetOpen.enc", "MA==");
Found : user_pref("CT3298581.mam_gk_lastLoginTime.enc", "MTM2NzE2Mzc2MDExMw==");
Found : user_pref("CT3298581.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Found : user_pref("CT3298581.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Found : user_pref("CT3298581.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3298581.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Found : user_pref("CT3298581.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Found : user_pref("CT3298581.mam_gk_userId.enc", "YzM5MWUyZjctNTE5MC00MGRkLTkzNWQtMGZmYzlhYTQ2YjAy");
Found : user_pref("CT3298581.migrateAppsAndComponents", true);
Found : user_pref("CT3298581.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.bleepingcomp[...]
Found : user_pref("CT3298581.openThankYouPage", "false");
Found : user_pref("CT3298581.openUninstallPage", "true");
Found : user_pref("CT3298581.originalSearchAddressUrl", "");
Found : user_pref("CT3298581.revertSettingsEnabled", "false");
Found : user_pref("CT3298581.search.searchAppId", "130110229277019401");
Found : user_pref("CT3298581.search.searchCount", "0");
Found : user_pref("CT3298581.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3298581.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3298581.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3298581.searchRevert", "false");
Found : user_pref("CT3298581.searchSuggestEnabledByUser", "false");
Found : user_pref("CT3298581.searchUserMode", "2");
Found : user_pref("CT3298581.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3298581.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3298581.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3298581.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Found : user_pref("CT3298581.serviceLayer_services_Configuration_lastUpdate", "1372622813286");
Found : user_pref("CT3298581.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1367163751954");
Found : user_pref("CT3298581.serviceLayer_services_appsMetadata_lastUpdate", "1367163752143");
Found : user_pref("CT3298581.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1367163751350");
Found : user_pref("CT3298581.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1367163750[...]
Found : user_pref("CT3298581.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1367163752215")[...]
Found : user_pref("CT3298581.serviceLayer_services_location_lastUpdate", "1372089584952");
Found : user_pref("CT3298581.serviceLayer_services_login_10.15.2.23_lastUpdate", "1367282267968");
Found : user_pref("CT3298581.serviceLayer_services_login_10.15.2.523_lastUpdate", "1372159837470");
Found : user_pref("CT3298581.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372680538381");
Found : user_pref("CT3298581.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1367163751485");
Found : user_pref("CT3298581.serviceLayer_services_searchAPI_lastUpdate", "1372622813305");
Found : user_pref("CT3298581.serviceLayer_services_serviceMap_lastUpdate", "1372622813068");
Found : user_pref("CT3298581.serviceLayer_services_toolbarContextMenu_lastUpdate", "1367163751317");
Found : user_pref("CT3298581.serviceLayer_services_toolbarSettings_lastUpdate", "1372680538266");
Found : user_pref("CT3298581.serviceLayer_services_translation_lastUpdate", "1372313905917");
Found : user_pref("CT3298581.settingsINI", true);
Found : user_pref("CT3298581.shouldFirstTimeDialog", "false");
Found : user_pref("CT3298581.showToolbarPermission", "false");
Found : user_pref("CT3298581.smartbar.CTID", "CT3298581");
Found : user_pref("CT3298581.smartbar.Uninstall", "0");
Found : user_pref("CT3298581.smartbar.homepage", "true");
Found : user_pref("CT3298581.smartbar.isHidden", true);
Found : user_pref("CT3298581.smartbar.toolbarName", "MixiDJ V45 ");
Found : user_pref("CT3298581.startPage", "true");
Found : user_pref("CT3298581.toolbarBornServerTime", "28-4-2013");
Found : user_pref("CT3298581.toolbarCurrentServerTime", "1-7-2013");
Found : user_pref("CT3298581.toolbarLoginClientTime", "Sun Apr 28 2013 08:42:32 GMT-0700 (Pacific Daylight T[...]
Found : user_pref("CT3298581.url_history0001.enc", "aHR0cDovL3d3dy5zcG9rZW8uY29tL3VzZXIjOjo6Y2xpY2toYW5kbGVy[...]
Found : user_pref("CT3298581.versionFromInstaller", "10.15.2.23");
Found : user_pref("CT3298581_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("FirstSearch.aol_toolbar.search.hasDoneFirst", 1);
Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3284668&octid=CT328466[...]
Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3284668");
Found : user_pref("aol_toolbar.button.aol_mail_5496.click", "1");
Found : user_pref("aol_toolbar.button.ebay_46278.click", "1");
Found : user_pref("aol_toolbar.button.facebook_40839.click", "1");
Found : user_pref("aol_toolbar.buttons.layout", "aol_bookmark_button_1370097972011;aol_mail_5496;facebook_40[...]
Found : user_pref("aol_toolbar.curtain.congrats", "n");
Found : user_pref("aol_toolbar.default.homepage.protection", false);
Found : user_pref("aol_toolbar.default.homepage.url", "");
Found : user_pref("aol_toolbar.firsttime.showwindow", false);
Found : user_pref("aol_toolbar.guid", "{054D21D5-31B2-2C73-9122-2233E866C5CD}");
Found : user_pref("aol_toolbar.homepageprotection.enabled", false);
Found : user_pref("aol_toolbar.install.distroid", "aol");
Found : user_pref("aol_toolbar.install.homepage.label", "AOL.com");
Found : user_pref("aol_toolbar.install.lastTbVersion", "5.74.1.9430");
Found : user_pref("aol_toolbar.install.lid", "hyplognew00000010");
Found : user_pref("aol_toolbar.install.mtmhp", "hyplogusaolp00000023");
Found : user_pref("aol_toolbar.install.ncid", "");
Found : user_pref("aol_toolbar.metrics.activestampdate", "29");
Found : user_pref("aol_toolbar.metrics.activestampmonth", "5");
Found : user_pref("aol_toolbar.metrics.activestampyear", "2013");
Found : user_pref("aol_toolbar.metrics.log", false);
Found : user_pref("aol_toolbar.metrics.originalDate", "1");
Found : user_pref("aol_toolbar.metrics.originalHours", "7");
Found : user_pref("aol_toolbar.metrics.originalMinutes", "0");
Found : user_pref("aol_toolbar.metrics.originalMonth", "6");
Found : user_pref("aol_toolbar.metrics.originalSeconds", "0");
Found : user_pref("aol_toolbar.metrics.originalYear", "2013");
Found : user_pref("aol_toolbar.relatednews.enabled", false);
Found : user_pref("aol_toolbar.remote.publish.xml", "1372536402449");
Found : user_pref("aol_toolbar.reset.flag", "3");
Found : user_pref("aol_toolbar.reset.style", "A");
Found : user_pref("aol_toolbar.resetprompt.daily.num", "1");
Found : user_pref("aol_toolbar.resetprompt.daily.timestamp", "1370090940494");
Found : user_pref("aol_toolbar.resetprompt.display.limit", "8");
Found : user_pref("aol_toolbar.rtw.active", false);
Found : user_pref("aol_toolbar.search.button", true);
Found : user_pref("aol_toolbar.search.cid", "01-06-2013");
Found : user_pref("aol_toolbar.search.focusnewtab", true);
Found : user_pref("aol_toolbar.search.instd", "DE0F8502F6184237950B7A6FC5CFFBF0");
Found : user_pref("aol_toolbar.search.newtab", true);
Found : user_pref("aol_toolbar.search.oid", "01-06-2013");
Found : user_pref("aol_toolbar.search.placement", "right");
Found : user_pref("aol_toolbar.search.populateoncomplete", false);
Found : user_pref("aol_toolbar.search.savehistory", false);
Found : user_pref("aol_toolbar.search.searchtype", "web");
Found : user_pref("aol_toolbar.search.source", "adknowledgeaol-ff");
Found : user_pref("aol_toolbar.searchengine.label", "AOL Search");
Found : user_pref("aol_toolbar.searchprotection.enabled", false);
Found : user_pref("aol_toolbar.skin.custom", false);
Found : user_pref("aol_toolbar.surf.date", "80");
Found : user_pref("aol_toolbar.surf.lastDate", "1");
Found : user_pref("aol_toolbar.surf.lastMonth", "6");
Found : user_pref("aol_toolbar.surf.lastYear", "2013");
Found : user_pref("aol_toolbar.surf.month", "80");
Found : user_pref("aol_toolbar.surf.prevMonth", "14046");
Found : user_pref("aol_toolbar.surf.total", "14155");
Found : user_pref("aol_toolbar.surf.week", "403");
Found : user_pref("aol_toolbar.surf.year", "14125");
Found : user_pref("aol_toolbar.ticker.active", false);
Found : user_pref("aol_toolbar.upgrade.showwindow", false);
Found : user_pref("aol_toolbar.weather.degc", "27");
Found : user_pref("aol_toolbar.weather.degf", "81");
Found : user_pref("aol_toolbar.weather.image", "chrome://aoltoolbar/skin/weather/34.png");
Found : user_pref("aol_toolbar.weather.locationid", "USNY0996");
Found : user_pref("aol_toolbar.weather.metric", true);
Found : user_pref("aol_toolbar.weather.tooltip", "New York , NY : Mostly Sunny");
Found : user_pref("aol_toolbar.weather.update", "1372536402509");
Found : user_pref("aol_toolbar.winamp.volume", "");
Found : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Found : user_pref("browser.search.defaultthis.engineName", "KeyBar 1.6 Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3284668&CUI[...]
Found : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Found : user_pref("extensions.defaulttab.config", "{\"status\": \"ok\", \"config\": {\"dns_error_handling\":[...]
Found : user_pref("extensions.delta.admin", false);
Found : user_pref("extensions.delta.aflt", "babsst");
Found : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Found : user_pref("extensions.delta.autoRvrt", "false");
Found : user_pref("extensions.delta.bbDpng", "30");
Found : user_pref("extensions.delta.cntry", "US");
Found : user_pref("extensions.delta.dfltLng", "en");
Found : user_pref("extensions.delta.excTlbr", false);
Found : user_pref("extensions.delta.ffxUnstlRst", true);
Found : user_pref("extensions.delta.hdrMd5", "63C271E8CD6631E134024B5C1122532D");
Found : user_pref("extensions.delta.id", "b0b146690000000000009c2a70398cca");
Found : user_pref("extensions.delta.instlDay", "15830");
Found : user_pref("extensions.delta.instlRef", "sst");
Found : user_pref("extensions.delta.lastVrsnTs", "1.8.16.1616:16:31");
Found : user_pref("extensions.delta.newTab", false);
Found : user_pref("extensions.delta.prdct", "delta");
Found : user_pref("extensions.delta.prtnrId", "delta");
Found : user_pref("extensions.delta.rvrt", "false");
Found : user_pref("extensions.delta.sg", "azb");
Found : user_pref("extensions.delta.smplGrp", "none");
Found : user_pref("extensions.delta.tlbrId", "base");
Found : user_pref("extensions.delta.tlbrSrchUrl", "");
Found : user_pref("extensions.delta.vrsn", "1.8.16.16");
Found : user_pref("extensions.delta.vrsnTs", "1.8.16.1618:34:19");
Found : user_pref("extensions.delta.vrsni", "1.8.16.16");
Found : user_pref("extensions.dynconff.JS.SFMNAppData", "%22%5B%7B%5C%22d%5C%22%3A%5C%22www.mediaite.com%5C%[...]
Found : user_pref("extensions.dynconff.cache.www.safemonitorapp.com.content", "<package expire=\"3600\" es=\[...]
Found : user_pref("smartbar.addressBarOwnerCTID", "CT3284668");
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3298581&CUI=UN251846124[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3284668");
Found : user_pref("smartbar.homePageOwnerCTID", "CT3294791");
Found : user_pref("smartbar.machineId", "JAP/5SHOHALDCAPQVFRXG3MZVHFO2EWY6DFBWMNKLSMOBM5TUCO75NJMRJNHGGVMHDM[...]
Found : user_pref("smartbar.originalHomepage", "about:home");
Found : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Found : user_pref("smartbar.originalSearchEngine", "MixiDJ V45 Customized Web Search");

*************************

AdwCleaner[R1].txt - [59623 octets] - [01/07/2013 06:28:55]

########## EOF - C:\AdwCleaner[R1].txt - [59684 octets] ##########

Farbar Service Scanner Version: 27-06-2013
Ran by Marlene (administrator) on 01-07-2013 at 06:32:25
Running from "C:\Users\Marlene\Desktop"
Microsoft Windows 8  (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
The start type of wuauserv service is set to Demand. The default start type is Auto.
The ImagePath of wuauserv service is OK.
The ServiceDll of wuauserv service is OK.


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend: ""%ProgramFiles%\Windows Defender\MsMpEng.exe"".


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys => MD5 is legit
C:\Windows\System32\dhcpcore.dll => MD5 is legit
C:\Windows\System32\drivers\afd.sys => MD5 is legit
C:\Windows\System32\drivers\tdx.sys => MD5 is legit
C:\Windows\System32\Drivers\tcpip.sys
[2013-06-26 03:36] - [2013-05-04 00:45] - 2233600 ____A (Microsoft Corporation) D750CE2A52F1B95E654CF2904C88EF1F

C:\Windows\System32\dnsrslvr.dll => MD5 is legit
C:\Windows\System32\mpssvc.dll => MD5 is legit
C:\Windows\System32\bfe.dll => MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys => MD5 is legit
C:\Windows\System32\SDRSVC.dll => MD5 is legit
C:\Windows\System32\vssvc.exe
[2013-06-26 03:38] - [2013-05-03 23:59] - 1483776 ____A (Microsoft Corporation) D0C69E44BC1E1D4AD290FD84104623D8

C:\Windows\System32\wscsvc.dll
[2013-05-17 18:44] - [2013-04-08 21:51] - 0099840 ____A (Microsoft Corporation) 012CFE7F0F95266F554EE3B91EE2128A

C:\Windows\System32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\System32\wuaueng.dll
[2013-06-26 03:38] - [2013-05-03 23:59] - 3241472 ____A (Microsoft Corporation) BE302BABE45EC05995F8DC66E37BBB3D

C:\Windows\System32\qmgr.dll => MD5 is legit
C:\Windows\System32\es.dll => MD5 is legit
C:\Windows\System32\cryptsvc.dll
[2013-06-26 03:36] - [2013-04-23 15:55] - 0068096 ____A (Microsoft Corporation) AFA426B0E7975CEB21F8B6711EFA8945

C:\Program Files\Windows Defender\MpSvc.dll
[2013-03-25 15:40] - [2013-01-28 16:08] - 1555920 ____A (Microsoft Corporation) 905601FFF40D8DA9FA82CBE77D1F5EB1

C:\Program Files\Windows Defender\MsMpEng.exe
[2013-03-25 15:40] - [2013-01-28 18:57] - 0014920 ____A (Microsoft Corporation) 473B9548568BA927ACE0B77EC208A561

C:\Windows\System32\ipnathlp.dll => MD5 is legit
C:\Windows\System32\iphlpsvc.dll => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit


**** End of log ****

MiniToolBox by Farbar  Version: 16-06-2013
Ran by Marlene (administrator) on 01-07-2013 at 06:36:58
Running from "C:\Users\Marlene\Desktop"
Windows 8  (X64)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================



========================= IP Configuration: ================================

Realtek PCIe GBE Family Controller = Ethernet (Connected)
Ralink RT3290 802.11bgn Wi-Fi Adapter = Wi-Fi (Media disconnected)
Bluetooth Device (Personal Area Network) = Bluetooth Network Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled
set interface interface="Local Area Connection* 9" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Wi-Fi" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Local Area Connection* 11" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Bluetooth Network Connection" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled


popd
# End of IPv4 configuration



Windows IP Configuration

   Host Name . . . . . . . . . . . . : 1sexybleep
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : gateway.2wire.net

Ethernet adapter Bluetooth Network Connection:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Bluetooth Device (Personal Area Network)
   Physical Address. . . . . . . . . : 9C-2A-70-39-8C-CA
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
   Physical Address. . . . . . . . . : 9C-2A-70-39-8C-CB
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Wireless LAN adapter Wi-Fi:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Ralink RT3290 802.11bgn Wi-Fi Adapter
   Physical Address. . . . . . . . . : 9C-2A-70-39-8C-C9
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes

Ethernet adapter Ethernet:

   Connection-specific DNS Suffix  . : gateway.2wire.net
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 00-25-AB-2F-B8-FD
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::f5f2:b37e:6bf4:d6a7%12(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.64(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Saturday, June 29, 2013 12:26:03 PM
   Lease Expires . . . . . . . . . . : Tuesday, July 2, 2013 12:26:02 AM
   Default Gateway . . . . . . . . . : 192.168.1.254
   DHCP Server . . . . . . . . . . . : 192.168.1.254
   DHCPv6 IAID . . . . . . . . . . . : 251667883
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-6E-7F-4F-00-25-AB-2F-B8-FD
   DNS Servers . . . . . . . . . . . : 192.168.1.254
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.gateway.2wire.net:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : gateway.2wire.net
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Teredo Tunneling Pseudo-Interface:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:28ca:15a1:b308:20f7(Preferred)
   Link-local IPv6 Address . . . . . : fe80::28ca:15a1:b308:20f7%19(Preferred)
   Default Gateway . . . . . . . . . : ::
   NetBIOS over Tcpip. . . . . . . . : Disabled
Server:  homeportal
Address:  192.168.1.254

Name:    google.com
Addresses:  2607:f8b0:4007:800::1009
      74.125.224.227
      74.125.224.228
      74.125.224.229
      74.125.224.230
      74.125.224.231
      74.125.224.232
      74.125.224.233
      74.125.224.238
      74.125.224.224
      74.125.224.225
      74.125.224.226


Pinging google.com [74.125.224.230] with 32 bytes of data:
Reply from 74.125.224.230: bytes=32 time=27ms TTL=55
Reply from 74.125.224.230: bytes=32 time=25ms TTL=55

Ping statistics for 74.125.224.230:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 25ms, Maximum = 27ms, Average = 26ms
Server:  homeportal
Address:  192.168.1.254

Name:    yahoo.com
Addresses:  98.139.183.24
      206.190.36.45
      98.138.253.109


Pinging yahoo.com [206.190.36.45] with 32 bytes of data:
Reply from 206.190.36.45: bytes=32 time=80ms TTL=49
Reply from 206.190.36.45: bytes=32 time=78ms TTL=49

Ping statistics for 206.190.36.45:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 78ms, Maximum = 80ms, Average = 79ms

Pinging 127.0.0.1 with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time=5ms TTL=128
Reply from 127.0.0.1: bytes=32 time=2ms TTL=128

Ping statistics for 127.0.0.1:
    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 2ms, Maximum = 5ms, Average = 3ms
===========================================================================
Interface List
 15...9c 2a 70 39 8c ca ......Bluetooth Device (Personal Area Network)
 14...9c 2a 70 39 8c cb ......Microsoft Wi-Fi Direct Virtual Adapter
 13...9c 2a 70 39 8c c9 ......Ralink RT3290 802.11bgn Wi-Fi Adapter
 12...00 25 ab 2f b8 fd ......Realtek PCIe GBE Family Controller
  1...........................Software Loopback Interface 1
 18...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
 19...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0    192.168.1.254     192.168.1.64     20
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      192.168.1.0    255.255.255.0         On-link      192.168.1.64    276
     192.168.1.64  255.255.255.255         On-link      192.168.1.64    276
    192.168.1.255  255.255.255.255         On-link      192.168.1.64    276
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link      192.168.1.64    276
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link      192.168.1.64    276
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
 19    306 ::/0                     On-link
  1    306 ::1/128                  On-link
 19    306 2001::/32                On-link
 19    306 2001:0:5ef5:79fd:28ca:15a1:b308:20f7/128
                                    On-link
 12    276 fe80::/64                On-link
 19    306 fe80::/64                On-link
 19    306 fe80::28ca:15a1:b308:20f7/128
                                    On-link
 12    276 fe80::f5f2:b37e:6bf4:d6a7/128
                                    On-link
  1    306 ff00::/8                 On-link
 19    306 ff00::/8                 On-link
 12    276 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None
========================= Winsock entries =====================================

Catalog5 01 C:\windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)
Catalog5 02 C:\windows\SysWOW64\pnrpnsp.dll [67584] (Microsoft Corporation)
Catalog5 03 C:\windows\SysWOW64\pnrpnsp.dll [67584] (Microsoft Corporation)
Catalog5 04 C:\windows\SysWOW64\NLAapi.dll [55296] (Microsoft Corporation)
Catalog5 05 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog5 06 C:\windows\SysWOW64\winrnr.dll [21504] (Microsoft Corporation)
Catalog5 07 C:\windows\SysWOW64\wshbth.dll [50688] (Microsoft Corporation)
Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 02 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 03 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 04 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 05 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 06 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 07 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 08 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 09 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 10 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
Catalog9 11 C:\windows\SysWOW64\mswsock.dll [289280] (Microsoft Corporation)
x64-Catalog5 01 C:\Windows\System32\napinsp.dll [66560] (Microsoft Corporation)
x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [85504] (Microsoft Corporation)
x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [85504] (Microsoft Corporation)
x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [72192] (Microsoft Corporation)
x64-Catalog5 05 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog5 06 C:\Windows\System32\winrnr.dll [53760] (Microsoft Corporation)
x64-Catalog5 07 C:\Windows\System32\wshbth.dll [64000] (Microsoft Corporation)
x64-Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)
x64-Catalog9 01 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 02 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 03 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 04 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 05 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 06 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 07 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 08 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 09 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 10 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)
x64-Catalog9 11 C:\Windows\System32\mswsock.dll [355328] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (07/01/2013 05:53:00 AM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x1358
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/01/2013 04:53:00 AM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x658
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/01/2013 03:53:00 AM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x784
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/01/2013 02:53:01 AM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x1d3c
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/01/2013 01:53:00 AM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x19e4
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (07/01/2013 00:53:00 AM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0xcac
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (06/30/2013 11:53:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0x1fd8
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (06/30/2013 11:07:10 PM) (Source: Office 2013 Licensing Service) (User: )
Description: Subscription licensing service failed: -1073415161

Error: (06/30/2013 10:53:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0xf60
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5

Error: (06/30/2013 09:53:00 PM) (Source: Application Error) (User: )
Description: Faulting application name: FlashPlayerUpdateService.exe, version: 11.6.602.180, time stamp: 0x51a4ab8c
Faulting module name: ntdll.dll, version: 6.2.9200.16578, time stamp: 0x515fac6e
Exception code: 0xc0000005
Fault offset: 0x0002fa8b
Faulting process id: 0xc48
Faulting application start time: 0xFlashPlayerUpdateService.exe0
Faulting application path: FlashPlayerUpdateService.exe1
Faulting module path: FlashPlayerUpdateService.exe2
Report Id: FlashPlayerUpdateService.exe3
Faulting package full name: FlashPlayerUpdateService.exe4
Faulting package-relative application ID: FlashPlayerUpdateService.exe5


System errors:
=============
Error: (06/29/2013 01:05:31 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (06/29/2013 00:28:40 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (06/29/2013 00:20:53 PM) (Source: EventLog) (User: )
Description: The previous system shutdown at 11:57:35 AM on ?6/?29/?2013 was unexpected.

Error: (06/28/2013 10:04:09 PM) (Source: DCOM) (User: 1SEXYbleep)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}1sexybleepMarleneS-1-5-21-3493013868-20574234-2027898036-1001LocalHost (Using LRPC)27376FBTouch.FacebookTouch_1.0.0.52_neutral__0fbh69et56sewS-1-15-2-3238182129-847938917-1562268077-4152860946-3486058975-3431724005-971035453

Error: (06/28/2013 10:04:09 PM) (Source: DCOM) (User: 1SEXYbleep)
Description: machine-defaultLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}1sexybleepMarleneS-1-5-21-3493013868-20574234-2027898036-1001LocalHost (Using LRPC)27376FBTouch.FacebookTouch_1.0.0.52_neutral__0fbh69et56sewS-1-15-2-3238182129-847938917-1562268077-4152860946-3486058975-3431724005-971035453

Error: (06/28/2013 09:19:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT AUTHORITY)
Description: Installation Failure: Windows failed to install the following update with error 0x80246007: Update for Windows 8 for x64-based Systems (KB2821895).

Error: (06/28/2013 07:53:46 PM) (Source: Schannel) (User: NT AUTHORITY)
Description: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

Error: (06/28/2013 07:52:01 PM) (Source: DCOM) (User: 1SEXYbleep)
Description: {76D0CB12-7604-4048-B83C-1005C7DDC503}

Error: (06/27/2013 00:44:57 PM) (Source: Service Control Manager) (User: )
Description: The Panda Cloud Antivirus Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.

Error: (06/27/2013 00:44:27 PM) (Source: DCOM) (User: 1SEXYbleep)
Description: YahooInc.YahooMail.AppXjmhvx6vdq1pz1sp22sm2m73sk7h65jg8.wwa


Microsoft Office Sessions:
=========================
Error: (07/01/2013 05:53:00 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b135801ce7659eaa0ce33C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dll28706066-e24d-11e2-be8b-9c2a70398cca

Error: (07/01/2013 04:53:00 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b65801ce765188d654bdC:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dllc6c9efd2-e244-11e2-be8b-9c2a70398cca

Error: (07/01/2013 03:53:00 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b78401ce764927146840C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dll64e72f4c-e23c-11e2-be8b-9c2a70398cca

Error: (07/01/2013 02:53:01 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b1d3c01ce7640c556e951C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dll03997527-e234-11e2-be8b-9c2a70398cca

Error: (07/01/2013 01:53:00 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b19e401ce7638638bd37eC:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dlla15d13ae-e22b-11e2-be8b-9c2a70398cca

Error: (07/01/2013 00:53:00 AM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8bcac01ce763001c94f67C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dll3f9e60cd-e223-11e2-be8b-9c2a70398cca

Error: (06/30/2013 11:53:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8b1fd801ce7627a01b6fffC:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dllde35a971-e21a-11e2-be8b-9c2a70398cca

Error: (06/30/2013 11:07:10 PM) (Source: Office 2013 Licensing Service)(User: )
Description: Subscription licensing service failed: -1073415161

Error: (06/30/2013 10:53:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8bf6001ce761f3e53dda1C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dll7c58a19d-e212-11e2-be8b-9c2a70398cca

Error: (06/30/2013 09:53:00 PM) (Source: Application Error)(User: )
Description: FlashPlayerUpdateService.exe11.6.602.18051a4ab8cntdll.dll6.2.9200.16578515fac6ec00000050002fa8bc4801ce7616dc941175C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exeC:\windows\SYSTEM32\ntdll.dll1a8f4bf4-e20a-11e2-be8b-9c2a70398cca


CodeIntegrity Errors:
===================================
  Date: 2013-05-22 15:43:02.943
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Unlocker\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2013-05-22 15:43:02.929
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Unlocker\UnlockerDriver5.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


=========================== Installed Programs ============================

µTorrent (Version: 3.3.0.29420)
7-Zip 9.22beta
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader XI (11.0.03) (Version: 11.0.03)
Adobe Shockwave Player 12.0 (Version: 12.0.2.122)
AOL Toolbar
AVG SafeGuard toolbar (Version: 15.3.0.11)
Bonjour (Version: 3.0.0.10)
CCleaner (Version: 3.24)
Compatibility Pack for the 2007 Office system (Version: 12.0.6612.1000)
CyberLink LabelPrint (Version: 2.5.1.5510)
CyberLink Media Suite 10 (Version: 10.0.1.1916)
CyberLink PhotoDirector (Version: 2.0.1.3109)
CyberLink Power2Go 8 (Version: 8.0.1.1902)
CyberLink PowerDirector 10 (Version: 10.0.1.1925)
CyberLink PowerDVD (Version: 10.0.1.4407)
CyberLink YouCam (Version: 3.5.4.5527)
D3DX10 (Version: 15.4.2368.0902)
DefaultTab (Version: 2.2.3.0)
Dropbox (Version: 2.0.22)
Energy Star (Version: 1.0.8)
ExpressCache (Version: 1.0.86)
Extreme Flash Player (Version: 1.1.0)
Facebook Video Calling 1.2.0.287 (Version: 1.2.287)
Flash Player Pro V5.4
GOM Audio (Version: 2.0.2.0287)
GOM Player (Version: 2.1.50.5145)
Google Talk Plugin (Version: 4.1.3.13728)
Hewlett-Packard ACLM.NET v1.2.0.0 (Version: 1.00.0000)
HP Connected Backup (Version: 8.7.0.0)
HP Connected Music (Meridian - installer) (Version: v1.0)
HP Connected Music (Meridian - player) (Version: 1.1 (build 37) hp)
HP Connected Remote (Version: 1.0.1206)
HP Customer Experience Enhancements (Version: 6.0.1.7)
HP Games (Version: 1.0.3.0)
HP Keyboard (Version: 1.5.0.7)
HP My Display TouchSmart Edition (Version: 1.12.004)
HP Postscript Converter (Version: 3.1.3591)
HP Registration Service (Version: 1.0.5976.4186)
HP Support Information (Version: 12.00.0000)
IDT Audio (Version: 1.0.6418.0)
ImageBadger Image Converter (Version: 04.00.00.00)
Intel® Management Engine Components (Version: 8.1.0.1252)
Intel® Processor Graphics (Version: 9.17.10.2828)
Intel® SDK for OpenCL - CPU Only Runtime Package (Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Java 7 Update 21 (Version: 7.0.210)
Java Auto Updater (Version: 2.1.9.0)
JMicron Flash Media Controller Driver (Version: 1.0.72.4)
Lexmark 2300 Series
Lightspark 0.5.3-git (Version: 0.5.3-git)
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Media Player Classic - Home Cinema v1.5.2.3456 (Version: 1.5.2.3456)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 365 Home Premium - en-us (Version: 15.0.4481.1510)
Microsoft Office PowerPoint Viewer 2007 (English) (Version: 12.0.6612.1000)
Microsoft SkyDrive (Version: 16.4.6013.0910)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Works (Version: 9.7.0621)
Mobile App Sync
Mozilla Firefox 22.0 (x86 en-US) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 15.4.2862.0708)
Music Manager
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4481.1510)
Office 15 Click-to-Run Licensing Component (Version: 15.0.4481.1510)
Office 15 Click-to-Run Localization Component (Version: 15.0.4481.1510)
Panda Cloud Antivirus (Version: 2.1.1)
Panda Cloud Antivirus (Version: 6.02.00.0000)
Picasa 3 (Version: 3.9)
Pivot Pro Plugin (Version: 9.50.110)
Process Hacker 2.30 (r5267) (Version: 2.30.0.5267)
Ralink Bluetooth Stack64 (Version: 9.0.710.0)
Ralink RT3290 802.11bgn Wi-Fi Adapter (Version: 5.0.2.0)
RealDownloader (Version: 1.3.2)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0)
RealPlayer (Version: 16.0.2)
RealUpgrade 1.1 (Version: 1.1.0)
Recovery Manager (Version: 5.5.0.5530)
SDK (Version: 2.28.007)
Software Version Updater (Version: 1.1.3.7)
Start Menu X version 4.7 (Version: 4.7)
swMSM (Version: 12.0.0.1)
Unlocker 1.9.1 (Version: 1.9.1)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Wisdom-soft ScreenHunter 6.0 Free

========================= Devices: ================================


========================= Memory info: ===================================

Percentage of memory in use: 55%
Total physical RAM: 3783.16 MB
Available physical RAM: 1701.01 MB
Total Pagefile: 5383.16 MB
Available Pagefile: 2712.16 MB
Total Virtual: 4095.88 MB
Available Virtual: 3967.2 MB

========================= Partitions: =====================================

1 Drive c: (OS) (Fixed) (Total:448.61 GB) (Free:397.23 GB) NTFS
2 Drive d: (Recovery Image) (Fixed) (Total:15.68 GB) (Free:1.94 GB) NTFS
3 Drive e: (New) (CDROM) (Total:1.79 GB) (Free:0 GB) CDFS
4 Drive f: (New Volume) (Fixed) (Total:1397.26 GB) (Free:1170.47 GB) NTFS
5 Drive h: (SEA_DISC) (Fixed) (Total:149.05 GB) (Free:64.42 GB) NTFS

========================= Users: ========================================

User accounts for \\1SEXYbleep

Administrator            Guest                    Marlene                  

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

27-06-2013 18:37:13 Windows Update

**** End of log ****
 



#5 dev00790

dev00790

    Bleeping Chocoholic


  • Members
  • 5,037 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:03:03 AM

Posted 01 July 2013 - 11:13 AM

Hi

 

Next:

 

:step1:

 

Going over your logs I noticed that you have utorrent installed.

  • Avoid peer-to-peer (P2P) file sharing programs.
  • They are a security risk which can make your computer susceptible to a wide variety of malware infections, remote attacks, exposure of personal information, and identity theft. Many malicious worms and Trojans spread across P2P file sharing networks, gaming and underground sites.  
  • P2p programs share a directory or set of directories on your computer to the world. Anyone can type in a search, and potentially download something from your computer. This makes the machine an open web server -- massively increasing the attack surface of the machine.
  • To reduce the risk of infection avoid using any P2P applications.

It is pretty much certain that if you continue to use P2P programs, you will get infected again.
I would recommend that you uninstall utorrent, however that choice is up to you.

If you choose to remove these programs, you can do so via:

  • Click the "Windows Orb" button - start%20orb%20normal_thumb.png.
  • Click Control Panel then Programs and Features..

If you wish to keep it, please do not use it until your computer is cleaned.

 

 

:step2:

  • Launch Malwarebytes' Anti-Malware (MBAM)
  • Click on the tab update, then click Check for Updates
  • If an update is found, it will download and install the latest version.
  • Then on the Scanner tab select Perform full scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad.
  • Post the full contents of the log in your next reply.

Note: Be sure to restart the computer.

The log can also be found here:
C:\Users\<Username>\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt

 

 

:step3:

 

I'd like us to scan your machine with ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Note: Vista / Windows 7 / Windows 8 users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.
 

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png  button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the esetsmartinstaller_enu.png
       icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and "Remove found threats"
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • On ESET: Click the Back button, then the Finish button.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!

 

 

:step4:

 

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Delete.
  • Confirm each time with Ok.
  • You will be prompted to restart your computer. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

Edited by dev00790, 01 July 2013 - 11:14 AM.

Regards, dev00790

---------------------------------------

Marge: "Homer, the plant called. They said if you don't show up tomorrow don't bother showing up on Monday." Homer: "Woo-hoo! Four-day weekend!"I do not reply to Private Messages (PMs) asking for assistance - please use the forums instead. If I have been helping you, and I have not replied to your latest post in 48 hours please send me a PM. My Blog


#6 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 01 July 2013 - 05:01 PM

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.07.01.06

Windows 8 x64 NTFS
Internet Explorer 10.0.9200.16599
Marlene :: 1SEXYbleep [administrator]

Protection: Enabled

7/1/2013 10:38:40 AM
mbam-log-2013-07-01 (10-38-40).txt

Scan type: Full scan (C:\|D:\|F:\|H:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 646040
Time elapsed: 3 hour(s), 6 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 11
HKCR\AppID\{F85FA3F2-D2C8-4D4D-BB1C-3181E691AF2B} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\CLSID\{2A28729E-2280-4986-BDB4-EC2623EAFBA4} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\TypeLib\{A3F56272-CDB4-4310-9BB1-9A0D0757A3B3} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\Interface\{D6975F9E-15B2-4FE7-9D16-FC2E85CB201B} (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\SelectionLinks.SelectionLinksBHO.1 (PUP.FaceThemes) -> Quarantined and deleted successfully.
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Quarantined and deleted successfully.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Quarantined and deleted successfully.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Quarantined and deleted successfully.
HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Quarantined and deleted successfully.
HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 27
C:\Users\Marlene\AppData\Local\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\7-zip_037\DomaIQ.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\7-zip_037\DomaIQ10.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\7-zip_037\exes.zip (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\DomaIQ.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\DomaIQ10.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\exes.zip (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\FlashPlayer_151\DomaIQ.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\FlashPlayer_151\DomaIQ10.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\DomaIQ.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\DomaIQ10.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\exes.zip (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\7-zip_V.107391196b.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\firefox_V.98613806b.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\FlashPlayer_V.48766452b.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\FlashPlayer_V.48767091b.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\FlashPlayer_V.48868977b.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\FlashPlayer_V.96560137b.exe (Adware.DomaIQ) -> Quarantined and deleted successfully.
C:\Users\Marlene\Downloads\unlocker_V.b.exe (PUP.DomaIQ) -> Quarantined and deleted successfully.
F:\from C My Documents\Downloads\WinUtilitiesPro.zip (PUP.Riskware.GameCheat) -> Quarantined and deleted successfully.
F:\FROM F ALL\Program Files\sniffpass.zip (PUP.PswdSniffer) -> Quarantined and deleted successfully.
F:\Music\My Documents 2\AsstFrom2scanSepE309\CryptLoad_1.1.6.7z (PUP.Netcat) -> Quarantined and deleted successfully.
F:\My Documents\Downloads\SoftonicDownloader_for_debut-video-capture.exe (PUP.OfferBundler.ST) -> Quarantined and deleted successfully.
F:\My Documents\Downloads\unlocker setup.exe (PUP.AdBundle) -> Quarantined and deleted successfully.
F:\My Documents\Downloads\CNET TechTracker\sniffpass.zip (PUP.PswdSniffer) -> Quarantined and deleted successfully.
H:\downloadbleep\DeludedEye.exe (Backdoor.Bifrose) -> Quarantined and deleted successfully.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Quarantined and deleted successfully.

(end)



#7 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 01 July 2013 - 09:08 PM

I sure hope I did this right. All this is new to me. I've never even posted before! So, I am slow to get stuff back to you because I'm trying to do everything right. I sure do thank you for your help.

 

C:\Users\All Users\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll    a variant of Win32/Adware.Yontoo.B application    
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll    a variant of Win32/Adware.Yontoo.B application    cleaned by deleting - quarantined
C:\Users\Marlene\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SBGDFEYI\yontoosetup[1].exe    multiple threats    cleaned by deleting - quarantined
C:\Users\Marlene\AppData\Local\Temp\byZNvQYN.exe.part    a variant of Win32/Adware.iBryte.G application    cleaned by deleting - quarantined
C:\Users\Marlene\AppData\Local\Temp\cheBB41.tmp    Win32/Adware.AddLyrics.F application    deleted - quarantined
C:\Users\Marlene\AppData\Local\Temp\LyricsTube.exe    Win32/Adware.AddLyrics.F application    cleaned by deleting - quarantined
C:\Users\Marlene\AppData\Local\Temp\DIQ\firefox_085\software\Yontoo.exe    multiple threats    cleaned by deleting - quarantined
C:\Users\Marlene\AppData\Local\Temp\DIQ\unlocker_119\software\Addlyrics.exe    Win32/Adware.AddLyrics.F application    cleaned by deleting - quarantined
C:\Users\Marlene\Downloads\Extreme_Flash_Player_Setup(1).exe    a variant of Win32/Adware.iBryte.G application    cleaned by deleting - quarantined
C:\Users\Marlene\Downloads\Extreme_Flash_Player_Setup.exe    a variant of Win32/Adware.iBryte.G application    cleaned by deleting - quarantined
C:\Users\Marlene\Downloads\Setup(3).exe    a variant of Win32/Adware.iBryte.G application    cleaned by deleting - quarantined
C:\Users\Marlene\Downloads\Setup(5).exe    a variant of Win32/Adware.iBryte.G application    cleaned by deleting - quarantined
C:\Users\Marlene\Downloads\Update.exe    a variant of Win32/Adware.iBryte.G application    cleaned by deleting - quarantined
F:\Music\My Documents 2\bub.angel backups\desktop.bck    probably a variant of Win32/Adware.Softomate.AD application    deleted - quarantined



#8 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 01 July 2013 - 09:19 PM

# AdwCleaner v2.303 - Logfile created 07/01/2013 at 19:12:29
# Updated 08/06/2013 by Xplode
# Operating system : Windows 8  (64 bits)
# User : Marlene - 1SEXYbleep
# Boot Mode : Normal
# Running from : C:\Users\Marlene\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****

Stopped & Deleted : DefaultTabUpdate

***** [Files / Folders] *****

Deleted on reboot : C:\Program Files (x86)\Common Files\AVG Secure Search
File Deleted : C:\END
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\addon@defaulttab.com.xpi
File Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\BrowserProtect.xml
File Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\Conduit.xml
File Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\delta.xml
File Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\searchplugins\search.xml
File Deleted : C:\Users\Public\Desktop\eBay.lnk
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\OApps
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Users\Marlene\AppData\Local\Conduit
Folder Deleted : C:\Users\Marlene\AppData\Local\PackageAware
Folder Deleted : C:\Users\Marlene\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\Marlene\AppData\Local\Temp\CT3284668
Folder Deleted : C:\Users\Marlene\AppData\Local\Temp\CT3289847
Folder Deleted : C:\Users\Marlene\AppData\Local\Temp\CT3294791
Folder Deleted : C:\Users\Marlene\AppData\Local\Temp\CT3298581
Folder Deleted : C:\Users\Marlene\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Marlene\AppData\LocalLow\Delta
Folder Deleted : C:\Users\Marlene\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Marlene\AppData\Roaming\DefaultTab
Folder Deleted : C:\Users\Marlene\AppData\Roaming\file scout
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3284668
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3289847
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3294791
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\CT3298581
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{65f9f6b7-2dae-46fc-bfaf-f88e4af1beca}
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{739df940-c5ee-4bab-9d7e-270894ae687a}
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{7f3f960e-a836-45ca-8911-0accb522246e}
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\extensions\{d2cf9842-af95-48cd-b873-bfbb48cd7f5e}
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\Smartbar
Folder Deleted : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\StumbleUpon

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\DefaultTab
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Default Tab
Key Deleted : HKCU\Software\DefaultTab
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C4CFC0DE-134F-4466-B2A2-FF7C59A8BFAD}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\968cd8b03aea48
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3284668
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3289847
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3294791
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298581
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Wow6432Node\968cd8b03aea48
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16599

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&CUI=UN21548011051786314&UM=2&ctid=CT3289847&SSPV=TB_T5 --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={E615ABD7-9AE4-11E2-BE71-9C2A70398CCA} --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (en-US)

File : C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\prefs.js

C:\Users\Marlene\AppData\Roaming\Mozilla\Firefox\Profiles\xgr3iu9n.default\user.js ... Deleted !

Deleted : user_pref("CT3284668.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT3284668.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Deleted : user_pref("CT3284668.BBActive.enc", "eWVz");
Deleted : user_pref("CT3284668.BBID.enc", "NGNmN2RmMDhjNTlhNTc2NA==");
Deleted : user_pref("CT3284668.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3284668.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3284668.FF19Solved", "true");
Deleted : user_pref("CT3284668.FirstTime", "true");
Deleted : user_pref("CT3284668.FirstTimeFF3", "true");
Deleted : user_pref("CT3284668.LAST_CLIENT_STATS_SUBMIT_2.enc", "MTM2NzcwNzczMw==");
Deleted : user_pref("CT3284668.LOCAL_COOKIE_STATS_LAST_SUBMIT_6.enc", "MTM2NzcwNzc0NA==");
Deleted : user_pref("CT3284668.LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT.enc", "MQ==");
Deleted : user_pref("CT3284668.LOCAL_COOKIE_THROTTLE_BASEadd_stats|0|LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT.[...]
Deleted : user_pref("CT3284668.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Deleted : user_pref("CT3284668.UserID", "UN14890412782192456");
Deleted : user_pref("CT3284668.acp_personal.appstate.enc", "ZW5hYmxl");
Deleted : user_pref("CT3284668.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3284668.autoDisableScopes", -1);
Deleted : user_pref("CT3284668.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3284668.countryCode", "US");
Deleted : user_pref("CT3284668.defaultSearch", "true");
Deleted : user_pref("CT3284668.enableAlerts", "true");
Deleted : user_pref("CT3284668.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT3284668.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3284668.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3284668.fixPageNotFoundError", "true");
Deleted : user_pref("CT3284668.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3284668.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3284668.fixUrls", true);
Deleted : user_pref("CT3284668.fullUserID", "UN14890412782192456.UP.20130625232243");
Deleted : user_pref("CT3284668.homepageuserchanged", true);
Deleted : user_pref("CT3284668.installDate", "4/5/2013 15:32:16");
Deleted : user_pref("CT3284668.installId", "conduitinstaller.exe");
Deleted : user_pref("CT3284668.installSessionId", "-1");
Deleted : user_pref("CT3284668.installSp", "TRUE");
Deleted : user_pref("CT3284668.installType", "conduitnsisintegration");
Deleted : user_pref("CT3284668.installerVersion", "1.4.1.3");
Deleted : user_pref("CT3284668.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3284668.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3284668.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3284668.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3284668.keyword", "true");
Deleted : user_pref("CT3284668.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3284668.lastVersion", "10.16.4.519");
Deleted : user_pref("CT3284668.mam_gk_appStateReportTime.enc", "MTM2NzcwNjc2NzUwMw==");
Deleted : user_pref("CT3284668.mam_gk_appState_ACplus.enc", "b24=");
Deleted : user_pref("CT3284668.mam_gk_appState_Discover.enc", "b24=");
Deleted : user_pref("CT3284668.mam_gk_appState_Find-a-Pro.enc", "b24=");
Deleted : user_pref("CT3284668.mam_gk_appState_PriceGrabber.enc", "b24=");
Deleted : user_pref("CT3284668.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IkFDcGx1cyIsInVybCI6Imh0dHA6Ly9jZG4u[...]
Deleted : user_pref("CT3284668.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Deleted : user_pref("CT3284668.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR3JhYmJlciI[...]
Deleted : user_pref("CT3284668.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Deleted : user_pref("CT3284668.mam_gk_eventsCache.enc", "eyI1ZDU4MWY2Ni1jZWM4LTRiYmUtYWMxOC02ZDhkZTEyZTEwMWIiO[...]
Deleted : user_pref("CT3284668.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3284668.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Deleted : user_pref("CT3284668.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Deleted : user_pref("CT3284668.mam_gk_lastLoginTime.enc", "MTM2NzcwNjc2MzU0Ng==");
Deleted : user_pref("CT3284668.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Deleted : user_pref("CT3284668.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3284668.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3284668.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3284668.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Deleted : user_pref("CT3284668.mam_gk_userId.enc", "NGVmMDBiNzYtMjBjNC00NDNhLWE5ODMtMDBiZGU0NzIzODQw");
Deleted : user_pref("CT3284668.migrateAppsAndComponents", true);
Deleted : user_pref("CT3284668.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Deleted : user_pref("CT3284668.openThankYouPage", "false");
Deleted : user_pref("CT3284668.openUninstallPage", "true");
Deleted : user_pref("CT3284668.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT32[...]
Deleted : user_pref("CT3284668.originalSearchEngine", "KeyBar 1.6 Customized Web Search");
Deleted : user_pref("CT3284668.revertSettingsEnabled", "false");
Deleted : user_pref("CT3284668.sac-country-code.enc", "IlVTIg==");
Deleted : user_pref("CT3284668.sac-experiments-animation.enc", "eyJuYW1lIjoiMC43NSIsInZlcnNpb24iOjN9");
Deleted : user_pref("CT3284668.sac-experiments-hover_effect.enc", "eyJuYW1lIjoic2hvcnQiLCJ2ZXJzaW9uIjoyfQ==");
Deleted : user_pref("CT3284668.sac-experiments-image_analysis.enc", "eyJuYW1lIjoid2l0aG91dFN1YnRpdGxlIiwidmVyc[...]
Deleted : user_pref("CT3284668.sac-experiments-placement.enc", "eyJuYW1lIjoid3JlY2std2lkZSIsInZlcnNpb24iOjZ9")[...]
Deleted : user_pref("CT3284668.sac-experiments-play_icon.enc", "eyJuYW1lIjoibm8iLCJ2ZXJzaW9uIjoyfQ==");
Deleted : user_pref("CT3284668.sac-periodic-reports.enc", "eyJ5dHRfcGluZ18wIjpbMTM2NzcwNjc2ODYxOSwxNDQwMDAwMF1[...]
Deleted : user_pref("CT3284668.sac-user-id.enc", "IjI4ZWNlMWY1LTM2NmUtNDliYy1iYjVlLTJhMzdmYzU2OWFjZiI=");
Deleted : user_pref("CT3284668.sac-yt-first-ping.enc", "MTM2NzcwNjc2ODYwNg==");
Deleted : user_pref("CT3284668.search.searchAppId", "130047021665254342");
Deleted : user_pref("CT3284668.search.searchCount", "0");
Deleted : user_pref("CT3284668.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3284668.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3284668.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3284668.searchRevert", "false");
Deleted : user_pref("CT3284668.searchSuggestEnabledByUser", "false");
Deleted : user_pref("CT3284668.searchUserMode", "2");
Deleted : user_pref("CT3284668.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3284668.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3284668.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3284668.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3284668.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Deleted : user_pref("CT3284668.serviceLayer_services_Configuration_lastUpdate", "1372709215763");
Deleted : user_pref("CT3284668.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1367706759239");
Deleted : user_pref("CT3284668.serviceLayer_services_appsMetadata_lastUpdate", "1367706758391");
Deleted : user_pref("CT3284668.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1367706758304");
Deleted : user_pref("CT3284668.serviceLayer_services_location_lastUpdate", "1372227506134");
Deleted : user_pref("CT3284668.serviceLayer_services_login_10.15.2.23_lastUpdate", "1367780088238");
Deleted : user_pref("CT3284668.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368110028202");
Deleted : user_pref("CT3284668.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368534840526");
Deleted : user_pref("CT3284668.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372227502807");
Deleted : user_pref("CT3284668.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372730597363");
Deleted : user_pref("CT3284668.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1367706758329");
Deleted : user_pref("CT3284668.serviceLayer_services_searchAPI_lastUpdate", "1372709215455");
Deleted : user_pref("CT3284668.serviceLayer_services_serviceMap_lastUpdate", "1372709215438");
Deleted : user_pref("CT3284668.serviceLayer_services_setupAPI_lastUpdate", "1367706757352");
Deleted : user_pref("CT3284668.serviceLayer_services_toolbarContextMenu_lastUpdate", "1367706758231");
Deleted : user_pref("CT3284668.serviceLayer_services_toolbarSettings_lastUpdate", "1372730597137");
Deleted : user_pref("CT3284668.serviceLayer_services_translation_lastUpdate", "1372313905909");
Deleted : user_pref("CT3284668.settingsINI", true);
Deleted : user_pref("CT3284668.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3284668.showToolbarPermission", "false");
Deleted : user_pref("CT3284668.smartbar.CTID", "CT3284668");
Deleted : user_pref("CT3284668.smartbar.Uninstall", "0");
Deleted : user_pref("CT3284668.smartbar.homepage", "true");
Deleted : user_pref("CT3284668.smartbar.isHidden", true);
Deleted : user_pref("CT3284668.smartbar.toolbarName", "KeyBar 1.6 ");
Deleted : user_pref("CT3284668.startPage", "true");
Deleted : user_pref("CT3284668.toolbarBornServerTime", "5-5-2013");
Deleted : user_pref("CT3284668.toolbarCurrentServerTime", "2-7-2013");
Deleted : user_pref("CT3284668.toolbarLoginClientTime", "Sat May 04 2013 15:32:38 GMT-0700 (Pacific Daylight T[...]
Deleted : user_pref("CT3284668.whitelist.enc", "W3sibmFtZSI6IlRpbWUiLCJkb21haW5fcmVneCI6IiguKlxcLik/dGltZS5jb2[...]
Deleted : user_pref("CT3284668.whitelist_ts.enc", "MTM2NzcwNzczMzU0Mw==");
Deleted : user_pref("CT3284668.wreck-country-code.enc", "IlVTIg==");
Deleted : user_pref("CT3284668.wreck-experiments-design.enc", "eyJuYW1lIjoiYWN0dWFsbHlMaWdodCIsInZlcnNpb24iOjN[...]
Deleted : user_pref("CT3284668.wreck-experiments-feed.enc", "eyJuYW1lIjoid3JlY2tBbmRUYWJvb2xhIiwidmVyc2lvbiI6M[...]
Deleted : user_pref("CT3284668.wreck-experiments-hover_effect.enc", "eyJuYW1lIjoiaGFsZiIsInZlcnNpb24iOjF9");
Deleted : user_pref("CT3284668.wreck-experiments-trigger.enc", "eyJuYW1lIjoieDAuNSIsInZlcnNpb24iOjF9");
Deleted : user_pref("CT3284668.wreck-periodic-reports.enc", "eyJ3cmVja19waW5nXzAiOlsxMzY3NzA2NzY4NDY3LDE0NDAwM[...]
Deleted : user_pref("CT3284668.wreck-user-id.enc", "ImUwOTliODBjLWZhNjYtNGYzOC05M2VmLTA0MTRhM2IxMWIzNCI=");
Deleted : user_pref("CT3284668_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3289847.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.FF19Solved", "true");
Deleted : user_pref("CT3289847.FirstTime", "true");
Deleted : user_pref("CT3289847.FirstTimeFF3", "true");
Deleted : user_pref("CT3289847.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Deleted : user_pref("CT3289847.UserID", "UN34459155091188831");
Deleted : user_pref("CT3289847.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3289847.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3289847.countryCode", "US");
Deleted : user_pref("CT3289847.defaultSearch", "true");
Deleted : user_pref("CT3289847.enableAlerts", "true");
Deleted : user_pref("CT3289847.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT3289847.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3289847.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3289847.fixPageNotFoundError", "true");
Deleted : user_pref("CT3289847.fixPageNotFoundErrorByUser", "TRUE");
Deleted : user_pref("CT3289847.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3289847.fixUrls", true);
Deleted : user_pref("CT3289847.fullUserID", "UN34459155091188831.UP.20130620163325");
Deleted : user_pref("CT3289847.homepageuserchanged", true);
Deleted : user_pref("CT3289847.installDate", "30/4/2013 15:06:20");
Deleted : user_pref("CT3289847.installId", "9818");
Deleted : user_pref("CT3289847.installSessionId", "-1");
Deleted : user_pref("CT3289847.installSp", "false");
Deleted : user_pref("CT3289847.installType", "conduitnsisintegration");
Deleted : user_pref("CT3289847.installUsage", "20/06/2013 16:33:18");
Deleted : user_pref("CT3289847.installUsageEarly", "20/06/2013 16:33:18");
Deleted : user_pref("CT3289847.installerVersion", "1.5.2.1");
Deleted : user_pref("CT3289847.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3289847.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3289847.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3289847.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.keyword", "true");
Deleted : user_pref("CT3289847.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3289847.lastVersion", "10.16.4.519");
Deleted : user_pref("CT3289847.mam_gk_installer_preapproved.enc", "VFJVRQ==");
Deleted : user_pref("CT3289847.migrateAppsAndComponents", true);
Deleted : user_pref("CT3289847.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Deleted : user_pref("CT3289847.openThankYouPage", "false");
Deleted : user_pref("CT3289847.openUninstallPage", "true");
Deleted : user_pref("CT3289847.originalSearchAddressUrl", "chrome://defaulttab/content/keywordURL.xul?");
Deleted : user_pref("CT3289847.revertSettingsEnabled", "true");
Deleted : user_pref("CT3289847.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3289847.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3289847.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3289847.searchRevert", "true");
Deleted : user_pref("CT3289847.searchSuggestEnabledByUser", "false");
Deleted : user_pref("CT3289847.searchUserMode", "2");
Deleted : user_pref("CT3289847.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289847.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3289847.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3289847.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3289847.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Deleted : user_pref("CT3289847.serviceLayer_services_Configuration_lastUpdate", "1372709215515");
Deleted : user_pref("CT3289847.serviceLayer_services_location_lastUpdate", "1372090964430");
Deleted : user_pref("CT3289847.serviceLayer_services_login_10.15.0.562_lastUpdate", "1367282266936");
Deleted : user_pref("CT3289847.serviceLayer_services_login_10.16.2.600_lastUpdate", "1372098164814");
Deleted : user_pref("CT3289847.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372730596561");
Deleted : user_pref("CT3289847.serviceLayer_services_searchAPI_lastUpdate", "1372709215428");
Deleted : user_pref("CT3289847.serviceLayer_services_serviceMap_lastUpdate", "1372709214366");
Deleted : user_pref("CT3289847.serviceLayer_services_setupAPI_lastUpdate", "1367151068312");
Deleted : user_pref("CT3289847.serviceLayer_services_toolbarSettings_lastUpdate", "1372730596374");
Deleted : user_pref("CT3289847.serviceLayer_services_translation_lastUpdate", "1372271374690");
Deleted : user_pref("CT3289847.settingsINI", true);
Deleted : user_pref("CT3289847.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3289847.showToolbarPermission", "false");
Deleted : user_pref("CT3289847.smartbar.CTID", "CT3289847");
Deleted : user_pref("CT3289847.smartbar.Uninstall", "0");
Deleted : user_pref("CT3289847.smartbar.homepage", "true");
Deleted : user_pref("CT3289847.smartbar.toolbarName", "WhiteSmoke New ");
Deleted : user_pref("CT3289847.startPage", "true");
Deleted : user_pref("CT3289847.toolbarBornServerTime", "28-4-2013");
Deleted : user_pref("CT3289847.toolbarCurrentServerTime", "2-7-2013");
Deleted : user_pref("CT3289847.toolbarLoginClientTime", "Sun Apr 28 2013 05:09:07 GMT-0700 (Pacific Daylight T[...]
Deleted : user_pref("CT3289847.versionFromInstaller", "10.14.380.14");
Deleted : user_pref("CT3289847_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3294791.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT3294791.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Deleted : user_pref("CT3294791.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3294791.FF19Solved", "true");
Deleted : user_pref("CT3294791.FirstTime", "true");
Deleted : user_pref("CT3294791.FirstTimeFF3", "true");
Deleted : user_pref("CT3294791.PG_ENABLE", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.PG_ENABLE.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Deleted : user_pref("CT3294791.SF_STATUS.enc", "RU5BQkxFRA==");
Deleted : user_pref("CT3294791.SF_USER_ID.enc", "Y2lkXzI5NDIwMTMyMjIwNTE3MjA0MTQz");
Deleted : user_pref("CT3294791.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Deleted : user_pref("CT3294791.UserID", "UN18281645110338105");
Deleted : user_pref("CT3294791.YTbyClickFavorites.enc", "W10=");
Deleted : user_pref("CT3294791.YTbyClickRecent.enc", "W10=");
Deleted : user_pref("CT3294791.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3294791.autoDisableScopes", -1);
Deleted : user_pref("CT3294791.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3294791.cb_experience_000.enc", "NA==");
Deleted : user_pref("CT3294791.cb_firstuse0100.enc", "MQ==");
Deleted : user_pref("CT3294791.cb_user_id_000.enc", "Q0I3MDM4ODM4NTk5NzZfMTM2NzM0MTQ1MzY5Ml9GaXJlZm94");
Deleted : user_pref("CT3294791.cbfirsttime.enc", "VHVlIEFwciAzMCAyMDEzIDEwOjA0OjEzIEdNVC0wNzAwIChQYWNpZmljIERh[...]
Deleted : user_pref("CT3294791.countryCode", "US");
Deleted : user_pref("CT3294791.defaultSearch", "true");
Deleted : user_pref("CT3294791.enableAlerts", "true");
Deleted : user_pref("CT3294791.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT3294791.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3294791.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3294791.fixPageNotFoundError", "true");
Deleted : user_pref("CT3294791.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3294791.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3294791.fixUrls", true);
Deleted : user_pref("CT3294791.fullUserID", "UN18281645110338105.UP.20130623013058");
Deleted : user_pref("CT3294791.homepageuserchanged", true);
Deleted : user_pref("CT3294791.installDate", "29/4/2013 20:39:51");
Deleted : user_pref("CT3294791.installId", "stub.exe");
Deleted : user_pref("CT3294791.installSessionId", "{81162D71-82E6-48F3-9C9B-2549A0B374FB}");
Deleted : user_pref("CT3294791.installSp", "TRUE");
Deleted : user_pref("CT3294791.installType", "conduitnsisintegration");
Deleted : user_pref("CT3294791.installUsage", "2013-04-30T06:42:01.183521+03:00");
Deleted : user_pref("CT3294791.installUsageEarly", "2013-04-30T06:42:00.3411048+03:00");
Deleted : user_pref("CT3294791.installerVersion", "1.4.1.3");
Deleted : user_pref("CT3294791.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3294791.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3294791.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3294791.keyword", "true");
Deleted : user_pref("CT3294791.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3294791.lastVersion", "10.16.4.519");
Deleted : user_pref("CT3294791.mam_gk_appStateReportTime.enc", "MTM3MDE0MDQ2NTIzMQ==");
Deleted : user_pref("CT3294791.mam_gk_appState_CouponBuddy.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_Easytobook.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_PriceGong.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appState_WindowShopper.enc", "b24=");
Deleted : user_pref("CT3294791.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Deleted : user_pref("CT3294791.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Deleted : user_pref("CT3294791.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGF[...]
Deleted : user_pref("CT3294791.mam_gk_currentVersion.enc", "MS42LjAuMQ==");
Deleted : user_pref("CT3294791.mam_gk_eventsCache.enc", "eyI5NjNlMDk1OC01MTgzLTQzZGYtODMzOS03Zjc0MmUwZjQ2NjkiO[...]
Deleted : user_pref("CT3294791.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3294791.mam_gk_gadgetOpen.enc", "MA==");
Deleted : user_pref("CT3294791.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Deleted : user_pref("CT3294791.mam_gk_lastLoginTime.enc", "MTM3MDE0MDQ2MjA5NA==");
Deleted : user_pref("CT3294791.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Deleted : user_pref("CT3294791.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3294791.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3294791.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3294791.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Deleted : user_pref("CT3294791.mam_gk_userId.enc", "ZGM5Mjc5YjktM2QwOC00ODVkLWJiNzAtMTJjMmZkNTljMTY1");
Deleted : user_pref("CT3294791.migrateAppsAndComponents", true);
Deleted : user_pref("CT3294791.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.bleepingcomp[...]
Deleted : user_pref("CT3294791.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.openThankYouPage", "false");
Deleted : user_pref("CT3294791.openUninstallPage", "true");
Deleted : user_pref("CT3294791.originalHomepage", "igoogle.com");
Deleted : user_pref("CT3294791.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT32[...]
Deleted : user_pref("CT3294791.revertSettingsEnabled", "false");
Deleted : user_pref("CT3294791.search.searchAppId", "130089396748860745");
Deleted : user_pref("CT3294791.search.searchCount", "1");
Deleted : user_pref("CT3294791.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3294791.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3294791.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3294791.searchRevert", "false");
Deleted : user_pref("CT3294791.searchSuggestEnabledByUser", "false");
Deleted : user_pref("CT3294791.searchUserMode", "2");
Deleted : user_pref("CT3294791.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3294791.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3294791.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3294791.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Deleted : user_pref("CT3294791.serviceLayer_services_Configuration_lastUpdate", "1372709214209");
Deleted : user_pref("CT3294791.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1370140453410");
Deleted : user_pref("CT3294791.serviceLayer_services_appsMetadata_lastUpdate", "1370140452578");
Deleted : user_pref("CT3294791.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1370140453382");
Deleted : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1367293317[...]
Deleted : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1367293318534")[...]
Deleted : user_pref("CT3294791.serviceLayer_services_location_lastUpdate", "1371966833244");
Deleted : user_pref("CT3294791.serviceLayer_services_login_10.15.2.23_lastUpdate", "1367293319863");
Deleted : user_pref("CT3294791.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368110027955");
Deleted : user_pref("CT3294791.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368534840472");
Deleted : user_pref("CT3294791.serviceLayer_services_login_10.16.2.509_lastUpdate", "1371966833491");
Deleted : user_pref("CT3294791.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372730596494");
Deleted : user_pref("CT3294791.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1370140453349");
Deleted : user_pref("CT3294791.serviceLayer_services_searchAPI_lastUpdate", "1372709214042");
Deleted : user_pref("CT3294791.serviceLayer_services_serviceMap_lastUpdate", "1372709213935");
Deleted : user_pref("CT3294791.serviceLayer_services_toolbarContextMenu_lastUpdate", "1370140453416");
Deleted : user_pref("CT3294791.serviceLayer_services_toolbarSettings_lastUpdate", "1372730596151");
Deleted : user_pref("CT3294791.serviceLayer_services_translation_lastUpdate", "1372313904579");
Deleted : user_pref("CT3294791.settingsINI", true);
Deleted : user_pref("CT3294791.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3294791.showToolbarPermission", "false");
Deleted : user_pref("CT3294791.smartbar.CTID", "CT3294791");
Deleted : user_pref("CT3294791.smartbar.Uninstall", "0");
Deleted : user_pref("CT3294791.smartbar.homepage", "true");
Deleted : user_pref("CT3294791.smartbar.isHidden", true);
Deleted : user_pref("CT3294791.smartbar.toolbarName", "Vafmusic2 ");
Deleted : user_pref("CT3294791.startPage", "true");
Deleted : user_pref("CT3294791.toolbarBornServerTime", "30-4-2013");
Deleted : user_pref("CT3294791.toolbarCurrentServerTime", "2-7-2013");
Deleted : user_pref("CT3294791.toolbarLoginClientTime", "Mon Apr 29 2013 20:41:59 GMT-0700 (Pacific Daylight T[...]
Deleted : user_pref("CT3294791.url_history0001.enc", "aHR0cDovL25ld3MueWFob28uY29tL2Jsb2dzL3NpZGVzaG93L21hbi10[...]
Deleted : user_pref("CT3294791.versionFromInstaller", "10.15.2.23");
Deleted : user_pref("CT3294791_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3298581.1000082.isPlayDisplay", "true");
Deleted : user_pref("CT3298581.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Deleted : user_pref("CT3298581.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3298581.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3298581.FF19Solved", "true");
Deleted : user_pref("CT3298581.FirstTime", "true");
Deleted : user_pref("CT3298581.FirstTimeFF3", "true");
Deleted : user_pref("CT3298581.PG_ENABLE", "dHJ1ZQ==");
Deleted : user_pref("CT3298581.PG_ENABLE.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3298581.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Deleted : user_pref("CT3298581.SF_STATUS.enc", "RU5BQkxFRA==");
Deleted : user_pref("CT3298581.SF_USER_ID.enc", "Y2lkXzI4NDIwMTM4NDI0MDMxMzUyOTc=");
Deleted : user_pref("CT3298581.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Deleted : user_pref("CT3298581.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL3N0b3JhZ2UuY29uZHVpdC[...]
Deleted : user_pref("CT3298581.UserID", "UN25184612442170825");
Deleted : user_pref("CT3298581.YTbyClickFavorites.enc", "W10=");
Deleted : user_pref("CT3298581.YTbyClickRecent.enc", "W10=");
Deleted : user_pref("CT3298581.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3298581.autoDisableScopes", -1);
Deleted : user_pref("CT3298581.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3298581.countryCode", "US");
Deleted : user_pref("CT3298581.defaultSearch", "true");
Deleted : user_pref("CT3298581.enableAlerts", "true");
Deleted : user_pref("CT3298581.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT3298581.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3298581.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3298581.fixPageNotFoundError", "true");
Deleted : user_pref("CT3298581.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3298581.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3298581.fixUrls", true);
Deleted : user_pref("CT3298581.fullUserID", "UN25184612442170825.UP.20130625051148");
Deleted : user_pref("CT3298581.homepageuserchanged", true);
Deleted : user_pref("CT3298581.installDate", "28/4/2013 4:41:49");
Deleted : user_pref("CT3298581.installId", "cid134_111");
Deleted : user_pref("CT3298581.installSessionId", "{74F3DD8B-C157-4521-B32B-525C76BC5DCB}");
Deleted : user_pref("CT3298581.installSp", "TRUE");
Deleted : user_pref("CT3298581.installType", "conduitnsisintegration");
Deleted : user_pref("CT3298581.installUsage", "2013-04-28T18:42:34.0452421+03:00");
Deleted : user_pref("CT3298581.installUsageEarly", "2013-04-28T18:42:33.0608419+03:00");
Deleted : user_pref("CT3298581.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3298581.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3298581.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3298581.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3298581.keyword", "true");
Deleted : user_pref("CT3298581.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3298581.lastVersion", "10.16.4.519");
Deleted : user_pref("CT3298581.mam_gk_appStateReportTime.enc", "MTM2NzE2Mzc2MDEyNg==");
Deleted : user_pref("CT3298581.mam_gk_appState_CouponBuddy.enc", "b24=");
Deleted : user_pref("CT3298581.mam_gk_appState_Easytobook.enc", "b24=");
Deleted : user_pref("CT3298581.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Deleted : user_pref("CT3298581.mam_gk_appState_PriceGong.enc", "b24=");
Deleted : user_pref("CT3298581.mam_gk_appState_WindowShopper.enc", "b24=");
Deleted : user_pref("CT3298581.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Deleted : user_pref("CT3298581.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Deleted : user_pref("CT3298581.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Deleted : user_pref("CT3298581.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Deleted : user_pref("CT3298581.mam_gk_eventsCache.enc", "eyJkOGY5Njk5OS1jMTRiLTQ0NjktYjExNC03ZTUyYTM5NzEwODMiO[...]
Deleted : user_pref("CT3298581.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3298581.mam_gk_gadgetOpen.enc", "MA==");
Deleted : user_pref("CT3298581.mam_gk_lastLoginTime.enc", "MTM2NzE2Mzc2MDExMw==");
Deleted : user_pref("CT3298581.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Deleted : user_pref("CT3298581.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3298581.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3298581.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3298581.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Deleted : user_pref("CT3298581.mam_gk_userId.enc", "YzM5MWUyZjctNTE5MC00MGRkLTkzNWQtMGZmYzlhYTQ2YjAy");
Deleted : user_pref("CT3298581.migrateAppsAndComponents", true);
Deleted : user_pref("CT3298581.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.bleepingcomp[...]
Deleted : user_pref("CT3298581.openThankYouPage", "false");
Deleted : user_pref("CT3298581.openUninstallPage", "true");
Deleted : user_pref("CT3298581.originalSearchAddressUrl", "");
Deleted : user_pref("CT3298581.revertSettingsEnabled", "false");
Deleted : user_pref("CT3298581.search.searchAppId", "130110229277019401");
Deleted : user_pref("CT3298581.search.searchCount", "0");
Deleted : user_pref("CT3298581.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3298581.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3298581.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3298581.searchRevert", "false");
Deleted : user_pref("CT3298581.searchSuggestEnabledByUser", "false");
Deleted : user_pref("CT3298581.searchUserMode", "2");
Deleted : user_pref("CT3298581.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3298581.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3298581.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3298581.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3298581.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Deleted : user_pref("CT3298581.serviceLayer_services_Configuration_lastUpdate", "1372709214202");
Deleted : user_pref("CT3298581.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1367163751954");
Deleted : user_pref("CT3298581.serviceLayer_services_appsMetadata_lastUpdate", "1367163752143");
Deleted : user_pref("CT3298581.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1367163751350");
Deleted : user_pref("CT3298581.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1367163750[...]
Deleted : user_pref("CT3298581.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1367163752215")[...]
Deleted : user_pref("CT3298581.serviceLayer_services_location_lastUpdate", "1372089584952");
Deleted : user_pref("CT3298581.serviceLayer_services_login_10.15.2.23_lastUpdate", "1367282267968");
Deleted : user_pref("CT3298581.serviceLayer_services_login_10.15.2.523_lastUpdate", "1372159837470");
Deleted : user_pref("CT3298581.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372730597156");
Deleted : user_pref("CT3298581.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1367163751485");
Deleted : user_pref("CT3298581.serviceLayer_services_searchAPI_lastUpdate", "1372709214090");
Deleted : user_pref("CT3298581.serviceLayer_services_serviceMap_lastUpdate", "1372709214068");
Deleted : user_pref("CT3298581.serviceLayer_services_toolbarContextMenu_lastUpdate", "1367163751317");
Deleted : user_pref("CT3298581.serviceLayer_services_toolbarSettings_lastUpdate", "1372730596918");
Deleted : user_pref("CT3298581.serviceLayer_services_translation_lastUpdate", "1372313905917");
Deleted : user_pref("CT3298581.settingsINI", true);
Deleted : user_pref("CT3298581.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3298581.showToolbarPermission", "false");
Deleted : user_pref("CT3298581.smartbar.CTID", "CT3298581");
Deleted : user_pref("CT3298581.smartbar.Uninstall", "0");
Deleted : user_pref("CT3298581.smartbar.homepage", "true");
Deleted : user_pref("CT3298581.smartbar.isHidden", true);
Deleted : user_pref("CT3298581.smartbar.toolbarName", "MixiDJ V45 ");
Deleted : user_pref("CT3298581.startPage", "true");
Deleted : user_pref("CT3298581.toolbarBornServerTime", "28-4-2013");
Deleted : user_pref("CT3298581.toolbarCurrentServerTime", "2-7-2013");
Deleted : user_pref("CT3298581.toolbarLoginClientTime", "Sun Apr 28 2013 08:42:32 GMT-0700 (Pacific Daylight T[...]
Deleted : user_pref("CT3298581.url_history0001.enc", "aHR0cDovL3d3dy5zcG9rZW8uY29tL3VzZXIjOjo6Y2xpY2toYW5kbGVy[...]
Deleted : user_pref("CT3298581.versionFromInstaller", "10.15.2.23");
Deleted : user_pref("CT3298581_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("FirstSearch.aol_toolbar.search.hasDoneFirst", 1);
Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3284668&octid=CT328466[...]
Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=C[...]
Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3284668");
Deleted : user_pref("aol_toolbar.button.aol_mail_5496.click", "1");
Deleted : user_pref("aol_toolbar.button.ebay_46278.click", "1");
Deleted : user_pref("aol_toolbar.button.facebook_40839.click", "1");
Deleted : user_pref("aol_toolbar.buttons.layout", "aol_bookmark_button_1370097972011;aol_mail_5496;facebook_40[...]
Deleted : user_pref("aol_toolbar.curtain.congrats", "n");
Deleted : user_pref("aol_toolbar.default.homepage.protection", false);
Deleted : user_pref("aol_toolbar.default.homepage.url", "");
Deleted : user_pref("aol_toolbar.firsttime.showwindow", false);
Deleted : user_pref("aol_toolbar.guid", "{054D21D5-31B2-2C73-9122-2233E866C5CD}");
Deleted : user_pref("aol_toolbar.homepageprotection.enabled", false);
Deleted : user_pref("aol_toolbar.install.distroid", "aol");
Deleted : user_pref("aol_toolbar.install.homepage.label", "AOL.com");
Deleted : user_pref("aol_toolbar.install.lastTbVersion", "5.74.1.9430");
Deleted : user_pref("aol_toolbar.install.lid", "hyplognew00000010");
Deleted : user_pref("aol_toolbar.install.mtmhp", "hyplogusaolp00000023");
Deleted : user_pref("aol_toolbar.install.ncid", "");
Deleted : user_pref("aol_toolbar.metrics.activestampdate", "1");
Deleted : user_pref("aol_toolbar.metrics.activestampmonth", "6");
Deleted : user_pref("aol_toolbar.metrics.activestampyear", "2013");
Deleted : user_pref("aol_toolbar.metrics.log", false);
Deleted : user_pref("aol_toolbar.metrics.originalDate", "1");
Deleted : user_pref("aol_toolbar.metrics.originalHours", "7");
Deleted : user_pref("aol_toolbar.metrics.originalMinutes", "0");
Deleted : user_pref("aol_toolbar.metrics.originalMonth", "6");
Deleted : user_pref("aol_toolbar.metrics.originalSeconds", "0");
Deleted : user_pref("aol_toolbar.metrics.originalYear", "2013");
Deleted : user_pref("aol_toolbar.relatednews.enabled", false);
Deleted : user_pref("aol_toolbar.remote.publish.xml", "1372730471073");
Deleted : user_pref("aol_toolbar.reset.flag", "3");
Deleted : user_pref("aol_toolbar.reset.style", "A");
Deleted : user_pref("aol_toolbar.resetprompt.daily.num", "1");
Deleted : user_pref("aol_toolbar.resetprompt.daily.timestamp", "1370090940494");
Deleted : user_pref("aol_toolbar.resetprompt.display.limit", "8");
Deleted : user_pref("aol_toolbar.rtw.active", false);
Deleted : user_pref("aol_toolbar.search.button", true);
Deleted : user_pref("aol_toolbar.search.cid", "01-06-2013");
Deleted : user_pref("aol_toolbar.search.focusnewtab", true);
Deleted : user_pref("aol_toolbar.search.instd", "DE0F8502F6184237950B7A6FC5CFFBF0");
Deleted : user_pref("aol_toolbar.search.newtab", true);
Deleted : user_pref("aol_toolbar.search.oid", "01-06-2013");
Deleted : user_pref("aol_toolbar.search.placement", "right");
Deleted : user_pref("aol_toolbar.search.populateoncomplete", false);
Deleted : user_pref("aol_toolbar.search.savehistory", false);
Deleted : user_pref("aol_toolbar.search.searchtype", "web");
Deleted : user_pref("aol_toolbar.search.source", "adknowledgeaol-ff");
Deleted : user_pref("aol_toolbar.searchengine.label", "AOL Search");
Deleted : user_pref("aol_toolbar.searchprotection.enabled", false);
Deleted : user_pref("aol_toolbar.skin.custom", false);
Deleted : user_pref("aol_toolbar.surf.date", "223");
Deleted : user_pref("aol_toolbar.surf.lastDate", "1");
Deleted : user_pref("aol_toolbar.surf.lastMonth", "6");
Deleted : user_pref("aol_toolbar.surf.lastYear", "2013");
Deleted : user_pref("aol_toolbar.surf.month", "223");
Deleted : user_pref("aol_toolbar.surf.prevMonth", "14046");
Deleted : user_pref("aol_toolbar.surf.total", "14298");
Deleted : user_pref("aol_toolbar.surf.week", "546");
Deleted : user_pref("aol_toolbar.surf.year", "14268");
Deleted : user_pref("aol_toolbar.ticker.active", false);
Deleted : user_pref("aol_toolbar.upgrade.showwindow", false);
Deleted : user_pref("aol_toolbar.weather.degc", "23");
Deleted : user_pref("aol_toolbar.weather.degf", "73");
Deleted : user_pref("aol_toolbar.weather.image", "chrome://aoltoolbar/skin/weather/26_n.png");
Deleted : user_pref("aol_toolbar.weather.locationid", "USNY0996");
Deleted : user_pref("aol_toolbar.weather.metric", true);
Deleted : user_pref("aol_toolbar.weather.tooltip", "New York , NY : Cloudy");
Deleted : user_pref("aol_toolbar.weather.update", "1372730471109");
Deleted : user_pref("aol_toolbar.winamp.volume", "");
Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Deleted : user_pref("browser.search.defaultthis.engineName", "KeyBar 1.6 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3284668&CUI[...]
Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Deleted : user_pref("extensions.delta.admin", false);
Deleted : user_pref("extensions.delta.aflt", "babsst");
Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Deleted : user_pref("extensions.delta.autoRvrt", "false");
Deleted : user_pref("extensions.delta.bbDpng", "30");
Deleted : user_pref("extensions.delta.cntry", "US");
Deleted : user_pref("extensions.delta.dfltLng", "en");
Deleted : user_pref("extensions.delta.excTlbr", false);
Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Deleted : user_pref("extensions.delta.hdrMd5", "63C271E8CD6631E134024B5C1122532D");
Deleted : user_pref("extensions.delta.id", "b0b146690000000000009c2a70398cca");
Deleted : user_pref("extensions.delta.instlDay", "15830");
Deleted : user_pref("extensions.delta.instlRef", "sst");
Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.16.1616:16:31");
Deleted : user_pref("extensions.delta.newTab", false);
Deleted : user_pref("extensions.delta.prdct", "delta");
Deleted : user_pref("extensions.delta.prtnrId", "delta");
Deleted : user_pref("extensions.delta.rvrt", "false");
Deleted : user_pref("extensions.delta.sg", "azb");
Deleted : user_pref("extensions.delta.smplGrp", "none");
Deleted : user_pref("extensions.delta.tlbrId", "base");
Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1618:34:19");
Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
Deleted : user_pref("extensions.dynconff.JS.SFMNAppData", "%22%5B%7B%5C%22d%5C%22%3A%5C%22www.mediaite.com%5C%[...]
Deleted : user_pref("extensions.dynconff.cache.www.safemonitorapp.com.content", "<package expire=\"3600\" es=\[...]
Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3284668");
Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3298581&CUI=UN251846124[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3284668");
Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3294791");
Deleted : user_pref("smartbar.machineId", "JAP/5SHOHALDCAPQVFRXG3MZVHFO2EWY6DFBWMNKLSMOBM5TUCO75NJMRJNHGGVMHDM[...]
Deleted : user_pref("smartbar.originalHomepage", "about:home");
Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Deleted : user_pref("smartbar.originalSearchEngine", "MixiDJ V45 Customized Web Search");

*************************

AdwCleaner[R1].txt - [59724 octets] - [01/07/2013 06:28:55]
AdwCleaner[S1].txt - [59683 octets] - [01/07/2013 19:12:29]

########## EOF - C:\AdwCleaner[S1].txt - [59744 octets] ##########
 



#9 dev00790

dev00790

    Bleeping Chocoholic


  • Members
  • 5,037 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:03:03 AM

Posted 02 July 2013 - 05:18 AM

That looks a lot better :)

 

How is the computer running now?


Regards, dev00790

---------------------------------------

Marge: "Homer, the plant called. They said if you don't show up tomorrow don't bother showing up on Monday." Homer: "Woo-hoo! Four-day weekend!"I do not reply to Private Messages (PMs) asking for assistance - please use the forums instead. If I have been helping you, and I have not replied to your latest post in 48 hours please send me a PM. My Blog


#10 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 03 July 2013 - 12:15 PM

It is running much better, faster, not so much drag.  Firefox stopped freezing and crashing. I am happy once more :)

Thank you so much :thumbup2:



#11 dev00790

dev00790

    Bleeping Chocoholic


  • Members
  • 5,037 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:03:03 AM

Posted 03 July 2013 - 04:49 PM

We're not finished yet :)

 

Next:

 

:step1:

 

Important Note: Your version of Java is out of date. Older versions have vulnerabilities that malicious sites can use to exploit and infect your system.
 


Please follow these steps to remove older version Java components and update:
 

  • Download the latest version of Java Runtime Environment (JRE) Version 25 and save it to your desktop.
  • Look for "Java Platform, Standard Edition".
  • Click the "Download JRE" button to the right.
  • Read the License Agreement, and then check the box that says: "Accept License Agreement".
  • From the list, select your OS and Platform (32-bit or 64-bit).
    64-bit OS users, should read: Which Java download should I choose for my 64-bit Windows operating system?
  • If a download for an Offline Installation is available, it is recommended to choose that and save the file to your desktop.
  • Close any programs you may have running - especially your web browser.

Go to StartBtn.gif > Control Panel, double-click on Add/Remove Programs or Programs and Features in Vista/Windows 7 and remove all older versions of Java.

  • Check (highlight) any item with Java Runtime Environment (JRE or J2SE) in the name.
  • Click the Remove or Change/Remove button and follow the onscreen instructions for the Java uninstaller.
  • Repeat as many times as necessary to remove each Java versions.
  • Reboot your computer once all Java components are removed.
  • Then from your desktop double-click on jre-7u25-windows-i586.exe (or jre-7u25-windows-x64.exe for 64-bit) to install the newest version.
  • If using Windows 7 or Vista and the installer refuses to launch due to insufficient user permissions, then Run As Administrator.
  • When the Java Setup - Welcome window opens, click the Install > button.
  • If offered any unwanted software or toolbars during installation, just uncheck the box before continuing unless you want it.
  • The McAfee Security Scan Plus tool is installed by default unless you uncheck the McAfee installation box when updating Java.

Note: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications but it's not necessary.
To disable the JQS service if you don't want to use it:


  • Go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter.
  • Click Ok and reboot your computer.

 

 

 

:step2:

 

FINAL STEPS

If you are not experiencing any other malware related issues, it is time to do our final steps:
 

  • Any programs that we had you download and/or install can be removed at this time.
  • If you used DeFogger to disable your Disk Emulation Software, you can reopen DeFogger and use the "Enable" button.
  • You can download this tool to delete more traces of our tools. Delete the tool itself afterwards.
  • Toggle System Restore OFF and then back ON.
  • You should delete your our old, potentially infected System Restore points and create a new, clean restore point.
    • If you are using Windows XP, read and follow the steps on "How to turn off or turn on System Restore" from this link
    • If you are using Windows Vista, read and follow the steps on "How do I turn System Restore on and off?" proceeded by "How do I create a restore point manually?" from this link.
    • If you are using Windows 7, read and follow the steps on "To delete all restore points" from this link proceeded by "Create a restore point" from this link.
    • If you are using Windows 8, read and follow the steps on "Disabling System Restore" from this link proceeded by "Manually Creating Restore Points" from this link.
  • Recommended reading material to protect your computer from infection in the future:
    Be safe  :hello:

 


Regards, dev00790

---------------------------------------

Marge: "Homer, the plant called. They said if you don't show up tomorrow don't bother showing up on Monday." Homer: "Woo-hoo! Four-day weekend!"I do not reply to Private Messages (PMs) asking for assistance - please use the forums instead. If I have been helping you, and I have not replied to your latest post in 48 hours please send me a PM. My Blog


#12 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 06 July 2013 - 09:07 PM

Okay, I did all the steps. My computer is running really good. :thumbup2:  I am going to read the recommended material at the bottom of page, how to stay safe, so you shouldn't see me again. I think you and the others are amazing and I thank you so much for helping me :bowdown: Have a nice weekend. :heart:



#13 bubblez2000

bubblez2000
  • Topic Starter

  • Members
  • 33 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Santa Clarita, CA.
  • Local time:07:03 PM

Posted 07 July 2013 - 12:59 AM

Oh yes, I love chocolate too! :bananas:



#14 dev00790

dev00790

    Bleeping Chocoholic


  • Members
  • 5,037 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:UK
  • Local time:03:03 AM

Posted 07 July 2013 - 01:43 AM

You're welcome :)

Regards, dev00790

---------------------------------------

Marge: "Homer, the plant called. They said if you don't show up tomorrow don't bother showing up on Monday." Homer: "Woo-hoo! Four-day weekend!"I do not reply to Private Messages (PMs) asking for assistance - please use the forums instead. If I have been helping you, and I have not replied to your latest post in 48 hours please send me a PM. My Blog





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users