Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

redirecting


  • This topic is locked This topic is locked
37 replies to this topic

#1 bearywood

bearywood

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 12 January 2014 - 08:45 AM

Would someone please help me diagnose of problem of redirecting.  I have run Malwarebyte, & CCleaner.  I have run Hyjackthis and this is the scan results.  Thanks in advance ... Kathy
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:34:40 AM, on 1/12/2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19489)
Boot mode: Normal
 
Running processes:
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_us&c=91&bd=Pavilion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.coupons.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: IEPlugin Class - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\PROGRA~2\ArcSoft\VIDEOD~1\ARCURL~1.DLL
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: SearchDonkey - {44ed99e2-16a6-4b89-80d6-5b21cf42e78b} - C:\Program Files (x86)\SearchDonkey\IE\common.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\3.8.3.6\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\3.8.3.6\IPSBHO.DLL
O2 - BHO: ToolbarBHO Class - {9519AF7E-638D-4933-BAD6-D33D23C79FE5} - C:\PROGRA~2\ArcSoft\RAWTHU~1\EXIFToolBar.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O2 - BHO: Fast Free Converter 3.0 - {DDA5D4B3-468F-4D62-9092-75142C6169B1} - C:\PROGRA~2\FASTFR~1\FASTFR~1\FASTFR~1.DLL
O2 - BHO: TBSB07898 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\Coupons.com CouponBar\tbcore3.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0541.0\msneshellx.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\3.8.3.6\coIEPlg.dll
O3 - Toolbar: RAW Thumbnail Viewer - {F301665A-12F8-4331-804A-5BCBD379668C} - C:\PROGRA~2\ArcSoft\RAWTHU~1\EXIFToolBar.dll
O3 - Toolbar: Coupons.com CouponBar - {8660E5B3-6C41-44DE-8503-98D99BBECD41} - C:\Program Files (x86)\Coupons.com CouponBar\tbcore3.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O15 - Trusted Zone: *.arcsoft.com
O15 - Trusted Zone: *.myprintcreations.com
O15 - Trusted Zone: *.printcreations.com
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} (Hewlett-Packard Online Support Services) - http://h20364.www2.hp.com/CSMWeb/Customer/cabs/HPISDataManager.CAB
O16 - DPF: {33415AC7-AFFA-4D55-B41C-C64C0D07DFCA} (Hewlett-Packard Printer Diagnostics) - http://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISWebManager.CAB
O16 - DPF: {41F841C1-AE16-11D5-8817-0050DA6EF5E5} (FarPoint Spread 6.0) - https://gds.gdsbenefits.com/CAB%20and%20license%20files/SPR32X60.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.5.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} (SysData Class) - https://wimpro.cce.hp.com/ChatEntry/downloads/sysinfo.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect118.cab
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} (CBSTIEPrint Class) - http://offers.e-centives.com/cif/download/bin/actxcab.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: intu-help-qb2 - {84D77A00-41B5-4B8B-8ADF-86486D72E749} - (no file)
O18 - Protocol: intu-help-qb6 - {6898B29B-BF49-43CB-A0B1-D0B9496AF491} - C:\Program Files (x86)\Intuit\QuickBooks 2013\HelpAsyncPluggableProtocol.dll
O18 - Protocol: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - mscoree.dll (file missing)
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files (x86)\Norton 360\Engine\3.8.3.6\coIEPlg.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AdpeakProxy - Adpeak, Inc. - C:\Program Files\ScorpionSaver Services\AdpeakProxy.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Level Quality Watcher - Unknown owner - C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\3.8.3.6\ccSvcHst.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QBCFMonitorService - Intuit - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
O23 - Service: Intuit QuickBooks FCS (QBFCService) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe
O23 - Service: QBIDPService (QBVSS) - Intuit Inc. - C:\Program Files (x86)\Common Files\Intuit\DataProtect\QBIDPService.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files (x86)\SMINST\BLService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_6ef279c8\STacSV64.exe (file missing)
O23 - Service: TV Background Capture Service (TVBCS) (TVCapSvc) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe
O23 - Service: TV Task Scheduler (TVTS) (TVSched) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
 
--
End of file - 12220 bytes

Edited by Queen-Evie, 12 January 2014 - 09:27 AM.
Moved from Vista. HJT logs are allowed only in Malware Removal Logs


BC AdBot (Login to Remove)

 


#2 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:10:42 AM

Posted 14 January 2014 - 11:18 PM

Hello! Welcome to BleepingComputer Forums! :welcome:
My name is Georgi and and I will be helping you with your computer problems.

Before we begin, please note the following:

  • I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The logs can take some time to research, so please be patient with me.
  • Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
  • Instructions that I give are for your system only!
  • Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
  • Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
  • Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.

 

 

STEP 1

 

 

Please download AdwCleaner by Xplode and save to your Desktop.

  • Double click on AdwCleaner.exe to run the tool.
    Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button.
  • AdwCleaner will begin to scan your computer like it did before.
  • After the scan has finished click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.

 

 

STEP 2

 

 

thisisujrt.gif  Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

 

 

STEP 3

 

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

 

 

Regards,

Georgi


cXfZ4wS.png


#3 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 12:51 PM

Georgia
After I ran accelerated I am unable to get on the internet on that computer. I cannot post results as they are that computer. Help!!! What do I do?
Kathy

#4 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 01:00 PM

Georgi
Sorry about your name. I am using my kindle. Keeps changing words. I used adw cleaner.

#5 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:10:42 AM

Posted 15 January 2014 - 01:43 PM

Hi,

 

I guess it's because adwcleaner removed the following entries:

 

O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\adpeakproxy.dll

 

Please try this:

 

  • Go to Start > Programs > Accessories > right click on the Command Prompt and choose Run as administrator
  • Type netsh winsock reset in the Command Prompt window, and then press the Enter
  • Restart again and see if that fixed the issue.

 

Regards,

Georgi


cXfZ4wS.png


#6 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 02:02 PM

Well I am back in business.  Thanks Georgi!!! You're really good.  Here is a copy of the log from Hijack:

# AdwCleaner v3.017 - Report created 15/01/2014 at 11:13:59
# Updated 12/01/2014 by Xplode
# Operating System : Windows ™ Vista Home Premium Service Pack 2 (64 bits)
# Username : Kathleen Mohr - KATHLEENMOHR-PC
# Running from : C:\Users\Kathleen Mohr\Desktop\AdwCleaner (1).exe
# Option : Clean
 
***** [ Services ] *****
 
[#] Service Deleted : AdpeakProxy
[#] Service Deleted : FastFreeConverterUpdt
Service Deleted : Level Quality Watcher
 
***** [ Files / Folders ] *****
 
[!] Folder Deleted : C:\ProgramData\apn
[!] Folder Deleted : C:\ProgramData\Conduit
[!] Folder Deleted : C:\ProgramData\w3i
[!] Folder Deleted : C:\Program Files (x86)\Babylon
[!] Folder Deleted : C:\Program Files (x86)\Babylon-English
[!] Folder Deleted : C:\Program Files (x86)\Conduit
[!] Folder Deleted : C:\Program Files (x86)\Fast Free Converter
[!] Folder Deleted : C:\Program Files (x86)\File Type Helper
[!] Folder Deleted : C:\Program Files (x86)\Free Offers from Freeze.com
[!] Folder Deleted : C:\Program Files (x86)\Mobogenie
[!] Folder Deleted : C:\Program Files (x86)\MyPC Backup
[!] Folder Deleted : C:\Program Files (x86)\Search Settings
[!] Folder Deleted : C:\Program Files (x86)\w3i
[!] Folder Deleted : C:\Program Files\Level Quality Watcher
[!] Folder Deleted : C:\Program Files\ScorpionSaver Services
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Local\Conduit
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Local\genienext
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Local\iac
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Local\Mobogenie
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Local\NativeMessaging
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\LocalLow\Babylon-English
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\LocalLow\Conduit
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\LocalLow\Fast Free Converter
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\LocalLow\iac
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\LocalLow\PriceGong
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\LocalLow\Toolbar4
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\NCH Software
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\newnext.me
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\OpenCandy
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Searchprotect
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Systweak
[!] Folder Deleted : C:\Users\Kathleen Mohr\Documents\Mobogenie
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\Conduit
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\ConduitCommon
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\CT1060933
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\CT2720081
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\CT3306061
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[!] Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\extension@FastFreeConverter.com
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\Extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\Extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad}
[!] Folder Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\Extensions\{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}
File Deleted : C:\END
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
File Deleted : C:\Windows\SysWOW64\AdpeakProxy.dll
File Deleted : C:\Windows\SysWOW64\AdpeakProxy.ini
File Deleted : C:\Windows\SysWOW64\AdpeakProxyOff.ini
File Deleted : C:\Windows\System32\AdpeakProxy.ini
File Deleted : C:\Windows\System32\AdpeakProxyOff.ini
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\searchplugins\Conduit.xml
File Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\searchplugins\conduit-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\safesearch.xml
File Deleted : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\user.js
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
Key Deleted : HKLM\SOFTWARE\Classes\AppID\AdpeakProxy.exe
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Deleted : HKLM\SOFTWARE\Classes\PCProxy.DataContainer
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar
Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar.1
Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898
Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898.3
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4F77-802C-5B295919C205}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9B7B034B-944A-4261-B487-862F642F7615}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE91F9CE-0900-4E2A-B673-F3F6E4FC54D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96BD48DD-741B-41AE-AC4A-AFF96BA00F7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\DynConIE
Key Deleted : HKCU\Software\AppDataLow\Software\Freecause
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\Scorpion Saver
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Adpeak, Inc.
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Fast Free Converter
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fast Free Converter
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{5F05C28D-DEA9-4AD6-A73A-064175988EAB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{9DDD0B95-1F3E-453E-9F12-EACB0DD6B6CF}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C878CD69-85DB-426B-81A3-E71175AAEB91}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{DA64E459-FBF3-4A9C-A3E8-FD0240C4E611}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Fast Free Converter
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : [x64] HKLM\SOFTWARE\Adpeak, Inc.
Key Deleted : [x64] HKLM\SOFTWARE\Scorpion Saver
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6E810AB6-F34E-49A3-A93F-9E503660F718}
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v8.0.6001.19489
 
 
-\\ Mozilla Firefox v7.0.1 (en-US)
 
[ File : C:\Users\Kathleen Mohr\AppData\Roaming\Mozilla\Firefox\Profiles\bnvvo7aq.default\prefs.js ]
 
Line Deleted : user_pref("CT1060933..clientLogIsEnabled", false);
Line Deleted : user_pref("CT1060933..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT1060933..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT1060933.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT1060933.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_129633202291172081", true);
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_129652058719725628", true);
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_129681785283868963", true);
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_129686665230467549", true);
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_130040833450137909", true);
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_130068876516309164", true);
Line Deleted : user_pref("CT1060933.BrowserCompStateIsOpen_130262967617041722", true);
Line Deleted : user_pref("CT1060933.CTID", "CT1060933");
Line Deleted : user_pref("CT1060933.CommunitiesChangesLastCheckTime", "Sun Dec 08 2013 17:24:36 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.CommunitiesChangesLastUrl", "hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=ToolbarsInfo&ctids=CT1060933");
Line Deleted : user_pref("CT1060933.CommunityChanged", true);
Line Deleted : user_pref("CT1060933.CurrentServerDate", "9-12-2013");
Line Deleted : user_pref("CT1060933.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT1060933.DialogsGetterLastCheckTime", "Sun Dec 08 2013 17:24:51 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.DownloadDomainsCheckInterval", "168");
Line Deleted : user_pref("CT1060933.DownloadDomainsListLastCheckTime", "Sun Dec 08 2013 17:24:36 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.DownloadDomainsListLastServerUpdateTime", "1201069983");
Line Deleted : user_pref("CT1060933.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT1060933.FirstServerDate", "1-9-2010");
Line Deleted : user_pref("CT1060933.FirstTime", true);
Line Deleted : user_pref("CT1060933.FirstTimeFF3", true);
Line Deleted : user_pref("CT1060933.FirstTimeSettingsDone", true);
Line Deleted : user_pref("CT1060933.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT1060933.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT1060933.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT1060933.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT1060933.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT1060933.HomepageBeforeUnload", "hxxp://search.babylon.com/home?AF=14542");
Line Deleted : user_pref("CT1060933.Initialize", true);
Line Deleted : user_pref("CT1060933.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT1060933.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT1060933.InstallationType", "Unknown");
Line Deleted : user_pref("CT1060933.InstalledDate", "Wed Sep 01 2010 12:21:22 GMT-0400 (Eastern Daylight Time)");
Line Deleted : user_pref("CT1060933.InvalidateCache", false);
Line Deleted : user_pref("CT1060933.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT1060933.IsGrouping", false);
Line Deleted : user_pref("CT1060933.IsMulticommunity", true);
Line Deleted : user_pref("CT1060933.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT1060933.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT1060933.LanguagePackLastCheckTime", "Sun Dec 08 2013 17:24:40 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT1060933.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT1060933.LastLogin_2.7.1.3", "Wed Sep 29 2010 08:54:31 GMT-0400 (Eastern Daylight Time)");
Line Deleted : user_pref("CT1060933.LastLogin_3.16.0.3", "Mon Apr 15 2013 07:23:43 GMT-0400 (Eastern Daylight Time)");
Line Deleted : user_pref("CT1060933.LastLogin_3.18.0.7", "Sun Dec 08 2013 17:24:38 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.LastLogin_3.7.0.6", "Mon Dec 03 2012 07:01:20 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.LatestVersion", "3.20.0.4");
Line Deleted : user_pref("CT1060933.Locale", "en-us");
Line Deleted : user_pref("CT1060933.LoginCache", 4);
Line Deleted : user_pref("CT1060933.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT1060933.MCDetectTooltipShow", true);
Line Deleted : user_pref("CT1060933.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT1060933.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT1060933.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT1060933.RadioIsPodcast", false);
Line Deleted : user_pref("CT1060933.RadioLastCheckTime", "Sun Dec 08 2013 17:24:40 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.RadioLastUpdateIPServer", "0");
Line Deleted : user_pref("CT1060933.RadioLastUpdateServer", "129326918102570000");
Line Deleted : user_pref("CT1060933.RadioMediaID", "21504191");
Line Deleted : user_pref("CT1060933.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT1060933.RadioMenuSelectedID", "EBRadioMenu_CT106093321504191");
Line Deleted : user_pref("CT1060933.RadioShrinkedFromSetup", false);
Line Deleted : user_pref("CT1060933.RadioStationName", "KFOG");
Line Deleted : user_pref("CT1060933.RadioStationURL", "hxxp://live.cumulusstreaming.com/KFOG-FM");
Line Deleted : user_pref("CT1060933.SavedHomepage", "resource:/browserconfig.properties");
Line Deleted : user_pref("CT1060933.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT1060933&octid=EB_ORIGINAL_CTID&SearchSource=1");
Line Deleted : user_pref("CT1060933.SearchEngineBeforeUnload", "Yahoo");
Line Deleted : user_pref("CT1060933.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT1060933.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1060933&q=");
Line Deleted : user_pref("CT1060933.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT1060933.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT1060933.SearchInNewTabLastCheckTime", "Sun Dec 08 2013 17:24:36 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT1060933.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT1060933.SearchProtectorEnabled", false);
Line Deleted : user_pref("CT1060933.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT1060933.ServiceMapLastCheckTime", "Sun Dec 08 2013 17:24:36 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.SettingsCheckIntervalMin", 120);
Line Deleted : user_pref("CT1060933.SettingsLastCheckTime", "Sun Dec 08 2013 17:24:35 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.SettingsLastUpdate", "1385349074");
Line Deleted : user_pref("CT1060933.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT1060933.ThirdPartyComponentsLastCheck", "Sun Dec 08 2013 17:24:35 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.ThirdPartyComponentsLastUpdate", "1331805997");
Line Deleted : user_pref("CT1060933.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT1060933.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1060933");
Line Deleted : user_pref("CT1060933.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT1060933.UserID", "UN51586999778147549");
Line Deleted : user_pref("CT1060933.ValidationData_Search", 2);
Line Deleted : user_pref("CT1060933.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT1060933.alertChannelId", "15651");
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426D6265523B544243464959505B637D737B6E55217578654E675[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F395047525C4173686B6965677B796F6D7B6E552175785926766[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e.:2z527", "247E7075313F3C2C423A7B3C3F2B732D7C7D207923332A3527292D28272F5A4F523F28413132342E34473E493B3D3E3E436E6868645F5D49716658415A4A4B4A4B4C605762545454262[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e06cg5el8:", "6E6D696C6E7074717471");
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74736F7274767A777A77242F4B49474F42357D5D5C3D");
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e31;cjc<=fbj#ncf", "247E61393F236B25757677712A212C6E414F444D327A344F4849524E562F5A4F523F364124504C5662473049344B424D306C626F74716669676C7466767D7979732068614A6[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e31;cjh63jfjoa@&qfi", "247E61393F236B25717278772A212C6E414F444D327A3454423F5652565B4D4C325D5255423944276459545C575A544D364F7C205249543763646D59425B4A5D545F6C70[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e31;cji8a k@c", "247E61393F236B256F75287E2A6C3F4D424B30783253424B2A554A4D3A313C7E4B47515D422B4436463D482B675D6A6F6C616462676F61717874746E7A635C455E50525354635A[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513F445559424C5A315C5154412A4333323037483F4A5E68565B5970606E6C666164734C776C6F5C455E4E4D4B51635A6579247[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927767[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37504C4757514B4F47345F5457442D4637343A3A4B424D665E705B646571634A756A6D5A435C4D4A504F6158637C7179207[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4445494B49485450585952535F513863585B48314A3C3B363D4F46516F6B6E6D63776D687666507B707360496254534E54675[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Line Deleted : user_pref("CT1060933.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C575A3B243D2F2F4037426358654D595B3D685D40645F4F38514342544B56776C79616D6F51796E6049625452655C672[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C32293423524C5457474A4E50565D4A61515F5D575255643D685D604D364F3D3E3E3D544B5645486A736D696F527D7275624B645253535[...]
Line Deleted : user_pref("CT1060933.backendstorage./9b-0?3g>d", "663D6D726B7075417A76717A7B20487B4B21254D7B24512A21542428572C5C2F5E2E5F33");
Line Deleted : user_pref("CT1060933.backendstorage./9b-0?3g@6:5;", "");
Line Deleted : user_pref("CT1060933.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Line Deleted : user_pref("CT1060933.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697861");
Line Deleted : user_pref("CT1060933.backendstorage./9b/556,bi5a>g", "6E6D6C6E6E716F6F7473747573");
Line Deleted : user_pref("CT1060933.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Line Deleted : user_pref("CT1060933.backendstorage./9b3=>@44i48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
Line Deleted : user_pref("CT1060933.backendstorage./9b5ba==9cjag", "666D69416A6F71767A78737647767577784C7A517A");
Line Deleted : user_pref("CT1060933.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D696C6E707471746F75797B");
Line Deleted : user_pref("CT1060933.backendstorage./9b90e@.3c;7b=?ofb>>rhiqs", "393F352F3E");
Line Deleted : user_pref("CT1060933.backendstorage./9b9643g3/9e", "6A");
Line Deleted : user_pref("CT1060933.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Line Deleted : user_pref("CT1060933.backendstorage./9b<:222h64<", "393F352F3E");
Line Deleted : user_pref("CT1060933.backendstorage./9b=+03eh8h8j?:", "4443");
Line Deleted : user_pref("CT1060933.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Line Deleted : user_pref("CT1060933.backendstorage./9b?b0d:8aj62<h", "6D");
Line Deleted : user_pref("CT1060933.backendstorage./9ba@0<0bi6a7gn:6@l?", "6C");
Line Deleted : user_pref("CT1060933.backendstorage._key_cl_active", "31663239306137612D333262392D343762652D383264632D616230343262373163366137");
Line Deleted : user_pref("CT1060933.backendstorage.acp_personal.appstate", "656E61626C65");
Line Deleted : user_pref("CT1060933.backendstorage.cb_experience_000", "3238");
Line Deleted : user_pref("CT1060933.backendstorage.cb_firstuse0100", "31");
Line Deleted : user_pref("CT1060933.backendstorage.cb_user_id_000", "43423836383434303232353531335F46697265666F78");
Line Deleted : user_pref("CT1060933.backendstorage.cbcountry_001", "5553");
Line Deleted : user_pref("CT1060933.backendstorage.cbfirsttime", "4D6F6E2044656320303320323031322030373A30313A333520474D542D3035303020284561737465726E205374616E646172642054696D6529");
Line Deleted : user_pref("CT1060933.backendstorage.cbopenmamsettings", "30");
Line Deleted : user_pref("CT1060933.backendstorage.discover-experiments-photopop", "7B226E616D65223A2270686F746F706F7030222C2276657273696F6E223A31307D");
Line Deleted : user_pref("CT1060933.backendstorage.discover-periodic-reports", "7B2270696E675F30223A5B313338363534313534303532312C31343430303030305D7D");
Line Deleted : user_pref("CT1060933.backendstorage.discover-user-id", "2239633731313838622D666138362D343863372D623133322D30363538326266613261376122");
Line Deleted : user_pref("CT1060933.backendstorage.ground-country-code", "22555322");
Line Deleted : user_pref("CT1060933.backendstorage.last_client_stats_submit_2", "31333636303235303430");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_last_submit_6", "31333636303235303435");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_site_irrelevant", "39");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_site_new", "30");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_site_not_supported", "36");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_site_supported", "36");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_use_history", "30");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_use_pop", "30");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_use_related", "30");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_stats_stats_use_typed", "30");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_throttle_baseadd_stats|0|local_cookie_stats_stats_site_irrelevant", "31333636303238393334");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_throttle_baseadd_stats|0|local_cookie_stats_stats_site_not_supported", "31333636303238393138");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_throttle_baseadd_stats|0|local_cookie_stats_stats_site_supported", "31333636303238393337");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_throttle_baseadd_stats|local_cookie_stats_stats_use_typed", "31333636303237373331");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_throttle_baseincr|search_clone_cnt", "31333636303238333437");
Line Deleted : user_pref("CT1060933.backendstorage.local_cookie_throttle_baseloopback|hxxp://up.autocompleteplus.com/up?q=keep%20getting%20redirected&l=www.computing.net&t=0&p=computing.net&pt=1&ab=base20&abs=g&v=0.[...]
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appsconfig", "7B2241707073436F6E66696775726174696F6E223A5B7B226964223A22436C61726974795F416374697665222C2275726C223A22687474703A2F2F73746F726167652E636F6E647[...]
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appstate_acplus", "6F6E");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appstate_clarity_active", "6F6E");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appstate_pricegong", "6F6E");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_appstatereporttime", "31333836353431353234393735");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_calledsetupservice", "31");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_currentversion", "312E31312E352E31");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_existingusersrecoverydone", "31");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_first_time", "31");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_globalkeysmigratedtolocalstorage", "31");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_lastlogintime", "31333836353431353236333439");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_localization", "7B226469616C6F674F4B223A7B2254657874223A224F4B227D2C22646D626F7831223A7B2254657874223A224465616C5C725C6E6F662074686520646179227D2C22646D626F7[...]
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_mamenabled", "74727565");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_settings1.11.5.1", "7B22537461747573223A22737563636565646564222C2244617461223A7B2263757272656E7444617465223A223230313331323039222C22696E74657276616C223A32343[...]
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A3234302C227374616D70223A223231365F30222C2269735465737422[...]
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_showclosebutton", "74727565");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_showwelcomegadget", "66616C7365");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_stamp", "313034335F30");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_user_approval_interacted", "31");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_userid", "37653134633166312D343834342D343161382D613230332D613836633638393765343965");
Line Deleted : user_pref("CT1060933.backendstorage.mam_gk_welcomedialogmode", "31");
Line Deleted : user_pref("CT1060933.backendstorage.pg_enable", "74727565");
Line Deleted : user_pref("CT1060933.backendstorage.printitgreenstatus", "74727565");
Line Deleted : user_pref("CT1060933.backendstorage.search_box_cnt", "31");
Line Deleted : user_pref("CT1060933.backendstorage.search_clone_cnt", "33");
Line Deleted : user_pref("CT1060933.backendstorage.searchappstate", "33");
Line Deleted : user_pref("CT1060933.backendstorage.searchapptracking", "73656E74");
Line Deleted : user_pref("CT1060933.backendstorage.sf_just_installed", "46414C5345");
Line Deleted : user_pref("CT1060933.backendstorage.sf_status", "454E41424C4544");
Line Deleted : user_pref("CT1060933.backendstorage.sf_user_id", "6369645F3831323230313331373235323732333338303936");
Line Deleted : user_pref("CT1060933.backendstorage.url_history0001", "687474703A2F2F7777772E676F6F676C652E636F6D2F75726C3F73613D74267263743D6A26713D26657372633D7326736F757263653D7765622663643D31267665643D30434430514[...]
Line Deleted : user_pref("CT1060933.clientLogIsEnabled", false);
Line Deleted : user_pref("CT1060933.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT1060933.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT1060933.globalFirstTimeInfoLastCheckTime", "Sun Dec 08 2013 17:24:40 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT1060933.initDone", true);
Line Deleted : user_pref("CT1060933.isAppTrackingManagerOn", false);
Line Deleted : user_pref("CT1060933.isFirstRadioInstallation", false);
Line Deleted : user_pref("CT1060933.myStuffEnabled", true);
Line Deleted : user_pref("CT1060933.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT1060933.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT1060933.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT1060933.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT1060933.oldAppsList", "200,128346981843587669,128280995260143876,111,129272674122038321,129032145384800518,129032148247613461,129032152822456983,129032154330894193,129032155426050046,1290[...]
Line Deleted : user_pref("CT1060933.revertSettingsEnabled", false);
Line Deleted : user_pref("CT1060933.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT1060933.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT1060933.testingCtid", "");
Line Deleted : user_pref("CT1060933.toolbarAppMetaDataLastCheckTime", "Sun Dec 08 2013 17:24:38 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.toolbarContextMenuLastCheckTime", "Sun Dec 08 2013 17:24:39 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT1060933.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT1060933.usagesFlag", 2);
Line Deleted : user_pref("CT2720081..clientLogIsEnabled", false);
Line Deleted : user_pref("CT2720081..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2720081..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2720081.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2720081.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2720081.BrowserCompStateIsOpen_130040904124880871", true);
Line Deleted : user_pref("CT2720081.CT2720081", "CT2720081");
Line Deleted : user_pref("CT2720081.CurrentServerDate", "9-12-2013");
Line Deleted : user_pref("CT2720081.DSChangedManually", false);
Line Deleted : user_pref("CT2720081.DSInstall", true);
Line Deleted : user_pref("CT2720081.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2720081.DialogsGetterLastCheckTime", "Sun Dec 08 2013 17:24:52 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2720081.EMailNotifierPollDate", "Sun Dec 08 2013 18:14:57 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.FeedLastCount129248891425073064", 80);
Line Deleted : user_pref("CT2720081.FeedPollDate129225116238185771", "Sun Dec 08 2013 18:04:45 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.FeedPollDate129225147492879732", "Sun Dec 08 2013 18:04:45 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.FeedPollDate129245643951202078", "Sun Dec 08 2013 18:04:45 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.FeedPollDate129245643951202084", "Sun Dec 08 2013 18:04:45 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.FeedTTL129225116238185771", 40);
Line Deleted : user_pref("CT2720081.FeedTTL129225147492879732", 40);
Line Deleted : user_pref("CT2720081.FeedTTL129245643951202078", 40);
Line Deleted : user_pref("CT2720081.FeedTTL129245643951202084", 40);
Line Deleted : user_pref("CT2720081.FirstServerDate", "21-11-2011");
Line Deleted : user_pref("CT2720081.FirstTime", true);
Line Deleted : user_pref("CT2720081.FirstTimeFF3", true);
Line Deleted : user_pref("CT2720081.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT2720081.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2720081.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2720081.HPInstall", false);
Line Deleted : user_pref("CT2720081.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2720081.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT2720081.HomepageBeforeUnload", "hxxp://search.babylon.com/home?AF=14542");
Line Deleted : user_pref("CT2720081.Initialize", true);
Line Deleted : user_pref("CT2720081.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2720081.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2720081.InstallationType", "Unknown");
Line Deleted : user_pref("CT2720081.InstalledDate", "Sun Nov 20 2011 18:59:18 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.InvalidateCache", false);
Line Deleted : user_pref("CT2720081.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT2720081.IsGrouping", false);
Line Deleted : user_pref("CT2720081.IsInitSetupIni", true);
Line Deleted : user_pref("CT2720081.IsMulticommunity", false);
Line Deleted : user_pref("CT2720081.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT2720081.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2720081.IsProtectorsInit", true);
Line Deleted : user_pref("CT2720081.LanguagePackLastCheckTime", "Sun Dec 08 2013 17:24:51 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2720081.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2720081.LastLogin_3.16.0.3", "Mon Apr 15 2013 07:23:47 GMT-0400 (Eastern Daylight Time)");
Line Deleted : user_pref("CT2720081.LastLogin_3.18.0.7", "Sun Dec 08 2013 17:24:52 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.LastLogin_3.7.0.6", "Mon Dec 03 2012 07:01:28 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.LatestVersion", "3.20.0.4");
Line Deleted : user_pref("CT2720081.Locale", "en");
Line Deleted : user_pref("CT2720081.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2720081.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2720081.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2720081.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2720081.OriginalFirstVersion", "3.7.0.6");
Line Deleted : user_pref("CT2720081.RadioIsPodcast", false);
Line Deleted : user_pref("CT2720081.RadioLastCheckTime", "Sun Dec 08 2013 17:24:41 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.RadioLastUpdateIPServer", "3");
Line Deleted : user_pref("CT2720081.RadioLastUpdateServer", "129248947734170000");
Line Deleted : user_pref("CT2720081.RadioMediaID", "21079850");
Line Deleted : user_pref("CT2720081.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT2720081.RadioMenuSelectedID", "EBRadioMenu_CT272008121079850");
Line Deleted : user_pref("CT2720081.RadioShrinkedFromSetup", false);
Line Deleted : user_pref("CT2720081.RadioStationName", "AHL%20-%20Grand%20Rapids%20Griffins");
Line Deleted : user_pref("CT2720081.RadioStationURL", "hxxp://cdncon.wm.llnwd.net/cdncon_neulion1_ahl_griffins?eid=2037&pid=2037&gid=101]]");
Line Deleted : user_pref("CT2720081.SearchCaption", "Babylon-EnglishBB Customized Web Search");
Line Deleted : user_pref("CT2720081.SearchEngineBeforeUnload", "Yahoo");
Line Deleted : user_pref("CT2720081.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2720081.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2720081&SearchSource=2&q=");
Line Deleted : user_pref("CT2720081.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2720081.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2720081.SearchInNewTabLastCheckTime", "Sun Dec 08 2013 17:24:40 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT2720081.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2720081.SearchProtectorEnabled", true);
Line Deleted : user_pref("CT2720081.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT2720081.SendProtectorDataViaLogin", true);
Line Deleted : user_pref("CT2720081.ServiceMapLastCheckTime", "Sun Dec 08 2013 17:24:39 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.SettingsLastCheckTime", "Sun Dec 08 2013 17:24:39 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.SettingsLastUpdate", "1383737452");
Line Deleted : user_pref("CT2720081.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2720081&SearchSource=13");
Line Deleted : user_pref("CT2720081.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2720081.ThirdPartyComponentsLastCheck", "Sun Dec 08 2013 17:24:39 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.ThirdPartyComponentsLastUpdate", "1331805997");
Line Deleted : user_pref("CT2720081.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2720081.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2720081");
Line Deleted : user_pref("CT2720081.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2720081.UserID", "UN17127751470965702");
Line Deleted : user_pref("CT2720081.WeatherNetwork", "");
Line Deleted : user_pref("CT2720081.WeatherPollDate", "Sun Dec 08 2013 17:54:46 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.WeatherUnit", "C");
Line Deleted : user_pref("CT2720081.alertChannelId", "1112366");
Line Deleted : user_pref("CT2720081.backendstorage.ct2720081ads1", "25374225323261647325323225334125354225374225323261696425323225334125323232363230372532322532432532327469746C652532322533412532322A253230596F7525323[...]
Line Deleted : user_pref("CT2720081.backendstorage.ct2720081current_term", "");
Line Deleted : user_pref("CT2720081.backendstorage.ct2720081sdate", "3230");
Line Deleted : user_pref("CT2720081.backendstorage.hxxp://api15_thetrafficstat_net.pid2", "38626663316538393437633236613634");
Line Deleted : user_pref("CT2720081.backendstorage.searchappstate", "31");
Line Deleted : user_pref("CT2720081.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2720081.globalFirstTimeInfoLastCheckTime", "Sun Dec 08 2013 17:24:53 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2720081.initDone", true);
Line Deleted : user_pref("CT2720081.isAppTrackingManagerOn", false);
Line Deleted : user_pref("CT2720081.isFirstRadioInstallation", false);
Line Deleted : user_pref("CT2720081.myStuffEnabled", true);
Line Deleted : user_pref("CT2720081.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2720081.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2720081.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2720081.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2720081.oldAppsList", "129246060025636489,129246060025636490,111,4221156542888680494,129248875812655100,1000082,129319739420043910,129326609897400864,5611289133187350459,12924887772453082[...]
Line Deleted : user_pref("CT2720081.revertSettingsEnabled", false);
Line Deleted : user_pref("CT2720081.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2720081.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2720081.testingCtid", "");
Line Deleted : user_pref("CT2720081.toolbarAppMetaDataLastCheckTime", "Sun Dec 08 2013 17:24:51 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT2720081.toolbarContextMenuLastCheckTime", "Sun Dec 08 2013 17:24:51 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CT3306061.FF19Solved", "true");
Line Deleted : user_pref("CT3306061.UserID", "UN35286129682551930");
Line Deleted : user_pref("CT3306061.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3306061.fullUserID", "UN35286129682551930.IN.20131218104032");
Line Deleted : user_pref("CT3306061.installDate", "18/12/2013 10:40:51");
Line Deleted : user_pref("CT3306061.installSessionId", "{642706B8-4D15-42AE-8863-7A7A3815EDD3}");
Line Deleted : user_pref("CT3306061.installSp", "TRUE");
Line Deleted : user_pref("CT3306061.installerVersion", "1.8.1.4");
Line Deleted : user_pref("CT3306061.keyword", "true");
Line Deleted : user_pref("CT3306061.originalHomepage", "hxxp://search.babylon.com/home?AF=14542");
Line Deleted : user_pref("CT3306061.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2720081&SearchSource=2&q=");
Line Deleted : user_pref("CT3306061.originalSearchEngine", "Yahoo");
Line Deleted : user_pref("CT3306061.originalSearchEngineName", "Yahoo");
Line Deleted : user_pref("CT3306061.searchRevert", "true");
Line Deleted : user_pref("CT3306061.searchUninstallUserMode", "2");
Line Deleted : user_pref("CT3306061.searchUserMode", "2");
Line Deleted : user_pref("CT3306061.smartbar.homepage", "true");
Line Deleted : user_pref("CT3306061.toolbarInstallDate", "18-12-2013 10:40:39");
Line Deleted : user_pref("CT3306061.versionFromInstaller", "10.23.0.722");
Line Deleted : user_pref("CT3306061.xpeMode", "0");
Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "Babylon-EnglishBB Customized Web Search");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT1060933/CT1060933", "\"f0a567eb29962f6fd60751a0d03e0efc3\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2720081/CT2720081", "\"3eb47f80319326d36f72090bcede8b763\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1112366/1108070/US", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/15651/15317/US", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1060933", "\"1381823163\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2720081", "\"1359616813\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "C5ZJe6gL80JBW5CuLy+wkg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en&ctid=CT2720081", "uG7mdamLoNmpmgC2c0JctQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us", "uG7mdamLoNmpmgC2c0JctQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us&ctid=CT1060933", "uG7mdamLoNmpmgC2c0JctQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "mfQ70fvlD2zuBxSBj8rQqA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en&ctid=CT2720081", "jf4tQQjNr2TQ31uHimzTMg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us", "jf4tQQjNr2TQ31uHimzTMg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us&ctid=CT1060933", "jf4tQQjNr2TQ31uHimzTMg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "k9un27OkAvkwB2ZmvXxTnA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en&ctid=CT2720081", "0BEXfBAJ1PdxmWK9VOejOg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us", "0BEXfBAJ1PdxmWK9VOejOg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us&ctid=CT1060933", "0BEXfBAJ1PdxmWK9VOejOg==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "FqddrIU7eyJgaaLyHDeVMQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en&ctid=CT2720081&UM=UM_UNINSTALL_ID", "ZU6zjERHpZr7lBpInn+HyA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us", "ZU6zjERHpZr7lBpInn+HyA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us&ctid=CT1060933&UM=UM_UNINSTALL_ID", "ZU6zjERHpZr7lBpInn+HyA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"f4cb1557a8bece1:16f8\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:166e\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"f414eeaa6bece1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"0343677cfb1cd1:155b\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT1060933", "\"52c3f1538cb4af4ada257fcbc6b15d49\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2720081", "\"52c3f1538cb4af4ada257fcbc6b15d49\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT1060933&octid=CT1060933", "\"1d40496a81bea5c5e2a2948f0d84102a1\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2720081&octid=CT2720081", "\"53f1f13ca0d54178b59241767ed1af1e1\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equalizer_dead.gif", "\"0678fe477ac91:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimize.gif", "\"046c7ab477ac91:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gif", "\"0484de117c4c91:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gif", "\"0e7a152347ac91:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif", "\"087c778347ac91:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"1188a5c37394a218a0bb301d788ab482\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"520108c1280c77d32a45d821f6f8e92f\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/14293310.xml", "\"97bd886f60c4eade2a3be8aff2252bb2\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/2557521.xml", "\"57fdcda28136287c4625658b8c315754\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"dbba46e2b3bd1182ff0cd73115a54210\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/807095.xml", "\"b96461dd26d69d609898da0f77c18e86\"");
Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Kathleen Mohr\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\bnvvo7aq.default\\conduitCommon\\modules\\3.18.0.7");
Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_e1dcb325,pg_agreement_msg_key,true", "356x317");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p=");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT1060933,CT2720081");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT1060933,CT2720081");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2720081");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Apr 15 2013 07:23:45 GMT-0400 (Eastern Daylight Time)");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "84a0c886-897b-49be-a4e3-b426ac3530fa");
Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2720081");
Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Dec 08 2013 17:24:55 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Dec 08 2013 17:24:46 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Dec 08 2013 17:24:38 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.notifications.userId", "ad6e155b-0931-460a-aa79-b81653ac88ca");
Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://search.babylon.com/home?AF=14542");
Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "Yahoo");
Line Deleted : user_pref("CommunityToolbar.twitter.user_14293310.LastCheckTime", "Sun Dec 08 2013 17:24:42 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CommunityToolbar.twitter.user_2557521.LastCheckTime", "Sun Dec 08 2013 17:24:42 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Sun Dec 08 2013 17:24:42 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Sun Dec 08 2013 17:24:42 GMT-0500 (Eastern Standard Time)");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2720081&SearchSource=2&q=");
Line Deleted : user_pref("browser.babylon.HPOnNewTab", "1");
Line Deleted : user_pref("browser.search.defaultenginename", "Connect DLC 5 Customized Web Search");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "Connect DLC 5 Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&CUI=UN35286129682551930&UM=2&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)");
Line Deleted : user_pref("browser.search.selectedEngine", "Conduit Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN35286129682551930&UM=2&SearchSource=13&UP=SP3ED7853A-0752-491D-9D23-03CCE69FC15C&SSPV=");
Line Deleted : user_pref("extensions.dynconff.cache.couponbar.coupons.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1582_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">[...]
Line Deleted : user_pref("extensions.dynconff.cache.fishandgame.idaho.gov.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">\r\n [...]
Line Deleted : user_pref("extensions.dynconff.cache.search.babylon.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1136_1137_1524_1169_1539_1263_1348_1474_1482_1521\"><content id=\"MB_P1\[...]
Line Deleted : user_pref("extensions.dynconff.cache.search.babylon.com.expires", "1386545097338");
Line Deleted : user_pref("extensions.dynconff.cache.search.tb.ask.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1477_1164_1137_1524_1146_1169_1263_1348_1482_1493_1521\"><content id=\"MB_P1\"[...]
Line Deleted : user_pref("extensions.dynconff.cache.search.tb.ask.com.expires", "1386545127838");
Line Deleted : user_pref("extensions.dynconff.cache.www.buycheapr.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1582_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">\r\n[...]
Line Deleted : user_pref("extensions.dynconff.cache.www.fntpost.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">\r\n <newjs[...]
Line Deleted : user_pref("extensions.dynconff.cache.www.kaatzbros.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">\r\n <new[...]
Line Deleted : user_pref("extensions.dynconff.cache.www.superfish.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">\r\n <new[...]
Line Deleted : user_pref("extensions.dynconff.cache.www.trapperman.com.content", "<package expire=\"3600\" es=\"914\" pcdids=\"_1520_1674_1164_1524_1146_1169_1263_1348_1482_1493_1521\"><content id=\"MB_P1\">\r\n <ne[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=0B3E3544-B61D-48E1-8516-0B1828C05D14&n=77fdc931&p2=^AW7^xdm049^YYA^us&si=GA_SAF_US_136");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.installDate", "2013120817");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerId", "^AW7^xdm049^YYA^us");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerSubId", "GA_SAF_US_136");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.installation.toolbarId", "0B3E3544-B61D-48E1-8516-0B1828C05D14");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.lastActivePing", "1386541474278");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.defaultSearch", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.homePageEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.keywordEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.options.tabEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.searchHistory", "idaho fish and game||f&t fur trader||best bobcat lure||google");
Line Deleted : user_pref("extensions.toolbar.mindspark._89Members_.weather.location", "17320");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "safepcrepair@mindspark.com");
Line Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&SearchSource=2&CUI=UN35286129682551930&UM=2&q=");
Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3306061");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN35286129682551930&UM=2&SearchSource=13");
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&SearchSource=2&CUI=UN35286129682551930&UM=2&q=");
Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3306061");
Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3306061");
Line Deleted : user_pref("smartbar.machineId", "");
 
-\\ Google Chrome v31.0.1650.63
 
[ File : C:\Users\Kathleen Mohr\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
 
*************************
 
AdwCleaner[R0].txt - [74874 octets] - [15/01/2014 11:12:39]
AdwCleaner[S0].txt - [72439 octets] - [15/01/2014 11:13:59]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [72500 octets] ##########
 


#7 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 02:18 PM

Okay Georgi here is the results of JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows ™ Vista Home Premium x64
Ran by Kathleen Mohr on Wed 01/15/2014 at 14:10:58.67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 
~~~ Services
 
 
 
~~~ Registry Values
 
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
 
 
 
~~~ Registry Keys
 
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2830488C-079B-45C2-88B6-AFE4EAA2DF85}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{781CA792-9B6E-400B-B36F-15C097D2CA54}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\freecorder
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0AD427D6-334F-4920-B680-AC827DFA3D52}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8684a7c7-3ade-4208-ad43-ad57a1af352c}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{4C1B5254-BD8E-4E93-87A6-3E34E5B877D4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{8684a7c7-3ade-4208-ad43-ad57a1af352c}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
 
 
 
~~~ Files
 
Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\plugins\npcouponprinter.dll"
Successfully deleted: [File] "C:\Program Files (x86)\mozilla firefox\plugins\npmozcouponprinter.dll"
 
 
 
~~~ Folders
 
Successfully deleted: [Folder] "C:\Users\Kathleen Mohr\appdata\local\cre"
Successfully deleted: [Folder] "C:\Program Files (x86)\coupons"
Successfully deleted: [Folder] "C:\Program Files (x86)\coupons.com couponbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\searchdonkey"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Folder] "C:\Windows\freecorder"
 
 
 
~~~ FireFox
 
Successfully deleted: [File] C:\Users\Kathleen Mohr\AppData\Roaming\mozilla\firefox\profiles\bnvvo7aq.default\extensions\wsmbkgbuep@wsmbkgbuep.org.xpi [Tracur]
Successfully deleted: [Folder] C:\Users\Kathleen Mohr\AppData\Roaming\mozilla\firefox\profiles\bnvvo7aq.default\smartbar
Successfully deleted: [Folder] C:\Users\Kathleen Mohr\AppData\Roaming\mozilla\firefox\profiles\bnvvo7aq.default\extensions\{1392b8d2-5c05-419f-a8f6-b9f15a596612}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{1c43baf1-00c2-40a8-a09e-f84cfd79546d}
Successfully deleted the following from C:\Users\Kathleen Mohr\AppData\Roaming\mozilla\firefox\profiles\bnvvo7aq.default\prefs.js
 
user_pref("CT1060933.smartbar.CTID", "CT1060933");
user_pref("CT1060933.smartbar.Uninstall", "0");
user_pref("CT1060933.smartbar.toolbarName", "Freecorder ");
user_pref("CT2720081.smartbar.CTID", "CT2720081");
user_pref("CT2720081.smartbar.Uninstall", "0");
user_pref("CT2720081.smartbar.toolbarName", "BBB003 ");
user_pref("extensions.toolbar.mindspark._89Members_.BUTTON_STRUCTURE", "[{\"b\":220465250,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":220465251,\"c\":\"mindspark.enterse
user_pref("extensions.toolbar.mindspark._89Members_.homepage", "hxxp://home.tb.ask.com/index.jhtml?n=780b6078&p2=^AW7^xpi000^YYA^");
user_pref("extensions.toolbar.mindspark._89Members_.initialized", true);
user_pref("extensions.toolbar.mindspark._89Members_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._89Members_.installation.installDate", "2014011512");
user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerId", "^AW7^xpi000^YYA^");
user_pref("extensions.toolbar.mindspark._89Members_.installation.partnerSubId", "");
user_pref("extensions.toolbar.mindspark._89Members_.installation.success", false);
user_pref("extensions.toolbar.mindspark._89Members_.isCompliantUninstallImplementation", true);
user_pref("extensions.toolbar.mindspark._89Members_.lastKnownVersion", "5.71.2.61854");
user_pref("extensions.toolbar.mindspark._89Members_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._89Members_.partnerPixelFired", false);
user_pref("extensions.toolbar.mindspark.lastInstalled", "safepcrepair@mindspark.com");
user_pref("id_couponscom.variables.Var1", "hxxp%3A//cdn.coupons.com/couponbar.coupons.com");
user_pref("id_couponscom.variables.Var2", "hxxp%3A//couponbar.coupons.com");
user_pref("id_couponscom.variables.Var3", "hxxp%3A//www.coupons.com/coupon-codes/");
 
 
 
~~~ Event Viewer Logs were cleared
 
 
 
 
 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 01/15/2014 at 14:17:15.97
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 


#8 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 02:23 PM

Here is the result for Farbar, but it came up with an error message that read:

Error: Variable used without being delcared.

Line 10702 (File: C:\Users\kathleenMohr\Desktop\First64.exe)

 

Results as follows:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 01
Ran by Kathleen Mohr (administrator) on KATHLEENMOHR-PC on 15-01-2014 14:19:18
Running from C:\Users\Kathleen Mohr\Desktop
Windows Vista ™ Home Premium Service Pack 2 (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
ATTENTION: If processes are not listed WMI should be repaired.
 
 
==================== Processes (Whitelisted) =================
 
 


#9 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 02:31 PM

Georgi

When I was trying to fix my internet problem I also ran RKill which I already had on my computer.  Here are the results if they help at all.

Rkill 2.4.7 by Lawrence Abrams (Grinler)
Copyright 2008-2014 BleepingComputer.com
More Information about Rkill can be found at this link:
 
Program started at: 01/15/2014 01:46:16 PM in x64 mode.
Windows Version: Windows Vista ™ Home Premium Service Pack 2
 
Checking for Windows services to stop:
 
 * No malware services found to stop.
 
Checking for processes to terminate:
 
 * Your %Temp% folder is set to C:\Windows\TEMP, which can be dangerous. Skipping termination for this folder.
 * No malware processes found to kill.
 
Checking Registry for malware related settings:
 
 * No issues found in the Registry.
 
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
 
Performing miscellaneous checks:
 
 * Windows Defender Disabled
 
   [HKLM\SOFTWARE\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001
 
 * Windows Firewall Disabled
 
   [HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
   "EnableFirewall" = dword:00000000
 
Checking Windows Service Integrity: 
 
 * Windows Defender (WinDefend) is not Running.
   Startup Type set to: Automatic
 
 * PcaSvc [Missing Service]
 
Searching for Missing Digital Signatures: 
 
 * No issues found.
 
Checking HOSTS File: 
 
 * HOSTS file entries found: 
 
  127.0.0.1       localhost
  ::1             localhost
 
Program finished at: 01/15/2014 01:46:35 PM
Execution time: 0 hours(s), 0 minute(s), and 19 seconds(s)


#10 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 15 January 2014 - 06:19 PM

Georgi

I wanted to let you know that my computer seems to be working great.  I have not been redirected, although I still have pop-ups that I had not had before.  I wanted to thank you very much for your time and effort.  I know that this is probably sometimes a thankless effort, but I wanted to let you know how much I appreciated all you did and do for everyone here!  I think I will buy you a beer :o)  Thanks again.

Kathy



#11 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:10:42 AM

Posted 15 January 2014 - 06:53 PM

Hi Kathy,

 

I am glad to hear there is an improvement but there are still some issues which concern me a bit.

Please download the following file => Attached File  environment.bat   238bytes   6 downloads and save it to your desktop and then run it.

Next please attach the following files (created in the root folder of drive C:\) - regquery.txt, regquery2.txt and regquery3.txt to your next reply.

 

 

 

Next let's try to fix the broken services.


Backup Your Registry

 


 

Now download the following files and save them to your desktop:

PcaSvc.reg

 

Winmgmt.reg

 

Now double click on each of them one by one. An information box will pop up asking if you want to merge the information in the file into the registry, click YES.

 

Reboot the computer in order for the changes to take effect.

 

Next please download the latest version of FRST from here and run a new scan and then attach the logs to your next reply.

 

 

 

Regards,

Georgi


cXfZ4wS.png


#12 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 16 January 2014 - 07:45 AM

Georgi do I need to run Environment.bat as an admistrator b/c it will not run? It flashes what looks like the cmd prompt window but that is it.  Thanks.

Kathy



#13 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:10:42 AM

Posted 16 January 2014 - 07:54 AM

Hi Kathy,

 

Yes, it is supposed to be like that. Please check and attach the log files I asked for:

 

Next please attach the following files (created in the root folder of drive C:\) - regquery.txt, regquery2.txt and regquery3.txt to your next reply.

 

 

Regards,

Georgi


cXfZ4wS.png


#14 bearywood

bearywood
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:02:42 AM

Posted 16 January 2014 - 07:59 AM

Okay now I feel like a dunce.  Where is the files.  I thought it would be in C: => or document and settings (This won't let me in.)  Sorry, I probably should know where to look.

Kathy



#15 B-boy/StyLe/

B-boy/StyLe/

    Bleepin' Freestyler


  • Malware Response Team
  • 8,307 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Bulgaria
  • Local time:10:42 AM

Posted 16 January 2014 - 08:02 AM

Hi Kathy,

 

The files should be created in the root folder of drive C:\

 

C:\regquery.txt

C:\regquery2.txt

C:\regquery3.txt

 

 

Regards,

Georgi


cXfZ4wS.png





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users