Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

browsing i keep getting this box


  • Please log in to reply
7 replies to this topic

#1 V400TC

V400TC

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:03 AM

Posted 02 December 2013 - 07:39 PM

Mod Edit Split from topic http://www.bleepingcomputer.com/forums/t/515725/help-pls/#entry3223169 ~~ boopme

 
Rkill 2.6.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/03/2013 12:31:54 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * C:\WINDOWS\System32\lvhidsvc.exe (PID: 1944) [WD-HEUR]
 * C:\windows\system\hpsysdrv.exe (PID: 3876) [WD-HEUR]
 * C:\WINDOWS\System32\hphmon05.exe (PID: 4080) [WD-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\SecurityCheck.exe (PID: 2376) [UP-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\FSS.exe (PID: 2908) [UP-HEUR]
 * C:\DOCUME~1\Owner\LOCALS~1\Temp\is-KAKEC.tmp\mbam-setup-1.75.0.1300.tmp (PID: 1904) [T-HEUR]

6 proccesses terminated!

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
  * HKCU\SOFTWARE\Classes\.bat "@" exists and is set to batfile!
  * HKCU\SOFTWARE\Classes\.bat has been deleted!
  * HKCU\SOFTWARE\Classes\.com "@" exists and is set to comfile!
  * HKCU\SOFTWARE\Classes\.com has been deleted!

Performing miscellaneous checks:

 * System Restore Disabled

   [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
   "DisableSR" = dword:00000001

Checking Windows Service Integrity:

 * DNS Client (Dnscache) is not Running.
   Startup Type set to: Disabled

 * System Restore Service (srservice) is not Running.
   Startup Type set to: Automatic

 * System Restore Filter Driver (sr) is not Running.
   Startup Type set to: Disabled

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * HOSTS file entries found:

  127.0.0.1       localhost

Program finished at: 12/03/2013 12:33:28 AM
Execution time: 0 hours(s), 1 minute(s), and 33 seconds(s)
==============================================
 
 
Rkill 2.6.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/03/2013 12:31:54 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * C:\WINDOWS\System32\lvhidsvc.exe (PID: 1944) [WD-HEUR]
 * C:\windows\system\hpsysdrv.exe (PID: 3876) [WD-HEUR]
 * C:\WINDOWS\System32\hphmon05.exe (PID: 4080) [WD-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\SecurityCheck.exe (PID: 2376) [UP-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\FSS.exe (PID: 2908) [UP-HEUR]
 * C:\DOCUME~1\Owner\LOCALS~1\Temp\is-KAKEC.tmp\mbam-setup-1.75.0.1300.tmp (PID: 1904) [T-HEUR]

6 proccesses terminated!

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
  * HKCU\SOFTWARE\Classes\.bat "@" exists and is set to batfile!
  * HKCU\SOFTWARE\Classes\.bat has been deleted!
  * HKCU\SOFTWARE\Classes\.com "@" exists and is set to comfile!
  * HKCU\SOFTWARE\Classes\.com has been deleted!

Performing miscellaneous checks:

 * System Restore Disabled

   [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
   "DisableSR" = dword:00000001

Checking Windows Service Integrity:

 * DNS Client (Dnscache) is not Running.
   Startup Type set to: Disabled

 * System Restore Service (srservice) is not Running.
   Startup Type set to: Automatic

 * System Restore Filter Driver (sr) is not Running.
   Startup Type set to: Disabled

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * HOSTS file entries found:

  127.0.0.1       localhost

Program finished at: 12/03/2013 12:33:28 AM
Execution time: 0 hours(s), 1 minute(s), and 33 seconds(s)
 
========================================
Rkill 2.6.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/03/2013 12:31:54 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * C:\WINDOWS\System32\lvhidsvc.exe (PID: 1944) [WD-HEUR]
 * C:\windows\system\hpsysdrv.exe (PID: 3876) [WD-HEUR]
 * C:\WINDOWS\System32\hphmon05.exe (PID: 4080) [WD-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\SecurityCheck.exe (PID: 2376) [UP-HEUR]
 * C:\Documents and Settings\Owner\My Documents\Downloads\FSS.exe (PID: 2908) [UP-HEUR]
 * C:\DOCUME~1\Owner\LOCALS~1\Temp\is-KAKEC.tmp\mbam-setup-1.75.0.1300.tmp (PID: 1904) [T-HEUR]

6 proccesses terminated!

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
  * HKCU\SOFTWARE\Classes\.bat "@" exists and is set to batfile!
  * HKCU\SOFTWARE\Classes\.bat has been deleted!
  * HKCU\SOFTWARE\Classes\.com "@" exists and is set to comfile!
  * HKCU\SOFTWARE\Classes\.com has been deleted!

Performing miscellaneous checks:

 * System Restore Disabled

   [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
   "DisableSR" = dword:00000001

Checking Windows Service Integrity:

 * DNS Client (Dnscache) is not Running.
   Startup Type set to: Disabled

 * System Restore Service (srservice) is not Running.
   Startup Type set to: Automatic

 * System Restore Filter Driver (sr) is not Running.
   Startup Type set to: Disabled

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * HOSTS file entries found:

  127.0.0.1       localhost

Program finished at: 12/03/2013 12:33:28 AM
Execution time: 0 hours(s), 1 minute(s), and 33 seconds(s)

thanks for providing clear and helpful advice
the above is the outcome of your instructions on my seemingly infected XP PC

Edited by boopme, 02 December 2013 - 09:45 PM.


BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:08:03 PM

Posted 02 December 2013 - 07:55 PM

You posted rKIll log three times and that's it.

I still need all other logs.

 

p4494882.gif


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:08:03 PM

Posted 02 December 2013 - 09:38 PM

Looks clean so far.

We have some issues with Windows services but we'll take care of it little bit later.

 

p22002970.gif Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe
Double click on TFC.exe to run the program.
Click on Start button to begin cleaning process.
TFC will close all running programs, and it may ask you to restart computer.

p22002970.gif Please download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.


p22002970.gif Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.


p22002970.gif Please run a free online scan with the ESET Online Scanner

  • Disable your antivirus program
  • Tick the box next to YES, I accept the Terms of Use
  • Click Start
  • Accept any security warnings from your browser.
  • Check Scan archives
  • Click Start
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click on List of found threats
  • Click on Export to text file , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
    NOTE. If Eset doesn't find any threats it'll NOT produce any log.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#4 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,176 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:11:03 PM

Posted 02 December 2013 - 11:06 PM

Please repost your NBAM log here ... There was a malfunction and I cannot put it here.

Thanks
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#5 V400TC

V400TC
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:03 AM

Posted 03 December 2013 - 12:46 AM

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.12.02.11

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Owner :: YOUR-G2ASVV4L2M [administrator]

03/12/2013 02:24:06
MBAM-log-2013-12-03 (02-48-19).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 226760
Time elapsed: 23 minute(s), 53 second(s)

Memory Processes Detected: 1
C:\Program Files\BrowserCompanion\BCHelper.exe (PUP.Optional.BrowserCompanion.A) -> 2744 -> No action taken.

Memory Modules Detected: 2
C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\sqlite3.dll (PUP.Blabbers) -> No action taken.

Registry Keys Detected: 29
HKCR\CLSID\{00cbb66b-1d3b-46d3-9577-323a336acb50} (PUP.Blabbers) -> No action taken.
HKCR\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833} (PUP.Blabbers) -> No action taken.
HKCR\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} (PUP.Blabbers) -> No action taken.
HKCR\wit4ie.WitBHO.2 (PUP.Blabbers) -> No action taken.
HKCR\wit4ie.WitBHO (PUP.Blabbers) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> No action taken.
HKCR\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} (PUP.Blabbers) -> No action taken.
HKCR\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D} (PUP.Blabbers) -> No action taken.
HKCR\tdataprotocol.CTData.1 (PUP.Blabbers) -> No action taken.
HKCR\tdataprotocol.CTData (PUP.Blabbers) -> No action taken.
HKCR\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> No action taken.
HKCR\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A} (PUP.Blabbers) -> No action taken.
HKCR\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03} (PUP.Blabbers) -> No action taken.
HKCR\updatebho.TimerBHO.1 (PUP.Blabbers) -> No action taken.
HKCR\updatebho.TimerBHO (PUP.Blabbers) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> No action taken.
HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion (PUP.Blabbers) -> No action taken.
HKCR\PROTOCOLS\HANDLER\BASE64 (PUP.Blabbers) -> No action taken.
HKCR\PROTOCOLS\HANDLER\CHROME (PUP.Blabbers) -> No action taken.
HKCR\PROTOCOLS\HANDLER\PROX (PUP.Blabbers) -> No action taken.
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> No action taken.
HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> No action taken.
HKLM\SOFTWARE\Google\Chrome\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn (PUP.Optional.FreeHDSport.A) -> No action taken.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> No action taken.

Registry Values Detected: 6
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Browser companion helper (PUP.Optional.BrowserCompanion.A) -> Data: C:\Program Files\BrowserCompanion\BCHelper.exe /T=3 /CHI=clbfjfbnelcflpgpklppgplejolacbej -> No action taken.
HKCR\protocols\Handler\base64|CLSID (PUP.Blabbers) -> Data: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> No action taken.
HKCR\protocols\Handler\chrome|CLSID (PUP.Blabbers) -> Data: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> No action taken.
HKCR\protocols\Handler\prox|CLSID (PUP.Blabbers) -> Data: {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} -> No action taken.
HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Data: 287255988687198048549232149222145579522 -> No action taken.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Data: 287255988687198048549232149222145579522 -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 7
C:\Program Files\BrowserCompanion (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\Application Data\Babylon (PUP.Optional.Babylon.A) -> No action taken.
C:\Documents and Settings\Owner\My Documents\Optimizer Pro (PUP.Optional.OptimizerPro.A) -> No action taken.
C:\Program Files\FreeHDSport.TV (PUP.Optional.FreeHDSport.A) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache (PUP.Blabbers) -> No action taken.

Files Detected: 188
C:\Program Files\BrowserCompanion\BCHelper.exe (PUP.Optional.BrowserCompanion.A) -> No action taken.
C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\tdataprotocol.dll (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\My Documents\Downloads\uplayermediaplayer-setup.exe (PUP.Optional.FullSpectrumAdmin) -> No action taken.
C:\Documents and Settings\Owner\My Documents\Downloads\Feed2AllApp_setup(18_3f)_ff.exe (PUP.Optional.OneClickDownloader.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temp\Toolbar_Toggle.exe (PUP.Optional.Babylon.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temp\BVR1acpF.exe.part (PUP.Optional.OneClickDownloader.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temp\4C8D62D8-BAB0-7891-93F0-EC11B7BF4CC7\Latest\MyBabylonTB.exe (PUP.Optional.BabylonToolBar.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ie.exe (PUP.Optional.BabylonToolBar.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\74CB9V0D\Feed2AllApp[1].exe (PUP.Optional.CoolMirage.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\74CB9V0D\bundlesweetimsetup[1].exe (PUP.Optional.SweetIM) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\74CB9V0D\Setup[1].exe (PUP.Optional.LinkSwift.A) -> No action taken.
C:\Documents and Settings\Owner\Local Settings\Temp\blabbers-ff-le.xpi (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\blabbers-ff-full.xpi (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\blabbers-ch.crx (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\logo.ico (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\sqlite3.dll (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\toolbar.dll (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\uninstall.exe (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\updater.ini (PUP.Blabbers) -> No action taken.
C:\Program Files\BrowserCompanion\widgetserv.exe (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\Application Data\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> No action taken.
C:\Documents and Settings\Owner\My Documents\Optimizer Pro\CookiesException.txt (PUP.Optional.OptimizerPro.A) -> No action taken.
C:\Program Files\FreeHDSport.TV\freehdsporttv10.crx (PUP.Optional.FreeHDSport.A) -> No action taken.
C:\Program Files\FreeHDSport.TV\f2aextsetup.exe (PUP.Optional.FreeHDSport.A) -> No action taken.
C:\Program Files\FreeHDSport.TV\freehdsporttvIE.exe (PUP.Optional.FreeHDSport.A) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\fix2.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_71.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_71_2.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\fixJQ1_83.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\icon.png (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar183.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\lock.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\witapi.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\witmain.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\wittoolbar.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\witwidgetapi.js (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\01b3edc671a67a6016f8c7673fdafd15 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\01b3edc671a67a6016f8c7673fdafd15_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\074de0e9170cce0e12ad4ab035a2f25e (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\074de0e9170cce0e12ad4ab035a2f25e_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\0f0773a0a4d06eb721db0d7bdc8a048a (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\0f0773a0a4d06eb721db0d7bdc8a048a_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\0f0773a0a4d06eb721db0d7bdc8a048a_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\150b7566b7871fb6e0ef44753d0c6dc3_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\211ffae2c8a2b411d85c8541ffcbfe9c (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\211ffae2c8a2b411d85c8541ffcbfe9c_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\211ffae2c8a2b411d85c8541ffcbfe9c_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\231785d024a11371bfc94ffff0a4b741_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e9e14a99847657c53e1cc29cc55ab7af_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ece71b71690fad200cbed95871ef4bb2 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ece71b71690fad200cbed95871ef4bb2_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ee2135fec207a636822e2513020c079a (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ee2135fec207a636822e2513020c079a_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ee2135fec207a636822e2513020c079a_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\eeab68dd74d26245087956fb3caf6937_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\71466e089995731fd7f41c06f77bc6db (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\71466e089995731fd7f41c06f77bc6db_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\71466e089995731fd7f41c06f77bc6db_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\7c0022298b948a99e406a6310bffea7f (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\7c0022298b948a99e406a6310bffea7f_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\7c0022298b948a99e406a6310bffea7f_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8325c498d48945847d152e1eef78847d (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8325c498d48945847d152e1eef78847d_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8325c498d48945847d152e1eef78847d_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\860f295e523c85f15d93b8c9b1abb411 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\860f295e523c85f15d93b8c9b1abb411_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\530e52021dc20843b1aa62957edeb9f8 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\530e52021dc20843b1aa62957edeb9f8_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\530e52021dc20843b1aa62957edeb9f8_version (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5cdf8a7ef2ec84abac286c67587b78d9 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5cdf8a7ef2ec84abac286c67587b78d9_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5cdf8a7ef2ec84abac286c67587b78d9_version (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5d08671f40e6e9c2ff0f3c5f3d47f726 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5d08671f40e6e9c2ff0f3c5f3d47f726_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5d08671f40e6e9c2ff0f3c5f3d47f726_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5d2363890bbf5268e13448f8a75cef37 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\5d2363890bbf5268e13448f8a75cef37_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6496a43cad388e4b78f1ecce8fcffc27_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\64f2ffe99c9841c0ce284e2ab27fd525 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\d6418e300158fb16d8396d122d4b423b_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\d89bfd841403290d610bcf662008b443 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\d89bfd841403290d610bcf662008b443_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\db96ff26706a1a3d595ecb67266c2d94_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\df23318deff2545de9b267123e3927b0 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\df23318deff2545de9b267123e3927b0_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e3d0cf0d14d2e30505e2786e48906be4 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e3d0cf0d14d2e30505e2786e48906be4_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e440d29f88739418e905adc0a155a174 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e440d29f88739418e905adc0a155a174_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e88260733213911405542903fcc1c689 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e88260733213911405542903fcc1c689_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\30b85df7d78b9299e5989dff553fb257_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\64f2ffe99c9841c0ce284e2ab27fd525_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\860f295e523c85f15d93b8c9b1abb411_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\99d788ca736751302bd0281545e1cbf7_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a6d4447986c4e442d92ed00b149c14f3_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ba5a261c6565bfb443aa6cbf828a753d (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\d5747e13728fd7df356bc13545143ea6_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\38207d71d9cc86fb6daebc118ce6286c_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\3fe3e9e12cb607d5f67603b88eb90d35 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\3fe3e9e12cb607d5f67603b88eb90d35_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4285fd2774a4958a3e72947e8e64f9a8 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4285fd2774a4958a3e72947e8e64f9a8_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4713e82e27fb9719d76577d1585acb00_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\477bd5402a5bfa0f8ee61cd01f27470c_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\477f5134e73f0099219c494cb23f6657_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4c0be9972fa4923fed177cfcd07ca3fa (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4c0be9972fa4923fed177cfcd07ca3fa_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4c0be9972fa4923fed177cfcd07ca3fa_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\656bf02a99a3ba2fbf237f6152b7f3de (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\656bf02a99a3ba2fbf237f6152b7f3de_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6b99fc04045eae98af76b6eb6a259cef_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6c1193d5418bb171e5b5c818429576fb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6c1193d5418bb171e5b5c818429576fb_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6c1193d5418bb171e5b5c818429576fb_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6d091eb0bf44b762a039ee138e6b165c_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\6f8b3140943075f95ae0c74c1a13b752_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\712c46454ce7a9ba511c8f02a771e538 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\712c46454ce7a9ba511c8f02a771e538_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a8e78a6006a812766277d1f827e58be6 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a8e78a6006a812766277d1f827e58be6_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a95092a9bd34f5cfc98f78ca74502f36_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\aa36bceec49c832079e270icmc219ats (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\aaff3303cdd7526dcb9cd1bc7f49fa7a (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\aaff3303cdd7526dcb9cd1bc7f49fa7a_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\b1ee91b2ef2163f40d85f38713cdc027 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\b1ee91b2ef2163f40d85f38713cdc027_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\b1ee91b2ef2163f40d85f38713cdc027_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\b5080fd498f4580cd85cbf8ff41766c5_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\2328e1768b820b18ab2f301c9ff88e2c (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\2328e1768b820b18ab2f301c9ff88e2c_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\2e0dda2d2281da01c330dc3e12b45a9d_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\2e699bb621ffe89ade68eaef9df0d2d9 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\2e699bb621ffe89ade68eaef9df0d2d9_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\2e699bb621ffe89ade68eaef9df0d2d9_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\30b85df7d78b9299e5989dff553fb257 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\f1b12d7866611770f6b620072a5ec258_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\f2d82e4ca821956eca684d751226ba14 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\f2d82e4ca821956eca684d751226ba14_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\fd2b14a1599592bd893eafc7d4583112 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\fd2b14a1599592bd893eafc7d4583112_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\fd2b14a1599592bd893eafc7d4583112_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9ab1b760fcd39a99d560e932efc027ae_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9c2afdb0a6d9bf59b300144154b58c67_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9c86b973456448ae01f1cbc0d6cf607a_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9e42db8975a9650af1a8bc82cdcb0b0f (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9e42db8975a9650af1a8bc82cdcb0b0f_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a227f4517bd7937e697182f46906a6b4_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a4978ceb564459d3d64682b37d89bbe3 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a4978ceb564459d3d64682b37d89bbe3_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\a4978ceb564459d3d64682b37d89bbe3_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\ba5a261c6565bfb443aa6cbf828a753d_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\c5bb86a60317fbdf092f8dfcc1828e21 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\c5bb86a60317fbdf092f8dfcc1828e21_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\c5bb86a60317fbdf092f8dfcc1828e21_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\c75261e846ce457d11060410767952c4 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\c75261e846ce457d11060410767952c4_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\c75261e846ce457d11060410767952c4_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\cf28706faad49b5cccfc9e9e3ebbd818 (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\cf28706faad49b5cccfc9e9e3ebbd818_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\cf28706faad49b5cccfc9e9e3ebbd818_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8f43b50088266b9870b42ce6ef7ffbde (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8f43b50088266b9870b42ce6ef7ffbde_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8f43b50088266b9870b42ce6ef7ffbde_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\8fd0e5f2c42f56c41599ca329ef70350_GB (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9065ea62ce86482e48ba65c90f34af2f (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9065ea62ce86482e48ba65c90f34af2f_expire (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\9065ea62ce86482e48ba65c90f34af2f_gb (PUP.Blabbers) -> No action taken.
C:\Documents and Settings\Owner\AppData\LocalLow\bbrs_002.tb\content\cache\99d788ca736751302bd0281545e1cbf7 (PUP.Blabbers) -> No action taken.

(end)
 



#6 V400TC

V400TC
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:03 AM

Posted 03 December 2013 - 01:15 AM

# AdwCleaner v3.014 - Report created 03/12/2013 at 06:07:03
# Updated 01/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Owner - YOUR-G2ASVV4L2M
# Running from : C:\Documents and Settings\Owner\My Documents\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\apn
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
Folder Deleted : C:\Program Files\ConduitEngine
Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\ConduitEngine
Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\3lq0capy.default\Conduit
File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\3lq0capy.default\searchplugins\ask-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\3lq0capy.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\clbfjfbnelcflpgpklppgplejolacbej
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome
Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BF0118D4-63FF-4138-9327-F3028FB1A578}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF0118D4-63FF-4138-9327-F3028FB1A578}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Key Deleted : HKCU\Software\bbrs_002.tb
Key Deleted : HKCU\Software\Blabbers       
Key Deleted : HKCU\Software\Blabbers
Key Deleted : HKCU\Software\BrowserCompanion
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BrowserCompanion
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v25.0.1 (en-US)

[ File : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\3lq0capy.default\prefs.js ]

Line Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Line Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2786678.AppTrackingLastCheckTime", "Sun May 08 2011 06:29:25 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Line Deleted : user_pref("CT2786678.CTID", "CT2786678");
Line Deleted : user_pref("CT2786678.CurrentServerDate", "28-1-2013");
Line Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Fri Jan 25 2013 08:39:44 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Sun Nov 28 2010 14:22:10 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.EnableClickToSearchBox", false);
Line Deleted : user_pref("CT2786678.EnableSearchHistory", false);
Line Deleted : user_pref("CT2786678.EnableSearchSuggest", false);
Line Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 183);
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375443753", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375443759", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444699", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444705", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444711", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444717", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444723", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444729", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444735", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444741", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedPollDate129301619375444747", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.FeedTTL129301619375444699", 10);
Line Deleted : user_pref("CT2786678.FeedTTL129301619375444723", 15);
Line Deleted : user_pref("CT2786678.FeedTTL129301619375444735", 5);
Line Deleted : user_pref("CT2786678.FeedTTL129301619375444747", 5);
Line Deleted : user_pref("CT2786678.FirstServerDate", "28-11-2010");
Line Deleted : user_pref("CT2786678.FirstTime", true);
Line Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Line Deleted : user_pref("CT2786678.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2786678.Initialize", true);
Line Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2786678.InstallationType", "UnknownIntegration");
Line Deleted : user_pref("CT2786678.InstalledDate", "Sun Nov 28 2010 13:47:10 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.IsGrouping", false);
Line Deleted : user_pref("CT2786678.IsMulticommunity", false);
Line Deleted : user_pref("CT2786678.IsOpenThankYouPage", false);
Line Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Line Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Sun Jan 27 2013 20:01:02 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2786678.LastLogin_3.12.0.7", "Wed Apr 25 2012 17:08:39 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.12.2.3", "Sat Jun 02 2012 07:53:13 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.13.0.6", "Sat Jul 21 2012 14:23:45 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.14.1.0", "Tue Aug 28 2012 07:21:19 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.15.1.0", "Wed Nov 07 2012 19:49:13 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.16.0.3", "Mon Jan 28 2013 00:01:03 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.2.3.3", "Sun Nov 28 2010 13:47:10 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.LastLogin_3.3.3.2", "Tue May 24 2011 05:52:15 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.LatestVersion", "3.16.0.3");
Line Deleted : user_pref("CT2786678.Locale", "en");
Line Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2786678.MCDetectTooltipShow", false);
Line Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2786678.SavedHomepage", "hxxp://www.pistonheads.com/");
Line Deleted : user_pref("CT2786678.SearchBackToDefaultEngine", false);
Line Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&q=");
Line Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Sun Jan 27 2013 20:01:01 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2786678.SearchInNewTabUserEnabled", false);
Line Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Sun Jan 27 2013 20:01:02 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Mon Jan 28 2013 01:22:04 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.SettingsLastUpdate", "1359295894");
Line Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Sat May 07 2011 20:48:02 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246790578");
Line Deleted : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Line Deleted : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2786678.Uninstall", true);
Line Deleted : user_pref("CT2786678.UserID", "UN00723179500436155");
Line Deleted : user_pref("CT2786678.ValidationData_Search", 0);
Line Deleted : user_pref("CT2786678.WeatherNetwork", "");
Line Deleted : user_pref("CT2786678.WeatherPollDate", "Sun Nov 28 2010 14:17:18 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.WeatherUnit", "C");
Line Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Line Deleted : user_pref("CT2786678.components.1000034", false);
Line Deleted : user_pref("CT2786678.components.1000234", false);
Line Deleted : user_pref("CT2786678.components.129295698017012804", false);
Line Deleted : user_pref("CT2786678.components.129298376496232218", false);
Line Deleted : user_pref("CT2786678.components.129309485163350924", false);
Line Deleted : user_pref("CT2786678.components.129309489763975460", false);
Line Deleted : user_pref("CT2786678.components.129315411424256896", false);
Line Deleted : user_pref("CT2786678.components.2431121662273174679", false);
Line Deleted : user_pref("CT2786678.components.5690698542593514850", false);
Line Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Tue May 24 2011 05:52:15 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2786678.initDone", true);
Line Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT2786678.myStuffEnabled", true);
Line Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2786678.oldAppsList", "129295695672325902,129295695672325903,1000234,129295698017012804,1000034,129298376496232218,129309489763975460,5690698542593514850,129309485163350924,12931541142425[...]
Line Deleted : user_pref("CT2786678.revertSettingsEnabled", true);
Line Deleted : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2786678.testingCtid", "");
Line Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Sun Jan 27 2013 20:01:02 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Sun Nov 28 2010 13:47:15 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CT2786678.usageEnabled", false);
Line Deleted : user_pref("CT2786678.usagesFlag", 2);
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2786678/CT2786678", "\"5abb5491f99187f7b04bdf6777aba3063\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/DEFAULT", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/UK", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/UK", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", "\"1334471445\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "/oUS1eK2SdsB3t6H2kLPsA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"803651ba7facb1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"807dc126dd28cc1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"04afd94b864cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678", "\"0697a2066791d3f9dfa6c976583f2c5c\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"634250095346670000\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2786678&octid=CT2786678", "\"1304004054\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678", "\"1305446423\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"57d291a0ab9ea2aeecde67e5686b89e6\"");
Line Deleted : user_pref("CommunityToolbar.EngineHiddenByUser", true);
Line Deleted : user_pref("CommunityToolbar.EngineOwner", "");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar");
Line Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
Line Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2786678");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}");
Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.bing.com/search?FORM=IEFM1&q=");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2786678");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678");
Line Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat May 07 2011 20:48:06 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 23 2011 20:32:07 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Jun 24 2011 21:51:09 GMT+0100 (GMT Daylight Time)");
Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.alert.userId", "18035df4-57b2-4fff-a898-1fcffa998867");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Nov 28 2010 13:47:17 GMT+0000 (GMT Standard Time)");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "81ae7482-67b9-4fe8-a6f9-2adc44a75e46");
Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.killedEngine", true);
Line Deleted : user_pref("CommunityToolbar.undefined", "");
Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
Line Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112059&tt=060612_5_");
Line Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "343dd88c000000000000000ea652da02");
Line Deleted : user_pref("extensions.BabylonToolbar_i.id", "343dd88c000000000000000ea652da02");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15517");
Line Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);
Line Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112059&tt=060612_5_&babsrc=NT_ss&mntrId=343dd88c000000000000000ea652da02");
Line Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Line Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Line Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Line Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Line Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1715:57:23");
Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Line Deleted : user_pref("extensions.enabledItems", "{20a82645-c095-46ed-80e3-08825760534b}:0.0.0,vshare@toolbar:1.0.0,engine@conduit.com:3.2.3.3,{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.3.3,{972ce4c6-7e08-4474-a2[...]
Line Deleted : user_pref("vshare.install.date", "1282435200000");
Line Deleted : user_pref("vshare.install.finished", "1.0.0");
Line Deleted : user_pref("vshare.install.guid", "{c05fdede-aca6-43ef-a063-f4309b084a98}");
Line Deleted : user_pref("vshare.install.isHidden", true);
Line Deleted : user_pref("vshare.install.laststatreq", "1304553600000");
Line Deleted : user_pref("vshare.install.newtab", false);

*************************

AdwCleaner[R0].txt - [24156 octets] - [03/12/2013 06:04:23]
AdwCleaner[S0].txt - [24487 octets] - [03/12/2013 06:07:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24548 octets] ##########
 



#7 V400TC

V400TC
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:03 AM

Posted 03 December 2013 - 01:25 AM

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Owner on 03/12/2013 at  6:17:17.75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\Owner\Local Settings\Application Data\utorrentbar"
Successfully deleted: [Folder] "C:\Program Files\istbar"
Successfully deleted: [Folder] "C:\Program Files\utorrentbar"



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted the following from C:\Documents and Settings\Owner\Application Data\mozilla\firefox\profiles\3lq0capy.default\prefs.js

user_pref("google.toolbar.custombuttons.submitlist", "MVQidLLQKdF4UbIbDy/C9w==:28:1180762948,FyrR8DBorppW01usc/V5Tg==:36:1180822372,N3G+r4AiuqMWKdQ6wIdB5w==:28:1180821795,LuWp
user_pref("google.toolbar.search-icon", "data:image/x-icon;base64,AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/
Emptied folder: C:\Documents and Settings\Owner\Application Data\mozilla\firefox\profiles\3lq0capy.default\minidumps [26 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03/12/2013 at  6:24:13.98
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#8 V400TC

V400TC
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:03:03 AM

Posted 03 December 2013 - 07:08 AM

ESET results

 

C:\Program Files\RegistryFix\RegistryFix.exe    a variant of Win32/Adware.ErrorClean application    cleaned by deleting - quarantined






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users