Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Randonly getting Ransom Malware


  • This topic is locked This topic is locked
11 replies to this topic

#1 Flicker

Flicker

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 27 December 2014 - 07:17 AM

As requested by Lighthouse, Topic moved to this area and first few logs posted- Previous post here:

http://www.bleepingcomputer.com/forums/t/561056/ransomware-malware/

 

DDS (Ver_11-03-05.01) - NTFS_AMD64  
Run by USER at 12:03:31.72 on 27/12/2014
Internet Explorer: 8.0.7601.17514
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.44.1033.18.4093.2078 [GMT 0:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Comodo Defense+ *Disabled/Updated* {4BDD6856-AF0D-06BD-38AB-8A0FE39860CC}
FW: COMODO Firewall *Enabled* {C8870897-C358-086B-2944-184866CC6D0A}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\alg.exe
C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
C:\Windows\system32\svchost.exe -k apphost
C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files (x86)\Razer\Naga Epic\NagaEpicSysTray.exe
C:\Program Files (x86)\real\realplayer\Update\realsched.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
C:\Program Files (x86)\Comodo\GeekBuddy\unit_manager.exe
C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\Comodo\GeekBuddy\unit.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\System32\WUDFHost.exe
C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
C:\Program Files\COMODO\COMODO Internet Security\cis.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
C:\Users\USER\Videos\RealPlayer Downloads\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=063175190D18D41D837D3250688C28E0
mWinlogon: Userinit=C:\Windows\SysWOW64\userinit.exe,
BHO: AutorunsDisabled - No File
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
TB: ZoneAlarm Security Engine: {ee2ac4e5-b0b0-4ec6-88a9-bca1a32ab107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll
TB: {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
mRun: [Razer Naga Driver] C:\Program Files (x86)\Razer\Naga Epic\NagaEpicSysTray.exe
mRun: [TkBellExe] "C:\Program Files (x86)\real\realplayer\update\realsched.exe"  -osboot
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
mRun: [tvncontrol] "C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave
dRunOnce: [SetDefaultMIDI] MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy'
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\STARTG~1.LNK - C:\Program Files (x86)\Comodo\GeekBuddy\launcher.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~2\OFFICE11\REFIEBAR.DLL
Trusted Zone: microsoft.com\*.update
Trusted Zone: microsoft.com\update
Trusted Zone: windowsupdate.com\download
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} -
DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} - hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} - hxxps://juniper.net/dana-cached/sc/JuniperSetupClient.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15111/CTPID.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
mASetup: {2D46B6DC-2207-486B-B523-A557E6D54B47} - C:\Windows\system32\cmd.exe /D /C start C:\Windows\system32\ie4uinit.exe -ClearIconCache
TB-X64: ZoneAlarm Security Engine: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
TB-X64: {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} - No File
mRun-x64: [AsioThk32Reg] %SYSTEMROOT%\SYSWOW64\REGSVR32.EXE /S %SYSTEMROOT%\SYSWOW64\CTASIO.DLL
mRun-x64: [AsioReg] REGSVR32.EXE /S CTASIO.DLL
mRun-x64: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - google.co.uk
FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll
FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
FF - plugin: C:\Users\USER\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll
FF - plugin: C:\Users\USER\AppData\Roaming\raidcall\plugins\nprcplugin.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll
.
---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true);user_pref(extensions.zonealarm.rvrtMsg, Click Yes to keep current home page and default search settings, Click No to restore original settings
FF - user.js: extensions.zonealarm_i.newTab - false
FF - user.js: extensions.zonealarm_i.vrsnTs - 1.5.23.814:48:06
FF - user.js: extensions.zonealarm_i.smplGrp - none
FF - user.js: extensions.zonealarm.hpOld0 - google.co.uk
FF - user.js: extensions.zonealarm.tlbrSrchUrl - hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&&q=
FF - user.js: extensions.zonealarm.id - d8e503b9000000000000002564b1f3bf
FF - user.js: extensions.zonealarm.appId - {C56C48A0-DA4E-46F6-9859-1553DC865F84}
FF - user.js: extensions.zonealarm.instlDay - 15814
FF - user.js: extensions.zonealarm.vrsn - 1.8.11.11
FF - user.js: extensions.zonealarm.vrsni - 1.8.11.11
FF - user.js: extensions.zonealarm.vrsnTs - 1.8.11.1121:23:41
FF - user.js: extensions.zonealarm.prtnrId - checkpoint
FF - user.js: extensions.zonealarm.prdct - zonealarm
FF - user.js: extensions.zonealarm.aflt - 1001
FF - user.js: extensions.zonealarm.smplGrp - none
FF - user.js: extensions.zonealarm.tlbrId - base2013
FF - user.js: extensions.zonealarm.instlRef - ZLN117709341277737-1001
FF - user.js: extensions.zonealarm.dfltLng - en
FF - user.js: extensions.zonealarm.excTlbr - false
FF - user.js: extensions.zonealarm.ffxUnstlRst - false
FF - user.js: extensions.zonealarm.admin - false
FF - user.js: extensions.zonealarm.autoRvrt - false
FF - user.js: extensions.zonealarm.rvrt - true
FF - user.js: extensions.zonealarm.hmpg - true
FF - user.js: extensions.zonealarm.hmpgUrl - hxxp://search.zonealarm.com/?src=hp&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&
FF - user.js: extensions.zonealarm.dfltSrch - true
FF - user.js: extensions.zonealarm.srchPrvdr - Search By ZoneAlarm
FF - user.js: extensions.zonealarm.kw_url - hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&&q=
FF - user.js: extensions.zonealarm.dnsErr - true
FF - user.js: extensions.zonealarm.newTab - true
FF - user.js: extensions.zonealarm.newTabUrl - hxxp://search.zonealarm.com/?src=nt&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&
.
============= SERVICES / DRIVERS ===============
.
R1 cmderd;COMODO Internet Security Eradication Driver;C:\Windows\System32\drivers\cmderd.sys [2013-6-18 20184]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;C:\Windows\System32\drivers\cmdguard.sys [2013-6-18 792648]
R1 cmdHlp;COMODO Internet Security Helper Driver;C:\Windows\System32\drivers\cmdhlp.sys [2013-6-18 45880]
R1 mbamchameleon;mbamchameleon;C:\Windows\System32\drivers\mbamchameleon.sys [2014-5-18 93400]
R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys [2011-7-22 14928]
R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys [2011-7-12 12368]
R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2012-7-11 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2013-12-6 239616]
R2 Dokan;Dokan;C:\Windows\System32\drivers\dokan.sys [2011-1-10 120408]
R3 amdkmdag;amdkmdag;C:\Windows\System32\drivers\atikmdag.sys [2013-12-6 13207552]
R3 amdkmdap;amdkmdap;C:\Windows\System32\drivers\atikmpag.sys [2013-12-6 626176]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\System32\drivers\AtihdW76.sys [2013-9-24 94208]
R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-1-21 25816]
R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-5-18 129752]
R3 MBAMWebAccessControl;MBAMWebAccessControl;C:\Windows\System32\drivers\mwac.sys [2014-5-18 63704]
R3 RzSynapse;Razer Driver;C:\Windows\System32\drivers\RzSynapse.sys [2010-12-16 126464]
R3 VST64_DPV;VST64_DPV;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-13 1485312]
R3 VST64HWBS2;VST64HWBS2;C:\Windows\System32\drivers\VSTBS26.SYS [2009-7-13 411136]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-17 267440]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-3-1 19456]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\Windows\System32\drivers\ss_bbus.sys [2011-5-16 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\Windows\System32\drivers\ss_bmdfl.sys [2011-5-16 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\Windows\System32\drivers\ss_bmdm.sys [2011-5-16 161280]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver;C:\Windows\System32\drivers\ss_bserd.sys [2011-5-16 128000]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-3-1 56832]
S4 RivaTuner64;RivaTuner64;C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [2009-8-22 12288]
.
=============== Created Last 30 ================
.
2014-12-26 17:20:19    --------    d-----w-    C:\Program Files (x86)\ESET
2014-12-26 17:20:13    2347384    ----a-w-    C:\esetsmartinstaller_enu.exe
2014-12-26 11:44:32    11870360    ----a-w-    C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{F1988C5D-784E-4807-8FF4-D79294B2BCB9}\mpengine.dll
2014-12-21 14:21:01    --------    d-----w-    C:\Users\USER\AppData\Roaming\Full Control
2014-12-19 23:47:02    --------    d-----w-    C:\Users\USER\AppData\Roaming\FiraxisLive
2014-12-10 03:25:00    --------    d-----w-    C:\Windows\System32\appraiser
2014-12-10 03:01:50    55808    ----a-w-    C:\Windows\System32\rrinstaller.exe
2014-12-10 03:01:50    50176    ----a-w-    C:\Windows\SysWow64\rrinstaller.exe
2014-12-10 03:01:50    3209728    ----a-w-    C:\Windows\SysWow64\mf.dll
2014-12-10 03:01:50    24576    ----a-w-    C:\Windows\System32\mfpmp.exe
2014-12-10 03:01:50    23040    ----a-w-    C:\Windows\SysWow64\mfpmp.exe
2014-12-10 03:01:50    206848    ----a-w-    C:\Windows\System32\mfps.dll
2014-12-10 03:01:50    2048    ----a-w-    C:\Windows\SysWow64\mferror.dll
2014-12-10 03:01:50    2048    ----a-w-    C:\Windows\System32\mferror.dll
2014-12-10 03:01:50    103424    ----a-w-    C:\Windows\SysWow64\mfps.dll
2014-12-10 03:01:49    4121600    ----a-w-    C:\Windows\System32\mf.dll
2014-12-04 18:05:16    --------    d-----w-    C:\GOG Games
2014-12-03 13:31:02    111016    ----a-w-    C:\Windows\System32\WindowsAccessBridge-64.dll
2014-12-03 06:31:20    227048    ----a-w-    C:\Program Files (x86)\Mozilla Firefox\plugins\nppdf32.dll
2014-11-30 00:43:10    --------    d-----w-    C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-11-27 17:23:21    48392    ----a-w-    C:\Windows\SysWow64\certsentry.dll
.
==================== Find3M  ====================
.
2014-12-27 11:22:48    129752    ----a-w-    C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-12-16 07:35:40    275080    ------w-    C:\Windows\System32\MpSigStub.exe
2014-12-09 23:05:07    71344    ----a-w-    C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-12-09 23:05:07    701104    ----a-w-    C:\Windows\SysWow64\FlashPlayerApp.exe
2014-12-09 00:20:33    45880    ----a-w-    C:\Windows\System32\drivers\cmdhlp.sys
2014-12-09 00:20:32    792648    ----a-w-    C:\Windows\System32\drivers\cmdguard.sys
2014-12-09 00:20:32    20184    ----a-w-    C:\Windows\System32\drivers\cmderd.sys
2014-12-09 00:20:21    40736    ----a-w-    C:\Windows\System32\cmdcsr.dll
2014-12-09 00:20:20    437792    ----a-w-    C:\Windows\System32\guard64.dll
2014-12-09 00:20:20    352272    ----a-w-    C:\Windows\SysWow64\guard32.dll
2014-12-09 00:20:16    354520    ----a-w-    C:\Windows\System32\cmdvrt64.dll
2014-12-09 00:20:14    45784    ----a-w-    C:\Windows\System32\cmdkbd64.dll
2014-12-09 00:20:11    286424    ----a-w-    C:\Windows\SysWow64\cmdvrt32.dll
2014-12-09 00:20:09    40664    ----a-w-    C:\Windows\SysWow64\cmdkbd32.dll
2014-12-04 02:50:55    413184    ----a-w-    C:\Windows\System32\generaltel.dll
2014-12-04 02:50:45    741376    ----a-w-    C:\Windows\System32\invagent.dll
2014-12-04 02:50:40    396800    ----a-w-    C:\Windows\System32\devinv.dll
2014-12-04 02:50:38    830976    ----a-w-    C:\Windows\System32\appraiser.dll
2014-12-04 02:50:37    227328    ----a-w-    C:\Windows\System32\aepdu.dll
2014-12-04 02:50:37    192000    ----a-w-    C:\Windows\System32\aepic.dll
2014-12-04 02:44:48    1083392    ----a-w-    C:\Windows\System32\aeinv.dll
2014-12-01 23:28:44    1232040    ----a-w-    C:\Windows\System32\aitstatic.exe
2014-11-27 17:23:21    57096    ----a-w-    C:\Windows\System32\certsentry.dll
2014-11-21 06:14:22    63704    ----a-w-    C:\Windows\System32\drivers\mwac.sys
2014-11-21 06:14:12    93400    ----a-w-    C:\Windows\System32\drivers\mbamchameleon.sys
2014-11-21 06:14:08    25816    ----a-w-    C:\Windows\System32\drivers\mbam.sys
2014-11-11 03:09:06    1424384    ----a-w-    C:\Windows\System32\WindowsCodecs.dll
2014-11-11 03:08:52    241152    ----a-w-    C:\Windows\System32\pku2u.dll
2014-11-11 03:08:48    728064    ----a-w-    C:\Windows\System32\kerberos.dll
2014-11-11 02:44:45    1230336    ----a-w-    C:\Windows\SysWow64\WindowsCodecs.dll
2014-11-11 02:44:32    186880    ----a-w-    C:\Windows\SysWow64\pku2u.dll
2014-11-11 02:44:25    550912    ----a-w-    C:\Windows\SysWow64\kerberos.dll
2014-11-11 01:46:26    119296    ----a-w-    C:\Windows\System32\drivers\tdx.sys
2014-11-08 03:16:08    2048    ----a-w-    C:\Windows\System32\tzres.dll
2014-11-08 02:45:09    2048    ----a-w-    C:\Windows\SysWow64\tzres.dll
2014-10-30 02:03:43    165888    ----a-w-    C:\Windows\System32\charmap.exe
2014-10-30 01:45:43    155136    ----a-w-    C:\Windows\SysWow64\charmap.exe
2014-10-25 01:57:59    77824    ----a-w-    C:\Windows\System32\packager.dll
2014-10-25 01:32:37    67584    ----a-w-    C:\Windows\SysWow64\packager.dll
2014-10-18 02:05:23    861696    ----a-w-    C:\Windows\System32\oleaut32.dll
2014-10-18 01:33:18    571904    ----a-w-    C:\Windows\SysWow64\oleaut32.dll
2014-10-14 02:16:37    155064    ----a-w-    C:\Windows\System32\drivers\ksecpkg.sys
2014-10-14 02:13:06    683520    ----a-w-    C:\Windows\System32\termsrv.dll
2014-10-14 02:13:00    3241984    ----a-w-    C:\Windows\System32\msi.dll
2014-10-14 02:12:57    1460736    ----a-w-    C:\Windows\System32\lsasrv.dll
2014-10-14 02:09:31    146432    ----a-w-    C:\Windows\System32\msaudite.dll
2014-10-14 02:07:31    681984    ----a-w-    C:\Windows\System32\adtschema.dll
2014-10-14 01:50:47    22016    ----a-w-    C:\Windows\SysWow64\secur32.dll
2014-10-14 01:50:41    2363904    ----a-w-    C:\Windows\SysWow64\msi.dll
2014-10-14 01:49:38    96768    ----a-w-    C:\Windows\SysWow64\sspicli.dll
2014-10-14 01:47:30    146432    ----a-w-    C:\Windows\SysWow64\msaudite.dll
2014-10-14 01:46:02    681984    ----a-w-    C:\Windows\SysWow64\adtschema.dll
2014-10-10 00:57:42    3198976    ----a-w-    C:\Windows\System32\win32k.sys
2014-10-03 02:12:23    310272    ----a-w-    C:\Windows\System32\WsmWmiPl.dll
2014-10-03 02:12:23    2020352    ----a-w-    C:\Windows\System32\WsmSvc.dll
2014-10-03 02:12:22    346624    ----a-w-    C:\Windows\System32\WSManMigrationPlugin.dll
2014-10-03 02:12:22    181248    ----a-w-    C:\Windows\System32\WsmAuto.dll
2014-10-03 02:12:00    500224    ----a-w-    C:\Windows\System32\AUDIOKSE.dll
2014-10-03 02:11:54    284672    ----a-w-    C:\Windows\System32\EncDump.dll
2014-10-03 02:11:51    680960    ----a-w-    C:\Windows\System32\audiosrv.dll
2014-10-03 02:11:51    440832    ----a-w-    C:\Windows\System32\AudioEng.dll
2014-10-03 02:11:51    296448    ----a-w-    C:\Windows\System32\AudioSes.dll
2014-10-03 02:11:49    266240    ----a-w-    C:\Windows\System32\WSManHTTPConfig.exe
2014-10-03 01:45:03    248832    ----a-w-    C:\Windows\SysWow64\WSManMigrationPlugin.dll
2014-10-03 01:45:03    214016    ----a-w-    C:\Windows\SysWow64\WsmWmiPl.dll
2014-10-03 01:45:03    145920    ----a-w-    C:\Windows\SysWow64\WsmAuto.dll
2014-10-03 01:45:03    1177088    ----a-w-    C:\Windows\SysWow64\WsmSvc.dll
2014-10-03 01:44:42    442880    ----a-w-    C:\Windows\SysWow64\AUDIOKSE.dll
2014-10-03 01:44:26    374784    ----a-w-    C:\Windows\SysWow64\AudioEng.dll
2014-10-03 01:44:26    195584    ----a-w-    C:\Windows\SysWow64\AudioSes.dll
2014-10-03 01:44:25    198656    ----a-w-    C:\Windows\SysWow64\WSManHTTPConfig.exe
.
============= FINISH: 12:09:13.07 ===============
 

Attached Files


Edited by Flicker, 27 December 2014 - 07:28 AM.


BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:01 PM

Posted 31 December 2014 - 10:29 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===


Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
IMPORTANT
  • If you click the Clean button all items listed in the report will be removed.
If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
===

Download the version of this tool for your operating system.
Farbar Recovery Scan Tool (64 bit)
Farbar Recovery Scan Tool (32 bit)
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
===

Please paste the logs in your next reply DO NOT ATTACH THEM unless specified.
To attach a file select the "More Reply Option" and follow the instructions.

Wait for further instructions.

#3 Flicker

Flicker
  • Topic Starter

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 31 December 2014 - 12:34 PM

# AdwCleaner v4.106 - Report created 31/12/2014 at 17:15:39
# Updated 21/12/2014 by Xplode
# Database : 2014-12-30.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : USER - HOME-PC
# Running from : C:\Users\USER\adwcleaner_4.106.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
File Found : C:\Users\Public\Desktop\GeekBuddy.lnk
File Found : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\searchplugins\zonealarm.xml
File Found : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\user.js
Folder Found : C:\Program Files (x86)\Check Point Software Technologies LTD
Folder Found : C:\ProgramData\AdTrustMedia
Folder Found : C:\ProgramData\Browser Manager
Folder Found : C:\ProgramData\Free Ride Games
Folder Found : C:\ProgramData\wincert
Folder Found : C:\USERs\USER\AppData\Local\AdTrustMedia
Folder Found : C:\USERs\USER\AppData\LocalLow\Conduit
Folder Found : C:\USERs\USER\AppData\Roaming\blekko
Folder Found : C:\USERs\USER\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Folder Found : C:\USERs\USER\AppData\Roaming\iWin
Folder Found : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Found : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\anttoolbar@ant.com

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\ilivid
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : [x64] HKCU\Software\ilivid
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Found : [x64] HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Found : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Found : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2611275
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E00DE9B9-B128-4C39-B732-B5D85013FA48}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6592FDEC-2C1A-413A-9985-25FEC2F0848D}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Toolbar
Key Found : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Toolbar
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
Value Found : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]

***** [ Browsers ] *****

-\\ Internet Explorer v0.0.0.0

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://safesearchr.lavasoft.com/?source=3336ca5f&tbp=homepage&toolbarid=adawaretb&v=2_2&u=063175190D18D41D837D3250688C28E0

-\\ Mozilla Firefox v34.0.5 (x86 en-GB)

[72nr61et.default] - Line Found : user_pref("CT2438727..clientLogIsEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2438727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default] - Line Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default] - Line Found : user_pref("CT2438727.AppTrackingLastCheckTime", "Sat Apr 09 2011 19:00:37 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.CTID", "CT2438727");
[72nr61et.default] - Line Found : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
[72nr61et.default] - Line Found : user_pref("CT2438727.CurrentServerDate", "13-5-2012");
[72nr61et.default] - Line Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
[72nr61et.default] - Line Found : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sat May 12 2012 16:54:19 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.DownloadReferralCookieData", "");
[72nr61et.default] - Line Found : user_pref("CT2438727.FirstServerDate", "20-5-2010");
[72nr61et.default] - Line Found : user_pref("CT2438727.FirstTime", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.FirstTimeFF3", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.FirstTimeSettingsDone", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.GroupingInvalidateCache", false);
[72nr61et.default] - Line Found : user_pref("CT2438727.GroupingLastCheckTime", "0");
[72nr61et.default] - Line Found : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
[72nr61et.default] - Line Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
[72nr61et.default] - Line Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default] - Line Found : user_pref("CT2438727.HasUserGlobalKeys", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.Initialize", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.InitializeCommonPrefs", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
[72nr61et.default] - Line Found : user_pref("CT2438727.InstalledDate", "Wed May 19 2010 23:38:56 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.InvalidateCache", false);
[72nr61et.default] - Line Found : user_pref("CT2438727.IsGrouping", false);
[72nr61et.default] - Line Found : user_pref("CT2438727.IsMulticommunity", false);
[72nr61et.default] - Line Found : user_pref("CT2438727.IsOpenThankYouPage", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.IsOpenUninstallPage", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Sun May 13 2012 17:40:59 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_2.5.8.6", "Tue Jun 29 2010 18:43:31 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_2.6.0.15", "Thu Jul 01 2010 21:19:32 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_2.7.1.3", "Thu Aug 19 2010 17:11:33 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_2.7.2.0", "Thu Mar 31 2011 15:51:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_3.12.0.7", "Wed Apr 25 2012 16:14:03 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_3.12.2.3", "Sun May 13 2012 14:44:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LastLogin_3.3.3.2", "Mon May 09 2011 20:42:30 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.LatestVersion", "3.12.2.3");
[72nr61et.default] - Line Found : user_pref("CT2438727.Locale", "en");
[72nr61et.default] - Line Found : user_pref("CT2438727.LoginCache", 4);
[72nr61et.default] - Line Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
[72nr61et.default] - Line Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default] - Line Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
[72nr61et.default] - Line Found : user_pref("CT2438727.MyStuffEnabledAtInstallation", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.RadioLastCheckTime", "0");
[72nr61et.default] - Line Found : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
[72nr61et.default] - Line Found : user_pref("CT2438727.RadioLastUpdateServer", "0");
[72nr61et.default] - Line Found : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchBoxWidth", 150);
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2438727&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sun May 13 2012 17:40:58 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2438727.SearchProtectorToolbarDisabled", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.ServiceMapLastCheckTime", "Sun May 13 2012 17:40:59 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
[72nr61et.default] - Line Found : user_pref("CT2438727.SettingsLastCheckTime", "Sun May 13 2012 14:44:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.SettingsLastUpdate", "1336910559");
[72nr61et.default] - Line Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
[72nr61et.default] - Line Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Fri Apr 22 2011 09:45:27 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1278548974");
[72nr61et.default] - Line Found : user_pref("CT2438727.ToolbarDisabled", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
[72nr61et.default] - Line Found : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default] - Line Found : user_pref("CT2438727.UserID", "UN32540640027704347");
[72nr61et.default] - Line Found : user_pref("CT2438727.ValidationData_Search", 2);
[72nr61et.default] - Line Found : user_pref("CT2438727.ValidationData_Toolbar", 2);
[72nr61et.default] - Line Found : user_pref("CT2438727.alertChannelId", "832836");
[72nr61et.default] - Line Found : user_pref("CT2438727.backendstorage.currentgame", "7A796E6761");
[72nr61et.default] - Line Found : user_pref("CT2438727.clientLogIsEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default] - Line Found : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Mon May 09 2011 20:42:30 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.initDone", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.isAppTrackingManagerOn", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.myStuffEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
[72nr61et.default] - Line Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default] - Line Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default] - Line Found : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,129053036221800239,129023982256475322,129023982168975093,129023982451006863,129023982676944454,129078052328906859,129297366994[...]
[72nr61et.default] - Line Found : user_pref("CT2438727.revertSettingsEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
[72nr61et.default] - Line Found : user_pref("CT2438727.searchProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2438727.testingCtid", "");
[72nr61et.default] - Line Found : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Sun May 13 2012 17:40:59 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Thu Mar 31 2011 16:57:47 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2438727.usagesFlag", 2);
[72nr61et.default] - Line Found : user_pref("CT2536667..clientLogIsEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2536667..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2536667.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default] - Line Found : user_pref("CT2536667.AppTrackingLastCheckTime", "Tue Aug 21 2012 23:37:32 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.CTID", "CT2536667");
[72nr61et.default] - Line Found : user_pref("CT2536667.CurrentServerDate", "12-3-2013");
[72nr61et.default] - Line Found : user_pref("CT2536667.DialogsAlignMode", "LTR");
[72nr61et.default] - Line Found : user_pref("CT2536667.DialogsGetterLastCheckTime", "Mon Mar 11 2013 20:00:09 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.DownloadReferralCookieData", "");
[72nr61et.default] - Line Found : user_pref("CT2536667.FirstServerDate", "2-7-2010");
[72nr61et.default] - Line Found : user_pref("CT2536667.FirstTime", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.FirstTimeFF3", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.FirstTimeSettingsDone", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.FixPageNotFoundErrors", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.GroupingServerCheckInterval", 1440);
[72nr61et.default] - Line Found : user_pref("CT2536667.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default] - Line Found : user_pref("CT2536667.HasUserGlobalKeys", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.HomePageProtectorEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.HomepageBeforeUnload", "hxxp://www.google.co.uk");
[72nr61et.default] - Line Found : user_pref("CT2536667.Initialize", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.InitializeCommonPrefs", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.InstallationAndCookieDataSentCount", 3);
[72nr61et.default] - Line Found : user_pref("CT2536667.InstalledDate", "Thu Jul 01 2010 23:51:29 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.IsAlertDBUpdated", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.IsGrouping", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.IsMulticommunity", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.IsOpenThankYouPage", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.IsOpenUninstallPage", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.LanguagePackLastCheckTime", "Mon Mar 11 2013 20:57:58 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2536667.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_2.7.1.3", "Thu Aug 19 2010 17:11:33 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_2.7.2.0", "Thu Mar 31 2011 15:51:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.10.0.1", "Tue Apr 24 2012 20:40:30 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.11.0.3", "Sun May 06 2012 09:54:51 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.12.2.3", "Sun May 20 2012 21:07:00 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.13.0.6", "Sun Jul 08 2012 18:04:36 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.14.1.0", "Mon Aug 27 2012 11:47:46 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.15.1.0", "Mon Nov 26 2012 17:40:03 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.16.0.3", "Thu Feb 14 2013 17:54:52 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.18.0.7", "Tue Mar 12 2013 18:59:59 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.3.3.2", "Mon May 09 2011 20:42:29 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.8.0.8", "Sun Dec 04 2011 20:16:39 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.8.1.0", "Mon Jan 30 2012 20:58:21 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LastLogin_3.9.0.3", "Mon Feb 13 2012 21:35:33 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.LatestVersion", "3.18.0.7");
[72nr61et.default] - Line Found : user_pref("CT2536667.Locale", "en");
[72nr61et.default] - Line Found : user_pref("CT2536667.LoginCache", 4);
[72nr61et.default] - Line Found : user_pref("CT2536667.MCDetectTooltipHeight", "83");
[72nr61et.default] - Line Found : user_pref("CT2536667.MCDetectTooltipShow", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default] - Line Found : user_pref("CT2536667.MCDetectTooltipWidth", "295");
[72nr61et.default] - Line Found : user_pref("CT2536667.MyStuffComponents4194829522645999115", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.MyStuffEnabledAtInstallation", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.SHRINK_TOOLBAR", 1);
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2536667&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchEngineBeforeUnload", "data:text/plain,browser.search.defaultenginename=Yahoo!");
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchFromAddressBarIsInit", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchInNewTabEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchInNewTabIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchInNewTabLastCheckTime", "Mon Mar 11 2013 20:57:54 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchInNewTabUserEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchProtectorEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.SearchProtectorToolbarDisabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.ServiceMapLastCheckTime", "Mon Mar 11 2013 20:57:54 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.SettingsCheckIntervalMin", 120);
[72nr61et.default] - Line Found : user_pref("CT2536667.SettingsLastCheckTime", "Tue Mar 12 2013 17:04:11 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.SettingsLastUpdate", "1363072461");
[72nr61et.default] - Line Found : user_pref("CT2536667.ThirdPartyComponentsInterval", 504);
[72nr61et.default] - Line Found : user_pref("CT2536667.ThirdPartyComponentsLastCheck", "Wed Feb 20 2013 15:09:02 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.ThirdPartyComponentsLastUpdate", "1331805997");
[72nr61et.default] - Line Found : user_pref("CT2536667.ToolbarDisabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2536667");
[72nr61et.default] - Line Found : user_pref("CT2536667.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default] - Line Found : user_pref("CT2536667.UserID", "UN04627305010855143");
[72nr61et.default] - Line Found : user_pref("CT2536667.ValidationData_Search", 2);
[72nr61et.default] - Line Found : user_pref("CT2536667.ValidationData_Toolbar", 2);
[72nr61et.default] - Line Found : user_pref("CT2536667.alertChannelId", "929670");
[72nr61et.default] - Line Found : user_pref("CT2536667.approveUntrustedApps", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.clientLogIsEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2536667.components.1000080", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default] - Line Found : user_pref("CT2536667.globalFirstTimeInfoLastCheckTime", "Sat Mar 09 2013 23:03:26 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.homepageProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.initDone", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.isAppTrackingManagerOn", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.myStuffEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.myStuffPublihserMinWidth", 400);
[72nr61et.default] - Line Found : user_pref("CT2536667.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default] - Line Found : user_pref("CT2536667.myStuffServiceIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2536667.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default] - Line Found : user_pref("CT2536667.oldAppsList", "129107410737341442,129107410737341443,111,129107620374841780,129107823462024086,1000034,1000080,1000082,1000234,1000515,1000,1001,1002,1003,1004,1005,1006,1007,1008[...]
[72nr61et.default] - Line Found : user_pref("CT2536667.revertSettingsEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.searchProtectorDialogDelayInSec", 10);
[72nr61et.default] - Line Found : user_pref("CT2536667.searchProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2536667.testingCtid", "");
[72nr61et.default] - Line Found : user_pref("CT2536667.toolbarAppMetaDataLastCheckTime", "Mon Mar 11 2013 20:57:58 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.toolbarContextMenuLastCheckTime", "Sun Mar 03 2013 21:19:18 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2536667.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2536667.usageEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2536667.usagesFlag", 2);
[72nr61et.default] - Line Found : user_pref("CT2611275..clientLogIsEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2611275..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2611275..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2611275.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default] - Line Found : user_pref("CT2611275.BrowserCompStateIsOpen_129720562372107029", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.CTID", "ct2611275");
[72nr61et.default] - Line Found : user_pref("CT2611275.CurrentServerDate", "13-5-2012");
[72nr61et.default] - Line Found : user_pref("CT2611275.DialogsAlignMode", "LTR");
[72nr61et.default] - Line Found : user_pref("CT2611275.DialogsGetterLastCheckTime", "Sat May 12 2012 16:54:21 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.DownloadReferralCookieData", "");
[72nr61et.default] - Line Found : user_pref("CT2611275.EMailNotifierPollDate", "Mon May 09 2011 23:53:36 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.FirstServerDate", "29-6-2010");
[72nr61et.default] - Line Found : user_pref("CT2611275.FirstTime", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.FirstTimeFF3", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.FirstTimeSettingsDone", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.FixPageNotFoundErrors", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.GroupingServerCheckInterval", 1440);
[72nr61et.default] - Line Found : user_pref("CT2611275.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default] - Line Found : user_pref("CT2611275.HasUserGlobalKeys", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.Initialize", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.InitializeCommonPrefs", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.InstallationAndCookieDataSentCount", 3);
[72nr61et.default] - Line Found : user_pref("CT2611275.InstallationType", "UnknownIntegration");
[72nr61et.default] - Line Found : user_pref("CT2611275.InstalledDate", "Tue Jun 29 2010 18:56:20 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.IsGrouping", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.IsMulticommunity", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.IsOpenThankYouPage", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.IsOpenUninstallPage", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.LanguagePackLastCheckTime", "Tue Jun 29 2010 18:56:21 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2611275.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default] - Line Found : user_pref("CT2611275.LastLogin_2.6.0.15", "Thu Jul 01 2010 21:19:32 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LastLogin_2.7.1.3", "Thu Aug 19 2010 17:11:33 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LastLogin_2.7.2.0", "Thu Mar 31 2011 15:51:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LastLogin_3.12.0.7", "Wed Apr 25 2012 16:14:05 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LastLogin_3.12.2.3", "Sun May 13 2012 14:44:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LastLogin_3.3.3.2", "Mon May 09 2011 20:42:28 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.LatestVersion", "3.12.2.3");
[72nr61et.default] - Line Found : user_pref("CT2611275.Locale", "en");
[72nr61et.default] - Line Found : user_pref("CT2611275.LoginCache", 4);
[72nr61et.default] - Line Found : user_pref("CT2611275.MCDetectTooltipHeight", "83");
[72nr61et.default] - Line Found : user_pref("CT2611275.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default] - Line Found : user_pref("CT2611275.MCDetectTooltipWidth", "295");
[72nr61et.default] - Line Found : user_pref("CT2611275.MyStuffEnabledAtInstallation", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.PublisherContainerWidth", 1596);
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioIsPodcast", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioMediaID", "9958");
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioMediaType", "Media Player");
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioMenuSelectedID", "EBRadioMenu_CT2611275_RECENT9958");
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioShrinked", "expanded");
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioStationName", "SKY.fm%20Country");
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioStationURL", "hxxp://www.sky.fm/wma/country_low.asx");
[72nr61et.default] - Line Found : user_pref("CT2611275.RadioVolume", "79");
[72nr61et.default] - Line Found : user_pref("CT2611275.SHRINK_TOOLBAR", 1);
[72nr61et.default] - Line Found : user_pref("CT2611275.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=ct2611275&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default] - Line Found : user_pref("CT2611275.SearchFromAddressBarIsInit", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.SearchInNewTabEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.SearchInNewTabIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2611275.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2611275.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2611275.ServiceMapLastCheckTime", "Sun May 13 2012 14:44:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.SettingsCheckIntervalMin", 120);
[72nr61et.default] - Line Found : user_pref("CT2611275.SettingsLastCheckTime", "Tue Jun 29 2010 18:56:07 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.SettingsLastUpdate", "1277320599");
[72nr61et.default] - Line Found : user_pref("CT2611275.ThirdPartyComponentsInterval", 504);
[72nr61et.default] - Line Found : user_pref("CT2611275.ThirdPartyComponentsLastCheck", "Tue Jun 29 2010 18:56:07 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ThirdPartyComponentsLastUpdate", "1277320599");
[72nr61et.default] - Line Found : user_pref("CT2611275.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2611275");
[72nr61et.default] - Line Found : user_pref("CT2611275.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default] - Line Found : user_pref("CT2611275.UserID", "UN29306047882253530");
[72nr61et.default] - Line Found : user_pref("CT2611275.ValidationData_Search", 2);
[72nr61et.default] - Line Found : user_pref("CT2611275.ValidationData_Toolbar", 2);
[72nr61et.default] - Line Found : user_pref("CT2611275.WeatherNetwork", "");
[72nr61et.default] - Line Found : user_pref("CT2611275.WeatherPollDate", "Mon May 09 2011 23:53:39 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.WeatherUnit", "C");
[72nr61et.default] - Line Found : user_pref("CT2611275.alertChannelId", "1004080");
[72nr61et.default] - Line Found : user_pref("CT2611275.clientLogIsEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2611275.components.1000082", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.components.1000234", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.AppTrackingLastCheckTime", "Sat Apr 09 2011 19:00:37 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.DialogsAlignMode", "LTR");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.FirstTimeSettingsDone", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.InvalidateCache", false);
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.LanguagePackLastCheckTime", "Sat May 12 2012 17:36:01 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.Locale", "en");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.RadioLastCheckTime", "Mon May 09 2011 16:42:29 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.RadioLastUpdateIPServer", "3");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.RadioLastUpdateServer", "0");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=ct2611275&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.SearchInNewTabLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.SettingsCheckIntervalMin", 120);
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.SettingsLastCheckTime", "Sun May 13 2012 14:44:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.SettingsLastUpdate", "1336639137");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.ThirdPartyComponentsLastCheck", "Thu Apr 21 2011 07:41:09 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.ThirdPartyComponentsLastUpdate", "1278969850");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.globalFirstTimeInfoLastCheckTime", "Mon May 09 2011 20:42:28 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.toolbarAppMetaDataLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.ct2611275.toolbarContextMenuLastCheckTime", "Thu Mar 31 2011 16:57:46 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2611275.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default] - Line Found : user_pref("CT2611275.homepageProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.initDone", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.isAppTrackingManagerOn", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.myStuffEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.myStuffPublihserMinWidth", 400);
[72nr61et.default] - Line Found : user_pref("CT2611275.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default] - Line Found : user_pref("CT2611275.myStuffServiceIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2611275.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default] - Line Found : user_pref("CT2611275.oldAppsList", "129169216377333934,129169216377646468,129169216377646469,129169216377802721,1000034,129169216377958973,129452954666557112,129452954665619610,129452954664057108,1291[...]
[72nr61et.default] - Line Found : user_pref("CT2611275.revertSettingsEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.searchProtectorDialogDelayInSec", 10);
[72nr61et.default] - Line Found : user_pref("CT2611275.searchProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2611275.testingCtid", "");
[72nr61et.default] - Line Found : user_pref("CT2611275.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2611275.usagesFlag", 2);
[72nr61et.default] - Line Found : user_pref("CT2645238..clientLogIsEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2645238..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default] - Line Found : user_pref("CT2645238..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default] - Line Found : user_pref("CT2645238.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default] - Line Found : user_pref("CT2645238.AppTrackingLastCheckTime", "Sun May 06 2012 12:58:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.CTID", "CT2645238");
[72nr61et.default] - Line Found : user_pref("CT2645238.CurrentServerDate", "13-5-2012");
[72nr61et.default] - Line Found : user_pref("CT2645238.DSInstall", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.DialogsAlignMode", "LTR");
[72nr61et.default] - Line Found : user_pref("CT2645238.DialogsGetterLastCheckTime", "Thu May 10 2012 22:39:46 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.DownloadReferralCookieData", "");
[72nr61et.default] - Line Found : user_pref("CT2645238.EMailNotifierPollDate", "Sun May 13 2012 03:08:17 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.FirstServerDate", "13-11-2011");
[72nr61et.default] - Line Found : user_pref("CT2645238.FirstTime", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.FirstTimeFF3", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.FixPageNotFoundErrors", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.GroupingServerCheckInterval", 1440);
[72nr61et.default] - Line Found : user_pref("CT2645238.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default] - Line Found : user_pref("CT2645238.HPInstall", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.HasUserGlobalKeys", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.HomePageProtectorEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.HomepageBeforeUnload", "hxxp://www.google.co.uk");
[72nr61et.default] - Line Found : user_pref("CT2645238.Initialize", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.InitializeCommonPrefs", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.InstallationAndCookieDataSentCount", 3);
[72nr61et.default] - Line Found : user_pref("CT2645238.InstallationId", "CT2645238_ZoneAlarm_Security.exe");
[72nr61et.default] - Line Found : user_pref("CT2645238.InstallationType", "ConduitIntegration");
[72nr61et.default] - Line Found : user_pref("CT2645238.InstalledDate", "Sun Nov 13 2011 13:50:58 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.IsAlertDBUpdated", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.IsGrouping", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.IsInitSetupIni", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.IsMulticommunity", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.IsOpenThankYouPage", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.IsOpenUninstallPage", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.LanguagePackLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2645238.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default] - Line Found : user_pref("CT2645238.LastLogin_3.10.0.1", "Tue Apr 17 2012 15:50:05 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LastLogin_3.12.0.7", "Wed Apr 25 2012 16:14:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LastLogin_3.12.2.3", "Sun May 13 2012 01:03:20 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LastLogin_3.8.0.8", "Mon Dec 05 2011 15:44:53 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LastLogin_3.8.1.0", "Sun Jan 15 2012 23:22:54 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LastLogin_3.9.0.3", "Thu Mar 08 2012 15:51:56 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.LatestVersion", "3.12.2.3");
[72nr61et.default] - Line Found : user_pref("CT2645238.Locale", "en");
[72nr61et.default] - Line Found : user_pref("CT2645238.MCDetectTooltipHeight", "83");
[72nr61et.default] - Line Found : user_pref("CT2645238.MCDetectTooltipShow", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default] - Line Found : user_pref("CT2645238.MCDetectTooltipWidth", "295");
[72nr61et.default] - Line Found : user_pref("CT2645238.MyStuffEnabledAtInstallation", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.OriginalFirstVersion", "3.8.0.8");
[72nr61et.default] - Line Found : user_pref("CT2645238.SHRINK_TOOLBAR", 1);
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchBoxWidth", 150);
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchCaption", "ZoneAlarm Security Customized Web Search");
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchEngineBeforeUnload", "data:text/plain,browser.search.defaultenginename=Yahoo!");
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchFromAddressBarIsInit", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchInNewTabEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchInNewTabIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchInNewTabLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchProtectorEnabled", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.SearchProtectorToolbarDisabled", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.SendProtectorDataViaLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.ServiceMapLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.SettingsLastCheckTime", "Sun May 13 2012 02:48:14 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.SettingsLastUpdate", "1336046592");
[72nr61et.default] - Line Found : user_pref("CT2645238.SuggestWindowWidth", "161");
[72nr61et.default] - Line Found : user_pref("CT2645238.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2645238&SearchSource=13");
[72nr61et.default] - Line Found : user_pref("CT2645238.ThirdPartyComponentsInterval", 504);
[72nr61et.default] - Line Found : user_pref("CT2645238.ThirdPartyComponentsLastCheck", "Mon May 07 2012 16:58:24 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.ThirdPartyComponentsLastUpdate", "1312887586");
[72nr61et.default] - Line Found : user_pref("CT2645238.ToolbarShrinkedFromSetup", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2645238");
[72nr61et.default] - Line Found : user_pref("CT2645238.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default] - Line Found : user_pref("CT2645238.UserID", "UN75827068024015816");
[72nr61et.default] - Line Found : user_pref("CT2645238.ValidationData_Search", 2);
[72nr61et.default] - Line Found : user_pref("CT2645238.ValidationData_Toolbar", 2);
[72nr61et.default] - Line Found : user_pref("CT2645238.alertChannelId", "1037922");
[72nr61et.default] - Line Found : user_pref("CT2645238.approveUntrustedApps", false);
[72nr61et.default] - Line Found : user_pref("CT2645238.counterAppsAdded", 2);
[72nr61et.default] - Line Found : user_pref("CT2645238.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default] - Line Found : user_pref("CT2645238.globalFirstTimeInfoLastCheckTime", "Sun May 06 2012 15:49:12 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.homepageProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.initDone", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.isAppTrackingManagerOn", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.myStuffEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.myStuffPublihserMinWidth", 400);
[72nr61et.default] - Line Found : user_pref("CT2645238.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default] - Line Found : user_pref("CT2645238.myStuffServiceIntervalMM", 1440);
[72nr61et.default] - Line Found : user_pref("CT2645238.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default] - Line Found : user_pref("CT2645238.oldAppsList", "129194820424161790,129194820424318041,111,129194820424474292,129194820424630543,129194820424786794,1000080,129538367557950003,1000034,129791241750835138,12945295665[...]
[72nr61et.default] - Line Found : user_pref("CT2645238.revertSettingsEnabled", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.searchProtectorDialogDelayInSec", 10);
[72nr61et.default] - Line Found : user_pref("CT2645238.searchProtectorEnableByLogin", true);
[72nr61et.default] - Line Found : user_pref("CT2645238.testingCtid", "");
[72nr61et.default] - Line Found : user_pref("CT2645238.toolbarAppMetaDataLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.toolbarContextMenuLastCheckTime", "Thu May 03 2012 20:35:14 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CT2645238.usagesFlag", 2);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2438727,CT2611275");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"8e32dec304b854f4f8a14251619361281\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2536667/CT2536667", "\"81323b4e6e33103b52aac33c9bf6fa3d3\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2645238/CT2645238", "\"a0f6eef93323a67eb08ce328bf88f1a01\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2611275/CT2611275", "\"3a39a2c6aa06c8157e9b762ecf5198501\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/GetHostedFeedRss?alertID=832836&alertFeedId=828639", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1037922/1033633/GB", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1037922/1033633/UK", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1242656/1238329/GB", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1242656/1238329/UK", "\"1-230910-97369200\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/20521/20081/UK", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/797073/792892/UK", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/UK", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/UK", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/929670/925454/UK", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2536667", "\"0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2645238", "\"1283468208\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2611275", "\"1281477797\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "G9mW7heT/8xIX1frcduu0A==");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "2E1/v7EfCEDbv3VaBQMELg==");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"807dc126dd28cc1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"0652eeacc6cb1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"6a637346d78ccc1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727", "\"d76323372b05c3748a3d6b1c93a98292\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2536667", "\"7b33d175177495d719efe50bcb251eee\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2611275", "\"d76323372b05c3748a3d6b1c93a98292\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2645238", "\"d76323372b05c3748a3d6b1c93a98292\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2536667&octid=CT2536667", "\"1321973079\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2645238&octid=CT2645238", "\"1321973043\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"1304242869\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2536667/CT2536667", "\"1304242869\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2611275/CT2611275", "\"1304004054\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"27f9ceb6f365cb1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/38/264/CT2645238/Images/634084960850172500.png", "\"42eee7aac1eaca1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/7/176/CT1764407/Images/634219899986281250.gif", "\"14819e877b65cb1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/75/261/CT2611275/Images/634084960850172500.png", "\"42eee7aac1eaca1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/images/skins/zynga/seperator.gif", "\"461a8601461ca1:0\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"65063552077b658639362bf4e7d5415f\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"00cd64b98c4b2f6f11be6390b2fffeab\"");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.EngineOwner", "");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.EngineOwnerGuid", "{aac4043a-8832-4abe-9963-35377f30b8e6}");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.EngineOwnerToolbarId", "castle_age");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.IsEngineShown", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\USER\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\72nr61et.default\\conduitCommon\\modules\\3.18.0.7");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/MyStuff/07/dd/07caac71-eac9-4963-9fa6-f6c1cc836ddd/Gadgets/9b2c0b7d-47bd-440b-a22f-35bf33416229.html", "381x226");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://listen.grooveshark.com/", "800x599");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://play.appsenjoy.com/rh.html", "600x587");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://storage.conduit.com/MyStuff/07/dd/07caac71-eac9-4963-9fa6-f6c1cc836ddd/Gadgets/9b2c0b7d-47bd-440b-a22f-35bf33416229.html", "800x708");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.myplayyard.com/gadgets/linked/hippos-feeder/", "764x396");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2536667");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{aac4043a-8832-4abe-9963-35377f30b8e6}");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "castle_age");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ToolbarsList", "CT2438727,CT2611275,CT2536667,CT2645238");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727,CT2611275,CT2536667,CT2645238");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.ToolbarsList4", "CT2645238");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu Mar 31 2011 16:57:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jul 03 2011 23:59:09 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.locale", "en");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jul 03 2011 23:59:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.showTrayIcon", false);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.alert.userId", "{45685dd2-822a-4452-8ba7-adc01ead3f84}");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Apr 16 2012 18:15:04 GMT+0100 (GMT Daylight Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.globalUserId", "a318caa0-aae0-4ef7-8776-7516637fa10e");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.killedEngine", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Mar 12 2013 09:46:42 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Mar 12 2013 15:00:07 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.locale", "en");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Mar 11 2013 20:57:59 GMT+0000 (GMT Standard Time)");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.notifications.userId", "f83b20d2-626d-4035-8a27-377f3ad69ee4");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.google.co.uk");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.originalSearchEngine", "data:text/plain,browser.search.defaultenginename=Yahoo!");
[72nr61et.default] - Line Found : user_pref("CommunityToolbar.undefined", "");
[72nr61et.default] - Line Found : user_pref("betterfacebook.Cogs65/typeahead", "for (;;);{\"__ar\":1,\"payload\":{\"entries\":[{\"i\":\"102452128776\",\"t\":\"FarmVille\",\"ty\":\"a\",\"it\":\"hxxp:\\/\\/photos-b.ak.fbcdn.net\\/photos[...]
[72nr61et.default] - Line Found : user_pref("extensions.enabledItems", "{1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1,{9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.0,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6,{FFB96CC1-7EB3-449D-B827-DB66[...]
[72nr61et.default] - Line Found : user_pref("extensions.trusted-ads.ExLst", "{\"u\":{\"v\":\"1.81\",\"d\":\"052014\"},\"h\":{\"pogo.com\":{\"p\":[{\"e\":\"/.*/\",\"r\":[\"/connect\\\\.facebook\\\\.net\\\\/en_US\\\\/all\\\\.js$/i\"]}]}[...]
[72nr61et.default] - Line Found : user_pref("extensions.trusted-ads.serpInject", "{\"u\":{\"v\":\"2.71\",\"d\":\"050714\"},\"l\":\"hxxp://search.adtrustmedia.com/search_safecontent.php\",\"e\":[{\"u\":\"hxxp://ads.adtrustmedia.com/con[...]
[72nr61et.default] - Line Found : user_pref("extensions.trusted-ads.serp_mywebsearch", "\"%2F*!%20serp-mywebsearch%20-%20v0.1.10%20-%202014-04-07%2018%3A21%3A58%20*%2F%0D%0Avar%20u%20%3D%20%7B%7D%3B%0A%0Avar%20Util%20%3D%20%7B%0A%09de[...]
[72nr61et.default] - Line Found : user_pref("extensions.trusted-ads.suggestions", "{\"u\":{\"v\":\"1.19\",\"d\":\"041614\"},\"t\":\"Verified Official Site\",\"s\":[{\"k\":\"amaz\",\"t\":\"amazon.com\",\"v\":\"www.amazon.com\",\"s\":\"[...]
[72nr61et.default] - Line Found : user_pref("extensions.zonealarm.hmpgUrl", "hxxp://search.zonealarm.com/?src=hp&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&");
[72nr61et.default] - Line Found : user_pref("extensions.zonealarm.kw_url", "hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&&q=");
[72nr61et.default] - Line Found : user_pref("extensions.zonealarm.newTabUrl", "hxxp://search.zonealarm.com/?src=nt&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&");
[72nr61et.default] - Line Found : user_pref("extensions.zonealarm.tlbrSrchUrl", "hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&&q=");
[72nr61et.default] - Line Found : user_pref("socialfixer.100003160332083/cached_content/donate_pagelet", "{\"expires_on\":1363678920049,\"content\":\"<div style=\\\"background-color:#ffffcc;border:1px solid #cccc99;padding:5px;-moz-bo[...]
[72nr61et.default] - Line Found : user_pref("socialfixer.760596254/cache/bfb_donate_pagelet", "<div style=\"background-color:#ffffcc;border:1px solid #cccc99;padding:5px;-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3[...]

-\\ Chromium v


-\\ Comodo Dragon v36.1.1.21

[C:\Users\USER\AppData\Local\Comodo\Dragon\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.search.ask.com/web?o=APN10257&q={searchTerms}
[C:\Users\USER\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Found [Extension] : cmaiofennmphjldldcpphcechfnnohja

*************************

AdwCleaner[R0].txt - [70885 octets] - [31/12/2014 17:15:39]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [70946 octets] ##########



#4 Flicker

Flicker
  • Topic Starter

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 31 December 2014 - 12:58 PM

# AdwCleaner v4.106 - Report created 31/12/2014 at 17:35:47
# Updated 21/12/2014 by Xplode
# Database : 2014-12-30.1 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : USER - HOME-PC
# Running from : C:\Users\USER\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

[#] Folder Deleted : C:\ProgramData\Browser Manager
Folder Deleted : C:\ProgramData\Free Ride Games
Folder Deleted : C:\ProgramData\wincert
Folder Deleted : C:\ProgramData\AdTrustMedia
Folder Deleted : C:\Program Files (x86)\Check Point Software Technologies LTD
Folder Deleted : C:\USERs\USER\AppData\Local\AdTrustMedia
Folder Deleted : C:\USERs\USER\AppData\LocalLow\Conduit
Folder Deleted : C:\USERs\USER\AppData\Roaming\blekko
Folder Deleted : C:\USERs\USER\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar
Folder Deleted : C:\USERs\USER\AppData\Roaming\iWin
Folder Deleted : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Deleted : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\anttoolbar@ant.com
File Deleted : C:\Users\Public\Desktop\GeekBuddy.lnk
File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk
File Deleted : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\searchplugins\zonealarm.xml
File Deleted : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\user.js

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
Value Deleted : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2611275
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{987D9269-F8A1-408F-BF62-4397D2F5363E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0722BEB-FDA1-4AA1-A2A8-15A74A5B3F70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E00DE9B9-B128-4C39-B732-B5D85013FA48}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{744E0E81-BC79-4719-A58B-C98F7E78EE5D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{6592FDEC-2C1A-413A-9985-25FEC2F0848D}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm LTD Toolbar
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v0.0.0.0

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v34.0.5 (x86 en-GB)

[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727..clientLogIsEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.AppTrackingLastCheckTime", "Sat Apr 09 2011 19:00:37 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.CTID", "CT2438727");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.CurrentServerDate", "13-5-2012");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.DialogsAlignMode", "LTR");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sat May 12 2012 16:54:19 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.DownloadReferralCookieData", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.FirstServerDate", "20-5-2010");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.FirstTime", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.FirstTimeFF3", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.FirstTimeSettingsDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.GroupingInvalidateCache", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.GroupingLastCheckTime", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.HasUserGlobalKeys", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.Initialize", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.InitializeCommonPrefs", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.InstalledDate", "Wed May 19 2010 23:38:56 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.InvalidateCache", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.IsGrouping", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.IsMulticommunity", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.IsOpenThankYouPage", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.IsOpenUninstallPage", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LanguagePackLastCheckTime", "Sun May 13 2012 17:40:59 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_2.5.8.6", "Tue Jun 29 2010 18:43:31 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_2.6.0.15", "Thu Jul 01 2010 21:19:32 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_2.7.1.3", "Thu Aug 19 2010 17:11:33 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_2.7.2.0", "Thu Mar 31 2011 15:51:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_3.12.0.7", "Wed Apr 25 2012 16:14:03 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_3.12.2.3", "Sun May 13 2012 14:44:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LastLogin_3.3.3.2", "Mon May 09 2011 20:42:30 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LatestVersion", "3.12.2.3");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.Locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.LoginCache", 4);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.MCDetectTooltipHeight", "83");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.MCDetectTooltipWidth", "295");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.MyStuffEnabledAtInstallation", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.RadioLastCheckTime", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.RadioLastUpdateServer", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchBoxWidth", 150);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchEngine", "Searchhxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2438727&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchInNewTabEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sun May 13 2012 17:40:58 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SearchProtectorToolbarDisabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ServiceMapLastCheckTime", "Sun May 13 2012 17:40:59 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SettingsCheckIntervalMin", 120);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SettingsLastCheckTime", "Sun May 13 2012 14:44:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.SettingsLastUpdate", "1336910559");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Fri Apr 22 2011 09:45:27 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1278548974");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ToolbarDisabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.UserID", "UN32540640027704347");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ValidationData_Search", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.ValidationData_Toolbar", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.alertChannelId", "832836");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.backendstorage.currentgame", "7A796E6761");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.clientLogIsEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Mon May 09 2011 20:42:30 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.initDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.isAppTrackingManagerOn", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.myStuffEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,129053036221800239,129023982256475322,129023982168975093,129023982451006863,129023982676944454,129078052328906859,129297366994[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.revertSettingsEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.searchProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.testingCtid", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Sun May 13 2012 17:40:59 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Thu Mar 31 2011 16:57:47 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2438727.usagesFlag", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667..clientLogIsEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.AppTrackingLastCheckTime", "Tue Aug 21 2012 23:37:32 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.CTID", "CT2536667");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.CurrentServerDate", "12-3-2013");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.DialogsAlignMode", "LTR");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.DialogsGetterLastCheckTime", "Mon Mar 11 2013 20:00:09 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.DownloadReferralCookieData", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.FirstServerDate", "2-7-2010");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.FirstTime", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.FirstTimeFF3", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.FirstTimeSettingsDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.FixPageNotFoundErrors", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.GroupingServerCheckInterval", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.HasUserGlobalKeys", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.HomePageProtectorEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.HomepageBeforeUnload", "hxxp://www.google.co.uk");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.Initialize", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.InitializeCommonPrefs", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.InstallationAndCookieDataSentCount", 3);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.InstalledDate", "Thu Jul 01 2010 23:51:29 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.IsAlertDBUpdated", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.IsGrouping", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.IsMulticommunity", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.IsOpenThankYouPage", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.IsOpenUninstallPage", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LanguagePackLastCheckTime", "Mon Mar 11 2013 20:57:58 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_2.7.1.3", "Thu Aug 19 2010 17:11:33 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_2.7.2.0", "Thu Mar 31 2011 15:51:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.10.0.1", "Tue Apr 24 2012 20:40:30 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.11.0.3", "Sun May 06 2012 09:54:51 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.12.2.3", "Sun May 20 2012 21:07:00 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.13.0.6", "Sun Jul 08 2012 18:04:36 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.14.1.0", "Mon Aug 27 2012 11:47:46 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.15.1.0", "Mon Nov 26 2012 17:40:03 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.16.0.3", "Thu Feb 14 2013 17:54:52 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.18.0.7", "Tue Mar 12 2013 18:59:59 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.3.3.2", "Mon May 09 2011 20:42:29 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.8.0.8", "Sun Dec 04 2011 20:16:39 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.8.1.0", "Mon Jan 30 2012 20:58:21 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LastLogin_3.9.0.3", "Mon Feb 13 2012 21:35:33 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LatestVersion", "3.18.0.7");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.Locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.LoginCache", 4);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.MCDetectTooltipHeight", "83");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.MCDetectTooltipShow", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.MCDetectTooltipWidth", "295");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.MyStuffComponents4194829522645999115", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.MyStuffEnabledAtInstallation", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SHRINK_TOOLBAR", 1);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchEngine", "Searchhxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2536667&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchEngineBeforeUnload", "data:text/plain,browser.search.defaultenginename=Yahoo!");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchFromAddressBarIsInit", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchInNewTabEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchInNewTabIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchInNewTabLastCheckTime", "Mon Mar 11 2013 20:57:54 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchInNewTabUserEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchProtectorEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SearchProtectorToolbarDisabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ServiceMapLastCheckTime", "Mon Mar 11 2013 20:57:54 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SettingsCheckIntervalMin", 120);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SettingsLastCheckTime", "Tue Mar 12 2013 17:04:11 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.SettingsLastUpdate", "1363072461");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ThirdPartyComponentsInterval", 504);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ThirdPartyComponentsLastCheck", "Wed Feb 20 2013 15:09:02 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ThirdPartyComponentsLastUpdate", "1331805997");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ToolbarDisabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2536667");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.UserID", "UN04627305010855143");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ValidationData_Search", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.ValidationData_Toolbar", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.alertChannelId", "929670");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.approveUntrustedApps", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.clientLogIsEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.components.1000080", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.globalFirstTimeInfoLastCheckTime", "Sat Mar 09 2013 23:03:26 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.homepageProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.initDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.isAppTrackingManagerOn", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.myStuffEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.myStuffPublihserMinWidth", 400);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.myStuffServiceIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.oldAppsList", "129107410737341442,129107410737341443,111,129107620374841780,129107823462024086,1000034,1000080,1000082,1000234,1000515,1000,1001,1002,1003,1004,1005,1006,1007,1008[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.revertSettingsEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.searchProtectorDialogDelayInSec", 10);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.searchProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.testingCtid", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.toolbarAppMetaDataLastCheckTime", "Mon Mar 11 2013 20:57:58 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.toolbarContextMenuLastCheckTime", "Sun Mar 03 2013 21:19:18 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.usageEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2536667.usagesFlag", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275..clientLogIsEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.BrowserCompStateIsOpen_129720562372107029", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.CTID", "ct2611275");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.CurrentServerDate", "13-5-2012");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.DialogsAlignMode", "LTR");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.DialogsGetterLastCheckTime", "Sat May 12 2012 16:54:21 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.DownloadReferralCookieData", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.EMailNotifierPollDate", "Mon May 09 2011 23:53:36 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.FirstServerDate", "29-6-2010");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.FirstTime", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.FirstTimeFF3", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.FirstTimeSettingsDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.FixPageNotFoundErrors", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.GroupingServerCheckInterval", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.HasUserGlobalKeys", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.Initialize", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.InitializeCommonPrefs", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.InstallationAndCookieDataSentCount", 3);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.InstallationType", "UnknownIntegration");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.InstalledDate", "Tue Jun 29 2010 18:56:20 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.IsGrouping", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.IsMulticommunity", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.IsOpenThankYouPage", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.IsOpenUninstallPage", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LanguagePackLastCheckTime", "Tue Jun 29 2010 18:56:21 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LastLogin_2.6.0.15", "Thu Jul 01 2010 21:19:32 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LastLogin_2.7.1.3", "Thu Aug 19 2010 17:11:33 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LastLogin_2.7.2.0", "Thu Mar 31 2011 15:51:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LastLogin_3.12.0.7", "Wed Apr 25 2012 16:14:05 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LastLogin_3.12.2.3", "Sun May 13 2012 14:44:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LastLogin_3.3.3.2", "Mon May 09 2011 20:42:28 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LatestVersion", "3.12.2.3");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.Locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.LoginCache", 4);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.MCDetectTooltipHeight", "83");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.MCDetectTooltipWidth", "295");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.MyStuffEnabledAtInstallation", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.PublisherContainerWidth", 1596);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioIsPodcast", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioMediaID", "9958");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioMediaType", "Media Player");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioMenuSelectedID", "EBRadioMenu_CT2611275_RECENT9958");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioShrinked", "expanded");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioStationName", "SKY.fm%20Country");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioStationURL", "hxxp://www.sky.fm/wma/country_low.asx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.RadioVolume", "79");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SHRINK_TOOLBAR", 1);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SearchEngine", "Searchhxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=ct2611275&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SearchFromAddressBarIsInit", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SearchInNewTabEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SearchInNewTabIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ServiceMapLastCheckTime", "Sun May 13 2012 14:44:44 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SettingsCheckIntervalMin", 120);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SettingsLastCheckTime", "Tue Jun 29 2010 18:56:07 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.SettingsLastUpdate", "1277320599");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ThirdPartyComponentsInterval", 504);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ThirdPartyComponentsLastCheck", "Tue Jun 29 2010 18:56:07 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ThirdPartyComponentsLastUpdate", "1277320599");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2611275");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.UserID", "UN29306047882253530");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ValidationData_Search", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ValidationData_Toolbar", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.WeatherNetwork", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.WeatherPollDate", "Mon May 09 2011 23:53:39 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.WeatherUnit", "C");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.alertChannelId", "1004080");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.clientLogIsEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.components.1000082", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.components.1000234", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.AppTrackingLastCheckTime", "Sat Apr 09 2011 19:00:37 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.DialogsAlignMode", "LTR");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.FirstTimeSettingsDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.InvalidateCache", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.LanguagePackLastCheckTime", "Sat May 12 2012 17:36:01 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.Locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.RadioLastCheckTime", "Mon May 09 2011 16:42:29 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.RadioLastUpdateIPServer", "3");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.RadioLastUpdateServer", "0");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.SearchEngine", "Searchhxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=ct2611275&octid=EB_ORIGINAL_CTID&SearchSource=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.SearchInNewTabLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.SettingsCheckIntervalMin", 120);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.SettingsLastCheckTime", "Sun May 13 2012 14:44:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.SettingsLastUpdate", "1336639137");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.ThirdPartyComponentsLastCheck", "Thu Apr 21 2011 07:41:09 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.ThirdPartyComponentsLastUpdate", "1278969850");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.globalFirstTimeInfoLastCheckTime", "Mon May 09 2011 20:42:28 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.toolbarAppMetaDataLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.ct2611275.toolbarContextMenuLastCheckTime", "Thu Mar 31 2011 16:57:46 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.homepageProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.initDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.isAppTrackingManagerOn", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.myStuffEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.myStuffPublihserMinWidth", 400);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.myStuffServiceIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.oldAppsList", "129169216377333934,129169216377646468,129169216377646469,129169216377802721,1000034,129169216377958973,129452954666557112,129452954665619610,129452954664057108,1291[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.revertSettingsEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.searchProtectorDialogDelayInSec", 10);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.searchProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.testingCtid", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2611275.usagesFlag", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238..clientLogIsEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.AppTrackingLastCheckTime", "Sun May 06 2012 12:58:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.CTID", "CT2645238");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.CurrentServerDate", "13-5-2012");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.DSInstall", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.DialogsAlignMode", "LTR");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.DialogsGetterLastCheckTime", "Thu May 10 2012 22:39:46 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.DownloadReferralCookieData", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.EMailNotifierPollDate", "Sun May 13 2012 03:08:17 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstServerDate", "13-11-2011");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstTime", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.FirstTimeFF3", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.FixPageNotFoundErrors", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.GroupingServerCheckInterval", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.HPInstall", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.HasUserGlobalKeys", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.HomePageProtectorEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.HomepageBeforeUnload", "hxxp://www.google.co.uk");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.Initialize", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.InitializeCommonPrefs", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationAndCookieDataSentCount", 3);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationId", "CT2645238_ZoneAlarm_Security.exe");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstallationType", "ConduitIntegration");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.InstalledDate", "Sun Nov 13 2011 13:50:58 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsAlertDBUpdated", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsGrouping", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsInitSetupIni", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsMulticommunity", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsOpenThankYouPage", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.IsOpenUninstallPage", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackReloadIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.10.0.1", "Tue Apr 17 2012 15:50:05 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.12.0.7", "Wed Apr 25 2012 16:14:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.12.2.3", "Sun May 13 2012 01:03:20 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.8.0.8", "Mon Dec 05 2011 15:44:53 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.8.1.0", "Sun Jan 15 2012 23:22:54 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LastLogin_3.9.0.3", "Thu Mar 08 2012 15:51:56 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.LatestVersion", "3.12.2.3");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.Locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipHeight", "83");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipShow", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.MCDetectTooltipWidth", "295");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.MyStuffEnabledAtInstallation", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.OriginalFirstVersion", "3.8.0.8");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SHRINK_TOOLBAR", 1);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchBoxWidth", 150);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchCaption", "ZoneAlarm Security Customized Web Search");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchEngineBeforeUnload", "data:text/plain,browser.search.defaultenginename=Yahoo!");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchFromAddressBarIsInit", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchProtectorEnabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SearchProtectorToolbarDisabled", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SendProtectorDataViaLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ServiceMapLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SettingsLastCheckTime", "Sun May 13 2012 02:48:14 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SettingsLastUpdate", "1336046592");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.SuggestWindowWidth", "161");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2645238&SearchSource=13");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsInterval", 504);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsLastCheck", "Mon May 07 2012 16:58:24 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ThirdPartyComponentsLastUpdate", "1312887586");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ToolbarShrinkedFromSetup", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2645238");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.UserID", "UN75827068024015816");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ValidationData_Search", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.ValidationData_Toolbar", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.alertChannelId", "1037922");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.approveUntrustedApps", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.counterAppsAdded", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.globalFirstTimeInfoLastCheckTime", "Sun May 06 2012 15:49:12 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.homepageProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.initDone", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.isAppTrackingManagerOn", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffPublihserMinWidth", 400);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffServiceIntervalMM", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.oldAppsList", "129194820424161790,129194820424318041,111,129194820424474292,129194820424630543,129194820424786794,1000080,129538367557950003,1000034,129791241750835138,12945295665[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.revertSettingsEnabled", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.searchProtectorDialogDelayInSec", 10);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.searchProtectorEnableByLogin", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.testingCtid", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.toolbarAppMetaDataLastCheckTime", "Sat May 12 2012 17:36:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.toolbarContextMenuLastCheckTime", "Thu May 03 2012 20:35:14 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CT2645238.usagesFlag", 2);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2438727,CT2611275");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"8e32dec304b854f4f8a14251619361281\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2536667/CT2536667", "\"81323b4e6e33103b52aac33c9bf6fa3d3\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2645238/CT2645238", "\"a0f6eef93323a67eb08ce328bf88f1a01\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2611275/CT2611275", "\"3a39a2c6aa06c8157e9b762ecf5198501\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/GetHostedFeedRss?alertID=832836&alertFeedId=828639", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1037922/1033633/GB", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1037922/1033633/UK", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1242656/1238329/GB", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1242656/1238329/UK", "\"1-230910-97369200\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/20521/20081/UK", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/797073/792892/UK", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/UK", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/UK", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/929670/925454/UK", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2536667", "\"0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2645238", "\"1283468208\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2611275", "\"1281477797\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "G9mW7heT/8xIX1frcduu0A==");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "2E1/v7EfCEDbv3VaBQMELg==");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "4BgM4MhF/sOgPsDNmIs3Yw==");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"807dc126dd28cc1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"0652eeacc6cb1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"6a637346d78ccc1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727", "\"d76323372b05c3748a3d6b1c93a98292\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2536667", "\"7b33d175177495d719efe50bcb251eee\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2611275", "\"d76323372b05c3748a3d6b1c93a98292\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2645238", "\"d76323372b05c3748a3d6b1c93a98292\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2536667&octid=CT2536667", "\"1321973079\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2645238&octid=CT2645238", "\"1321973043\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727", "\"1304242869\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2536667/CT2536667", "\"1304242869\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2611275/CT2611275", "\"1304004054\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"27f9ceb6f365cb1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/38/264/CT2645238/Images/634084960850172500.png", "\"42eee7aac1eaca1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/7/176/CT1764407/Images/634219899986281250.gif", "\"14819e877b65cb1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/75/261/CT2611275/Images/634084960850172500.png", "\"42eee7aac1eaca1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/images/skins/zynga/seperator.gif", "\"461a8601461ca1:0\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"65063552077b658639362bf4e7d5415f\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"00cd64b98c4b2f6f11be6390b2fffeab\"");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.EngineOwner", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{aac4043a-8832-4abe-9963-35377f30b8e6}");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "castle_age");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\USER\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\72nr61et.default\\conduitCommon\\modules\\3.18.0.7");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/MyStuff/07/dd/07caac71-eac9-4963-9fa6-f6c1cc836ddd/Gadgets/9b2c0b7d-47bd-440b-a22f-35bf33416229.html", "381x226");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://listen.grooveshark.com/", "800x599");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://play.appsenjoy.com/rh.html", "600x587");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://storage.conduit.com/MyStuff/07/dd/07caac71-eac9-4963-9fa6-f6c1cc836ddd/Gadgets/9b2c0b7d-47bd-440b-a22f-35bf33416229.html", "800x708");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.myplayyard.com/gadgets/linked/hippos-feeder/", "764x396");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2536667");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{aac4043a-8832-4abe-9963-35377f30b8e6}");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "castle_age");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2438727,CT2611275,CT2536667,CT2645238");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2438727,CT2611275,CT2536667,CT2645238");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2645238");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu Mar 31 2011 16:57:45 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun Jul 03 2011 23:59:09 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jul 03 2011 23:59:02 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.alert.userId", "{45685dd2-822a-4452-8ba7-adc01ead3f84}");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Apr 16 2012 18:15:04 GMT+0100 (GMT Daylight Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.globalUserId", "a318caa0-aae0-4ef7-8776-7516637fa10e");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.killedEngine", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Mar 12 2013 09:46:42 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Mar 12 2013 15:00:07 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Mar 11 2013 20:57:59 GMT+0000 (GMT Standard Time)");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.notifications.userId", "f83b20d2-626d-4035-8a27-377f3ad69ee4");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.google.co.uk");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "data:text/plain,browser.search.defaultenginename=Yahoo!");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("CommunityToolbar.undefined", "");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("betterfacebook.Cogs65/typeahead", "for (;;);{\"__ar\":1,\"payload\":{\"entries\":[{\"i\":\"102452128776\",\"t\":\"FarmVille\",\"ty\":\"a\",\"it\":\"hxxp:\\/\\/photos-b.ak.fbcdn.net\\/photos[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.enabledItems", "{1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1,{9AA46F4F-4DC7-4c06-97AF-5035170634FE}:4.0,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6,{FFB96CC1-7EB3-449D-B827-DB66[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.trusted-ads.ExLst", "{\"u\":{\"v\":\"1.81\",\"d\":\"052014\"},\"h\":{\"pogo.com\":{\"p\":[{\"e\":\"/.*/\",\"r\":[\"/connect\\\\.facebook\\\\.net\\\\/en_US\\\\/all\\\\.js$/i\"]}]}[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.trusted-ads.serpInject", "{\"u\":{\"v\":\"2.71\",\"d\":\"050714\"},\"l\":\"hxxp://search.adtrustmedia.com/search_safecontent.php\",\"e\":[{\"u\":\"hxxp://ads.adtrustmedia.com/con[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.trusted-ads.serp_mywebsearch", "\"%2F*!%20serp-mywebsearch%20-%20v0.1.10%20-%202014-04-07%2018%3A21%3A58%20*%2F%0D%0Avar%20u%20%3D%20%7B%7D%3B%0A%0Avar%20Util%20%3D%20%7B%0A%09de[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.trusted-ads.suggestions", "{\"u\":{\"v\":\"1.19\",\"d\":\"041614\"},\"t\":\"Verified Official Site\",\"s\":[{\"k\":\"amaz\",\"t\":\"amazon.com\",\"v\":\"www.amazon.com\",\"s\":\"[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.hmpgUrl", "hxxp://search.zonealarm.com/?src=hp&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.kw_url", "hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&&q=");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.newTabUrl", "hxxp://search.zonealarm.com/?src=nt&tbid=base2013&Lan=en&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("extensions.zonealarm.tlbrSrchUrl", "hxxp://search.zonealarm.com/search?src=tb&tbid=base2013&Lan={dfltLng}&gu=923f591eccd6467e89d9a4c92a7a78d8&tu=10G90007e2B0008&sku=&tstsId=&ver=&&q=");
[72nr61et.default\prefs.js] - Line Deleted : user_pref("socialfixer.100003160332083/cached_content/donate_pagelet", "{\"expires_on\":1363678920049,\"content\":\"<div style=\\\"background-color:#ffffcc;border:1px solid #cccc99;padding:5px;-moz-bo[...]
[72nr61et.default\prefs.js] - Line Deleted : user_pref("socialfixer.760596254/cache/bfb_donate_pagelet", "<div style=\"background-color:#ffffcc;border:1px solid #cccc99;padding:5px;-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3[...]

-\\ Chromium v

[C:\Users\USER\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.search.ask.com/web?o=APN10257&q={searchTerms}

-\\ Comodo Dragon v36.1.1.21

[C:\Users\USER\AppData\Local\Comodo\Dragon\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.search.ask.com/web?o=APN10257&q={searchTerms}
[C:\Users\USER\AppData\Local\Comodo\Dragon\User Data\Default\preferences] - Deleted [Extension] : cmaiofennmphjldldcpphcechfnnohja

*************************

AdwCleaner[R0].txt - [71063 octets] - [31/12/2014 17:15:39]
AdwCleaner[S0].txt - [76753 octets] - [31/12/2014 17:35:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [76814 octets] ##########



#5 Flicker

Flicker
  • Topic Starter

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 31 December 2014 - 01:17 PM

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2014
Ran by USER (administrator) on HOME-PC on 31-12-2014 18:08:53
Running from C:\Users\USER\Desktop
Loaded Profile: USER (Available profiles: USER)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Juniper Networks) C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Razer USA Ltd) C:\Program Files (x86)\Razer\Naga Epic\NagaEpicSysTray.exe
(RealNetworks, Inc.) C:\Program Files (x86)\real\realplayer\Update\realsched.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_246.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AsioThk32Reg] => %SYSTEMROOT%\SYSWOW64\REGSVR32.EXE /S %SYSTEMROOT%\SYSWOW64\CTASIO.DLL
HKLM\...\Run: [AsioReg] => REGSVR32.EXE /S CTASIO.DLL
HKLM\...\Run: [COMODO Internet Security] => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1297112 2014-12-09] (COMODO)
HKLM-x32\...\Run: [Razer Naga Driver] => C:\Program Files (x86)\Razer\Naga Epic\NagaEpicSysTray.exe [957840 2010-12-30] (Razer USA Ltd)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\real\realplayer\update\realsched.exe [295512 2013-12-01] (RealNetworks, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-09-24] (Comodo Security Solutions, Inc.)
HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\...\MountPoints2: {26d1d647-076d-11df-9933-806e6f6e6963} - D:\AngryBirdsStarWarsII.exe
HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\...\MountPoints2: {948d5d99-622b-11e2-a7d9-002564b1f3bf} - I:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\...\MountPoints2: {d93f2774-7f82-11e0-92f2-002564b1f3bf} - I:\VTP_Manager.exe
HKU\S-1-5-18\...\RunOnce: [SetDefaultMIDI] => MIDIDEF.EXE /s:'Creative SoundFont Synthesizer' /w:'SB Audigy'
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
Toolbar: HKU\S-1-5-21-2902748996-2809156623-1943104532-1000 -> ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKU\S-1-5-21-2902748996-2809156623-1943104532-1000 -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} -  No File
DPF: HKLM {AA570693-00E2-4907-B6F1-60A1199B030C} https://juniper.net/dana-cached/sc/JuniperSetupClient64.cab
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15101/CTSUEng.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} http://ccfiles.creative.com/Web/softwareupdate/su/ocx/15111/CTPID.cab
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\syswow64\urlmon.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default
FF SelectedSearchEngine: Google
FF Homepage: google.co.uk
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_246.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll ()
FF Plugin-x32: @ei.OurBabyMaker_27.com/Plugin -> C:\Program Files (x86)\OurBabyMaker_27EI\Installr\3.bin\NP27EISB.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\USER\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2902748996-2809156623-1943104532-1000: @facebook.com/FBPlugin,version=1.0.3 -> C:\Users\USER\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF Plugin HKU\S-1-5-21-2902748996-2809156623-1943104532-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\USER\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np_gp.dll (NOS Microsystems Ltd.)
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\artur.dubovoy@gmail.com [2014-12-29]
FF Extension: CAGE - Castle Age Game Enhancer - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\CAGE@Firefox [2013-05-25]
FF Extension: Lavasoft Search Plugin - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack [2012-09-30]
FF Extension: DownloadHelper - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-06]
FF Extension: Adobe DLM (powered by getPlus®) - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010-02-07]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-12-02]
FF Extension: Social Fixer - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\betterfacebook@mattkruse.com.xpi [2011-09-28]
FF Extension: Firebug - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\firebug@software.joehewitt.com.xpi [2014-05-27]
FF Extension: AdBlock Lite - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\jid1-dwtFBkQjb3SIQp@jetpack.xpi [2014-11-30]
FF Extension: Flagfox - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08]
FF Extension: ImTranslator - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2011-04-08]
FF Extension: Adblock Plus - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-05-25]
FF Extension: Greasemonkey - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-05-25]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-01]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-12-01]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-11-30] (SUPERAntiSpyware.com)
S4 Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70864 2014-09-25] (Comodo Security Solutions, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [7618952 2014-12-09] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2265304 2014-12-09] (COMODO)
S4 Creative Service for CDROM Access; C:\Windows\SysWOW64\CTsvcCDA.exe [44032 1999-12-13] (Creative Technology Ltd) [File not signed]
S4 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] () [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2370240 2014-11-27] (Comodo Security Solutions, Inc.)
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-09-24] (Comodo Security Solutions, Inc.)
S3 getPlusHelper; C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll [67360 2010-01-25] (NOS Microsystems Ltd.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S4 CFRMD; C:\Windows\SysWOW64\DRIVERS\CFRMD.sys [37976 2012-09-03] (Windows ® Win 7 DDK provider) [File not signed]
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [20184 2014-12-09] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [792648 2014-12-09] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [45880 2014-12-09] (COMODO)
S3 COMMONFX.DLL; C:\Windows\System32\COMMONFX.DLL [151552 2005-11-08] (Creative Technology Ltd)
R3 CT20XUT.DLL; C:\Windows\System32\CT20XUT.DLL [243712 2005-11-08] (Creative Technology Ltd.)
S3 CTAUDFX.DLL; C:\Windows\System32\CTAUDFX.DLL [695808 2005-11-08] (Creative Technology Ltd)
S3 CTEAPSFX.DLL; C:\Windows\System32\CTEAPSFX.DLL [208896 2005-11-08] (Creative Technology Ltd)
R3 CTEXFIFX.DLL; C:\Windows\System32\CTEXFIFX.DLL [1416704 2005-11-08] (Creative Technology Ltd.)
R3 CTHWIUT.DLL; C:\Windows\System32\CTHWIUT.DLL [116224 2005-11-08] (Creative Technology Ltd.)
S3 CTSBLFX.DLL; C:\Windows\System32\CTSBLFX.DLL [676864 2005-11-08] (Creative Technology Ltd)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows ® Win 7 DDK provider)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [104608 2014-12-09] (COMODO)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [89944 2013-02-21] (Kaspersky Lab)
R1 mbamchameleon; C:\Windows\system32\drivers\mbamchameleon.sys [93400 2014-11-21] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-12-31] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-11-21] (Malwarebytes Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S4 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [12288 2009-08-22] () [File not signed]
R3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [126464 2010-12-16] (Razer USA Ltd)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 ss_bserd; C:\Windows\System32\DRIVERS\ss_bserd.sys [128000 2009-09-19] (MCCI Corporation)
R3 VST64HWBS2; C:\Windows\System32\DRIVERS\VSTBS26.SYS [411136 2009-06-10] (Conexant Systems, Inc.)
R3 VST64_DPV; C:\Windows\System32\DRIVERS\VSTDPV6.SYS [1485312 2009-06-10] (Conexant Systems, Inc.)
S4 Lbd; system32\DRIVERS\Lbd.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S4 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-31 18:08 - 2014-12-31 18:14 - 00019954 _____ () C:\Users\USER\Desktop\FRST.txt
2014-12-31 18:08 - 2014-12-31 18:14 - 00000000 ____D () C:\FRST
2014-12-31 18:07 - 2014-12-31 18:07 - 02123264 _____ (Farbar) C:\Users\USER\Desktop\FRST64.exe
2014-12-31 18:07 - 2014-12-31 18:07 - 01114624 _____ (Farbar) C:\Users\USER\Desktop\FRST.exe
2014-12-31 15:33 - 2014-12-31 17:42 - 00000000 ____D () C:\AdwCleaner
2014-12-31 15:33 - 2014-12-31 15:33 - 02173952 _____ () C:\Users\USER\adwcleaner_4.106.exe
2014-12-31 03:08 - 2014-12-31 03:08 - 00000000 ____D () C:\Users\USER\AppData\Local\Sports Interactive
2014-12-30 17:19 - 2014-12-30 17:19 - 00000222 _____ () C:\Users\USER\Desktop\Football Manager 2014.url
2014-12-27 12:17 - 2014-12-27 12:17 - 00005668 _____ () C:\Users\USER\Desktop\Attach.txt
2014-12-26 17:45 - 2014-12-26 17:45 - 00511633 _____ () C:\Autoruns.zip
2014-12-26 17:20 - 2014-12-26 17:20 - 02347384 _____ (ESET) C:\esetsmartinstaller_enu.exe
2014-12-26 17:20 - 2014-12-26 17:20 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-12-24 15:38 - 2014-12-24 15:38 - 00003886 _____ () C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2014-12-21 14:21 - 2014-12-21 14:21 - 00000000 ____D () C:\Users\USER\AppData\Roaming\Full Control
2014-12-19 23:47 - 2014-12-19 23:47 - 00000000 ____D () C:\Users\USER\AppData\Roaming\FiraxisLive
2014-12-10 03:25 - 2014-12-10 03:25 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 03:01 - 2014-10-18 02:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 03:01 - 2014-10-18 01:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 03:01 - 2014-07-07 02:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-10 03:01 - 2014-07-07 02:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2014-12-10 03:01 - 2014-07-07 02:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2014-12-10 03:01 - 2014-07-07 02:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2014-12-10 03:01 - 2014-07-07 01:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2014-12-10 03:01 - 2014-07-07 01:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2014-12-10 03:01 - 2014-07-07 01:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2014-12-10 03:01 - 2014-07-07 01:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2014-12-10 02:40 - 2014-12-04 02:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 02:40 - 2014-12-04 02:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 02:40 - 2014-12-04 02:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 02:40 - 2014-12-04 02:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 02:40 - 2014-12-04 02:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 02:40 - 2014-12-04 02:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 02:40 - 2014-12-04 02:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 02:40 - 2014-12-01 23:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 02:40 - 2014-11-11 03:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 02:40 - 2014-11-11 02:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 02:40 - 2014-11-11 01:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 02:40 - 2014-11-08 03:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 02:40 - 2014-11-08 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 02:40 - 2014-10-30 02:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 02:40 - 2014-10-30 01:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 02:40 - 2014-10-03 02:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 02:40 - 2014-10-03 02:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 02:40 - 2014-10-03 02:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 02:40 - 2014-10-03 02:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 02:40 - 2014-10-03 02:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 02:40 - 2014-10-03 01:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 02:40 - 2014-10-03 01:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 02:40 - 2014-10-03 01:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 02:40 - 2014-10-03 01:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 02:40 - 2014-10-03 01:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-04 18:05 - 2014-12-04 18:05 - 00001894 _____ () C:\Users\Public\Desktop\Darklands.lnk
2014-12-04 18:05 - 2014-12-04 18:05 - 00000000 ____D () C:\GOG Games
2014-12-03 13:31 - 2014-12-03 13:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-12-03 13:31 - 2014-12-03 13:30 - 00319912 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-12-03 13:31 - 2014-12-03 13:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-12-03 13:31 - 2014-12-03 13:30 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-12-03 13:31 - 2014-12-03 13:30 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-12-03 13:30 - 2014-12-03 13:30 - 00000000 ____D () C:\Program Files\Java
2014-12-03 13:22 - 2014-12-03 13:22 - 00159578 _____ () C:\Users\USER\Documents\JavaRa-2.6.zip
2014-12-02 21:59 - 2014-12-02 21:59 - 00020128 _____ () C:\Users\USER\Documents\Result.txt
2014-12-02 21:56 - 2014-12-02 21:56 - 00852487 _____ () C:\Users\USER\Desktop\SecurityCheck.exe
2014-12-02 21:55 - 2014-12-02 21:55 - 00401920 _____ (Farbar) C:\Users\USER\Desktop\MiniToolBox.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-07-25 02:24 - 2011-05-17 12:21 - 00000000 ____D () C:\Users\USER\Desktop\Guru3D.com
2014-12-31 18:05 - 2014-10-17 22:12 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-31 17:54 - 2009-07-14 04:45 - 00023248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-31 17:54 - 2009-07-14 04:45 - 00023248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-31 17:53 - 2009-07-14 05:13 - 00941118 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-31 17:50 - 2010-01-22 15:52 - 01076914 _____ () C:\Windows\WindowsUpdate.log
2014-12-31 17:47 - 2014-07-03 05:51 - 00003358 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2902748996-2809156623-1943104532-1000
2014-12-31 17:47 - 2014-07-03 05:51 - 00003222 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2902748996-2809156623-1943104532-1000
2014-12-31 17:47 - 2014-05-18 12:12 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-31 17:46 - 2013-06-18 14:18 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-31 17:46 - 2010-01-22 16:46 - 00235858 _____ () C:\Windows\PFRO.log
2014-12-31 17:46 - 2009-07-14 05:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-31 17:46 - 2009-07-14 04:51 - 00287107 _____ () C:\Windows\setupact.log
2014-12-31 17:45 - 2010-01-22 16:50 - 00001080 _____ () C:\Windows\system32\settingsbkup.sfm
2014-12-31 17:45 - 2010-01-22 16:50 - 00001080 _____ () C:\Windows\system32\settings.sfm
2014-12-31 17:35 - 2010-01-22 23:31 - 00000000 ____D () C:\Users\USER\AppData\Roaming\CheckPoint
2014-12-31 17:31 - 2010-01-22 16:53 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{76F12743-92E9-4DEB-917F-BD75BB5AC495}
2014-12-31 17:20 - 2013-06-18 14:18 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-31 16:34 - 2011-09-21 18:24 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2902748996-2809156623-1943104532-1000UA.job
2014-12-31 14:57 - 2010-03-03 22:46 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-31 07:51 - 2014-07-08 05:52 - 00003336 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2902748996-2809156623-1943104532-1000
2014-12-31 07:51 - 2014-07-08 05:52 - 00003200 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2902748996-2809156623-1943104532-1000
2014-12-31 03:08 - 2010-03-07 18:26 - 00000000 ____D () C:\Users\USER\Documents\Sports Interactive
2014-12-31 03:08 - 2010-03-07 18:26 - 00000000 ____D () C:\Users\Public\Documents\Sports Interactive
2014-12-31 00:10 - 2011-05-23 18:31 - 00000000 ____D () C:\Users\USER\AppData\Roaming\TS3Client
2014-12-30 22:34 - 2011-09-21 18:24 - 00000900 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2902748996-2809156623-1943104532-1000Core.job
2014-12-26 19:27 - 2011-03-21 23:08 - 00000000 ____D () C:\Games
2014-12-26 19:26 - 2014-09-05 21:51 - 00000000 ____D () C:\Users\USER\Documents\D&D 3.5
2014-12-26 19:07 - 2011-05-09 15:45 - 00945868 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-12-26 16:44 - 2012-11-21 17:55 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-12-19 23:46 - 2010-04-25 12:56 - 00000000 ____D () C:\Users\USER\AppData\Local\My Games
2014-12-19 23:46 - 2010-02-21 21:13 - 00000000 ____D () C:\Users\USER\Documents\My Games
2014-12-19 23:46 - 2010-01-25 22:07 - 00482033 _____ () C:\Windows\DirectX.log
2014-12-19 23:44 - 2014-03-01 16:23 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-16 07:35 - 2010-01-22 16:39 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-12 13:42 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\rescache
2014-12-12 00:03 - 2013-06-24 06:11 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-12-11 23:20 - 2013-10-01 06:53 - 00124172 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-12-11 22:43 - 2013-06-24 06:11 - 00001947 _____ () C:\Users\Public\Desktop\COMODO Firewall.lnk
2014-12-11 20:34 - 2012-04-24 20:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-12-11 20:31 - 2010-01-22 22:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-11 07:18 - 2013-02-12 09:26 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-10 03:25 - 2014-05-06 22:52 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-10 03:25 - 2009-07-14 03:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 03:09 - 2013-08-14 23:32 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 03:02 - 2010-01-23 12:55 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-09 23:05 - 2014-10-17 22:12 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-09 23:05 - 2014-10-17 22:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-09 23:05 - 2014-10-17 22:12 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-09 00:20 - 2013-06-18 15:16 - 00792648 _____ (COMODO) C:\Windows\system32\Drivers\cmdguard.sys
2014-12-09 00:20 - 2013-06-18 15:16 - 00104608 _____ (COMODO) C:\Windows\system32\Drivers\inspect.sys
2014-12-09 00:20 - 2013-06-18 15:16 - 00045880 _____ (COMODO) C:\Windows\system32\Drivers\cmdhlp.sys
2014-12-09 00:20 - 2013-06-18 15:16 - 00020184 _____ (COMODO) C:\Windows\system32\Drivers\cmderd.sys
2014-12-09 00:20 - 2013-06-18 15:15 - 00437792 _____ (COMODO) C:\Windows\system32\guard64.dll
2014-12-09 00:20 - 2013-06-18 15:15 - 00354520 _____ (COMODO) C:\Windows\system32\cmdvrt64.dll
2014-12-09 00:20 - 2013-06-18 15:15 - 00352272 _____ (COMODO) C:\Windows\SysWOW64\guard32.dll
2014-12-09 00:20 - 2013-06-18 15:15 - 00286424 _____ (COMODO) C:\Windows\SysWOW64\cmdvrt32.dll
2014-12-09 00:20 - 2013-06-18 15:15 - 00045784 _____ (COMODO) C:\Windows\system32\cmdkbd64.dll
2014-12-09 00:20 - 2013-06-18 15:15 - 00040736 _____ (COMODO) C:\Windows\system32\cmdcsr.dll
2014-12-09 00:20 - 2013-06-18 15:15 - 00040664 _____ (COMODO) C:\Windows\SysWOW64\cmdkbd32.dll
2014-12-04 20:03 - 2014-05-18 12:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-04 20:03 - 2014-05-18 12:07 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-12-04 20:03 - 2013-01-21 21:34 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-04 18:05 - 2012-04-28 19:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2014-12-04 18:05 - 2009-07-14 05:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-04 17:59 - 2012-04-28 19:40 - 00000000 ____D () C:\Users\USER\AppData\Local\GOG.com
2014-12-04 17:59 - 2012-04-28 19:40 - 00000000 ____D () C:\Program Files (x86)\GOG.com
2014-12-04 00:07 - 2014-11-30 00:43 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2014-12-03 19:54 - 2010-02-07 14:34 - 00000000 ____D () C:\Users\USER\Documents\L5r
2014-12-03 16:05 - 2013-07-24 23:04 - 00000768 _____ () C:\Windows\wininit.ini
2014-12-03 16:05 - 2010-01-23 15:53 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-12-03 13:31 - 2014-04-20 11:58 - 00000000 ____D () C:\JavaRa-2.6
2014-12-02 16:21 - 2010-02-07 14:32 - 00000000 ____D () C:\Users\USER\AppData\Local\Adobe
2014-12-02 00:26 - 2010-01-23 12:58 - 00000000 ____D () C:\Windows\System32\Tasks\Games

Files to move or delete:
====================
C:\Users\USER\adwcleaner_4.106.exe
C:\Users\USER\cfw_installer.exe
C:\Users\USER\jre-7u25-windows-i586.exe
C:\Users\USER\jre-7u25-windows-x64.exe
C:\Users\USER\raidcall.exe


Some content of TEMP:
====================
C:\Users\USER\AppData\Local\Temp\drm_dialogs.dll
C:\Users\USER\AppData\Local\Temp\drm_dyndata_7330014.dll
C:\Users\USER\AppData\Local\Temp\java-installer.exe
C:\Users\USER\AppData\Local\Temp\Quarantine.exe
C:\Users\USER\AppData\Local\Temp\Setup_Downloader_3.6.0_stable.exe
C:\Users\USER\AppData\Local\Temp\sqlite3.dll
C:\Users\USER\AppData\Local\Temp\_is1821.exe
C:\Users\USER\AppData\Local\Temp\_is3511.exe
C:\Users\USER\AppData\Local\Temp\_is3B23.exe
C:\Users\USER\AppData\Local\Temp\_is4C5F.exe
C:\Users\USER\AppData\Local\Temp\_is69FA.exe
C:\Users\USER\AppData\Local\Temp\_is81.exe
C:\Users\USER\AppData\Local\Temp\_isA43D.exe
C:\Users\USER\AppData\Local\Temp\_isA5B2.exe
C:\Users\USER\AppData\Local\Temp\_isBBE1.exe
C:\Users\USER\AppData\Local\Temp\_isC46B.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-25 08:50

==================== End Of Log ============================Attached File  Addition.txt   41.48KB   0 downloads


Edited by Flicker, 31 December 2014 - 01:24 PM.


#6 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:01 PM

Posted 31 December 2014 - 02:27 PM

Run this tool to clean your Temporary files/Folders.

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program.
  • TFC will close all open programs itself in order to run.
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted, it should not take long to finish.
  • Once it's finished, click OK to reboot.
  • If it does not reboot, reboot your system manually.
===

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
start

CloseProcesses:

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKU\S-1-5-21-2902748996-2809156623-1943104532-1000 -> ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKU\S-1-5-21-2902748996-2809156623-1943104532-1000 -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} -  No File
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @ei.OurBabyMaker_27.com/Plugin -> C:\Program Files (x86)\OurBabyMaker_27EI\Installr\3.bin\NP27EISB.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin HKU\S-1-5-21-2902748996-2809156623-1943104532-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\USER\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Extension: Lavasoft Search Plugin - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack [2012-09-30]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-01]
S4 Lbd; system32\DRIVERS\Lbd.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S4 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
C:\Users\USER\jre-7u25-windows-i586.exe
C:\Users\USER\jre-7u25-windows-x64.exe

End
Save the files as fixlist.txt into the same folder as FRST

Run FRST and click Fix only once and wait.

Restart the computer normally to reset the registry.

The tool will create a log Fixlog.txt please post it to your reply.
===

Download Security Check by screen317 from here
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.
p.s.
If the SecurityCheck program fails to run for any reason, run it as an Administrator.

If the site is busy or not available use this mirror site:
http://www.bleepingcomputer.com/download/securitycheck/

How is the computer running now?

======

#7 Flicker

Flicker
  • Topic Starter

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 01 January 2015 - 11:34 AM

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-12-2014
Ran by USER at 2015-01-01 16:30:51 Run:1
Running from C:\Users\USER\Desktop
Loaded Profile: USER (Available profiles: USER)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start

CloseProcesses:

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKU\S-1-5-21-2902748996-2809156623-1943104532-1000 -> ZoneAlarm Security Engine - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll No File
Toolbar: HKU\S-1-5-21-2902748996-2809156623-1943104532-1000 -> No Name - {91DA5E8A-3318-4F8C-B67E-5964DE3AB546} -  No File
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll No File
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @ei.OurBabyMaker_27.com/Plugin -> C:\Program Files (x86)\OurBabyMaker_27EI\Installr\3.bin\NP27EISB.dll No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin HKU\S-1-5-21-2902748996-2809156623-1943104532-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\USER\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF Extension: Lavasoft Search Plugin - C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack [2012-09-30]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-01]
S4 Lbd; system32\DRIVERS\Lbd.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S4 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
C:\Users\USER\jre-7u25-windows-i586.exe
C:\Users\USER\jre-7u25-windows-x64.exe

End
*****************

Processes closed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} => value deleted successfully.
"HKCR\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}" => Key deleted successfully.
HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{91DA5E8A-3318-4F8C-B67E-5964DE3AB546} => value deleted successfully.
HKCR\CLSID\{91DA5E8A-3318-4F8C-B67E-5964DE3AB546} => Key not found.
"HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.67.2" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2" => Key deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@ei.OurBabyMaker_27.com/Plugin" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => Key deleted successfully.
"HKU\S-1-5-21-2902748996-2809156623-1943104532-1000\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin" => Key deleted successfully.
C:\Users\USER\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll not found.
C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\72nr61et.default\Extensions\jid1-yZwVFzbsyfMrqQ@jetpack => Moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} => Moved successfully.
Lbd => Service deleted successfully.
nvlddmkm => Service deleted successfully.
nvvad_WaveExtensible => Service deleted successfully.
SBRE => Service deleted successfully.
C:\Users\USER\jre-7u25-windows-i586.exe => Moved successfully.
C:\Users\USER\jre-7u25-windows-x64.exe => Moved successfully.


The system needed a reboot.

==== End of Fixlog 16:30:52 ====



#8 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:01 PM

Posted 01 January 2015 - 11:36 AM

How is the computer running now?

#9 Flicker

Flicker
  • Topic Starter

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 01 January 2015 - 11:43 AM

Hi Nasdaq,

 

the system seems fine thanks, just running the security check at the mo but nothing seems to have popped up. I may have to come back to you though as I could be using the system for hours and it would be fine and then suddenly up it would pop.

 

thanks for the help



#10 Flicker

Flicker
  • Topic Starter

  • Members
  • 68 posts
  • OFFLINE
  •  
  • Local time:07:01 PM

Posted 01 January 2015 - 11:49 AM

Results of screen317's Security Check version 0.99.93  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
``````````````Antivirus/Firewall Check:``````````````
 Windows Firewall Disabled!  
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 DH Driver Cleaner Professional Edition
 Adobe Flash Player 10 Flash Player out of Date!
  Adobe Flash Player 15.0.0.246 Flash Player out of Date!  
 Adobe Reader XI  
 Mozilla Firefox (34.0.5)
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Comodo Firewall cmdagent.exe
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````



#11 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:01 PM

Posted 01 January 2015 - 02:22 PM

Critical vulnerabilities have been identified in old version of Adobe Flash Player please get the latest version.

Flash test site:
http://www.adobe.com/software/flash/about/
Install the new version or if you have the latest close the windows.

Flash Player Help / Find version
http://helpx.adobe.com/flash-player/kb/find-version-flash-player.html#main_Find_the_Flash_Player_version_installed_on_your_machine

Remove the old version of flash using the Add/Remove programs applet.
===

If all is well.

To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe.
http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/
===

#12 nasdaq

nasdaq

  • Malware Response Team
  • 39,559 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:03:01 PM

Posted 07 January 2015 - 11:06 AM

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users