Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Vista. Moms comp has Malware, popups, redirects, freezing.


  • This topic is locked This topic is locked
19 replies to this topic

#1 cplikerd

cplikerd

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 29 July 2014 - 08:57 PM

Trying to clean up my moms computer, but it's got a few different malware not sure which ones. Was getting so many popups i had to use adblock plus to even post. On top of this it also takes seconds to respond at times. Thank you if you can help me! 

 

 

 

 

DDS (Ver_2012-11-20.01) - NTFS_x86 

Internet Explorer: 9.0.8112.16561
Run by hatfield at 21:38:36 on 2014-07-29
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.1.1033.18.1982.479 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\iolo\System Mechanic Professional\iologovernor.exe
C:\Program Files\Google\Update\1.3.23.9\GoogleCrashHandler.exe
C:\Program Files\Optimizer Pro\OptProReminder.exe
C:\Program Files\Highlightly\Service\hlsvc.exe
C:\Windows\system32\lxctcoms.exe
C:\Program Files\V-bates\guardsvc.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files\Settings Manager\systemk\SystemkService.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\Program Files\Settings Manager\systemk\SystemkService.exe
C:\Program Files\Settings Manager\systemk\systemku.exe
C:\Program Files\V-bates\ExtensionUpdaterService.exe
C:\Users\hatfield\AppData\Roaming\VOPackage\VOsrv.exe
C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\V-bates\notifier.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Lexmark 5400 Series\lxctmon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Lexmark 5400 Series\ezprint.exe
C:\Program Files\Flash Update\winclient32.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Software Updater\SoftwareUpdater.exe
C:\Program Files\MyPC Backup\MyPC Backup.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\di1BlockAndSurf\G8BlockAndSurfR.exe
C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe
C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe
C:\PROGRA~1\SearchProtect\UI\bin\cltmngui.exe
C:\Program Files\webget\updatewebget.exe
C:\Program Files\webget\bin\utilwebget.exe
C:\Program Files\webget\bin\webget.PurBrowse.exe
C:\Program Files\webget\bin\webget.BrowserAdapter.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.trovi.com/?gd=&ctid=CT3323128&octid=EB_ORIGINAL_CTID&ISID=M4F83FBFC-EF14-4984-A7DC-709BC7C89658&SearchSource=55&CUI=&UM=6&UP=SP7B36871E-CD3A-4476-8BDC-067760EA87F4&SSPV=SE3CLRTYRY1_sp_ie
uWindow Title = Internet Explorer provided by Dell
uDefault_Page_URL = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6081129
BHO: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - c:\program files\lexmark toolbar\toolband.dll
BHO: DownloadGuardBHO Class: {20C1A7F0-528E-444F-BAC5-5804A61CCA7F} - c:\program files\lavasoft\download guard for internet explorer\DownloadGuardBHO.dll
BHO: V-bates: {21EAF666-26B3-4a3c-ABD0-CA2F5A326744} - c:\program files\v-bates\Extension32.dll
BHO: Linkey: {4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} - c:\program files\linkey\ieextension\iedll.dll
BHO: redConveruter: {57D6EE0C-1AC0-F2AE-007C-CAFD7EDCC693} - c:\programdata\redconveruter\4x.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: Highlightly: {83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} - c:\program files\highlightly\ie\HighlightlyClientIE.dll
BHO: BlockAndSurf: {86A06E94-723E-902D-E21C-D6B10B2DD9E2} - c:\program files\di1blockandsurf\175.dll
BHO: {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - <orphaned>
TB: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - c:\program files\lexmark toolbar\toolband.dll
TB: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - c:\program files\lexmark toolbar\toolband.dll
uRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
uRun: [BlockAndSurf] c:\program files\di1blockandsurf\BlockAndSurf.exe
uRun: [Optimizer Pro] c:\program files\optimizer pro\OptProLauncher.exe
uRun: [Driver Detective] c:\program files\pc drivers headquarters\driver detective\DriversHQ.DriverDetective.Client.exe /applicationMode:systemTray /showWelcome:false
uRunOnce: [Del223811623] cmd.exe /Q /D /c del "c:\users\hatfield\appdata\local\temp\0.del"
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [dscactivate] "c:\program files\dell support center\gs_agent\custom\dsca.exe"
mRun: [lxctmon.exe] "c:\program files\lexmark 5400 series\lxctmon.exe"
mRun: [LXCTCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCTtime.dll,_RunDLLEntry@16
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [DellSupportCenter] "c:\program files\dell support center\bin\sprtcmd.exe" /P DellSupportCenter
mRun: [Price Finder] c:\program files\price finder\PriceFinderHelper.exe /check
mRun: [Coupon Alert EPM Support] "c:\progra~1\coupon~4\bar\1.bin\2pmedint.exe" T8EPMSUP.DLL,S
mRun: [EzPrint] "c:\program files\lexmark 5400 series\ezprint.exe"
mRun: [Windows Client Manager] c:\program files\flash update\winclient32.exe
mRun: [V-bates] c:\program files\v-bates\notifier.exe
mRun: [fst_us_70] <no file>
mRunOnce: [Del223811623] cmd.exe /Q /D /c del "c:\users\hatfield\appdata\local\temp\0.del"
StartupFolder: c:\users\hatfield\appdata\roaming\micros~1\windows\startm~1\programs\startup\mypcba~1.lnk - c:\program files\mypc backup\MyPC Backup.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\softwa~1.lnk - c:\program files\software updater\SoftwareUpdater.exe
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
LSP: c:\windows\system32\iavlsp.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
TCP: NameServer = 192.168.0.1 205.171.2.226
TCP: Interfaces\{5DD1B324-5E38-4D70-B742-1D3EEE10EE3F} : DHCPNameServer = 163.244.52.49 163.244.52.50 143.166.33.44
TCP: Interfaces\{78EE25B8-AD4B-43B0-945A-D28E05DDB333} : DHCPNameServer = 69.88.214.131 69.88.214.132
TCP: Interfaces\{81938597-27B6-4479-806B-4CC87A309826} : DHCPNameServer = 192.168.0.1 205.171.2.226
Handler: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\program files\cozi express\CoziProtocolHandler.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll
AppInit_DLLs= c:\progra~1\searchprotect\searchprotect\bin\SPVC32Loader.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\34.0.1847.131\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
IFEO: bitguard.exe - tasklist.exe
IFEO: bprotect.exe - tasklist.exe
IFEO: bpsvc.exe - tasklist.exe
IFEO: browserdefender.exe - tasklist.exe
IFEO: browserprotect.exe - tasklist.exe
.
Note: multiple IFEO entries found. Please refer to Attach.txt
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\hatfield\appdata\roaming\mozilla\firefox\profiles\wkgis1hn.default\
FF - prefs.js: browser.search.selectedEngine - Trovi search
FF - prefs.js: browser.startup.homepage - hxxp://www.trovi.com/?gd=&ctid=CT3323128&octid=EB_ORIGINAL_CTID&ISID=M4F83FBFC-EF14-4984-A7DC-709BC7C89658&SearchSource=55&CUI=&UM=6&UP=SP7B36871E-CD3A-4476-8BDC-067760EA87F4&SSPV=SE3CLRTYRY1_sp_ff
FF - prefs.js: keyword.URL - hxxp://www.default-search.net/search?sid=492&aid=166&itype=a&ver=13337&tm=358&src=ds&p=
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\couponalert_2p\bar\1.bin\NP2pStub.dll
FF - plugin: c:\program files\google\update\1.3.23.9\npGoogleUpdate3.dll
FF - plugin: c:\program files\mozilla firefox\browser\plugins\npMozCouponPrinter.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_13_0_0_214.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.buenosearch.tlbrSrchUrl - hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=6A6A002369002154&affID=128166&tt=220514_cnng&tsp=5258
FF - user.js: extensions.buenosearch.tb_url - hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=6A6A002369002154&affID=128166&tt=220514_cnng&tsp=5258
FF - user.js: extensions.buenosearch.id - 6a6a0018000000000000002369002154
FF - user.js: extensions.buenosearch.appId - {37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}
FF - user.js: extensions.buenosearch.instlDay - 16215
FF - user.js: extensions.buenosearch.vrsn - 1.8.28.7
FF - user.js: extensions.buenosearch.vrsni - 1.8.28.7
FF - user.js: extensions.buenosearch.vrsnTs - 1.8.28.720:55:45
FF - user.js: extensions.buenosearch.prtnrId - buenosearch
FF - user.js: extensions.buenosearch.prdct - buenosearch
FF - user.js: extensions.buenosearch.aflt - babsst
FF - user.js: extensions.buenosearch.smplGrp - none
FF - user.js: extensions.buenosearch.tlbrId - base
FF - user.js: extensions.buenosearch.instlRef - sst
FF - user.js: extensions.buenosearch.dfltLng - en
FF - user.js: extensions.buenosearch.excTlbr - false
FF - user.js: extensions.buenosearch.ffxUnstlRst - true
FF - user.js: extensions.buenosearch.admin - false
FF - user.js: extensions.buenosearch.autoRvrt - false
FF - user.js: extensions.buenosearch.rvrt - false
FF - user.js: extensions.buenosearch.newTab - false
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
FF - user.js: extensions.nspdlrckt.aflt - rckt_cmi_14_29_ch
FF - user.js: extensions.nspdlrckt.instlRef - 142905_a
FF - user.js: extensions.nspdlrckt.cr - 1846679804
FF - user.js: extensions.nspdlrckt.cd - 2XzuyEtN2Y1L1QzutDtDtBtAyCzytDtDtBtCyDyEtDtDtCzztN0D0Tzu0SzytAyEtN1L2XzutBtFtBtCtFtCyEtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyB0Fzz0EtCyEyEtBtG0FyE0AtDtGyE0C0F0BtGyE0B0F0BtGtA0EzzyBtCtA0EtDtD0B0DyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCtB0BzyyBzyzyzytGyD0AyEyDtGyEzy0CyCtG0A0DyE0CtGtBtCtByBtB0DyEyBtDyC0Bzy2Q
.
============= SERVICES / DRIVERS ===============
.
R0 amacpi;Microsoft Away Mode System;c:\windows\system32\drivers\null.sys [2008-1-20 4608]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2010-8-15 64288]
R1 {55685567-4840-4a91-962b-49a412e9485a}t;{55685567-4840-4a91-962b-49a412e9485a}t;c:\windows\system32\drivers\{55685567-4840-4a91-962b-49a412e9485a}t.sys [2014-5-28 55224]
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622;F06DEFF2-5B9C-490D-910F-35D3A9119622;c:\program files\settings manager\systemk\systemkmgrc2.cfg [2014-7-16 34192]
R1 hlnfd;hlnfd;c:\windows\system32\drivers\hlnfd.sys [2014-4-1 52752]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2010-2-4 95024]
R1 tStLibG;tStLibG;c:\windows\system32\drivers\tStLibG.sys [2014-4-20 55224]
R2 AMP;Active Malware Protection Minifilter Driver;c:\windows\system32\drivers\amp.sys [2012-8-24 137568]
R2 AMPSE;Active Malware Protection Support Driver;c:\windows\system32\drivers\ampse.sys [2014-1-12 1210208]
R2 CltMngSvc;Search Protect Service;c:\progra~1\searchprotect\main\bin\CltMngSvc.exe [2014-7-22 2975168]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
R2 hlsvc;Highlightly Client Service;c:\program files\highlightly\service\hlsvc.exe [2014-4-1 273000]
R2 Mext Guard;Mext Guard;c:\program files\v-bates\guardsvc.exe [2014-5-24 129312]
R2 PDFsFilter;PDFsFilter;c:\windows\system32\drivers\PDFsFilter.sys [2014-1-12 68464]
R2 SystemkService;Systemk Service;c:\program files\settings manager\systemk\SystemkService.exe [2014-5-24 3572240]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\tomtom home 2\TomTomHOMEService.exe [2013-8-27 93072]
R2 webinstr;webinstr;c:\windows\system32\drivers\webinstr.sys [2014-7-19 51336]
R3 netr73;Linksys Compact Wireless-G USB Adapter Driver for Vista;c:\windows\system32\drivers\WUSB54GCx86.sys [2009-1-4 256000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2013-9-11 105144]
S3 SPPD;SPPD;c:\windows\system32\drivers\SPPD.sys [2014-7-19 18872]
S4 BackupStack;Computer Backup (MyPC Backup);c:\program files\mypc backup\BackupStack.exe [2014-6-18 36424]
S4 ca82e1a5;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe [2006-11-2 44544]
S4 CouponAlert_2pService;Coupon AlertService;c:\progra~1\coupon~4\bar\1.bin\2pbarsvc.exe [2013-12-13 88648]
S4 ioloSystemService;iolo System Service;c:\program files\iolo\common\lib\ioloServiceManager.exe [2014-1-12 1168960]
.
=============== Created Last 30 ================
.
2014-07-30 01:13:55 8217224 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{262e880f-8c39-4d26-b874-8bbdb3a0355e}\mpengine.dll
2014-07-30 00:56:46 -------- d-----w- c:\users\hatfield\appdata\roaming\uTorrent
2014-07-23 10:11:32 -------- d-----w- c:\users\hatfield\appdata\local\Rocket
2014-07-23 10:10:51 -------- d-----w- c:\users\hatfield\appdata\roaming\RocketUpdater
2014-07-23 10:10:32 -------- d-----w- c:\users\hatfield\appdata\roaming\WSE Rocket
2014-07-23 10:10:32 -------- d-----w- c:\program files\WSE Rocket
2014-07-23 10:10:17 -------- d-----w- c:\program files\AnyProtectEx
2014-07-20 20:17:24 377 ----a-w- c:\windows\system32\ff.bin
2014-07-20 20:02:06 546 ----a-w- c:\windows\system32\schtasks.bin
2014-07-19 19:12:31 -------- d-----w- c:\users\hatfield\appdata\roaming\Optimizer Pro
2014-07-19 19:10:49 -------- d-----w- c:\program files\MyPC Backup
2014-07-19 19:08:59 -------- d-----w- c:\programdata\UAB
2014-07-19 19:08:55 -------- d-----w- c:\users\hatfield\appdata\local\PC_Drivers_Headquarters
2014-07-19 19:08:47 -------- d-----w- c:\programdata\PC Drivers HeadQuarters
2014-07-19 19:08:15 -------- d-----w- c:\program files\PC Drivers HeadQuarters
2014-07-19 19:07:05 -------- d-----w- c:\program files\Optimizer Pro
2014-07-19 19:05:12 18872 ----a-w- c:\windows\system32\drivers\SPPD.sys
2014-07-19 19:05:12 -------- d-----w- c:\users\hatfield\appdata\local\SearchProtect
2014-07-19 19:03:58 -------- d-----w- c:\program files\SearchProtect
2014-07-19 19:03:27 -------- d-----w- c:\program files\Software Updater
2014-07-19 18:51:31 51336 ----a-w- c:\windows\system32\drivers\webinstr.sys
2014-07-19 18:51:24 -------- d-----w- c:\program files\di1BlockAndSurf
2014-07-19 18:49:20 -------- d-----w- c:\program files\System Optimizer Pro
2014-07-16 22:55:37 937472 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2014-07-16 22:55:37 1218048 ----a-w- c:\program files\windows journal\NBDoc.DLL
2014-07-16 22:55:36 983552 ----a-w- c:\program files\windows journal\JNTFiltr.dll
2014-07-16 22:55:36 965120 ----a-w- c:\program files\windows journal\JNWDRV.dll
2014-07-16 22:55:32 1305088 ----a-w- c:\program files\common files\microsoft shared\ink\tipskins.dll
2014-07-16 22:55:31 2051072 ----a-w- c:\windows\system32\win32k.sys
2014-07-16 22:55:31 149504 ----a-w- c:\program files\common files\microsoft shared\ink\tabskb.dll
2014-07-16 22:55:30 114688 ----a-w- c:\program files\common files\microsoft shared\ink\TipBand.dll
2014-07-16 21:13:58 -------- d-----w- c:\programdata\systemk
2014-07-01 19:59:08 502784 ----a-w- c:\windows\system32\usp10.dll
2014-07-01 19:59:06 905664 ----a-w- c:\windows\system32\drivers\tcpip.sys
2014-07-01 19:59:01 1401344 ----a-w- c:\windows\system32\msxml6.dll
2014-07-01 19:59:01 1248768 ----a-w- c:\windows\system32\msxml3.dll
.
==================== Find3M  ====================
.
2014-06-06 23:12:01 1810432 ----a-w- c:\windows\system32\jscript9.dll
2014-06-06 23:03:02 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2014-06-06 23:02:16 1129472 ----a-w- c:\windows\system32\wininet.dll
2014-06-06 22:57:04 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2014-06-06 22:56:20 421376 ----a-w- c:\windows\system32\vbscript.dll
2014-06-06 22:52:42 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2014-06-06 22:51:59 11776 ----a-w- c:\windows\system32\mshta.exe
2014-06-06 08:59:38 506880 ----a-w- c:\windows\system32\qedit.dll
2014-05-30 06:53:22 273408 ----a-w- c:\windows\system32\drivers\afd.sys
2014-05-27 00:57:12 55224 ----a-w- c:\windows\system32\drivers\{55685567-4840-4a91-962b-49a412e9485a}t.sys
2014-05-25 00:53:56 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-05-25 00:53:56 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
.
============= FINISH: 21:39:35.76 ===============
 


BC AdBot (Login to Remove)

 


#2 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 30 July 2014 - 11:25 AM

Hello 

cplikerd
 

,

  • Welcome to Bleeping Computer.
  • My name is fireman4it and I will be helping you with your Malware problem.

    Please take note of some guidelines for this fix:
  • Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
      
  • If you do not understand any step(s) provided, please do not hesitate to ask before continuing.
      
  • Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean".
  • In the upper right hand corner of the topic you will see a button called Follow This Topic.I suggest you click it and select Immediate E-Mail notification and click on Follow This Topic. This way you will be advised when we respond to your topic and facilitate the cleaning of your machine.

      
  • Finally, please reply using the Post  button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply, unless they do not fit into the post.
  •   I will be analyzing your log. I will get back to you with instructions.

 

 

1.

Please download AdwCleaner by Xplode and save to your Desktop.

  • Double click on AdwCleaner.exe to run the tool .
  • Click on the Scan button.
  • AdwCleaner will begin to scan your computer.
  • After the scan has finished...
  • Click on the Clean button.
  • Press OK when asked to close all programs and follow the onscreen prompts.
  • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  • After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.

 

2.

Download and run Junkware Removal Tool. ***Your Anti Virus may see this download as malicious, don't worry continue on. 

Please download Junkware Removal Tool to your desktop.

 

  • shut down your protection software now to avoid potential conflicts.
  • run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator"
    the tool will open and start scanning your system
  • please be patient as this can take a while to complete depending on your system's specifications
  • on completion, a log (JRT.txt) is saved to your desktop and will automatically open
  • post the contents of JRT.txt into your next Reply.

 

3.

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#3 cplikerd

cplikerd
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 30 July 2014 - 03:13 PM

# AdwCleaner v3.301 - Report created 30/07/2014 at 15:23:02
# Updated 28/07/2014 by Xplode
# Operating System : Windows Vista ™ Home Premium Service Pack 2 (32 bits)
# Username : hatfield - HATFIELD-PC
# Running from : C:\Users\hatfield\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
[#] Service Deleted : BackupStack
[#] Service Deleted : ca82e1a5
Service Deleted : CltMngSvc
[#] Service Deleted : CouponAlert_2pService
[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A9119622
[#] Service Deleted : hlnfd
Service Deleted : hlsvc
Service Deleted : Mext Guard
[#] Service Deleted : SystemkService
[#] Service Deleted : tStLibG
[#] Service Deleted : Update webget
[#] Service Deleted : Util webget
Service Deleted : V-bates Updater
Service Deleted : vosr
Service Deleted : webinstr
[#] Service Deleted : {55685567-4840-4a91-962b-49a412e9485a}t
 
***** [ Files / Folders ] *****
 
[!] Folder Deleted : C:\ProgramData\systemk
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro v3.2
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Optimizer Pro
Folder Deleted : C:\Program Files\AnyProtectEx
Folder Deleted : C:\Program Files\CouponAlert_2p
Folder Deleted : C:\Program Files\Highlightly
Folder Deleted : C:\Program Files\Linkey
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Program Files\Optimizer Pro
Folder Deleted : C:\Program Files\predm
Folder Deleted : C:\Program Files\SearchProtect
[!] Folder Deleted : C:\Program Files\Settings Manager
Folder Deleted : C:\Program Files\Software Updater
Folder Deleted : C:\Program Files\System Optimizer Pro
Folder Deleted : C:\Program Files\V-bates
[!] Folder Deleted : C:\Program Files\webget
Folder Deleted : C:\Program Files\WSE Rocket
[!] Folder Deleted : C:\Program Files\webget
Folder Deleted : C:\Users\hatfield\AppData\Local\Rocket
Folder Deleted : C:\Users\hatfield\AppData\Local\SearchProtect
Folder Deleted : C:\Users\hatfield\AppData\Local\WeatherAlerts
Folder Deleted : C:\Users\hatfield\AppData\Local\Temp\AirInstaller
Folder Deleted : C:\Users\hatfield\AppData\Local\Temp\webget
Folder Deleted : C:\Users\hatfield\AppData\LocalLow\CouponAlert_2p
Folder Deleted : C:\Users\hatfield\AppData\LocalLow\DataMngr
Folder Deleted : C:\Users\hatfield\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Optimizer Pro
Folder Deleted : C:\Users\hatfield\AppData\Roaming\RocketUpdater
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Settings Manager
Folder Deleted : C:\Users\hatfield\AppData\Roaming\VOPackage
Folder Deleted : C:\Users\hatfield\AppData\Roaming\WSE Rocket
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rocket
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VOPackage
Folder Deleted : C:\Users\hatfield\Documents\Optimizer Pro
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\CouponAlert_2p
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\CouponXplorer_5z
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\Smartbar
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\ValueApps
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\Extensions\staged\{ecaa9181-d92a-47b9-8e14-bef9680f204b}
Folder Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\Extensions\2pffxtbr@CouponAlert_2p.com
Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\gethighlightly@gethighlightly.com
File Deleted : C:\END
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftwareUpdater.lnk
File Deleted : C:\Windows\system32\drivers\tStLibG.sys
File Deleted : C:\Windows\system32\drivers\{55685567-4840-4a91-962b-49a412e9485a}t.sys
File Deleted : C:\Users\hatfield\AppData\Local\AnyProtectScannerSetup.exe
File Deleted : C:\Users\hatfield\AppData\Roaming\aps.scan.quick.results
File Deleted : C:\Users\hatfield\AppData\Roaming\aps.scan.results
File Deleted : C:\Users\hatfield\AppData\Roaming\aps.uninstall.scan.results
File Deleted : C:\Users\hatfield\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
File Deleted : C:\Users\hatfield\Desktop\AnyProtect.lnk
File Deleted : C:\Users\hatfield\Desktop\Continue VuuPC Installation.lnk
File Deleted : C:\Users\hatfield\Desktop\MyPC Backup.lnk
File Deleted : C:\Users\hatfield\Desktop\Optimizer Pro.lnk
File Deleted : C:\Users\hatfield\Desktop\Sync Folder.lnk
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\invalidprefs.js
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\searchplugins\ask-web-search.xml
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\searchplugins\buenosearch.xml
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\searchplugins\conduit-search.xml
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\searchplugins\default-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\searchplugins\trovi-search.xml
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\searchplugins\WSE Rocket.xml
File Deleted : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\user.js
File Deleted : C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.livelyrics00.live-lyrics.com_0.localstorage
File Deleted : C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.livelyrics00.live-lyrics.com_0.localstorage-journal
 
***** [ Scheduled Tasks ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [gethighlightly@gethighlightly.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\acfoobbgoakpihljnfedbcfaipcdlfhk
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.FeedManager
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.FeedManager.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.HTMLMenu
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.HTMLMenu.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.HTMLPanel
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.HTMLPanel.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.MultipleButton
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.MultipleButton.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.PseudoTransparentPlugin
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.PseudoTransparentPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.Radio
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.Radio.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.RadioSettings
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.RadioSettings.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.ScriptButton
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.ScriptButton.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.SettingsPlugin
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.SettingsPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.ThirdPartyInstaller
Key Deleted : HKLM\SOFTWARE\Classes\CouponAlert_2p.ThirdPartyInstaller.1
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\Linkey.Linkey
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [AnyProtect Scanner]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [V-bates]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@CouponAlert_2p.com/Plugin
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0BDF6C42-132C-45F5-92DE-DC13F40C6DAB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{16FE2505-F2A0-4782-B035-AF0E5188C02C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1F0A2185-DA7E-4614-91C0-DD5F4A76CB1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{23B38049-323F-443D-9732-F454E5B15B72}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2D205ADF-C992-4EDA-99C3-096E13F38AB4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3462C343-BE19-4143-AF70-CEFB56F46FC6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{411B1946-3277-4A7F-9F60-745266360613}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{457A4CB8-0391-409D-98B4-C4CCB2849670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4D8EACBC-E293-4462-B91E-42EA5B54B743}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7717F4B3-397F-4CE5-9192-6EFFDE3AC999}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8867AC9B-4426-44A2-A693-C95850D3405C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B3F577-D54A-4831-B2B4-8AACEEDA85CF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CF9D6D4E-5496-438E-BA24-5A580A59F5A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DEF07ACD-BCEA-4269-933A-4087D20842BB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EBBC4E43-292A-40DF-88E3-3262B7521460}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{004EB151-885B-4A9E-A22D-CA98DD998D75}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{041278C7-DF92-486D-AE85-921BDFC75A43}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0F1794F2-900B-4C81-8146-9234E5CC5BE2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1116A14B-F6A3-4FD9-A00E-FF8CF270EE48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{21D9997E-5D2A-4737-BCBA-C958C0590295}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{36A7148B-639E-423C-90BB-30B6E1A40BD7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{58E64AEE-516A-4DFC-AC38-31C50E8AF0F1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{61DAB0AD-AD23-4E40-84AC-7C6CE64D4EB3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{65D8E17B-312E-4E12-913B-A841A8631143}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6BDA50D2-5597-4C68-A842-9B857FCCDA49}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6CA3D0AB-F807-462C-BA7F-E27F07F91E32}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6F99D2AE-5C90-43C2-A2FE-81DBE512E2FC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{860AF5D1-0735-409D-8E5F-E3E99356D7E9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8997561D-CF0B-42C7-AAE6-78801B3ADC7F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{92580E8C-88F5-4551-9D9E-8147E7EE2C32}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A0636D37-97D0-4DC4-95A6-93AABA07437F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A786F51D-B3C7-4F52-91EF-E1A892C2A2AE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DAFC4DAE-7794-4E16-9A98-F6001303DCD0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAB77009-B974-48DF-8229-E70CFAA11C69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EBAA6283-B61F-4DDD-9659-56635433A307}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFB0C189-5077-4340-9838-AF7B8E792A54}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFB4F034-3EB5-48D5-84DD-89BBCF9A182F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F9D45087-1CF1-452E-9649-FDFDAC578E03}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FF2EBC1C-6579-41DB-91DD-945A1C8DB2D2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{20BCCE5A-C687-46FF-8DD2-AD8235F5F2B4}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3276E8A8-A233-449B-A7EB-FCEE21246018}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{53CA18E7-5223-4358-9FD9-97C62C66C5BD}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7924FD2B-877C-4395-A063-A88AB887EA6D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79583DE9-D0C2-44EF-AE0D-CBFA16C2A785}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A4116F8C-A634-4536-B9EF-6B9EBCC5BAE1}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C7E7FB02-C4FD-446E-8F5B-463A049935BF}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7CE22AF-CCB3-423F-84D5-4D77152181F3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EAB5257A-1FB3-474C-9B42-231F52622E72}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EBAF2B4F-510A-47C7-86BA-E7D94D1162F6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21EAF666-26B3-4A3C-ABD0-CA2F5A326744}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1C81E40-2485-4DB6-8C9D-04BD596B281E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0BDF6C42-132C-45F5-92DE-DC13F40C6DAB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{23B38049-323F-443D-9732-F454E5B15B72}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8867AC9B-4426-44A2-A693-C95850D3405C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{95B3F577-D54A-4831-B2B4-8AACEEDA85CF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CF9D6D4E-5496-438E-BA24-5A580A59F5A3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16FE2505-F2A0-4782-B035-AF0E5188C02C}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2492}
Key Deleted : HKCU\Software\AnyProtect
Key Deleted : HKCU\Software\BABSOLUTION
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\FreeSoftToday
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\InstalledThirdPartyPrograms
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\Rocket Browser
Key Deleted : HKCU\Software\RocketUpdater
Key Deleted : HKCU\Software\SoftwareUpdater
Key Deleted : HKCU\Software\SystemK
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\webget
Key Deleted : HKCU\Software\WEDLMNGR
Key Deleted : HKCU\Software\WSE Rocket
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\blockAndSurf
Key Deleted : HKCU\Software\AppDataLow\Software\CouponAlert_2p
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\CouponAlert_2p
Key Deleted : HKLM\Software\FreeSoftToday
Key Deleted : HKLM\Software\InstallCore
Key Deleted : HKLM\Software\Linkey
Key Deleted : HKLM\Software\SearchProtect
Key Deleted : HKLM\Software\SystemK
Key Deleted : HKLM\Software\Tutorials
Key Deleted : HKLM\Software\V-bates
Key Deleted : HKLM\Software\webget
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AnyProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bueno Chrome Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Software Updater_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webget
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WSE Rocket
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Bueno Chrome Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Linkey
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Optimizer Pro_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Settings Manager
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Software Updater_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\VOPackage
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\webget
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v9.0.8112.16561
 
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
 
-\\ Mozilla Firefox v29.0.1 (en-US)
 
[ File : C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\prefs.js ]
 
Line Deleted : user_pref("CT3299872.1000082.isPlayDisplay", "true");
Line Deleted : user_pref("CT3299872.1000082.state", "{\"state\":\"stopped\",\"text\":\"WGUC\",\"description\":\"WGUC\",\"url\":\"hxxp://www.wguc.org/listen/WGUCLive.asx\"}");
Line Deleted : user_pref("CT3299872.1000234.TWC_TMP_city", "STRYKER");
Line Deleted : user_pref("CT3299872.1000234.TWC_TMP_country", "US");
Line Deleted : user_pref("CT3299872.1000234.TWC_country", "UNITED STATES");
Line Deleted : user_pref("CT3299872.1000234.TWC_locId", "USMT0323");
Line Deleted : user_pref("CT3299872.1000234.TWC_location", "Stryker, MT");
Line Deleted : user_pref("CT3299872.1000234.TWC_region", "US");
Line Deleted : user_pref("CT3299872.1000234.TWC_temp_dis", "f");
Line Deleted : user_pref("CT3299872.1000234.TWC_wind_dis", "mph");
Line Deleted : user_pref("CT3299872.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.FirstTime", "true");
Line Deleted : user_pref("CT3299872.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3299872.LAST_CLIENT_STATS_SUBMIT_2.enc", "MTM4MzIxMzQyOA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_LAST_SUBMIT_6", "%B7%B9%BE%B9%BB%BF%B9%BB%B8%BF");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_LAST_SUBMIT_6.enc", "MTM4MzU5MzUyOQ==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_NEW", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_NEW.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_NOT_SUPPORTED", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_NOT_SUPPORTED.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_SUPPORTED", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_SITE_SUPPORTED.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_HISTORY", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_HISTORY.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_POP", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_POP.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_RELATED", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_RELATED.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_TYPED", "%B6");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_STATS_STATS_USE_TYPED.enc", "MA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_THROTTLE_BASEadd_stats|0|LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT", "%B7%B9%BE%B9%BB%BF%B9%BB%B8%BF");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_THROTTLE_BASEadd_stats|0|LOCAL_COOKIE_STATS_STATS_SITE_IRRELEVANT.enc", "MTM4MzU5MzUyOQ==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_THROTTLE_BASEadd_stats|0|LOCAL_COOKIE_STATS_STATS_SITE_NOT_SUPPORTED.enc", "MTM4MzIyNTUxNg==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_THROTTLE_BASEadd_stats|0|LOCAL_COOKIE_STATS_STATS_SITE_SUPPORTED.enc", "MTM4MzIyNTYzOA==");
Line Deleted : user_pref("CT3299872.LOCAL_COOKIE_THROTTLE_BASEloopback|hxxp://up.autocompleteplus.com/up?q=thrift%20shops&l=www8.buyerpricer.com&t=2&v=0.51&d=conduit2.enc", "MTM4MzIyNTYzNQ==");
Line Deleted : user_pref("CT3299872.PG_ENABLE", "dHJ1ZQ==");
Line Deleted : user_pref("CT3299872.RestartDialogFirstTime", "false");
Line Deleted : user_pref("CT3299872.RestartDialogShouldDisplay", "false");
Line Deleted : user_pref("CT3299872.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Line Deleted : user_pref("CT3299872.SF_STATUS.enc", "RU5BQkxFRA==");
Line Deleted : user_pref("CT3299872.SF_USER_ID.enc", "Y2lkXzMxMTAyMDEzNTU3Njg3NjY2NDE=");
Line Deleted : user_pref("CT3299872.UserID", "UN42167376505396437");
Line Deleted : user_pref("CT3299872._key_cl_active", "%E7%EB%E8%B6%BB%EB%E9%EB%B3%EC%E9%EB%E7%B3%BA%BD%EB%B7%B3%E8%BF%E8%EB%B3%EB%B7%B6%BF%E9%B6%BE%EB%BC%EC%E7%BD");
Line Deleted : user_pref("CT3299872._key_cl_active.enc", "YWViMDVlY2UtZmNlYS00N2UxLWI5YmUtZTEwOWMwOGU2ZmE3");
Line Deleted : user_pref("CT3299872.acp_personal.appstate.enc", "ZW5hYmxl");
Line Deleted : user_pref("CT3299872.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3299872.cb_experience_000", "%B7");
Line Deleted : user_pref("CT3299872.cb_experience_000.enc", "MQ==");
Line Deleted : user_pref("CT3299872.cb_firstuse0100", "%B7");
Line Deleted : user_pref("CT3299872.cb_firstuse0100.enc", "MQ==");
Line Deleted : user_pref("CT3299872.cb_user_id_000", "%C9%C8%BA%BA%B9%BA%BD%B7%BC%BB%BD%BE%BD%BB%E5%B7%B9%BE%BA%B9%BB%BC%B8%BF%B7%B9%BA%B8%E5%CC%EF%F8%EB%EC%F5%FE");
Line Deleted : user_pref("CT3299872.cb_user_id_000.enc", "Q0I0NDM0NzE2NTc4NzVfMTM4NDM1NjI5MTM0Ml9GaXJlZm94");
Line Deleted : user_pref("CT3299872.cbfirsttime.enc", "VGh1IE9jdCAzMSAyMDEzIDA1OjU3OjA2IEdNVC0wNDAwIChFYXN0ZXJuIFN0YW5kYXJkIFRpbWUp");
Line Deleted : user_pref("CT3299872.countryCode", "US");
Line Deleted : user_pref("CT3299872.discover-experiments-photopop.enc", "eyJuYW1lIjoicGhvdG9wb3BfbmEiLCJ2ZXJzaW9uIjoxMH0=");
Line Deleted : user_pref("CT3299872.discover-periodic-reports", "%u0101%A8%F6%EF%F4%ED%E5%B6%A8%C0%E1%B7%B9%BE%BA%BA%BC%B8%B9%B8%BB%BC%BF%BF%B2%B7%BA%BA%B6%B6%B6%B6%B6%E3%u0103");
Line Deleted : user_pref("CT3299872.discover-periodic-reports.enc", "eyJwaW5nXzAiOlsxMzg0NDYyMzI1Njk5LDE0NDAwMDAwXX0=");
Line Deleted : user_pref("CT3299872.discover-user-id.enc", "IjIyZWMzYjI4LTU2NmItNDE2ZS05YjRmLWRiMzczNGY1YWYwMiI=");
Line Deleted : user_pref("CT3299872.event_data.enc", "JTVCJTVE");
Line Deleted : user_pref("CT3299872.fired_events.enc", "");
Line Deleted : user_pref("CT3299872.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3299872.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT3299872.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3299872.fullUserID", "UN42167376505396437.XP.2054055637");
Line Deleted : user_pref("CT3299872.ground-country-code.enc", "IlVTIg==");
Line Deleted : user_pref("CT3299872.hover_counter.enc", "Mg==");
Line Deleted : user_pref("CT3299872.impression_counter", "%B9");
Line Deleted : user_pref("CT3299872.impression_counter.enc", "Mw==");
Line Deleted : user_pref("CT3299872.impression_session_counter", "%BB");
Line Deleted : user_pref("CT3299872.impression_session_counter.enc", "NQ==");
Line Deleted : user_pref("CT3299872.impression_session_id", "%A8%BC%EA%EC%BB%EA%EC%B6%EB%B3%BA%BC%EA%B7%B3%BA%BB%BB%BF%B3%BF%EB%BD%E8%B3%BA%EB%E8%EA%BB%B8%EC%BE%EB%E7%BD%E9%A8");
Line Deleted : user_pref("CT3299872.impression_session_id.enc", "IjZkZjVkZjBlLTQ2ZDEtNDU1OS05ZTdiLTRlYmQ1MmY4ZWE3YyI=");
Line Deleted : user_pref("CT3299872.impression_session_last_active", "%B7%B9%BE%BA%BA%BC%B8%BA%B7%B8%BC%B8%B8");
Line Deleted : user_pref("CT3299872.impression_session_last_active.enc", "MTM4NDQ2MjQxMjYyMg==");
Line Deleted : user_pref("CT3299872.installType", "Unknown");
Line Deleted : user_pref("CT3299872.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3299872.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3299872.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3299872.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.key_date.enc", "MTM=");
Line Deleted : user_pref("CT3299872.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3299872&octid=CT3299872&ISID=ISID_ID&SearchSource=15&CUI=UN42167376505396437&Lay=1[...]
Line Deleted : user_pref("CT3299872.lastVersion", "10.31.2.501");
Line Deleted : user_pref("CT3299872.mam_gk_appStateReportTime", "%B7%B9%BE%BB%B6%BB%BE%B6%BA%B6%BB%BB%BF");
Line Deleted : user_pref("CT3299872.mam_gk_appStateReportTime.enc", "MTM4NTA1ODA0MDU1OQ==");
Line Deleted : user_pref("CT3299872.mam_gk_appState_ACplus.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Clarity_Active", "%F5%F4");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Clarity_Active.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_CouponBuddy.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Discover.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Easytobook.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Easytobookcars.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_Find-a-Pro.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_JobsMiner.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_PiclickV2-WebSearch.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_PriceGong.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appState_WindowShopper.enc", "b24=");
Line Deleted : user_pref("CT3299872.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJDbGFyaXR5X0FjdGl2ZSIsInVybCI6Imh0dHA6Ly9zdG9yYWdlLmNvbmR1aXQuY29tL21hbS8zcmRwYXJ0eWFwcHMvY2xhcml0eVJheS9jcl9hY3Rpdm[...]
Line Deleted : user_pref("CT3299872.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");
Line Deleted : user_pref("CT3299872.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Line Deleted : user_pref("CT3299872.mam_gk_currentBadgeValue", "%B7");
Line Deleted : user_pref("CT3299872.mam_gk_currentBadgeValue.enc", "MQ==");
Line Deleted : user_pref("CT3299872.mam_gk_currentVersion", "%B7%B4%B7%B7%B4%BA%B4%B8");
Line Deleted : user_pref("CT3299872.mam_gk_currentVersion.enc", "MS4xMS40LjI=");
Line Deleted : user_pref("CT3299872.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
Line Deleted : user_pref("CT3299872.mam_gk_first_time", "%B7");
Line Deleted : user_pref("CT3299872.mam_gk_first_time.enc", "MQ==");
Line Deleted : user_pref("CT3299872.mam_gk_globalKeysMigratedToLocalStorage", "%B7");
Line Deleted : user_pref("CT3299872.mam_gk_globalKeysMigratedToLocalStorage.enc", "MQ==");
Line Deleted : user_pref("CT3299872.mam_gk_installer_preapproved.enc", "VFJVRQ==");
Line Deleted : user_pref("CT3299872.mam_gk_lastLoginTime", "%B7%B9%BE%BB%B6%BB%BE%B6%BA%B6%BE%B7%BB");
Line Deleted : user_pref("CT3299872.mam_gk_lastLoginTime.enc", "MTM4NTA1ODA0MDgxNQ==");
Line Deleted : user_pref("CT3299872.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]
Line Deleted : user_pref("CT3299872.mam_gk_newApps", "%E1%E3");
Line Deleted : user_pref("CT3299872.mam_gk_newApps.enc", "W10=");
Line Deleted : user_pref("CT3299872.mam_gk_new_welcome_experience.enc", "MQ==");
Line Deleted : user_pref("CT3299872.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3299872.mam_gk_settings1.10.4.0.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxMzEwMzEiLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjM1XzAiLCJpc1Rlc3QiOnRydWUsIlVzZXJDb3VudHJ5[...]
Line Deleted : user_pref("CT3299872.mam_gk_settings1.11.4.2", "%u0101%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0%u0101%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%B[...]
Line Deleted : user_pref("CT3299872.mam_gk_settings1.11.4.2.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxMzExMjEiLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjEwNDNfMCIsImlzVGVzdCI6dHJ1ZSwiVXNlckNvdW50[...]
Line Deleted : user_pref("CT3299872.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");
Line Deleted : user_pref("CT3299872.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3299872.mam_gk_stamp", "%B7%B6%BA%B9%E5%B6");
Line Deleted : user_pref("CT3299872.mam_gk_stamp.enc", "MTA0M18w");
Line Deleted : user_pref("CT3299872.mam_gk_userId", "%E7%BB%BA%E7%EC%EC%BD%EA%B3%BB%EA%E9%EC%B3%BA%B9%BC%BE%B3%E8%EB%EC%B8%B3%B9%BE%B7%BF%B7%E7%BA%BE%EB%BA%B8%B8");
Line Deleted : user_pref("CT3299872.mam_gk_userId.enc", "YTU0YWZmN2QtNWRjZi00MzY4LWJlZjItMzgxOTFhNDhlNDIy");
Line Deleted : user_pref("CT3299872.mam_gk_user_approval_interacted", "%B7");
Line Deleted : user_pref("CT3299872.mam_gk_user_approval_interacted.enc", "MQ==");
Line Deleted : user_pref("CT3299872.mam_gk_welcomeDialogMode", "%B7");
Line Deleted : user_pref("CT3299872.mam_gk_welcomeDialogMode.enc", "MQ==");
Line Deleted : user_pref("CT3299872.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.default-search.net%2F%3Fsid%3D492%26aid%3D166%26itype%3Da%26ver%3D13337%26tm%3D358%26src%3Dhmp\",\"EB_MAIN_FRAME[...]
Line Deleted : user_pref("CT3299872.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.performedDomainChangesMigration", "true");
Line Deleted : user_pref("CT3299872.personalApps", "{\"dataType\":\"object\",\"data\":\"[\\\"BROWSER_COMPONENT\\\"]\"}");
Line Deleted : user_pref("CT3299872.price-gong.isManagedApp", "true");
Line Deleted : user_pref("CT3299872.rematchagent-periodic-reports.enc", "eyJwaW5nXzAiOlsxMzgzMjEzNTMzNzcxLDE0NDAwMDAwXX0=");
Line Deleted : user_pref("CT3299872.rematchagent-user-id.enc", "IjNhMjFkZTU4LTM2YTUtNDg3Mi1iZGZhLTMzNTU4YTQ1NGI4OSI=");
Line Deleted : user_pref("CT3299872.response_cache.enc", "eyJjaGFubmVsIjp7ImxpbmsiOiJodHRwOi8vZW4ud2lraXBlZGlhLm9yZy93aWtpL1dpbGxfU21pdGgiLCJkZXNjcmlwdGlvbiI6IlRydWZmbGVzIEJ5IENvbmR1aXQiLCJzb3VyY2UiOnsidXJsIjoiaHR0c[...]
Line Deleted : user_pref("CT3299872.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3299872.search.searchAppId", "130116395078024690");
Line Deleted : user_pref("CT3299872.search.searchCount", "2");
Line Deleted : user_pref("CT3299872.searchFromAddressBarEnabledByUser", "false");
Line Deleted : user_pref("CT3299872.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3299872.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3299872.searchSuggestEnabledByUser", "false");
Line Deleted : user_pref("CT3299872.searchUserMode", "2");
Line Deleted : user_pref("CT3299872.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3299872\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://InstalllConverter.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Installl Converter \"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3299872.serviceLayer_services_Configuration_lastUpdate", "1405546591443");
Line Deleted : user_pref("CT3299872.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1386543416380");
Line Deleted : user_pref("CT3299872.serviceLayer_services_appsMetadata_lastUpdate", "1386937961178");
Line Deleted : user_pref("CT3299872.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1386937960556");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.21.1.507_lastUpdate", "1383839090448");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.21.1.7_lastUpdate", "1383593407574");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.22.2.530_lastUpdate", "1384354888766");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.22.3.518_lastUpdate", "1385058027495");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.22.5.510_lastUpdate", "1386939704838");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.23.0.822_lastUpdate", "1396681185771");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.29.0.520_lastUpdate", "1401230737605");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.31.0.526_lastUpdate", "1401842868523");
Line Deleted : user_pref("CT3299872.serviceLayer_services_login_10.31.2.501_lastUpdate", "1405546583725");
Line Deleted : user_pref("CT3299872.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "1386772481594");
Line Deleted : user_pref("CT3299872.serviceLayer_services_menu_d32f45618f5a02bd965c56155a643855_lastUpdate", "1386772481255");
Line Deleted : user_pref("CT3299872.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1386937960771");
Line Deleted : user_pref("CT3299872.serviceLayer_services_searchAPI_lastUpdate", "1405546587605");
Line Deleted : user_pref("CT3299872.serviceLayer_services_serviceMap_lastUpdate", "1405546586082");
Line Deleted : user_pref("CT3299872.serviceLayer_services_setupAPI_lastUpdate", "1383213399366");
Line Deleted : user_pref("CT3299872.serviceLayer_services_toolbarContextMenu_lastUpdate", "1386937960625");
Line Deleted : user_pref("CT3299872.serviceLayer_services_toolbarSettings_lastUpdate", "1405546587834");
Line Deleted : user_pref("CT3299872.serviceLayer_services_translation_lastUpdate", "1405546587750");
Line Deleted : user_pref("CT3299872.settingsINI", true);
Line Deleted : user_pref("CT3299872.showToolbarPermission", "false");
Line Deleted : user_pref("CT3299872.smartbar.CTID", "CT3299872");
Line Deleted : user_pref("CT3299872.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3299872.smartbar.toolbarName", "Installl Converter ");
Line Deleted : user_pref("CT3299872.toolbarBornServerTime", "31-10-2013");
Line Deleted : user_pref("CT3299872.toolbarCurrentServerTime", "17-7-2014");
Line Deleted : user_pref("CT3299872.toolbarInstallDate", "31-10-2013 05:56:39");
Line Deleted : user_pref("CT3299872.toolbarLoginClientTime", "Thu Oct 31 2013 05:57:01 GMT-0400 (Eastern Standard Time)");
Line Deleted : user_pref("CT3299872.url_history0001", "%EE%FA%FA%F6%C0%B5%B5%FB%F9%B3%F3%ED%BC%B4%F3%E7%EF%F2%B4%FF%E7%EE%F5%F5%B4%E9%F5%F3%B5%F4%EB%F5%B5%F2%E7%FB%F4%E9%EE%C5%B4%F8%E7%F4%EA%C3%BE%F7%ED%F9%FB%B7%EE%[...]
Line Deleted : user_pref("CT3299872.url_history0001.enc", "aHR0cDovL3VzLW1nNi5tYWlsLnlhaG9vLmNvbS9uZW8vbGF1bmNoPy5yYW5kPThxZ3N1MWhwOWZnNW8jeXVjcy1oZWxwX2lubmVyOjo6Y2xpY2toYW5kbGVyOjo6MTM4NDYwNTgzNjc3OCwsLGh0dHA6Ly91[...]
Line Deleted : user_pref("CT3299872.userIdGenerationCounter", "1");
Line Deleted : user_pref("CT3299872_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1405546551511,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("browser.newtab.url", "hxxp://www.trovi.com/?gd=&ctid=CT3323128&octid=EB_ORIGINAL_CTID&ISID=M4F83FBFC-EF14-4984-A7DC-709BC7C89658&SearchSource=69&CUI=&SSPV=SE3CLRTYRY1_sp_ff&Lay=1&UM=6&UP=SP[...]
Line Deleted : user_pref("browser.search.defaultenginename", "Trovi search");
Line Deleted : user_pref("browser.search.order.1", "default-search.net");
Line Deleted : user_pref("browser.search.selectedEngine", "Trovi search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.trovi.com/?gd=&ctid=CT3323128&octid=EB_ORIGINAL_CTID&ISID=M4F83FBFC-EF14-4984-A7DC-709BC7C89658&SearchSource=55&CUI=&UM=6&UP=SP7B36871E-CD3A-4476-8BDC[...]
Line Deleted : user_pref("extensions.buenosearch.admin", false);
Line Deleted : user_pref("extensions.buenosearch.aflt", "babsst");
Line Deleted : user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");
Line Deleted : user_pref("extensions.buenosearch.autoRvrt", "false");
Line Deleted : user_pref("extensions.buenosearch.dfltLng", "en");
Line Deleted : user_pref("extensions.buenosearch.excTlbr", false);
Line Deleted : user_pref("extensions.buenosearch.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.buenosearch.id", "6a6a0018000000000000002369002154");
Line Deleted : user_pref("extensions.buenosearch.instlDay", "16215");
Line Deleted : user_pref("extensions.buenosearch.instlRef", "sst");
Line Deleted : user_pref("extensions.buenosearch.newTab", false);
Line Deleted : user_pref("extensions.buenosearch.prdct", "buenosearch");
Line Deleted : user_pref("extensions.buenosearch.prtnrId", "buenosearch");
Line Deleted : user_pref("extensions.buenosearch.rvrt", "false");
Line Deleted : user_pref("extensions.buenosearch.smplGrp", "none");
Line Deleted : user_pref("extensions.buenosearch.tb_url", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=6A6A002369002154&affID=128166&tt=220514_cnng&tsp=5258");
Line Deleted : user_pref("extensions.buenosearch.tlbrId", "base");
Line Deleted : user_pref("extensions.buenosearch.tlbrSrchUrl", "hxxp://www.buenosearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=6A6A002369002154&affID=128166&tt=220514_cnng&tsp=5258");
Line Deleted : user_pref("extensions.buenosearch.vrsn", "1.8.28.7");
Line Deleted : user_pref("extensions.buenosearch.vrsnTs", "1.8.28.720:55:45");
Line Deleted : user_pref("extensions.buenosearch.vrsni", "1.8.28.7");
Line Deleted : user_pref("extensions.hjMy.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||url.indexOf(\"sumorobo.ne[...]
Line Deleted : user_pref("extensions.sahtb.url.prefs.data", "<ToolbarPrefs>\r\n  <XMLVersion Number=\"{bdd09e8b-8dee-478c-9f4e-0db5e30597cc}\" />\r\n  <AnalyticsURL URL=\"hxxp://www.google-analytics.com/__utm.gif?ut[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.BUTTON_STRUCTURE", "[{\"b\":220117207,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":220117208,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.firstKnownVersion", "5.71.2.61517");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=3B878823-55D3-40A4-80D7-3E3C357C2259&n=77fdcb1b&p2=^CD^xdm147^S06939^us&si=292463");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.installDate", "2013121307");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.partnerId", "^CD^xdm147^S06939^us");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.partnerSubId", "292463");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.installation.toolbarId", "3B878823-55D3-40A4-80D7-3E3C357C2259");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.isCompliantUninstallImplementation", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.lastActivePing", "1405886075878");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.lastKnownVersion", "5.75.3.2306");
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.defaultSearch", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.homePageEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.keywordEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.options.tabEnabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.toolbarCollapsed", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._2pMembers_.weather.location", "44481");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.BUTTON_STRUCTURE", "[{\"b\":220182977,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":220182978,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.search.defaultenginename.savedPrev", "true");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.search.defaultenginename.tb", "Ask Web Search");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.search.selectedEngine.savedPrev", "true");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.search.selectedEngine.tb", "Ask Web Search");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.startup.homepage.savedPrev", "true");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.startup.homepage.tb", "hxxp://home.tb.ask.com/index.jhtml?ptb=4B4FF9BF-689F-41DA-935C-EFC7E6A42C03&n=77fdcb1b&p2=^AFA^xdm238^S06962^us&si=CD[...]
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.startup.page.savedPrev", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.browser.startup.page.tb", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.firstKnownVersion", "5.71.2.61529");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.homepage", "hxxp://home.tb.ask.com/index.jhtml?ptb=4B4FF9BF-689F-41DA-935C-EFC7E6A42C03&n=77fdcb1b&p2=^AFA^xdm238^S06962^us&si=CD13841");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.installation.installDate", "2013121307");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.installation.partnerId", "^AFA^xdm238^S06962^us");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.installation.partnerSubId", "CD13841");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.installation.toolbarId", "4B4FF9BF-689F-41DA-935C-EFC7E6A42C03");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.isCompliantUninstallImplementation", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.lastActivePing", "1394737013538");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.lastKnownVersion", "5.75.3.2307");
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.options.homePageEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.options.tabEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.toolbarCollapsed", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._5zMembers_.weather.location", "44481");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", false);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "couponalert@mindspark.com");
Line Deleted : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=492&aid=166&itype=a&ver=13337&tm=358&src=ds&p=");
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Deleted : user_pref("smartbar.machineId", "NWJFLXI+HGJHUMHZ9N3+IN6/NNTBIMOF2QUPGOVBMLB34PZXAWNANYYZHQHETXPEFJLZYVHOMWV6BDYNF10SUA");
Line Deleted : user_pref("valueApps.CT3299872./9B+7E+x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E,x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E-x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E.:2z527", "2423");
Line Deleted : user_pref("valueApps.CT3299872./9B+7E.:2z527.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E.x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E/x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E06CG5EL8:", "6E6C71716B70736D7074");
Line Deleted : user_pref("valueApps.CT3299872./9B+7E06CG5EL8:.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E06CG5EL;8I:K", "247E2D2F226A7472777771767973767A242F4B49474F42357D5D5C3D");
Line Deleted : user_pref("valueApps.CT3299872./9B+7E06CG5EL;8I:K.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E0x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E1x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E2x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ1F@=!LAD", "247E61393F236B25757070797A2B222D6F4250454E337B353E534D4A2E594E513E3540236055505853565049324B787B4E455033707361553E57484B5A515C6E6D717D6D2170644D6C[...]
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ1F@=!LAD.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ5?8L!LAD.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ6F@HHCA?Q&QFI.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ7FK;;\"MBE.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ7FK;KG#8QKEF)TIL.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ=<>::J>$ODG", "247E61393F236B25717171752A212C6E414F444D327A3449484A4646564A305B5053403742256257525A5558524B344D7A7D504752357275635740594B455C535E416D6E77634C6[...]
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ=<>::J>$ODG.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJ@H<H@AK8%PEH.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJBJ:K?=J?MJMMB*UJM.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJG9KDG<DH??'FDP.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJGC7JCJMIMNAP)TIL", "247E61393F236B256E7275752A212C6E414F444D327A34534F43564F565955595A4D5C35605558453C472A675C575F5A5D575039522023554C573A777A685C455E4F526158[...]
Line Deleted : user_pref("valueApps.CT3299872./9B+7E31;CJGC7JCJMIMNAP)TIL.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E3x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E4x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E5x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E6x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E7x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E8x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E9x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E:x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E;x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E<x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E=x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E>x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E?x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7E@x305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7EAx305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Line Deleted : user_pref("valueApps.CT3299872./9B+7EBE3G=;D9N9=D.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B+7EBx305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7ECx305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7EDx305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B+7Etx305.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872./9B-0?3G>D", "396E3C706B6F72737A757845772076794D4A257E2021252A7E2055272B2A2E5A5B2E5E2D");
Line Deleted : user_pref("valueApps.CT3299872./9B-0?3G>D.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B-0?3G@6:5;", "");
Line Deleted : user_pref("valueApps.CT3299872./9B-0?3G@6:5;.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B-0?3GFA7EF", "2B2E2C3D");
Line Deleted : user_pref("valueApps.CT3299872./9B-0?3GFA7EF.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697861");
Line Deleted : user_pref("valueApps.CT3299872./9B-3=3ECCJA=F>.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
Line Deleted : user_pref("valueApps.CT3299872./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
Line Deleted : user_pref("valueApps.CT3299872./9B3=>@44I48?.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B5BA==9CJAG", "3C6D3F3D707441427A787545484B79767D784D4F7B");
Line Deleted : user_pref("valueApps.CT3299872./9B5BA==9CJAG.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B6B11G4C56B>F;P;ANR@P", "6E6C71716B70736D7075727476");
Line Deleted : user_pref("valueApps.CT3299872./9B6B11G4C56B>F;P;ANR@P.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
Line Deleted : user_pref("valueApps.CT3299872./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B9643G3/9E", "6A");
Line Deleted : user_pref("valueApps.CT3299872./9B9643G3/9E.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B;45>:BI9I7IE", "2B2E2C3D");
Line Deleted : user_pref("valueApps.CT3299872./9B;45>:BI9I7IE.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B<:222H64<", "393F352F3E");
Line Deleted : user_pref("valueApps.CT3299872./9B<:222H64<.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B<:222H64<L8DAJ", "6D70706F7673747975772A797372797A75207C");
Line Deleted : user_pref("valueApps.CT3299872./9B<:222H64<L8DAJ.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B=+03EH8H8J?:", "4443");
Line Deleted : user_pref("valueApps.CT3299872./9B=+03EH8H8J?:.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Line Deleted : user_pref("valueApps.CT3299872./9B?+E2A52D8.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9B?B0D:8AJ62<H", "6D");
Line Deleted : user_pref("valueApps.CT3299872./9B?B0D:8AJ62<H.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872./9BA@0<0BI6A7GN:6@L?", "6C");
Line Deleted : user_pref("valueApps.CT3299872./9BA@0<0BI6A7GN:6@L?.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.PG_ENABLE", "74727565");
Line Deleted : user_pref("valueApps.CT3299872.PG_ENABLE.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.SF_JUST_INSTALLED", "46414C5345");
Line Deleted : user_pref("valueApps.CT3299872.SF_JUST_INSTALLED.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.SF_USER_ID", "6369645F33313130323031333535373638373636363431");
Line Deleted : user_pref("valueApps.CT3299872.SF_USER_ID.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872._key_cl_active", "61656230356563652D666365612D343765312D623962652D653130396330386536666137");
Line Deleted : user_pref("valueApps.CT3299872._key_cl_active.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.cb_experience_000", "313334");
Line Deleted : user_pref("valueApps.CT3299872.cb_experience_000.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.cb_firstuse0100", "31");
Line Deleted : user_pref("valueApps.CT3299872.cb_firstuse0100.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.cb_user_id_000", "434232333133323330373939385F313338353133383332393434385F46697265666F78");
Line Deleted : user_pref("valueApps.CT3299872.cb_user_id_000.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.cbfirsttime", "546875204F637420333120323031332030353A35373A303620474D542D3034303020284561737465726E205374616E646172642054696D6529");
Line Deleted : user_pref("valueApps.CT3299872.cbfirsttime.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.discover-experiments-photopop", "7B226E616D65223A2270686F746F706F705F6E61222C2276657273696F6E223A31307D");
Line Deleted : user_pref("valueApps.CT3299872.discover-experiments-photopop.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.discover-periodic-reports", "7B2270696E675F30223A5B313338363933393130313436392C31343430303030305D7D");
Line Deleted : user_pref("valueApps.CT3299872.discover-periodic-reports.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.discover-user-id", "2232326563336232382D353636622D343136652D396234662D64623337333466356166303222");
Line Deleted : user_pref("valueApps.CT3299872.discover-user-id.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.ground-country-code", "22555322");
Line Deleted : user_pref("valueApps.CT3299872.ground-country-code.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.hover_counter", "33");
Line Deleted : user_pref("valueApps.CT3299872.hover_counter.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.impression_counter", "3130");
Line Deleted : user_pref("valueApps.CT3299872.impression_counter.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.impression_session_counter", "3333");
Line Deleted : user_pref("valueApps.CT3299872.impression_session_counter.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.impression_session_id", "2235393262623466342D346365342D343137332D383234312D66306637616135356634323722");
Line Deleted : user_pref("valueApps.CT3299872.impression_session_id.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.impression_session_last_active", "31343031323330383834363137");
Line Deleted : user_pref("valueApps.CT3299872.impression_session_last_active.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appStateReportTime", "31343031383432393635323938");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appStateReportTime.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_ACplus", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_ACplus.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Clarity_Active", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Clarity_Active.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_CouponBuddy", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_CouponBuddy.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Discover", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Discover.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Easytobook", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Easytobook.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Easytobook_targeted", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Easytobook_targeted.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Easytobookcars", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Easytobookcars.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Find-a-Pro", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_Find-a-Pro.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_JobsMiner", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_JobsMiner.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_PiclickV2-WebSearch", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_PiclickV2-WebSearch.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_PriceGong", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_PriceGong.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_WindowShopper", "6F6E");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appState_WindowShopper.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appsConfig.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appsDefaultEnabled", "6E756C6C");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_appsDefaultEnabled.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_currentBadgeValue", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_currentBadgeValue.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_currentVersion", "312E31332E302E3137");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_currentVersion.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_existingUsersRecoveryDone", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_existingUsersRecoveryDone.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_first_time", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_first_time.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_globalKeysMigratedToLocalStorage", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_globalKeysMigratedToLocalStorage.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_installer_preapproved", "54525545");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_installer_preapproved.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_lastLoginTime", "31343031383432393636303439");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_lastLoginTime.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_localization.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_migrated_from_ls", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_migrated_from_ls.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_newApps", "5B5D");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_newApps.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_new_welcome_experience", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_new_welcome_experience.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_pgUnloadedOnce", "74727565");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_pgUnloadedOnce.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_settings1.10.4.0.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_settings1.11.4.2.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_settings1.11.5.1.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_settings1.12.0.5.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_settings1.13.0.17.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_showWelcomeGadget", "66616C7365");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_showWelcomeGadget.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_stamp", "313034335F30");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_stamp.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_userBornDate", "4E2F41");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_userBornDate.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_userId", "61353461666637642D356463662D343336382D626566322D333831393161343865343232");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_userId.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_user_approval_interacted", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_user_approval_interacted.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_welcomeDialogMode", "31");
Line Deleted : user_pref("valueApps.CT3299872.mam_gk_welcomeDialogMode.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchGround-city", "224E455720594F524B204349545922");
Line Deleted : user_pref("valueApps.CT3299872.rematchGround-city.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchGround-country-code", "22555322");
Line Deleted : user_pref("valueApps.CT3299872.rematchGround-country-code.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchGround-region", "224E455720594F524B22");
Line Deleted : user_pref("valueApps.CT3299872.rematchGround-region.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchGround.upstairs", "7B22687474703A2F2F66617374636F6E74656E742E636F6E647569742E636F6D2F646F776E6C6F61645F6F66666572732E68746D6C3F637469643D4354333239393837327E62313[...]
Line Deleted : user_pref("valueApps.CT3299872.rematchGround.upstairs.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-is-test-user", "66616C7365");
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-is-test-user.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-matkot-user-id", "22313339363838303035323136343538323334353622");
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-matkot-user-id.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-periodic-reports", "7B2270696E675F30223A5B313430313834323937303131322C31343430303030305D7D");
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-periodic-reports.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-user-id", "2233613231646535382D333661352D343837322D626466612D33333535386134353462383922");
Line Deleted : user_pref("valueApps.CT3299872.rematchagent-user-id.storedInFile", false);
Line Deleted : user_pref("valueApps.CT3299872.response_cache.storedInFile", true);
Line Deleted : user_pref("valueApps.CT3299872.url_history0001.storedInFile", true);
 
-\\ Google Chrome v34.0.1847.131
 
[ File : C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
Deleted [Search Provider] : hxxp://search.aol.com/aol/search?query={searchTerms}
Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3328693&octid=EB_ORIGINAL_CTID&ISID=M1DBB8517-A489-446D-9807-44477DC14BF6&SearchSource=58&CUI=&UM=5&UP=SPEBDF9E31-D69D-448D-A5D1-3B55557A9BD4&q={searchTerms}&SSPV=
Deleted [Search Provider] : hxxp://www.default-search.net/search?sid=492&aid=166&itype=a&ver=13337&tm=358&src=ds&p={searchTerms}
Deleted [Startup_urls] : hxxp://www.default-search.net?sid=492&aid=166&itype=a&ver=13337&tm=358&src=hmp
Deleted [Extension] : acfoobbgoakpihljnfedbcfaipcdlfhk
Deleted [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Deleted [Extension] : flpcjncodpafbgdpnkljologafpionhb
 
*************************
 
AdwCleaner[R0].txt - [73452 octets] - [30/07/2014 15:19:47]
AdwCleaner[S0].txt - [73668 octets] - [30/07/2014 15:23:02]
 
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [73729 octets] ##########
 
 

Attached Files



#4 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 31 July 2014 - 10:40 AM

1.

Uninstalling A Program Through "add/remove"

Click "start" on the taskbar and then click on the "Control Panel" icon.
Please doubleclick the "Add or Remove Programs" icon
A list of programs installed will be "populated" this may take a bit of time.
If they exist, uninstall the following by clicking on the following entries and selecting "remove":

BlockAndSurf
Buzzdock
Highlightly
Rocket
System Optimizer Pro


Additional instructions can be found here if needed.

 

 

 

2.

Download attached fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

 

Attached File  fixlist.txt   6.86KB   6 downloads


Edited by fireman4it, 31 July 2014 - 10:45 AM.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#5 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 04 August 2014 - 04:23 PM

Hello.

Are you still there?

If you are please follow the instructions in my previous post.

If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.

Please reply back telling us so. If you don't reply within 1-3 days the topic will need to be closed.

Thanks for understanding :)

With Regards,
fireman4it


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#6 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 06 August 2014 - 03:52 PM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#7 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 10 August 2014 - 05:36 PM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#8 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 10 August 2014 - 05:37 PM

This topic has been re-opened at the request of the person who originally posted.

" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#9 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 10 August 2014 - 05:37 PM

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#10 cplikerd

cplikerd
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 10 August 2014 - 08:19 PM

I did the fix, here is the logAttached File  Fixlog.txt   18.01KB   1 downloads



#11 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 10 August 2014 - 08:25 PM

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#12 cplikerd

cplikerd
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 10 August 2014 - 09:59 PM

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:10-08-2014 01
Ran by hatfield (administrator) on HATFIELD-PC on 10-08-2014 22:56:29
Running from C:\Users\hatfield\Desktop
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: English (United States)
Internet Explorer Version 9
Boot Mode: Normal
 
The only official download link for FRST:
Download link from any site other than Bleeping Computer is unpermitted or outdated.
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(iolo technologies, LLC) C:\Program Files\iolo\System Mechanic Professional\ioloGovernor.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
() C:\Program Files\Lexmark 5400 Series\lxctmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Lexmark International Inc.) C:\Program Files\Lexmark 5400 Series\ezprint.exe
(SupportSoft, Inc.) C:\Program Files\Dell Support Center\bin\sprtcmd.exe
(Avanquest Software ) C:\Program Files\Digital Line Detect\DLG.exe
( ) C:\Windows\System32\lxctcoms.exe
(SupportSoft, Inc.) C:\Program Files\Dell Support Center\bin\sprtsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
() C:\Program Files\webget\updatewebget.exe
(Commtouch, Inc.) C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe
(Commtouch, Inc.) C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
 
 
==================== Registry (Whitelisted) ==================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
Winlogon\Notify\GoToAssist: C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-774631748-2552427010-850271914-1000\...\Run: [DellSupportCenter] => C:\Program Files\Dell Support Center\bin\sprtcmd.exe [206064 2009-05-21] (SupportSoft, Inc.)
HKU\S-1-5-21-774631748-2552427010-850271914-1000\...\MountPoints2: {6327fb9d-4abb-11df-84f0-0021704adcd5} - G:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Digital Line Detect.lnk
ShortcutTarget: Digital Line Detect.lnk -> C:\Program Files\Digital Line Detect\DLG.exe (Avanquest Software )
BootExecute: autocheck autochk * autocheck smrgdf C:\Users\hatfield\AppData\Roaming\iolo\
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=6081129
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.yahoo.com/
BHO: Lexmark Toolbar -> {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -> C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: DownloadGuardBHO Class -> {20C1A7F0-528E-444F-BAC5-5804A61CCA7F} -> C:\Program Files\Lavasoft\Download Guard for Internet Explorer\DownloadGuardBHO.dll (Lavasoft AB                                         )
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - &Links - {F2CF5485-4E02-4F68-819C-B92DE9277049} - C:\Windows\system32\ieframe.dll (Microsoft Corporation)
Handler: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - C:\Program Files\Cozi Express\CoziProtocolHandler.dll (Cozi Group, Inc.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 205.171.2.226
 
FireFox:
========
FF ProfilePath: C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\browser\plugins\npMozCouponPrinter.dll (Coupons, Inc.)
FF Extension: Adblock Plus - C:\Users\hatfield\AppData\Roaming\Mozilla\Firefox\Profiles\wkgis1hn.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-02-07]
 
Chrome: 
=======
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-08-09]
CHR Extension: (Adblock Plus) - C:\Users\hatfield\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-07-19]
 
========================== Services (Whitelisted) =================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
S4 ioloSystemService; C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe [1168960 2013-12-03] (iolo technologies, LLC)
R2 lxct_device; C:\Windows\system32\lxctcoms.exe [537520 2007-03-19] ( )
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 sprtsvc_dellsupportcenter; C:\Program Files\Dell Support Center\bin\sprtsvc.exe [201968 2008-08-14] (SupportSoft, Inc.)
R2 Update webget; C:\Program Files\webget\updatewebget.exe [321816 2014-07-30] ()
R2 vseamps; C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe [97120 2012-08-24] (Commtouch, Inc.)
R2 vsedsps; C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe [97120 2012-08-24] (Commtouch, Inc.)
S3 vseqrts; C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe [142176 2012-08-24] (Commtouch, Inc.)
 
==================== Drivers (Whitelisted) ====================
 
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
 
R0 amacpi; C:\Windows\System32\DRIVERS\null.sys [4608 2008-01-20] (Microsoft Corporation)
R2 AMP; C:\Windows\system32\Drivers\amp.sys [137568 2012-08-24] (Commtouch, Inc.)
R2 AMPSE; C:\Windows\system32\Drivers\ampse.sys [1210208 2012-08-24] (Commtouch, Inc.)
R1 FileDisk; C:\Windows\system32\Drivers\FileDisk.sys [9341 2013-12-03] (iolo technologies, LLC (based on original work by Bo Brantén)) [File not signed]
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [47249 2006-05-18] (FTDI Ltd.)
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [64288 2010-08-15] (Lavasoft AB)
R3 netr73; C:\Windows\System32\DRIVERS\WUSB54GCx86.sys [256000 2007-03-12] (Ralink Technology Inc.)
R2 PDFsFilter; C:\Windows\System32\DRIVERS\PDFsFilter.sys [68464 2013-12-03] (Raxco Software, Inc.)
R1 SBRE; C:\Windows\system32\drivers\SBREdrv.sys [95024 2010-08-15] (Sunbelt Software)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
 
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
 
 
==================== One Month Created Files and Folders ========
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-08-10 22:56 - 2014-08-10 22:56 - 00000000 ____D () C:\Users\hatfield\Desktop\FRST-OlderVersion
2014-08-09 14:47 - 2014-08-09 14:47 - 00000000 ____D () C:\Program Files\redConveruter
2014-08-09 14:46 - 2014-08-09 14:46 - 00000000 __SHD () C:\Windows\system32\AI_RecycleBin
2014-07-30 15:59 - 2014-08-10 22:56 - 00010579 _____ () C:\Users\hatfield\Desktop\FRST.txt
2014-07-30 15:58 - 2014-08-10 22:56 - 00000000 ____D () C:\FRST
2014-07-30 15:57 - 2014-08-10 22:56 - 01091072 _____ (Farbar) C:\Users\hatfield\Desktop\FRST.exe
2014-07-30 15:56 - 2014-07-30 15:56 - 00001817 _____ () C:\Users\hatfield\Desktop\JRT.txt
2014-07-30 15:51 - 2014-07-30 15:51 - 00000000 ____D () C:\Windows\ERUNT
2014-07-30 15:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-07-30 15:19 - 2014-07-30 15:26 - 00000000 ____D () C:\AdwCleaner
2014-07-30 15:19 - 2014-07-30 15:19 - 01016261 _____ (Thisisu) C:\Users\hatfield\Downloads\JRT.exe
2014-07-30 15:18 - 2014-07-30 15:19 - 01365551 _____ () C:\Users\hatfield\Downloads\AdwCleaner.exe
2014-07-30 15:14 - 2014-07-30 15:14 - 00000042 _____ () C:\Users\hatfield\AppData\Roaming\WB.CFG
2014-07-29 21:57 - 2014-07-29 21:57 - 00009455 _____ () C:\Users\hatfield\Documents\Attach.txt
2014-07-29 21:40 - 2014-07-29 21:40 - 00009455 _____ () C:\Users\hatfield\Desktop\attach.txt
2014-07-29 21:40 - 2014-07-29 21:39 - 00019649 _____ () C:\Users\hatfield\Desktop\dds.txt
2014-07-29 21:37 - 2014-07-29 21:38 - 00688992 ____R (Swearware) C:\Users\hatfield\Downloads\dds.com
2014-07-29 20:56 - 2014-07-29 20:56 - 00000000 ____D () C:\Users\hatfield\AppData\Roaming\uTorrent
2014-07-29 20:55 - 2014-07-29 20:56 - 01939024 _____ (BitTorrent Inc.) C:\Users\hatfield\Downloads\uTorrent.exe
2014-07-23 06:11 - 2014-07-23 06:11 - 00001924 _____ () C:\Users\hatfield\Desktop\Rocket.lnk
2014-07-23 06:10 - 2014-07-23 06:10 - 00000266 _____ () C:\Users\hatfield\Desktop\Cut the Rope.url
2014-07-20 16:17 - 2014-07-23 06:14 - 00000377 _____ () C:\Windows\system32\ff.bin
2014-07-20 16:09 - 2014-07-20 16:11 - 00270080 _____ () C:\Users\hatfield\Downloads\Setup (4).exe
2014-07-20 16:02 - 2014-07-20 16:02 - 00000546 _____ () C:\Windows\system32\schtasks.bin
2014-07-19 17:23 - 2014-07-19 17:24 - 00776056 _____ (download manager ) C:\Users\hatfield\Downloads\Adblock Setup.exe
2014-07-19 15:08 - 2014-07-19 15:09 - 00000000 ____D () C:\ProgramData\UAB
2014-07-19 15:05 - 2014-07-29 20:45 - 00018872 _____ () C:\Windows\system32\Drivers\SPPD.sys
2014-07-19 15:00 - 2014-07-19 15:01 - 00776104 _____ (AirInstaller ) C:\Users\hatfield\Downloads\Setup (3).exe
2014-07-19 14:51 - 2014-07-19 14:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-07-16 18:56 - 2014-06-06 20:05 - 12353024 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-16 18:56 - 2014-06-06 19:25 - 09711616 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-16 18:56 - 2014-06-06 19:12 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-16 18:56 - 2014-06-06 19:04 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-16 18:56 - 2014-06-06 19:03 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-16 18:56 - 2014-06-06 19:02 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-16 18:56 - 2014-06-06 19:00 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-07-16 18:56 - 2014-06-06 18:58 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-16 18:56 - 2014-06-06 18:57 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-16 18:56 - 2014-06-06 18:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-07-16 18:56 - 2014-06-06 18:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-16 18:56 - 2014-06-06 18:54 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-16 18:56 - 2014-06-06 18:54 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-16 18:56 - 2014-06-06 18:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-16 18:56 - 2014-06-06 18:54 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-07-16 18:56 - 2014-06-06 18:53 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-16 18:56 - 2014-06-06 18:53 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-16 18:56 - 2014-06-06 18:53 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-07-16 18:56 - 2014-06-06 18:52 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-16 18:56 - 2014-06-06 18:51 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-07-16 18:56 - 2014-06-06 18:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-16 18:56 - 2014-06-06 04:59 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-16 18:56 - 2014-05-30 02:53 - 00273408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-16 18:55 - 2014-06-06 20:19 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
 
==================== One Month Modified Files and Folders =======
 
(If an entry is included in the fixlist, the file\folder will be moved.)
 
2014-08-10 22:57 - 2014-07-30 15:59 - 00010579 _____ () C:\Users\hatfield\Desktop\FRST.txt
2014-08-10 22:56 - 2014-08-10 22:56 - 00000000 ____D () C:\Users\hatfield\Desktop\FRST-OlderVersion
2014-08-10 22:56 - 2014-07-30 15:58 - 00000000 ____D () C:\FRST
2014-08-10 22:56 - 2014-07-30 15:57 - 01091072 _____ (Farbar) C:\Users\hatfield\Desktop\FRST.exe
2014-08-10 22:05 - 2013-08-07 16:20 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-10 21:58 - 2013-01-30 18:03 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-10 21:28 - 2008-11-29 11:35 - 01417455 _____ () C:\Windows\WindowsUpdate.log
2014-08-10 15:05 - 2013-08-07 16:20 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-10 08:21 - 2006-11-02 06:33 - 00825266 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-10 08:18 - 2006-11-02 08:52 - 00154078 _____ () C:\Windows\setupact.log
2014-08-09 21:31 - 2006-11-02 08:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-09 21:31 - 2006-11-02 08:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-09 15:07 - 2013-08-07 16:21 - 00001973 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-09 14:58 - 2009-01-10 16:29 - 00000000 ____D () C:\Program Files\Lx_cats
2014-08-09 14:58 - 2006-11-02 09:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-09 14:57 - 2014-05-19 03:40 - 00000000 ____D () C:\ProgramData\redConveruter
2014-08-09 14:57 - 2006-11-02 08:47 - 00379584 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-09 14:56 - 2006-11-02 09:01 - 00032654 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-09 14:52 - 2006-11-02 07:18 - 00000000 ___RD () C:\Users\Public
2014-08-09 14:47 - 2014-08-09 14:47 - 00000000 ____D () C:\Program Files\redConveruter
2014-08-09 14:47 - 2014-05-19 03:40 - 00000000 ____D () C:\ProgramData\b32cd0ebd08e7cb9
2014-08-09 14:46 - 2014-08-09 14:46 - 00000000 __SHD () C:\Windows\system32\AI_RecycleBin
2014-08-09 14:44 - 2014-04-17 05:06 - 00000258 __RSH () C:\ProgramData\ntuser.pol
2014-07-30 15:56 - 2014-07-30 15:56 - 00001817 _____ () C:\Users\hatfield\Desktop\JRT.txt
2014-07-30 15:51 - 2014-07-30 15:51 - 00000000 ____D () C:\Windows\ERUNT
2014-07-30 15:48 - 2008-01-20 22:47 - 01122860 _____ () C:\Windows\PFRO.log
2014-07-30 15:31 - 2014-05-24 20:50 - 00000000 ____D () C:\Program Files\webget
2014-07-30 15:26 - 2014-07-30 15:19 - 00000000 ____D () C:\AdwCleaner
2014-07-30 15:23 - 2006-11-02 06:23 - 00000321 _____ () C:\Windows\win.ini
2014-07-30 15:19 - 2014-07-30 15:19 - 01016261 _____ (Thisisu) C:\Users\hatfield\Downloads\JRT.exe
2014-07-30 15:19 - 2014-07-30 15:18 - 01365551 _____ () C:\Users\hatfield\Downloads\AdwCleaner.exe
2014-07-30 15:14 - 2014-07-30 15:14 - 00000042 _____ () C:\Users\hatfield\AppData\Roaming\WB.CFG
2014-07-30 12:23 - 2014-04-20 10:01 - 00778240 _____ () C:\Users\hatfield\AppData\Local\ChromeHitoryDB
2014-07-30 12:23 - 2014-04-20 09:29 - 00000000 ____D () C:\Program Files\Flash Update
2014-07-29 21:57 - 2014-07-29 21:57 - 00009455 _____ () C:\Users\hatfield\Documents\Attach.txt
2014-07-29 21:40 - 2014-07-29 21:40 - 00009455 _____ () C:\Users\hatfield\Desktop\attach.txt
2014-07-29 21:39 - 2014-07-29 21:40 - 00019649 _____ () C:\Users\hatfield\Desktop\dds.txt
2014-07-29 21:38 - 2014-07-29 21:37 - 00688992 ____R (Swearware) C:\Users\hatfield\Downloads\dds.com
2014-07-29 20:56 - 2014-07-29 20:56 - 00000000 ____D () C:\Users\hatfield\AppData\Roaming\uTorrent
2014-07-29 20:56 - 2014-07-29 20:55 - 01939024 _____ (BitTorrent Inc.) C:\Users\hatfield\Downloads\uTorrent.exe
2014-07-29 20:45 - 2014-07-19 15:05 - 00018872 _____ () C:\Windows\system32\Drivers\SPPD.sys
2014-07-23 06:14 - 2014-07-20 16:17 - 00000377 _____ () C:\Windows\system32\ff.bin
2014-07-23 06:14 - 2010-01-01 15:06 - 00000000 ____D () C:\ProgramData\TEMP
2014-07-23 06:11 - 2014-07-23 06:11 - 00001924 _____ () C:\Users\hatfield\Desktop\Rocket.lnk
2014-07-23 06:10 - 2014-07-23 06:10 - 00000266 _____ () C:\Users\hatfield\Desktop\Cut the Rope.url
2014-07-20 16:11 - 2014-07-20 16:09 - 00270080 _____ () C:\Users\hatfield\Downloads\Setup (4).exe
2014-07-20 16:02 - 2014-07-20 16:02 - 00000546 _____ () C:\Windows\system32\schtasks.bin
2014-07-19 17:24 - 2014-07-19 17:23 - 00776056 _____ (download manager ) C:\Users\hatfield\Downloads\Adblock Setup.exe
2014-07-19 15:09 - 2014-07-19 15:08 - 00000000 ____D () C:\ProgramData\UAB
2014-07-19 15:01 - 2014-07-19 15:00 - 00776104 _____ (AirInstaller ) C:\Users\hatfield\Downloads\Setup (3).exe
2014-07-19 14:51 - 2014-07-19 14:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstr_01009.Wdf
2014-07-18 03:08 - 2013-08-11 09:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-18 03:04 - 2006-11-02 06:24 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-07-17 03:31 - 2014-01-12 14:25 - 00000392 _____ () C:\Windows\system32\iolo.ini.txt
2014-07-17 03:26 - 2006-11-02 08:37 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-17 03:08 - 2009-01-12 18:52 - 00000000 ____D () C:\ProgramData\Microsoft Help
 
==================== Bamital & volsnap Check =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2014-08-09 15:05
 
==================== End Of Log ============================
 
 
Additional scan result of Farbar Recovery Scan Tool (x86) Version:30-07-2014
Ran by hatfield at 2014-07-30 16:01:30
Running from C:\Users\hatfield\Downloads
Boot Mode: Normal
==========================================================
 
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
 Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
ABBYY FineReader 6.0 Sprint (HKLM\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.1784.41616 - ABBYY Software House)
Acrobat.com (HKLM\...\{6D8D64BE-F500-55B6-705D-DFD08AFE0624}) (Version: 1.7.186 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.1.8210 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.1.8210 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 (HKLM\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM\...\Adobe Shockwave Player) (Version: 11.5.7.609 - Adobe Systems, Inc.)
AVSDK5 (Version: 5.3.20 - Commtouch, Inc.) Hidden
BlockAndSurf (HKLM\...\112C0758-8CE0-8D34-229E-2635FE2B830D) (Version:  - BlockAndSurf-software) <==== ATTENTION
Browser Address Error Redirector (HKLM\...\{62230596-37E5-4618-A329-0D21F529A86F}) (Version: 1.00.0000 - Dell)
Business Contact Manager for Outlook 2007 SP2 (HKLM\...\Business Contact Manager) (Version: 3.0.8619.1 - Microsoft Corporation)
Business Contact Manager for Outlook 2007 SP2 (Version: 3.0.8619.1 - Microsoft Corporation) Hidden
Buzzdock (HKLM\...\{ac225167-00fc-452d-94c5-bb93600e7d9a}) (Version:  - Alactro LLC) <==== ATTENTION
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Conexant D850 PCI V.92 Modem (HKLM\...\CNXT_MODEM_PCI_HSF) (Version: 7.74.00 - Conexant)
Coupon Printer for Windows (HKLM\...\Coupon Printer for Windows5.0.0.4) (Version: 5.0.0.4 - Coupons.com Incorporated)
Cozi (HKLM\...\{7456BBA3-642F-4E59-9F89-7639977D7C39}) (Version: 1.0.3220.15315 - Cozi Group, Inc.)
Dell Dock (HKLM\...\{F6CB42B9-F033-4152-8813-FF11DA8E6A78}) (Version: 1.0.0 - Dell)
Dell Support Center (Support Software) (HKLM\...\{E3BFEE55-39E2-4BE0-B966-89FE583822C1}) (Version: 2.2.09085 - Dell)
Digital Line Detect (HKLM\...\{E646DCF0-5A68-11D5-B229-002078017FBF}) (Version: 1.21 - BVRP Software, Inc)
Download Guard for Internet Explorer (HKLM\...\Download Guard for Internet Explorer) (Version:  - Lavasoft)
Download Guard for Internet Explorer (Version: 1.0 - Lavasoft) Hidden
Driver Detective (HKLM\...\{5D6D605B-E4B7-490B-A794-9284BC3D2A8B}) (Version: 8.1 - PC Drivers HeadQuarters)
EDocs (HKLM\...\{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}) (Version:  - )
FTDI USB Serial Converter Drivers (HKLM\...\FTDICOMM) (Version: 2.00.00 - FTDI Ltd)
GearDrvs (Version: 1.00.0000 - GEAR Software) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Update Helper (Version: 1.3.23.9 - Google Inc.) Hidden
GoToAssist 8.0.0.514 (HKLM\...\GoToAssist) (Version:  - )
Highlightly (HKLM\...\Highlightly) (Version: 1.9.0.3 - Highlightly) <==== ATTENTION
iolo technologies' System Mechanic Professional (HKLM\...\{BBD3F66B-1180-4785-B679-3F91572CD3B4}_is1) (Version: 12.5.0 - iolo technologies, LLC)
Java™ 6 Update 7 (HKLM\...\{3248F0A8-6813-11D6-A77B-00B0D0160070}) (Version: 1.6.0.70 - Sun Microsystems, Inc.)
Lexmark 5400 Series (HKLM\...\Lexmark 5400 Series) (Version:  - Lexmark International, Inc.)
Lexmark Toolbar (HKLM\...\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}) (Version:  - )
Linksys Compact Wireless-G USB Adapter Driver - WUSB54GC (HKLM\...\{F855C3AE-992D-4B84-A09D-07103CDCDAC2}) (Version: 1.0 - Linksys, A Division of Cisco Systems, Inc.)
MaxiLink (HKLM\...\{58BEE9AE-625D-4177-BC5E-E6E0794C092E}) (Version: 1.03.0000 - Cen-Tech)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office 2003 Web Components (HKLM\...\{90A40409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Accounting 2008 (HKLM\...\Microsoft Office Accounting 2008) (Version: 3.0.8627.1 - Microsoft Corporation)
Microsoft Office Accounting 2008 (Version: 3.0.8627.1 - Microsoft Corporation) Hidden
Microsoft Office Accounting 2008 Equifax Addin (HKLM\...\{0C2AF762-0565-4C91-9F55-B8B53BB82A38}) (Version: 3.0.8231.0 - Microsoft Corporation)
Microsoft Office Accounting 2008 Fixed Asset Manager (HKLM\...\{E3DF6916-2472-43D9-8B3C-9F2F0AAB01B5}) (Version: 3.0.8231.0 - Microsoft Corporation)
Microsoft Office Accounting 2008 PayPal Addin (HKLM\...\{B391EECE-DFEA-4FC5-9D40-47FA43E2DBE6}) (Version: 3.0.8231.0 - Microsoft Corporation)
Microsoft Office Accounting ADP Payroll Addin (HKLM\...\{5FA793A6-0071-42C1-9355-8F69A428C44F}) (Version: 0.0.0.0 - ADP)
Microsoft Office Excel MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Spanish) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Small Business Connectivity Components (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Ultimate 2007 (HKLM\...\ULTIMATER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Ultimate 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Tools Express Edition (Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Works (HKLM\...\{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}) (Version: 9.7.0621 - Microsoft Corporation)
Modem Diagnostic Tool (HKLM\...\{294EAADF-E50F-4DD8-AD8D-19587EA10512}) (Version: 1.0.24.0 - Dell)
Mozilla Firefox 29.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 29.0.1 (x86 en-US)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
NetWaiting (HKLM\...\{3F92ABBB-6BBF-11D5-B229-002078017FBF}) (Version: 2.5.53 - BVRP Software, Inc)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version:  - )
NVIDIANetworkDiagnostic (HKLM\...\InstallShield_{EFAD4066-CAF3-4B27-9669-12EED352C376}) (Version: 1.00.0000 - NVIDIA Corporation)
NVIDIANetworkDiagnostic (Version: 1.00.0000 - NVIDIA Corporation) Hidden
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
Pokémon Trading Card Game Online (HKLM\...\{D81F39D4-FDA9-4356-92B1-16081D8BF71A}) (Version: 1.0.0 - The Pokémon Company International)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version:  - )
redConveruter (HKLM\...\{CF415FA4-2949-3B69-3A20-76D08DF0F877}) (Version:  - RedConnveerter)
Rocket (HKCU\...\Rocket) (Version: 31.0.1650.23 - Rocket) <==== ATTENTION
Roxio Creator Audio (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Copy (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Data (Version: 3.7.0 - Roxio) Hidden
Roxio Creator DE (HKLM\...\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}) (Version: 10.1 - Roxio)
Roxio Creator DE (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Tools (Version: 3.7.0 - Roxio) Hidden
Roxio Express Labeler 3 (Version: 3.2.1 - Roxio) Hidden
Roxio Update Manager (Version: 6.0.0 - Roxio) Hidden
Spelling Dictionaries Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
StormFall (HKCU\...\StormFall) (Version:  - StormFall)
System Mechanic 12 Professional (Version: 12.5.0 - ) Hidden
System Optimizer Pro (HKLM\...\System Optimizer Pro) (Version: 1.0 - 383 Media, Inc.) <==== ATTENTION
TomTom HOME (HKLM\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Update for Microsoft Office 2007 Help for Common Features (KB963673) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{AB365889-0395-4FAD-B702-CA5985D53D42}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Access 2007 Help (KB963663) (HKLM\...\{90120000-0015-0409-0000-0000000FF1CE}_ULTIMATER_{6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}) (Version:  - Microsoft)
Update for Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0409-0000-0000000FF1CE}_ULTIMATER_{199DF7B6-169C-448C-B511-1054101BE9C9}) (Version:  - Microsoft)
Update for Microsoft Office Infopath 2007 Help (KB963662) (HKLM\...\{90120000-0044-0409-0000-0000000FF1CE}_ULTIMATER_{716B81B8-B13C-41DF-8EAC-7A2F656CAB63}) (Version:  - Microsoft)
Update for Microsoft Office OneNote 2007 Help (KB963670) (HKLM\...\{90120000-00A1-0409-0000-0000000FF1CE}_ULTIMATER_{2744EF05-38E1-4D5D-B333-E021EDAEA245}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{ED38F8A3-4F61-494E-8BCA-E3AC7760C924}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{0451F231-E3E3-4943-AB9F-58EB96171784}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM\...\{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version:  - Microsoft)
Update for Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0409-0000-0000000FF1CE}_ULTIMATER_{397B1D4F-ED7B-4ACA-A637-43B670843876}) (Version:  - Microsoft)
Update for Microsoft Office Publisher 2007 Help (KB963667) (HKLM\...\{90120000-0019-0409-0000-0000000FF1CE}_ULTIMATER_{2E40DE55-B289-4C8B-8901-5D369B16814F}) (Version:  - Microsoft)
Update for Microsoft Office Script Editor Help (KB963671) (HKLM\...\{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{CD11C6A2-FFC6-4271-8EAB-79C3582F505C}) (Version:  - Microsoft)
Update for Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0409-0000-0000000FF1CE}_ULTIMATER_{80E762AA-C921-4839-9D7D-DB62A72C0726}) (Version:  - Microsoft)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)
 
==================== Custom CLSID (selected items): ==========================
 
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
 
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
CustomCLSID: HKU\S-1-5-21-774631748-2552427010-850271914-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32 -> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
 
==================== Restore Points  =========================
 
05-05-2014 16:55:24 Windows Update
06-05-2014 07:00:41 Windows Update
09-05-2014 20:09:31 Windows Update
19-05-2014 00:56:35 Windows Update
19-05-2014 07:00:59 Windows Update
22-05-2014 16:09:09 Windows Update
24-05-2014 12:33:41 Scheduled Checkpoint
25-05-2014 00:32:50 Installed Pokémon Trading Card Game Online
28-05-2014 18:25:06 Scheduled Checkpoint
04-06-2014 00:53:15 Windows Update
04-06-2014 01:29:16 Removed PC Speed Clean
04-06-2014 01:33:01 Removed PC Speed Clean
05-06-2014 20:57:47 Removed PC Speed Clean
05-06-2014 20:58:46 Removed PC Speed Clean
01-07-2014 19:56:31 Windows Update
16-07-2014 21:21:06 Windows Update
17-07-2014 07:01:43 Windows Update
18-07-2014 07:00:11 Windows Update
19-07-2014 21:26:57 Adblock Plus for IE
22-07-2014 10:21:47 Windows Update
30-07-2014 01:11:21 Windows Update
30-07-2014 15:31:38 Scheduled Checkpoint
30-07-2014 16:23:06 Windows Defender Checkpoint
 
==================== Hosts content: ==========================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2006-11-02 06:23 - 2006-09-18 17:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
::1             localhost
 
==================== Scheduled Tasks (whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
 
Task: {11BF8842-83E3-4A20-839B-26CFF0721EEA} - System32\Tasks\APSnotifierPP1 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {15B797D9-EE05-435A-9808-F89F5680D1DC} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files\Optimizer Pro\OptProLauncher.exe <==== ATTENTION
Task: {163AF7EE-C486-4E01-B799-8021CE94A1CB} - System32\Tasks\Driver Detective-RTMScan => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-05-07] (PC Drivers Headquarters)
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {298BCA66-C9D6-45D0-ADF4-1DC1069CFBFA} - System32\Tasks\FF Watcher {9312E286-03A4-47F2-91F9-ECACE8987266} => C:\Program Files\V-bates\PrefHelper.exe
Task: {2E69F0C8-3819-4E0F-B1B5-0474A4D65D75} - System32\Tasks\Norton Identity Safe\Norton Error Processor => C:\Program Files\Norton Safe Web Lite\Engine\2014.6.0.27\SymErr.exe
Task: {315F98DF-F52F-4F24-976C-B04451C8947F} - System32\Tasks\SuperFastPC_AutorunOnStartup => C:\Program Files\System Optimizer Pro\SystemOptimizerPro.exe <==== ATTENTION
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {32D5EEB0-4F7E-4D62-B507-D9047FA9E09F} - System32\Tasks\Microsoft\Windows\RestartManager\{3BBD6C7A-1C15-40d1-AA0F-5E7E862737A9} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {39423C48-9F5A-4EDB-B611-22796F89EAF5} - System32\Tasks\PCSpeedClean_Popup => C:\Program Files\PC Speed Clean\Splash.exe
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {3ED75B3A-9710-4836-9290-B9F5AA779D10} - System32\Tasks\StormFall W2 => Chrome.exe --app=http://plarium.com/play/en/stormfall/dragon04?adCampaign=23636&amp;clickID=tDtDtBtAyCzytDtDtBtCyDyEtDtDtCzz&amp;publisherID=2_73 --app-window-size=1024,768
Task: {4045BA5D-A20A-4A1F-A2A6-6223287699AD} - System32\Tasks\BlockAndSurf_wd => C:\Program Files\di1BlockAndSurf\G8BlockAndSurfR.exe [2014-07-19] ()
Task: {40BD3531-40A3-44B3-BA52-F6902997EF18} - System32\Tasks\Driver Detective-RTMRules => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-05-07] (PC Drivers Headquarters)
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-20] (Microsoft Corporation)
Task: {5369D85B-92BB-44D0-A63A-D79EC9ECC2B0} - System32\Tasks\Norton Identity Safe\Norton Error Analyzer => C:\Program Files\Norton Safe Web Lite\Engine\2014.6.0.27\SymErr.exe
Task: {53B4D56C-33AC-4F51-B545-2E58809AA2C7} - System32\Tasks\iolo Process Governor => C:\Program Files\iolo\System Mechanic Professional\iologovernor.exe [2013-12-03] (iolo technologies, LLC)
Task: {55D26A36-3FE4-4952-AF26-54029242BAD6} - System32\Tasks\Driver Detective-RTMUpdater => C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2014-05-07] (PC Drivers Headquarters)
Task: {6F137FEC-92B9-4441-9648-C1A8BC9B04C3} - System32\Tasks\APSnotifierPP2 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {724F31C8-B1F4-4EE7-B142-1576C6E64527} - \EPUpdater No Task File <==== ATTENTION
Task: {804BD765-D190-461E-A030-4800056B6BBD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-07] (Google Inc.)
Task: {98B1F869-A1CB-4A10-B164-F2DA6C4C176B} - \LaunchApp No Task File <==== ATTENTION
Task: {9EF95097-25BC-4239-B7F9-DF484EE1B687} - System32\Tasks\StormFall FM => Chrome.exe --app=http://plarium.com/play/en/stormfall/dragon04?adCampaign=23636&amp;clickID=tDtDtBtAyCzytDtDtBtCyDyEtDtDtCzz&amp;publisherID=2_73 --app-window-size=1024,768
Task: {A7042ECC-8A90-4C07-B44F-B22D02CDE46E} - System32\Tasks\Mext Guard FBE8818C-5B13-48C2-A93E-AD731167DBF2 => C:\Program Files\V-bates\startsc.bat
Task: {AFCDEF7D-8823-43A5-BEAC-4CF979E5D75F} - System32\Tasks\BlockAndSurf Update => C:\Program Files\di1BlockAndSurf\Z7BlockAndSurfE91.exe [2014-07-19] ()
Task: {B2C36358-4906-42BA-AA99-3DC0DD644F16} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-24] (Adobe Systems Incorporated)
Task: {B38FAE66-05AD-4767-AA81-DE477D49A732} - System32\Tasks\APSnotifierPP3 => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {B7746186-17DA-41B5-91C2-9AB85773A1D1} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {C7BD255C-CBD2-47A0-90C5-46CF302BFCF6} - System32\Tasks\PCSpeedClean_Start => C:\Program Files\PC Speed Clean\PCSpeedClean.exe
Task: {C9465359-217A-49C1-BEB5-A7D6FCC1B316} - System32\Tasks\Microsoft\Windows\RestartManager\{1324EA65-0CB1-4b91-BC5A-4049E01FB57E} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {CC4FF9B9-4FA0-422F-95D2-DDACF3733C1D} - System32\Tasks\Microsoft\Windows\RestartManager\{062DB47D-3DAD-4ccb-A1E0-6566DE46D8D3} => C:\Windows\system32\rmclient.exe [2006-11-02] (Microsoft Corporation)
Task: {CF940540-B000-4087-931D-7B5123147CAF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-08-07] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-20] ()
Task: {F9102283-8F01-4B0E-8D6A-9367383504F3} - System32\Tasks\Rocket Updater => C:\Users\hatfield\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {FBA01E19-DB21-44BE-AE9C-E971EBF2E769} - System32\Tasks\StormFall TM => Chrome.exe --app=http://plarium.com/play/en/stormfall/dragon04?adCampaign=23636&amp;clickID=tDtDtBtAyCzytDtDtBtCyDyEtDtDtCzz&amp;publisherID=2_73 --app-window-size=1024,768
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\Windows\Tasks\BlockAndSurf Update.job => C:\Program Files\di1BlockAndSurf\Z7BlockAndSurfE91.exe <==== ATTENTION
Task: C:\Windows\Tasks\BlockAndSurf_wd.job => C:\Program Files\di1BlockAndSurf\G8BlockAndSurfR.exe <==== ATTENTION
Task: C:\Windows\Tasks\FF Watcher {9312E286-03A4-47F2-91F9-ECACE8987266}.job => C:\Program Files\V-bates\PrefHelper.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Rocket Updater.job => C:\Users\hatfield\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
 
==================== Loaded Modules (whitelisted) =============
 
2009-01-10 16:25 - 2006-10-18 02:36 - 00045056 _____ () C:\Windows\System32\lxctpmon.dll
2009-01-10 16:25 - 2006-10-18 01:30 - 00032768 _____ () C:\Program Files\Lexmark 5400 Series\ipcmt.dll
2009-01-10 16:29 - 2007-01-17 21:25 - 00118784 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\lxctdrpp.dll
2014-07-19 14:51 - 2014-07-19 14:51 - 00098304 _____ () C:\Program Files\di1BlockAndSurf\G8BlockAndSurfR.exe
2007-01-10 10:41 - 2007-01-10 10:41 - 00692224 _____ () C:\Windows\system32\lxctdrs.dll
2006-08-14 13:17 - 2006-08-14 13:17 - 00065536 _____ () C:\Windows\system32\lxctcaps.dll
2006-05-03 10:31 - 2006-05-03 10:31 - 00061440 _____ () C:\Windows\system32\lxctcnv4.dll
2009-01-10 16:25 - 2007-03-19 08:58 - 00291760 _____ () C:\Program Files\Lexmark 5400 Series\lxctmon.exe
2009-01-10 16:25 - 2007-01-10 10:38 - 00278528 _____ () C:\Program Files\Lexmark 5400 Series\lxctscw.dll
2009-01-10 16:25 - 2006-06-08 22:39 - 00143360 _____ () C:\Program Files\Lexmark 5400 Series\lxctdrec.dll
2009-01-10 16:24 - 2007-02-15 10:51 - 00241664 _____ () C:\Program Files\Lexmark 5400 Series\iptk.dll
2014-05-07 13:31 - 2014-05-07 13:31 - 00795496 _____ () C:\Program Files\PC Drivers HeadQuarters\Driver Detective\ThemePack.Default.dll
2014-05-07 13:31 - 2014-05-07 13:31 - 00428424 _____ () C:\Program Files\PC Drivers HeadQuarters\Driver Detective\Agent.Communication.XmlSerializers.dll
2014-07-30 15:31 - 2014-07-30 15:31 - 00321816 _____ () C:\Program Files\webget\updatewebget.exe
2014-04-30 09:29 - 2014-04-23 20:33 - 00065352 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2014-04-30 09:29 - 2014-04-23 20:33 - 04081480 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-30 09:29 - 2014-04-23 20:33 - 00390472 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-30 09:29 - 2014-04-23 20:33 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2014-04-30 09:29 - 2014-04-23 20:33 - 13692232 _____ () C:\Program Files\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll
 
==================== Alternate Data Streams (whitelisted) =========
 
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
 
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:D287FACF
AlternateDataStreams: C:\Users\hatfield\MOV00159.MPG:TOC.WMV
AlternateDataStreams: C:\Users\hatfield\MOV00160.MPG:TOC.WMV
 
==================== Safe Mode (whitelisted) ===================
 
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMPSE => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventSystem => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseamps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vsedsps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseqrts => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AMP => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AMPSE => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventSystem => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vseamps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsedsps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vseqrts => ""="Service"
 
==================== EXE Association (whitelisted) =============
 
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
 
 
==================== MSCONFIG/TASK MANAGER disabled items =========
 
(Currently there is no automatic fix for this section.)
 
 
==================== Faulty Device Manager Devices =============
 
Name: isatap.PK5001Z
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 
==================== Event log errors: =========================
 
Application errors:
==================
 
System errors:
=============
 
Microsoft Office Sessions:
=========================
Error: (07/27/2009 09:15:13 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 12 seconds with 0 seconds of active time.  This session ended with a crash.
 
 
CodeIntegrity Errors:
===================================
  Date: 2014-05-24 20:56:05.018
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:56:01.451
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:55:59.312
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:55:57.108
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:55:52.523
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:55:51.100
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:55:49.984
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2014-05-24 20:55:48.979
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Settings Manager\systemk\systemkmgrc1.cfg because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-11-07 10:33:45.079
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.
 
  Date: 2013-11-07 10:33:43.852
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\SYMEVENT.SYS because the set of per-page image hashes could not be found on the system.
 
 
==================== Memory info =========================== 
 
Percentage of memory in use: 76%
Total physical RAM: 1981.76 MB
Available physical RAM: 460.86 MB
Total Pagefile: 4210.04 MB
Available Pagefile: 2476.48 MB
Total Virtual: 2047.88 MB
Available Virtual: 1903.82 MB
 
==================== Drives ================================
 
Drive c: (OS) (Fixed) (Total:138.96 GB) (Free:80.51 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:10 GB) (Free:4.99 GB) NTFS
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 149 GB) (Disk ID: 50000000)
Partition 1: (Not Active) - (Size=55 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=139 GB) - (Type=07 NTFS)
 
==================== End Of Log ============================


#13 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 10 August 2014 - 10:03 PM

How is your machine running now?


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif


#14 cplikerd

cplikerd
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:52 AM

Posted 10 August 2014 - 10:15 PM

How is your machine running now?

 

It's better, i haven't spent alot of time on it, but i think that fixed it. Thanks for the help, fireman.



#15 fireman4it

fireman4it

    Bleepin' Fireman


  • Malware Response Team
  • 13,505 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Greenup, Ill USA
  • Local time:01:52 AM

Posted 10 August 2014 - 10:19 PM

Lets make a final check for any leftovers.

 

1.

Please download Malwarebytes Anti-Malware photo.jpg?sz=48 and save it to your desktop.

  • Double-click on the setup file (mbam-setup.exe), then click on Run to install.
  • Malwarebytes will automatically open to it's Dashboard. If you have never run this version, you should see a red note at the top indicating "A scan has never been run on your system"
     
    malwarebytes-anti-malware-fix-now.jpg
    .
  • Click on Update Now to download the current database definitions, then click the Scan Now >> button.
    .
  • If you have run this version before, you should see a green note at the top indicating "Your system is fully protected".
  • You will be prompted to update Malwarebytes...click on the Update Now button.
     
    malwarebytes-anti-malware-2-0-update-now
    .
  • The THREAT SCAN will automatically begin.
     
    malwarebytes-anti-malware-scan.jpg
    .
  • When the scan has completed, the results will be displayed. Click on Quarantine All, then click on Apply Actions.
     
    malwarebytes-anti-malware-potential-thre
    .
  • To complete any actions taken you will be prompted to restart your computer...click on Yes. Failure to reboot normally will prevent Malwarebytes from removing all the malware.
     
    mbam4_zps490948cc.png
    .
  • After rebooting the computer, copy and past the mbam.log in your next reply.

.
To retrieve the Malwarebytes Anti-Malware 2.0 scan log information (Method 1)
  • Open Malwarebytes Anti-Malware.
  • Click the History Tab at the top and select Application Logs.
  • Select (check) the box next to Scan Log. Choose the most current scan.
  • Click the View button.
  • Click Copy to Clipboard at the bottom...come back to this thread, click Add Reply, then right-click and choose Paste.
  • Alternatively, you can click Export and save the log as a .txt file on your Desktop or another location.
  • Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.

To retrieve the Malwarebytes Anti-Malware 2.0 scan log information (Method 2)
  • Open Malwarebytes Anti-Malware.
  • Click the Scan Tab at the top.
  • Click the View detailed log link on the right.
  • Click Copy to Clipboard at the bottom...come back to this thread, click Add Reply, then right-click and choose Paste.
  • Alternatively, you can click Export and save the log as a .txt file on your Desktop or another location.
  • Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.


Logs are named by the date of scan in the following format: mbam-log-yyyy-mm-dd and automatically saved to the following locations:
-- XP: C:\Documents and Settings\<Username>\Application Data\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd
-- Vista, Windows 7/8: C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs\mbam-log-yyyy-mm-dd

 

2.

 ESET Online Scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

  • Please go >>HERE<< then click on: ESET1st.jpg

    Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on the ESETexe.jpg icon to install.

    All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
  • Select the option YES, I accept the Terms of Use then click on: ESETsave.jpg
  • When prompted allow the Add-On/Active X to install.
  • Make sure that the option Remove found threats IS checked, and the option Scan archives is checked.
  • Now click on Advanced Settings and select the following:
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
  • Now click on: EOLS3.gif
  • The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
  • When completed the Online Scan will begin automatically.
  • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
  • When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt
  • Copy and paste that log as a reply to this topic.
  • Now click on: EOLS4.gif
    (Selecting Uninstall application on close if you so wish)


" Extinguishing Malware from the world"

The Virus, Trojan, Spyware, and Malware Removal forum is very busy. If I'm helping you and I've not posted back within 24 hrs., send a PM with your topic link. Thank you.

ALL OTHER HELP REQUESTS VIA THE PM SYSTEM WILL BE IGNORED. The Forums are there for a reason!
Thanks-


  userbar_eis_500.gif

If I have helped you, consider making a donation to help me continue the fight against Malware! Just click btn_donate_LG.gif





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users