mathisona Posted September 11, 2012 ID:595673 Share Posted September 11, 2012 I am infected. I first noticed the Whitesmoke toolbar in Firefox. Shortly after I saw the toolbar, my webpages started redirecting, but not all the time. I ran Malwarebytes and it found 1 object which it was able to remove. After a restart, The toolbar was still there, but I was no longer being redirected when clicking links. The next day, the redirects started again. The tool bar does not show up in Add/Remove Programs, or in my Program list. I have run AVG Free, TDDSKiller, and Combofix all with no luck. I even ran Kaspersky boot disk to run a scan before Windows loaded which didn't find anything. I downloaded Hijackthis, but when i run a scan and log, I receive an error that my "hosts" file is locked so it cannot save a log file, i can only do a scan. I am running Windows 7 Progessional 64bit. I am at a loss of what to do. Any help is appreciated. Thank you in advance!! Link to post Share on other sites More sharing options...
Maniac Posted September 11, 2012 ID:595765 Share Posted September 11, 2012 Hello mathisona and ! My name is Maniac and I will be glad to help you solve your malware problem.Please note:If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.Make sure you read all of the instructions and fixes thoroughly before continuing with them.Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.You shouldn't run ComboFix without supervision from trained. Please read this article: hereStep 1Download OTC to your desktop and run itClick Yes to beginning the Cleanup process and remove these components, including this application.You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.Step 2Please download AdwCleaner from here and save it on your Desktop. Right-click on adwcleaner.exe and select Run As Administrator to launch the application.Now click on the Search tab.Please post the contents of the log-file created in your next post.Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1. Link to post Share on other sites More sharing options...
mathisona Posted September 11, 2012 Author ID:595978 Share Posted September 11, 2012 Thank you for your help!!!! Here is my log file:# AdwCleaner v2.001 - Logfile created 09/11/2012 at 16:22:53# Updated 09/09/2012 by Xplode# Operating system : Windows 7 Professional Service Pack 1 (64 bits)# User : Anna - ANNA-PC# Boot Mode : Normal# Running from : C:\Users\Anna\Desktop\adwcleaner.exe# Option [search]***** [services] ********** [Files / Folders] *****File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xmlFile Found : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\searchplugins\Conduit.xmlFolder Found : C:\Program Files (x86)\AVG Secure SearchFolder Found : C:\Program Files (x86)\Common Files\AVG Secure SearchFolder Found : C:\Program Files (x86)\Giant SavingsFolder Found : C:\ProgramData\AVG Secure SearchFolder Found : C:\Users\Anna\AppData\Local\AVG Secure SearchFolder Found : C:\Users\Anna\AppData\Local\Giant SavingsFolder Found : C:\Users\Anna\AppData\LocalLow\AVG Secure SearchFolder Found : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\CT3244149Folder Found : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\extensions\{462be121-2b54-4218-bf00-b9bf8135b23f}Folder Found : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\Smartbar***** [Registry] *****Key Found : HKCU\Software\AppDataLow\Software\CrossriderKey Found : HKCU\Software\AppDataLow\Software\Giant SavingsKey Found : HKCU\Software\AppDataLow\Software\SmartBarKey Found : HKCU\Software\AVG Secure SearchKey Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Found : HKLM\Software\AVG Secure SearchKey Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXEKey Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLLKey Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPIKey Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObjKey Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocolKey Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApiKey Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLEKey Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-pluginKey Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifjKey Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure SearchKey Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}Key Found : HKU\S-1-5-21-1939633783-3875354255-1585101084-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}Key Found : HKU\S-1-5-21-1939633783-3875354255-1585101084-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]***** [internet Browsers] *****-\\ Internet Explorer v9.0.8112.16421[OK] Registry is clean.-\\ Mozilla Firefox v15.0.1 (en-US)Profile name : defaultFile : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\prefs.jsFound : user_pref("CT2394708.SearchEngineBeforeUnload", "Google");Found : user_pref("CT2394708.ValidationData_Toolbar", 0);Found : user_pref("CT3244149.1000082.isPlayDisplay", "true");Found : user_pref("CT3244149.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]Found : user_pref("CT3244149.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");Found : user_pref("CT3244149.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]Found : user_pref("CT3244149.FirstTime", "true");Found : user_pref("CT3244149.FirstTimeFF3", "true");Found : user_pref("CT3244149.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT324[...]Found : user_pref("CT3244149.UserID", "UN72324264752060211");Found : user_pref("CT3244149.UserId", "20872659-63aa-e709-8cc2-9a46dec7a454");Found : user_pref("CT3244149.addressBarTakeOverEnabledInHidden", "true");Found : user_pref("CT3244149.autoDisableScopes", 0);Found : user_pref("CT3244149.browser.search.defaultthis.engineName", true);Found : user_pref("CT3244149.cbcountry_001", "US");Found : user_pref("CT3244149.cbfirsttime", "Fri Sep 07 2012 15:30:34 GMT-0500 (Central Daylight Time)");Found : user_pref("CT3244149.defaultSearch", "true");Found : user_pref("CT3244149.embeddedsData", "[{\"appId\":\"129895725399351616\",\"apiPermissions\":{\"cross[...]Found : user_pref("CT3244149.enableAlerts", "always");Found : user_pref("CT3244149.enableSearchFromAddressBar", "true");Found : user_pref("CT3244149.firstTimeDialogOpened", "true");Found : user_pref("CT3244149.fixPageNotFoundError", "true");Found : user_pref("CT3244149.fixPageNotFoundErrorInHidden", "true");Found : user_pref("CT3244149.fixUrls", true);Found : user_pref("CT3244149.hxxp___api18_starwebnet_com.pid2", "6bbaf761f920f5e2");Found : user_pref("CT3244149.hxxp___api20_starwebnet_com.pid2", "6bbaf761f920f5e2");Found : user_pref("CT3244149.hxxp___api21_starwebnet_com.pid2", "6bbaf761f920f5e2");Found : user_pref("CT3244149.hxxp___api22_starwebnet_com.pid2", "6bbaf761f920f5e2");Found : user_pref("CT3244149.hxxp___api32_starwebnet_com.pid2", "6bbaf761f920f5e2");Found : user_pref("CT3244149.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_cache", "[\"c822c1b63853ed273b89[...]Found : user_pref("CT3244149.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_defaultGui", "{\"gui\":[{\"type\[...]Found : user_pref("CT3244149.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_settings", "{\"initUrl\":\"hxxp:[...]Found : user_pref("CT3244149.installId", "221");Found : user_pref("CT3244149.installType", "ConduitNSISIntegration");Found : user_pref("CT3244149.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");Found : user_pref("CT3244149.isNewTabEnabled", true);Found : user_pref("CT3244149.isPerformedSmartBarTransition", "true");Found : user_pref("CT3244149.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");Found : user_pref("CT3244149.keyword", true);Found : user_pref("CT3244149.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]Found : user_pref("CT3244149.openThankYouPage", "false");Found : user_pref("CT3244149.openUninstallPage", "true");Found : user_pref("CT3244149.search.searchAppId", "129895725399351616");Found : user_pref("CT3244149.search.searchCount", "0");Found : user_pref("CT3244149.searchInNewTabEnabledInHidden", "true");Found : user_pref("CT3244149.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");Found : user_pref("CT3244149.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]Found : user_pref("CT3244149.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]Found : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]Found : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]Found : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]Found : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]Found : user_pref("CT3244149.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]Found : user_pref("CT3244149.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1347049829796");Found : user_pref("CT3244149.serviceLayer_services_appsMetadata_lastUpdate", "1347049829749");Found : user_pref("CT3244149.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1347049830168");Found : user_pref("CT3244149.serviceLayer_services_login_10.10.27.6_lastUpdate", "1347314102005");Found : user_pref("CT3244149.serviceLayer_services_optimizer_lastUpdate", "1347049829917");Found : user_pref("CT3244149.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1347049830985");Found : user_pref("CT3244149.serviceLayer_services_searchAPI_lastUpdate", "1347049828925");Found : user_pref("CT3244149.serviceLayer_services_serviceMap_lastUpdate", "1347292784885");Found : user_pref("CT3244149.serviceLayer_services_toolbarContextMenu_lastUpdate", "1347049830127");Found : user_pref("CT3244149.serviceLayer_services_toolbarSettings_lastUpdate", "1347322348644");Found : user_pref("CT3244149.serviceLayer_services_translation_lastUpdate", "1347292785020");Found : user_pref("CT3244149.settingsINI", true);Found : user_pref("CT3244149.shouldFirstTimeDialog", "false");Found : user_pref("CT3244149.smartbar.CTID", "CT3244149");Found : user_pref("CT3244149.smartbar.Uninstall", "0");Found : user_pref("CT3244149.smartbar.homepage", true);Found : user_pref("CT3244149.smartbar.isHidden", true);Found : user_pref("CT3244149.smartbar.toolbarName", "WhiteSmoke US New ");Found : user_pref("CT3244149.startPage", "userChanged");Found : user_pref("CT3244149.toolbarBornServerTime", "7-9-2012");Found : user_pref("CT3244149.toolbarCurrentServerTime", "11-9-2012");Found : user_pref("CT3244149.url_history0001", "hxxps://www.google.com:::clickhandler:::1347128603763,,,hxxp[...]Found : user_pref("Smartbar.ConduitHomepagesList", "");Found : user_pref("Smartbar.ConduitSearchEngineList", "");Found : user_pref("Smartbar.ConduitSearchUrlList", "");Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxps://isearch.avg.com/search?cid={1471B317-B1C[...]Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3244149");Found : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\10.0.0.7");Found : user_pref("browser.search.defaultengine", "Ask.com");Found : user_pref("browser.search.defaultenginename", "AVG Secure Search");Found : user_pref("browser.search.defaultthis.engineName", "Radio 123 Customized Web Search");Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2394708&Sea[...]Found : user_pref("browser.search.order.1", "Ask.com");Found : user_pref("extensions.crossriderapp3491.3491.InstallationThankYouPage", true);Found : user_pref("extensions.crossriderapp3491.3491.InstallationTime", 1347049789);Found : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.searchUserConifrmation", false[...]Found : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.setHomepage", false);Found : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.setNewTab", false);Found : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.setSearch", false);Found : user_pref("extensions.crossriderapp3491.3491.active", true);Found : user_pref("extensions.crossriderapp3491.3491.addressbar", "");Found : user_pref("extensions.crossriderapp3491.3491.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG&&appA[...]Found : user_pref("extensions.crossriderapp3491.3491.backgroundver", 10);Found : user_pref("extensions.crossriderapp3491.3491.can_run_bg_code", true);Found : user_pref("extensions.crossriderapp3491.3491.certdomaininstaller", "");Found : user_pref("extensions.crossriderapp3491.3491.changeprevious", false);Found : user_pref("extensions.crossriderapp3491.3491.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie.InstallationTime.value", "1347049789");Found : user_pref("extensions.crossriderapp3491.3491.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_aoi.value", "1347049789");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_blocklist.expiration", "Fri Sep 07 2012 16:[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_blocklist.value", "%5B%22nonexistantdomain.[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_country_code.expiration", "Fri Sep 14 2012 [...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_country_code.value", "%22US%22");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_crr.value", "1347053152");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_hotfix20111102645.value", "%221%22");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_installer_params.value", "%7B%22source_id%2[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_parent_zoneid.value", "%2270034%22");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 0[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_pc_20120828.value", "1347049877818");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_product_id.value", "%221250%22");Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_zoneid.value", "%2278523%22");Found : user_pref("extensions.crossriderapp3491.3491.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GM[...]Found : user_pref("extensions.crossriderapp3491.3491.cookie.dbtest.value", "1347049872779");Found : user_pref("extensions.crossriderapp3491.3491.description", "Vid-Saver allows you to download your fa[...]Found : user_pref("extensions.crossriderapp3491.3491.domain", "");Found : user_pref("extensions.crossriderapp3491.3491.enablesearch", false);Found : user_pref("extensions.crossriderapp3491.3491.fbremoteurl", "");Found : user_pref("extensions.crossriderapp3491.3491.group", 0);Found : user_pref("extensions.crossriderapp3491.3491.homepage", "");Found : user_pref("extensions.crossriderapp3491.3491.iframe", false);Found : user_pref("extensions.crossriderapp3491.3491.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.InstallerIdentifiers.value", "%7B%22installe[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_appVer.value", "46");Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_lastVersion.expiration", "Fri Feb [...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_lastVersion.value", "0");Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_meta.value", "%7B%7D");Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_nextCheck.expiration", "Fri Sep 07[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_nextCheck.value", "true");Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_queue.value", "%7B%7D");Found : user_pref("extensions.crossriderapp3491.3491.internaldb.SoftwareDetected.expiration", "Fri Feb 01 20[...]Found : user_pref("extensions.crossriderapp3491.3491.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%[...]Found : user_pref("extensions.crossriderapp3491.3491.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...]Found : user_pref("extensions.crossriderapp3491.3491.manifesturl", "");Found : user_pref("extensions.crossriderapp3491.3491.name", "Vid-Saver");Found : user_pref("extensions.crossriderapp3491.3491.newtab", "");Found : user_pref("extensions.crossriderapp3491.3491.opensearch", "");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000014.code", "Array.prototype.indexOf|[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000014.name", "GPL Plugin (Loader)");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000014.ver", 4);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rul[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000015.name", "GPL Background (BG)");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000015.ver", 2);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_13.code", "(function(a){a.selectedText=f[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_13.name", "CrossriderAppUtils");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_13.ver", 2);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_14.name", "CrossriderUtils");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_14.ver", 2);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_15.code", "(function(f){var u={};var e=M[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_15.name", "FacebookFFIE");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_15.ver", 1);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_16.name", "FFAppAPIWrapper");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_16.ver", 3);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_17.code", "if(typeof window!==\"undefine[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_17.name", "jQuery");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_17.ver", 3);Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_47.code", "(function(){appAPI.ready=func[...]Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_47.name", "resources_background");Found : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_47.ver", 1);Found : user_pref("extensions.crossriderapp3491.3491.plugins_lists.plugins_0", "17,14,16,47,1000015");Found : user_pref("extensions.crossriderapp3491.3491.plugins_lists.plugins_1", "17,14,13,16,15,1000014");Found : user_pref("extensions.crossriderapp3491.3491.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...]Found : user_pref("extensions.crossriderapp3491.3491.pluginsversion", 11);Found : user_pref("extensions.crossriderapp3491.3491.publisher", "215 Apps");Found : user_pref("extensions.crossriderapp3491.3491.searchstatus", 0);Found : user_pref("extensions.crossriderapp3491.3491.setnewtab", false);Found : user_pref("extensions.crossriderapp3491.3491.settingsurl", "");Found : user_pref("extensions.crossriderapp3491.3491.thankyou", "hxxp://vid-saver.com/thankyou.html");Found : user_pref("extensions.crossriderapp3491.3491.updateinterval", 360);Found : user_pref("extensions.crossriderapp3491.3491.ver", 46);Found : user_pref("extensions.crossriderapp3491.adsOldValue", 10);Found : user_pref("extensions.crossriderapp3491.apps", "3491");Found : user_pref("extensions.crossriderapp3491.bic", "138975cd38843b7e2d668f0df5472407");Found : user_pref("extensions.crossriderapp3491.cid", 3491);Found : user_pref("extensions.crossriderapp3491.firstrun", false);Found : user_pref("extensions.crossriderapp3491.hadappinstalled", true);Found : user_pref("extensions.crossriderapp3491.installationdate", 1347049825);Found : user_pref("extensions.crossriderapp3491.lastcheck", 22450830);Found : user_pref("extensions.crossriderapp3491.lastcheckitem", 22450885);Found : user_pref("extensions.crossriderapp3491.modetype", "production");Found : user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true);Found : user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342553610);Found : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false[...]Found : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false);Found : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false);Found : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false);Found : user_pref("extensions.crossriderapp4479.4479.active", true);Found : user_pref("extensions.crossriderapp4479.4479.addressbar", "");Found : user_pref("extensions.crossriderapp4479.4479.affid", "0");Found : user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n/**********************************[...]Found : user_pref("extensions.crossriderapp4479.4479.backgroundver", 2);Found : user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);Found : user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");Found : user_pref("extensions.crossriderapp4479.4479.changeprevious", false);Found : user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342553610");Found : user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342553610");Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%2[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2242874%22");Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22");Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...]Found : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2257427%22");Found : user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons dis[...]Found : user_pref("extensions.crossriderapp4479.4479.domain", "");Found : user_pref("extensions.crossriderapp4479.4479.emailsig", "");Found : user_pref("extensions.crossriderapp4479.4479.enablesearch", false);Found : user_pref("extensions.crossriderapp4479.4479.exposesites", "");Found : user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");Found : user_pref("extensions.crossriderapp4479.4479.group", 0);Found : user_pref("extensions.crossriderapp4479.4479.homepage", "");Found : user_pref("extensions.crossriderapp4479.4479.iframe", false);Found : user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installe[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "15");Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb [...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Tue Jul 24[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.expiration", "Fri[...]Found : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.value", "%7B%22re[...]Found : user_pref("extensions.crossriderapp4479.4479.js", "\nvar _GPL_PID=1171,_GPL_baseCDN=\"giantsavings-a[...]Found : user_pref("extensions.crossriderapp4479.4479.manifesturl", "");Found : user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");Found : user_pref("extensions.crossriderapp4479.4479.newtab", "");Found : user_pref("extensions.crossriderapp4479.4479.opensearch", "");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:funct[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.name", "base");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 2);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=f[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.name", "CrossriderAppUtils");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.name", "CrossriderUtils");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.code", "(function(f){var u={};var e=M[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.name", "FacebookFFIE");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.name", "FFAppAPIWrapper");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 3);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.code", "if(typeof window!==\"undefine[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.name", "jQuery");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.code", "var CrossriderDebugManager=(f[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.code", "(function(a){appAPI.queueMana[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.name", "resources");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.code", "var CrossriderInitializerPlug[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 1);Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com |[...]Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1");Found : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 2);Found : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "17,14,16");Found : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,28"[...]Found : user_pref("extensions.crossriderapp4479.4479.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...]Found : user_pref("extensions.crossriderapp4479.4479.pluginsversion", 4);Found : user_pref("extensions.crossriderapp4479.4479.premium", true);Found : user_pref("extensions.crossriderapp4479.4479.publisher", "215 Apps");Found : user_pref("extensions.crossriderapp4479.4479.searchstatus", 0);Found : user_pref("extensions.crossriderapp4479.4479.setnewtab", false);Found : user_pref("extensions.crossriderapp4479.4479.settingsurl", "");Found : user_pref("extensions.crossriderapp4479.4479.thankyou", "");Found : user_pref("extensions.crossriderapp4479.4479.updateinterval", 360);Found : user_pref("extensions.crossriderapp4479.4479.ver", 15);Found : user_pref("extensions.crossriderapp4479.apps", "4479");Found : user_pref("extensions.crossriderapp4479.bic", "138975cd38843b7e2d668f0df5472407");Found : user_pref("extensions.crossriderapp4479.cid", 4479);Found : user_pref("extensions.crossriderapp4479.firstrun", false);Found : user_pref("extensions.crossriderapp4479.hadappinstalled", true);Found : user_pref("extensions.crossriderapp4479.installationdate", 1342569239);Found : user_pref("extensions.crossriderapp4479.lastcheck", 22385912);Found : user_pref("extensions.crossriderapp4479.lastcheckitem", 22386062);Found : user_pref("extensions.crossriderapp4479.misc.lastBgWorkerTimer", "1342736362350");Found : user_pref("extensions.crossriderapp4479.misc.lastDomWorkerTimer", "1342736362341");Found : user_pref("extensions.crossriderapp4479.modetype", "production");Found : user_pref("gm-notifier.ui.counter.showInbox", true);Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3244149&SearchSource=2&q=[...]-\\ Google Chrome v [unable to get version]File : C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\PreferencesFound [l.1] : icon_url ={"browser":{"check_default_browser":false,"window_placement":{"bottom":1030,"left":10,"maximized":true,"right":955,"top":10,"work_area_bottom":1040,"work_area_left":0,"work_area_right":1920,"work_area_top":0}},"countryid_at_install":21843,"default_apps_install_state":2,"default_search_provider":{"enabled":true,"encodings":"UTF-8","hxxp://isearch.avg.com/favicon.ico","id":"5","instant_url":"","keyword":"isearch.avg.com","name":"AVG Secure Search","prepopulate_id":"0","search_url":"hxxp://isearch.avg.com/search?cid={1471B317-B1C8-4ABE-925D-8844D96E763D}&mid=4932f753273147d6b239d16e48ec62fb-1c95ffb7df0f9e640f06b049fb57c23f2ef4102a〈=en&ds=AVG&pr=fr&d=2011-09-26 16:25:34&v=10.0.0.7&sap=dsp&q={searchTerms}","suggest_url":"hxxp://clients5.google.com/complete/search?hl={language}&q={searchTerms}&client=ie8&inputencoding={inputEncoding}&outputencoding={outputEncoding}"},"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_bookmarks":false,"import_history":false,"import_home_page":false,"import_search_engine":false,"make_chrome_default_for_user":false,"ping_delay":-60,"show_welcome_page":true,"skip_first_run_ui":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://tools.google.com/",["hxxp://fonts.googleapis.com/",2.457556104889546,"hxxp://themes.googleusercontent.com/",2.457556104889546,"hxxp://tools.google.com/",5.263571657487312,"hxxp://www.google-analytics.com/",2.457556104889546,"hxxp://www.google.com/",3.081115116577939]],["hxxp://www.google.com/",["hxxp://ssl.gstatic.com/",1.731151839289886,"hxxp://www.google-analytics.com/",1.669518212743920,"hxxp://www.google.com/",6.129087452032036]],["hxxps://checkout.google.com/",["hxxps://checkout.google.com/",2.2086570657060]],["hxxps://chrome.google.com/",["hxxps://checkout.google.com/",4.134152969141999,"hxxps://chrome.google.com/",2.5295730496120,"hxxps://lh3.googleusercontent.com/",8.626976743825997,"hxxps://lh4.googleusercontent.com/",6.701480840389999,"hxxps://lh5.googleusercontent.com/",7.664228792107998,"hxxps://lh6.googleusercontent.com/",4.134152969141999,"hxxps://ssl.google-analytics.com/",3.1714050174240,"hxxps://ssl.gstatic.com/",2.2086570657060,"hxxps://themes.googleusercontent.com/",2.2086570657060,"hxxps://www.google.com/",2.2086570657060]],["hxxps://fls.doubleclick.net/",["hxxps://googleads.g.doubleclick.net/",2.8504890335180,"hxxps://www.googleadservices.com/",3.1714050174240]],["hxxps://plusone.google.com/",["hxxps://apis.google.com/",2.2086570657060,"hxxps://plusone.google.com/",2.5295730496120,"hxxps://ssl.gstatic.com/",2.2086570657060]]],"startup_list":[1,"hxxp://ssl.gstatic.com/","hxxp://www.google.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":""},"extensions":{"autoupdate":{"next_check":"12975631786294414"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"aagegfdddbdidbdcgfdgdbggdedggbgb":{"app_launcher_index":0,"incognito":true,"location":4,"newAllowFileAccess":true,"path":"C:\\Users\\Anna\\Local Settings\\Application Data\\Google\\Chrome\\User Data\\Default\\Default\\aagegfdddbdidbdcgfdgdbggdedggbgb","state":1},"iknflcjkkahjgichcidlfcalplplegii":{"from_bookmark":false,"from_webstore":true,"install_time":"12975631465051627","location":1,"manifest":{"description":"A beautiful sunset that is the best in it's class. This image is not made by me they are made from a different publisher. ","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsjHFxNNiN/yZSAMxmkJXx1JnQ0shP9ZsKfHER7qCGyr73yKzckioN67MF3j0nJzIcTG2P2mXrT5ttEg6ePhwzoECroyTLXt6MYI6viHQE6otulgHuZS7vKrTk9lTGa5D5OfjQeGtvenuwTsobE+K7NbItw3ZXUKkXCg/bN4MZiwIDAQAB","name":"Colorfull Sun Set","theme":{"colors":{"bookmark_text":[255,255,255],"button_background":[0,0,0,0],"frame":[66,116,201],"frame_inactive":[161,182,228],"frame_incognito":[83,106,139],"frame_incognito_inactive":[126,139,156],"ntp_background":[255,255,255],"ntp_text":[255,255,255],"tab_background_text":[255,255,255],"tab_text":[255,255,255],"toolbar":[255,255,255]},"images":{"theme_frame":"images/theme_frame.png","theme_ntp_background":"images/theme_ntp_background.png","theme_toolbar":"images/theme_toolbar.png"},"properties":{"ntp_background_alignment":"top","ntp_background_repeat":"no-repeat"},"tints":{"background_tab":[-1,0.50,0.750],"buttons":[-1,-1,-1],"frame":[-1,-1,-1],"frame_inactive":[0,0,1],"frame_incognito":[-1,0.20,0.350],"frame_incognito_inactive":[-1,0.30,0.60]}},"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1"},"path":"iknflcjkkahjgichcidlfcalplplegii\\1_0","state":1},"jmfkcklnlgedgbglfkkgedjfmejoahla":{"active_permissions":{"api":["plugin"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"allowFileAccess":true,"app_launcher_index":0,"from_bookmark":false,"from_webstore":false,"install_time":"12975631375863495","location":3,"manifest":{"background_page":"background.html","content_scripts":[{"js":["content/jquery-1.4.4.min.js","content/avgls-inline.js","content/searchengine.js","content/searchshield.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_start"}],"description":"Securing your clicks.","format_version":1,"icons":{"128":"content/Icons/128x128.png","16":"content/Icons/16x16.png","48":"content/Icons/48x48.png","64":"content/Icons/64x64.png"},"id":"881AC4EF96904f5fA0B49048C377CD59E8A84102","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrH3sthUrxOpfC3hPSHs4tIWO24/z8ZQCH5oHRTRkwgdSZ7/ah1PgRHQeNkTYJT0bwLQoxsG1jBLvWLu4I9t3KCTXj0uanaCw7VJjmSIPQCip/1m7ewfS9XdPR9CSUkR2wwp8HeDryToyCINwP8Yg3Lws/FV0nGmF2IV8jpQ6OWQIDAQAB","minimum_chrome_version":"9","name":"AVG Safe Search","plugins":[{"path":"plugins/avgnpss.dll","public":true}],"version":"12.0.0.1901"},"path":"jmfkcklnlgedgbglfkkgedjfmejoahla\\12.0.0.1901_0","state":1}},"theme":{"id":"iknflcjkkahjgichcidlfcalplplegii","pack":"C:\\Users\\Anna\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\iknflcjkkahjgichcidlfcalplplegii\\1_0\\Cached Theme.pak"}},"google":{"services":{"username":""}},"homepage":"hxxp://www.google.com","homepage_is_newtabpage":false,"hxxp_throttling":{"enabled":true},"instant":{"enabled_time":"12975631480152414"},"net":{"hxxp_server_properties":{"apis.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"checkout.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"chrome.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"fls.doubleclick.net:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"fonts.googleapis.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"googleads.g.doubleclick.net:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"lh5.googleusercontent.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"lh6.googleusercontent.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.google-analytics.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"tools.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.googleadservices.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true}}},"ntp":{"promo_build":8,"promo_closed":false,"promo_end":1329551880.0,"promo_feature_mask":0,"promo_group":38,"promo_group_max":99,"promo_group_timeslice":0,"promo_is_logged_in_to_plus":false,"promo_line":"Have an Android 4.0 phone or tablet? Learn more about <a href=\"hxxp://chrome.blogspot.com/2012/02/introducing-chrome-for-android.html\">Chrome for Android Beta</a>.","promo_platform":7,"promo_resource_cache_update":"1331157782.068906","promo_start":1329465480.0,"promo_views":0,"promo_views_max":9,"sign_in_promo":{"group_max":100}},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66","plugins_list":[{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66\\gcswf32.dll","version":"11,1,102,63"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32.dll","version":"11,1,102,55"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"AVG Internet Security","path":"C:\\Users\\Anna\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\jmfkcklnlgedgbglfkkgedjfmejoahla\\12.0.0.1901_0\\plugins/avgnpss.dll","version":"12.0.0.1901"},{"enabled":true,"name":"AVG Internet Security"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Acrobat 9.0\\Acrobat\\Browser\\nppdf32.dll","version":"9.5.0.270"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.290.11","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll","version":"6.0.290.11"},{"enabled":true,"name":"Java Platform SE 6 U29","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll","version":"6.0.290.11"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Google Talk Plugin","path":"C:\\Users\\Anna\\AppData\\Roaming\\Mozilla\\plugins\\npgoogletalk.dll","version":"2.6.1.5251"},{"enabled":true,"name":"Google Talk Plugin Video Accelerator","path":"C:\\Users\\Anna\\AppData\\Roaming\\Mozilla\\plugins\\npgtpo3dautoplugin.dll","version":"0,1,44,14"},{"enabled":true,"name":"Google Talk Plugin"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPAUTHZ.DLL","version":"14.0.4730.1010"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Google Earth Plugin","path":"C:\\Program Files (x86)\\Google\\Google Earth\\plugin\\npgeplugin.dll","version":"6.1.0.5001"},{"enabled":true,"name":"Google Earth Plugin"},{"enabled":true,"name":"Picasa","path":"C:\\Program Files (x86)\\Google\\Picasa3\\npPicasa3.dll","version":"3, 1, 0, 0"},{"enabled":true,"name":"Picasa"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.99\\npGoogleUpdate3.dll","version":"1.3.21.99"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files (x86)\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"},{"enabled":true,"name":"Facebook Video Calling Plugin","path":"C:\\Users\\Anna\\AppData\\Local\\Facebook\\Video\\Skype\\npFacebookVideoCalling.dll","version":"1.1.1.1"},{"enabled":true,"name":"Facebook Video Calling Plugin"},{"enabled":true,"name":"Shockwave for Director","path":"C:\\Windows\\system32\\Adobe\\Director\\np32dsw.dll","version":"11.6.3r633"},{"enabled":true,"name":"Shockwave"},{"enabled":true,"name":"Silverlight Plug-In","path":"c:\\Program Files (x86)\\Microsoft Silverlight\\4.1.10111.0\\npctrl.dll","version":"4.1.10111.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Default Plug-in","path":"default_plugin","version":"1"},{"enabled":true,"name":"Default Plug-in"}]},"profile":{"content_settings":{"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exited_cleanly":true},"tabs":{"use_compact_navigation_bar":false,"use_vertical_tabs":false}}*************************AdwCleaner[R1].txt - [47741 octets] - [11/09/2012 16:22:53]########## EOF - C:\AdwCleaner[R1].txt - [47802 octets] ########## Link to post Share on other sites More sharing options...
Maniac Posted September 11, 2012 ID:596000 Share Posted September 11, 2012 Please re-run AdwCleanerClick on Delete button.Confirm each time with OK.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.Note: You can find the logfile at C:\AdwCleaner[sn].txt as well - n is the order number. Link to post Share on other sites More sharing options...
mathisona Posted September 11, 2012 Author ID:596017 Share Posted September 11, 2012 I only had to click OK one time. My AVG came up stating the AdwCleaner was avirus. I told it to leave the file alone instead of moving it to the vault. Upon restart the log file aoutmoatically showed. Also, Whitesmoke is no longer listed as a toolbar in Firefox. Here is my log file. # AdwCleaner v2.001 - Logfile created 09/11/2012 at 17:50:36# Updated 09/09/2012 by Xplode# Operating system : Windows 7 Professional Service Pack 1 (64 bits)# User : Anna - ANNA-PC# Boot Mode : Normal# Running from : C:\Users\Anna\Desktop\adwcleaner.exe# Option [Delete]***** [services] ********** [Files / Folders] *****Deleted on reboot : C:\Program Files (x86)\Common Files\AVG Secure SearchFile Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xmlFile Deleted : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\searchplugins\Conduit.xmlFolder Deleted : C:\Program Files (x86)\AVG Secure SearchFolder Deleted : C:\Program Files (x86)\Giant SavingsFolder Deleted : C:\ProgramData\AVG Secure SearchFolder Deleted : C:\Users\Anna\AppData\Local\AVG Secure SearchFolder Deleted : C:\Users\Anna\AppData\Local\Giant SavingsFolder Deleted : C:\Users\Anna\AppData\LocalLow\AVG Secure SearchFolder Deleted : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\CT3244149Folder Deleted : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\extensions\{462be121-2b54-4218-bf00-b9bf8135b23f}Folder Deleted : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\Smartbar***** [Registry] *****Key Deleted : HKCU\Software\AppDataLow\Software\CrossriderKey Deleted : HKCU\Software\AppDataLow\Software\Giant SavingsKey Deleted : HKCU\Software\AppDataLow\Software\SmartBarKey Deleted : HKCU\Software\AVG Secure SearchKey Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Deleted : HKLM\Software\AVG Secure SearchKey Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXEKey Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLLKey Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPIKey Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObjKey Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocolKey Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApiKey Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLEKey Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-pluginKey Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifjKey Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure SearchKey Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]***** [internet Browsers] *****-\\ Internet Explorer v9.0.8112.16421Restored : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]-\\ Mozilla Firefox v15.0.1 (en-US)Profile name : defaultFile : C:\Users\Anna\AppData\Roaming\Mozilla\Firefox\Profiles\h1u19972.default\prefs.jsDeleted : user_pref("CT2394708.SearchEngineBeforeUnload", "Google");Deleted : user_pref("CT2394708.ValidationData_Toolbar", 0);Deleted : user_pref("CT3244149.1000082.isPlayDisplay", "true");Deleted : user_pref("CT3244149.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]Deleted : user_pref("CT3244149.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");Deleted : user_pref("CT3244149.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]Deleted : user_pref("CT3244149.FirstTime", "true");Deleted : user_pref("CT3244149.FirstTimeFF3", "true");Deleted : user_pref("CT3244149.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT324[...]Deleted : user_pref("CT3244149.UserID", "UN72324264752060211");Deleted : user_pref("CT3244149.UserId", "20872659-63aa-e709-8cc2-9a46dec7a454");Deleted : user_pref("CT3244149.addressBarTakeOverEnabledInHidden", "true");Deleted : user_pref("CT3244149.autoDisableScopes", 0);Deleted : user_pref("CT3244149.browser.search.defaultthis.engineName", true);Deleted : user_pref("CT3244149.cbcountry_001", "US");Deleted : user_pref("CT3244149.cbfirsttime", "Fri Sep 07 2012 15:30:34 GMT-0500 (Central Daylight Time)");Deleted : user_pref("CT3244149.defaultSearch", "true");Deleted : user_pref("CT3244149.embeddedsData", "[{\"appId\":\"129895725399351616\",\"apiPermissions\":{\"cross[...]Deleted : user_pref("CT3244149.enableAlerts", "always");Deleted : user_pref("CT3244149.enableSearchFromAddressBar", "true");Deleted : user_pref("CT3244149.firstTimeDialogOpened", "true");Deleted : user_pref("CT3244149.fixPageNotFoundError", "true");Deleted : user_pref("CT3244149.fixPageNotFoundErrorInHidden", "true");Deleted : user_pref("CT3244149.fixUrls", true);Deleted : user_pref("CT3244149.hxxp___api18_starwebnet_com.pid2", "6bbaf761f920f5e2");Deleted : user_pref("CT3244149.hxxp___api20_starwebnet_com.pid2", "6bbaf761f920f5e2");Deleted : user_pref("CT3244149.hxxp___api21_starwebnet_com.pid2", "6bbaf761f920f5e2");Deleted : user_pref("CT3244149.hxxp___api22_starwebnet_com.pid2", "6bbaf761f920f5e2");Deleted : user_pref("CT3244149.hxxp___api32_starwebnet_com.pid2", "6bbaf761f920f5e2");Deleted : user_pref("CT3244149.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_cache", "[\"c822c1b63853ed273b89[...]Deleted : user_pref("CT3244149.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_defaultGui", "{\"gui\":[{\"type\[...]Deleted : user_pref("CT3244149.hxxp___toolbar_jollywallet_com_tlb_2.Affiliate_settings", "{\"initUrl\":\"hxxp:[...]Deleted : user_pref("CT3244149.installId", "221");Deleted : user_pref("CT3244149.installType", "ConduitNSISIntegration");Deleted : user_pref("CT3244149.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");Deleted : user_pref("CT3244149.isNewTabEnabled", true);Deleted : user_pref("CT3244149.isPerformedSmartBarTransition", "true");Deleted : user_pref("CT3244149.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");Deleted : user_pref("CT3244149.keyword", true);Deleted : user_pref("CT3244149.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps[...]Deleted : user_pref("CT3244149.openThankYouPage", "false");Deleted : user_pref("CT3244149.openUninstallPage", "true");Deleted : user_pref("CT3244149.search.searchAppId", "129895725399351616");Deleted : user_pref("CT3244149.search.searchCount", "0");Deleted : user_pref("CT3244149.searchInNewTabEnabledInHidden", "true");Deleted : user_pref("CT3244149.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");Deleted : user_pref("CT3244149.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]Deleted : user_pref("CT3244149.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]Deleted : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]Deleted : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]Deleted : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]Deleted : user_pref("CT3244149.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]Deleted : user_pref("CT3244149.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]Deleted : user_pref("CT3244149.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1347049829796");Deleted : user_pref("CT3244149.serviceLayer_services_appsMetadata_lastUpdate", "1347049829749");Deleted : user_pref("CT3244149.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1347049830168");Deleted : user_pref("CT3244149.serviceLayer_services_login_10.10.27.6_lastUpdate", "1347398563196");Deleted : user_pref("CT3244149.serviceLayer_services_optimizer_lastUpdate", "1347049829917");Deleted : user_pref("CT3244149.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1347049830985");Deleted : user_pref("CT3244149.serviceLayer_services_searchAPI_lastUpdate", "1347049828925");Deleted : user_pref("CT3244149.serviceLayer_services_serviceMap_lastUpdate", "1347398562628");Deleted : user_pref("CT3244149.serviceLayer_services_toolbarContextMenu_lastUpdate", "1347049830127");Deleted : user_pref("CT3244149.serviceLayer_services_toolbarSettings_lastUpdate", "1347398562670");Deleted : user_pref("CT3244149.serviceLayer_services_translation_lastUpdate", "1347398562776");Deleted : user_pref("CT3244149.settingsINI", true);Deleted : user_pref("CT3244149.shouldFirstTimeDialog", "false");Deleted : user_pref("CT3244149.smartbar.CTID", "CT3244149");Deleted : user_pref("CT3244149.smartbar.Uninstall", "0");Deleted : user_pref("CT3244149.smartbar.homepage", true);Deleted : user_pref("CT3244149.smartbar.isHidden", true);Deleted : user_pref("CT3244149.smartbar.toolbarName", "WhiteSmoke US New ");Deleted : user_pref("CT3244149.startPage", "userChanged");Deleted : user_pref("CT3244149.toolbarBornServerTime", "7-9-2012");Deleted : user_pref("CT3244149.toolbarCurrentServerTime", "12-9-2012");Deleted : user_pref("CT3244149.url_history0001", "hxxps://www.google.com:::clickhandler:::1347128603763,,,hxxp[...]Deleted : user_pref("Smartbar.ConduitHomepagesList", "");Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxps://isearch.avg.com/search?cid={1471B317-B1C[...]Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3244149");Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\10.0.0.7");Deleted : user_pref("browser.search.defaultengine", "Ask.com");Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");Deleted : user_pref("browser.search.defaultthis.engineName", "Radio 123 Customized Web Search");Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2394708&Sea[...]Deleted : user_pref("browser.search.order.1", "Ask.com");Deleted : user_pref("extensions.crossriderapp3491.3491.InstallationThankYouPage", true);Deleted : user_pref("extensions.crossriderapp3491.3491.InstallationTime", 1347049789);Deleted : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.searchUserConifrmation", false[...]Deleted : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.setHomepage", false);Deleted : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.setNewTab", false);Deleted : user_pref("extensions.crossriderapp3491.3491.InstallationUserSettings.setSearch", false);Deleted : user_pref("extensions.crossriderapp3491.3491.active", true);Deleted : user_pref("extensions.crossriderapp3491.3491.addressbar", "");Deleted : user_pref("extensions.crossriderapp3491.3491.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG&&appA[...]Deleted : user_pref("extensions.crossriderapp3491.3491.backgroundver", 10);Deleted : user_pref("extensions.crossriderapp3491.3491.can_run_bg_code", true);Deleted : user_pref("extensions.crossriderapp3491.3491.certdomaininstaller", "");Deleted : user_pref("extensions.crossriderapp3491.3491.changeprevious", false);Deleted : user_pref("extensions.crossriderapp3491.3491.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie.InstallationTime.value", "1347049789");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_aoi.value", "1347049789");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_blocklist.expiration", "Fri Sep 07 2012 16:[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_blocklist.value", "%5B%22nonexistantdomain.[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_country_code.expiration", "Fri Sep 14 2012 [...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_country_code.value", "%22US%22");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_crr.value", "1347053152");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_hotfix20111102645.value", "%221%22");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_installer_params.value", "%7B%22source_id%2[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_parent_zoneid.value", "%2270034%22");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 0[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_pc_20120828.value", "1347049877818");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_product_id.value", "%221250%22");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie._GPL_zoneid.value", "%2278523%22");Deleted : user_pref("extensions.crossriderapp3491.3491.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GM[...]Deleted : user_pref("extensions.crossriderapp3491.3491.cookie.dbtest.value", "1347049872779");Deleted : user_pref("extensions.crossriderapp3491.3491.description", "Vid-Saver allows you to download your fa[...]Deleted : user_pref("extensions.crossriderapp3491.3491.domain", "");Deleted : user_pref("extensions.crossriderapp3491.3491.enablesearch", false);Deleted : user_pref("extensions.crossriderapp3491.3491.fbremoteurl", "");Deleted : user_pref("extensions.crossriderapp3491.3491.group", 0);Deleted : user_pref("extensions.crossriderapp3491.3491.homepage", "");Deleted : user_pref("extensions.crossriderapp3491.3491.iframe", false);Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.InstallerIdentifiers.value", "%7B%22installe[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_appVer.value", "46");Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_lastVersion.expiration", "Fri Feb [...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_lastVersion.value", "0");Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_meta.value", "%7B%7D");Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_nextCheck.expiration", "Fri Sep 07[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_nextCheck.value", "true");Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.Resources_queue.value", "%7B%7D");Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.SoftwareDetected.expiration", "Fri Feb 01 20[...]Deleted : user_pref("extensions.crossriderapp3491.3491.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%[...]Deleted : user_pref("extensions.crossriderapp3491.3491.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...]Deleted : user_pref("extensions.crossriderapp3491.3491.manifesturl", "");Deleted : user_pref("extensions.crossriderapp3491.3491.name", "Vid-Saver");Deleted : user_pref("extensions.crossriderapp3491.3491.newtab", "");Deleted : user_pref("extensions.crossriderapp3491.3491.opensearch", "");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000014.code", "Array.prototype.indexOf|[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000014.name", "GPL Plugin (Loader)");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000014.ver", 4);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rul[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000015.name", "GPL Background (BG)");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_1000015.ver", 2);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_13.code", "(function(a){a.selectedText=f[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_13.name", "CrossriderAppUtils");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_13.ver", 2);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_14.name", "CrossriderUtils");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_14.ver", 2);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_15.code", "(function(f){var u={};var e=M[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_15.name", "FacebookFFIE");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_15.ver", 1);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_16.name", "FFAppAPIWrapper");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_16.ver", 3);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_17.code", "if(typeof window!==\"undefine[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_17.name", "jQuery");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_17.ver", 3);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_47.code", "(function(){appAPI.ready=func[...]Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_47.name", "resources_background");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins.plugin_47.ver", 1);Deleted : user_pref("extensions.crossriderapp3491.3491.plugins_lists.plugins_0", "17,14,16,47,1000015");Deleted : user_pref("extensions.crossriderapp3491.3491.plugins_lists.plugins_1", "17,14,13,16,15,1000014");Deleted : user_pref("extensions.crossriderapp3491.3491.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...]Deleted : user_pref("extensions.crossriderapp3491.3491.pluginsversion", 11);Deleted : user_pref("extensions.crossriderapp3491.3491.publisher", "215 Apps");Deleted : user_pref("extensions.crossriderapp3491.3491.searchstatus", 0);Deleted : user_pref("extensions.crossriderapp3491.3491.setnewtab", false);Deleted : user_pref("extensions.crossriderapp3491.3491.settingsurl", "");Deleted : user_pref("extensions.crossriderapp3491.3491.thankyou", "hxxp://vid-saver.com/thankyou.html");Deleted : user_pref("extensions.crossriderapp3491.3491.updateinterval", 360);Deleted : user_pref("extensions.crossriderapp3491.3491.ver", 46);Deleted : user_pref("extensions.crossriderapp3491.adsOldValue", 10);Deleted : user_pref("extensions.crossriderapp3491.apps", "3491");Deleted : user_pref("extensions.crossriderapp3491.bic", "138975cd38843b7e2d668f0df5472407");Deleted : user_pref("extensions.crossriderapp3491.cid", 3491);Deleted : user_pref("extensions.crossriderapp3491.firstrun", false);Deleted : user_pref("extensions.crossriderapp3491.hadappinstalled", true);Deleted : user_pref("extensions.crossriderapp3491.installationdate", 1347049825);Deleted : user_pref("extensions.crossriderapp3491.lastcheck", 22450830);Deleted : user_pref("extensions.crossriderapp3491.lastcheckitem", 22450885);Deleted : user_pref("extensions.crossriderapp3491.modetype", "production");Deleted : user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true);Deleted : user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342553610);Deleted : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false[...]Deleted : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false);Deleted : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false);Deleted : user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false);Deleted : user_pref("extensions.crossriderapp4479.4479.active", true);Deleted : user_pref("extensions.crossriderapp4479.4479.addressbar", "");Deleted : user_pref("extensions.crossriderapp4479.4479.affid", "0");Deleted : user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n/**********************************[...]Deleted : user_pref("extensions.crossriderapp4479.4479.backgroundver", 2);Deleted : user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);Deleted : user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");Deleted : user_pref("extensions.crossriderapp4479.4479.changeprevious", false);Deleted : user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342553610");Deleted : user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342553610");Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%2[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2242874%22");Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22");Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...]Deleted : user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2257427%22");Deleted : user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons dis[...]Deleted : user_pref("extensions.crossriderapp4479.4479.domain", "");Deleted : user_pref("extensions.crossriderapp4479.4479.emailsig", "");Deleted : user_pref("extensions.crossriderapp4479.4479.enablesearch", false);Deleted : user_pref("extensions.crossriderapp4479.4479.exposesites", "");Deleted : user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");Deleted : user_pref("extensions.crossriderapp4479.4479.group", 0);Deleted : user_pref("extensions.crossriderapp4479.4479.homepage", "");Deleted : user_pref("extensions.crossriderapp4479.4479.iframe", false);Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installe[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "15");Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb [...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Tue Jul 24[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.expiration", "Fri[...]Deleted : user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.value", "%7B%22re[...]Deleted : user_pref("extensions.crossriderapp4479.4479.js", "\nvar _GPL_PID=1171,_GPL_baseCDN=\"giantsavings-a[...]Deleted : user_pref("extensions.crossriderapp4479.4479.manifesturl", "");Deleted : user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");Deleted : user_pref("extensions.crossriderapp4479.4479.newtab", "");Deleted : user_pref("extensions.crossriderapp4479.4479.opensearch", "");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:funct[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.name", "base");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 2);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=f[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.name", "CrossriderAppUtils");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.name", "CrossriderUtils");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.code", "(function(f){var u={};var e=M[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.name", "FacebookFFIE");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_15.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.code", "(function(f,b){if(typeof(b)==[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.name", "FFAppAPIWrapper");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 3);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.code", "if(typeof window!==\"undefine[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.name", "jQuery");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.code", "var CrossriderDebugManager=(f[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.code", "(function(a){appAPI.queueMana[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.name", "resources");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.code", "var CrossriderInitializerPlug[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 1);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com |[...]Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 2);Deleted : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "17,14,16");Deleted : user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,28"[...]Deleted : user_pref("extensions.crossriderapp4479.4479.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...]Deleted : user_pref("extensions.crossriderapp4479.4479.pluginsversion", 4);Deleted : user_pref("extensions.crossriderapp4479.4479.premium", true);Deleted : user_pref("extensions.crossriderapp4479.4479.publisher", "215 Apps");Deleted : user_pref("extensions.crossriderapp4479.4479.searchstatus", 0);Deleted : user_pref("extensions.crossriderapp4479.4479.setnewtab", false);Deleted : user_pref("extensions.crossriderapp4479.4479.settingsurl", "");Deleted : user_pref("extensions.crossriderapp4479.4479.thankyou", "");Deleted : user_pref("extensions.crossriderapp4479.4479.updateinterval", 360);Deleted : user_pref("extensions.crossriderapp4479.4479.ver", 15);Deleted : user_pref("extensions.crossriderapp4479.apps", "4479");Deleted : user_pref("extensions.crossriderapp4479.bic", "138975cd38843b7e2d668f0df5472407");Deleted : user_pref("extensions.crossriderapp4479.cid", 4479);Deleted : user_pref("extensions.crossriderapp4479.firstrun", false);Deleted : user_pref("extensions.crossriderapp4479.hadappinstalled", true);Deleted : user_pref("extensions.crossriderapp4479.installationdate", 1342569239);Deleted : user_pref("extensions.crossriderapp4479.lastcheck", 22385912);Deleted : user_pref("extensions.crossriderapp4479.lastcheckitem", 22386062);Deleted : user_pref("extensions.crossriderapp4479.misc.lastBgWorkerTimer", "1342736362350");Deleted : user_pref("extensions.crossriderapp4479.misc.lastDomWorkerTimer", "1342736362341");Deleted : user_pref("extensions.crossriderapp4479.modetype", "production");Deleted : user_pref("gm-notifier.ui.counter.showInbox", true);Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3244149&SearchSource=2&q=[...]-\\ Google Chrome v [unable to get version]File : C:\Users\Anna\AppData\Local\Google\Chrome\User Data\Default\PreferencesDeleted [l.1] : icon_url ={"browser":{"check_default_browser":false,"window_placement":{"bottom":1030,"left":10,"maximized":true,"right":955,"top":10,"work_area_bottom":1040,"work_area_left":0,"work_area_right":1920,"work_area_top":0}},"countryid_at_install":21843,"default_apps_install_state":2,"default_search_provider":{"enabled":true,"encodings":"UTF-8","hxxp://isearch.avg.com/favicon.ico","id":"5","instant_url":"","keyword":"isearch.avg.com","name":"AVG Secure Search","prepopulate_id":"0","search_url":"hxxp://isearch.avg.com/search?cid={1471B317-B1C8-4ABE-925D-8844D96E763D}&mid=4932f753273147d6b239d16e48ec62fb-1c95ffb7df0f9e640f06b049fb57c23f2ef4102a〈=en&ds=AVG&pr=fr&d=2011-09-26 16:25:34&v=10.0.0.7&sap=dsp&q={searchTerms}","suggest_url":"hxxp://clients5.google.com/complete/search?hl={language}&q={searchTerms}&client=ie8&inputencoding={inputEncoding}&outputencoding={outputEncoding}"},"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_bookmarks":false,"import_history":false,"import_home_page":false,"import_search_engine":false,"make_chrome_default_for_user":false,"ping_delay":-60,"show_welcome_page":true,"skip_first_run_ui":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://tools.google.com/",["hxxp://fonts.googleapis.com/",2.457556104889546,"hxxp://themes.googleusercontent.com/",2.457556104889546,"hxxp://tools.google.com/",5.263571657487312,"hxxp://www.google-analytics.com/",2.457556104889546,"hxxp://www.google.com/",3.081115116577939]],["hxxp://www.google.com/",["hxxp://ssl.gstatic.com/",1.731151839289886,"hxxp://www.google-analytics.com/",1.669518212743920,"hxxp://www.google.com/",6.129087452032036]],["hxxps://checkout.google.com/",["hxxps://checkout.google.com/",2.2086570657060]],["hxxps://chrome.google.com/",["hxxps://checkout.google.com/",4.134152969141999,"hxxps://chrome.google.com/",2.5295730496120,"hxxps://lh3.googleusercontent.com/",8.626976743825997,"hxxps://lh4.googleusercontent.com/",6.701480840389999,"hxxps://lh5.googleusercontent.com/",7.664228792107998,"hxxps://lh6.googleusercontent.com/",4.134152969141999,"hxxps://ssl.google-analytics.com/",3.1714050174240,"hxxps://ssl.gstatic.com/",2.2086570657060,"hxxps://themes.googleusercontent.com/",2.2086570657060,"hxxps://www.google.com/",2.2086570657060]],["hxxps://fls.doubleclick.net/",["hxxps://googleads.g.doubleclick.net/",2.8504890335180,"hxxps://www.googleadservices.com/",3.1714050174240]],["hxxps://plusone.google.com/",["hxxps://apis.google.com/",2.2086570657060,"hxxps://plusone.google.com/",2.5295730496120,"hxxps://ssl.gstatic.com/",2.2086570657060]]],"startup_list":[1,"hxxp://ssl.gstatic.com/","hxxp://www.google.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":""},"extensions":{"autoupdate":{"next_check":"12975631786294414"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"aagegfdddbdidbdcgfdgdbggdedggbgb":{"app_launcher_index":0,"incognito":true,"location":4,"newAllowFileAccess":true,"path":"C:\\Users\\Anna\\Local Settings\\Application Data\\Google\\Chrome\\User Data\\Default\\Default\\aagegfdddbdidbdcgfdgdbggdedggbgb","state":1},"iknflcjkkahjgichcidlfcalplplegii":{"from_bookmark":false,"from_webstore":true,"install_time":"12975631465051627","location":1,"manifest":{"description":"A beautiful sunset that is the best in it's class. This image is not made by me they are made from a different publisher. ","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsjHFxNNiN/yZSAMxmkJXx1JnQ0shP9ZsKfHER7qCGyr73yKzckioN67MF3j0nJzIcTG2P2mXrT5ttEg6ePhwzoECroyTLXt6MYI6viHQE6otulgHuZS7vKrTk9lTGa5D5OfjQeGtvenuwTsobE+K7NbItw3ZXUKkXCg/bN4MZiwIDAQAB","name":"Colorfull Sun Set","theme":{"colors":{"bookmark_text":[255,255,255],"button_background":[0,0,0,0],"frame":[66,116,201],"frame_inactive":[161,182,228],"frame_incognito":[83,106,139],"frame_incognito_inactive":[126,139,156],"ntp_background":[255,255,255],"ntp_text":[255,255,255],"tab_background_text":[255,255,255],"tab_text":[255,255,255],"toolbar":[255,255,255]},"images":{"theme_frame":"images/theme_frame.png","theme_ntp_background":"images/theme_ntp_background.png","theme_toolbar":"images/theme_toolbar.png"},"properties":{"ntp_background_alignment":"top","ntp_background_repeat":"no-repeat"},"tints":{"background_tab":[-1,0.50,0.750],"buttons":[-1,-1,-1],"frame":[-1,-1,-1],"frame_inactive":[0,0,1],"frame_incognito":[-1,0.20,0.350],"frame_incognito_inactive":[-1,0.30,0.60]}},"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"1"},"path":"iknflcjkkahjgichcidlfcalplplegii\\1_0","state":1},"jmfkcklnlgedgbglfkkgedjfmejoahla":{"active_permissions":{"api":["plugin"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"allowFileAccess":true,"app_launcher_index":0,"from_bookmark":false,"from_webstore":false,"install_time":"12975631375863495","location":3,"manifest":{"background_page":"background.html","content_scripts":[{"js":["content/jquery-1.4.4.min.js","content/avgls-inline.js","content/searchengine.js","content/searchshield.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_start"}],"description":"Securing your clicks.","format_version":1,"icons":{"128":"content/Icons/128x128.png","16":"content/Icons/16x16.png","48":"content/Icons/48x48.png","64":"content/Icons/64x64.png"},"id":"881AC4EF96904f5fA0B49048C377CD59E8A84102","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrH3sthUrxOpfC3hPSHs4tIWO24/z8ZQCH5oHRTRkwgdSZ7/ah1PgRHQeNkTYJT0bwLQoxsG1jBLvWLu4I9t3KCTXj0uanaCw7VJjmSIPQCip/1m7ewfS9XdPR9CSUkR2wwp8HeDryToyCINwP8Yg3Lws/FV0nGmF2IV8jpQ6OWQIDAQAB","minimum_chrome_version":"9","name":"AVG Safe Search","plugins":[{"path":"plugins/avgnpss.dll","public":true}],"version":"12.0.0.1901"},"path":"jmfkcklnlgedgbglfkkgedjfmejoahla\\12.0.0.1901_0","state":1}},"theme":{"id":"iknflcjkkahjgichcidlfcalplplegii","pack":"C:\\Users\\Anna\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\iknflcjkkahjgichcidlfcalplplegii\\1_0\\Cached Theme.pak"}},"google":{"services":{"username":""}},"homepage":"hxxp://www.google.com","homepage_is_newtabpage":false,"hxxp_throttling":{"enabled":true},"instant":{"enabled_time":"12975631480152414"},"net":{"hxxp_server_properties":{"apis.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"checkout.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"chrome.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"fls.doubleclick.net:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"fonts.googleapis.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"googleads.g.doubleclick.net:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"lh5.googleusercontent.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"lh6.googleusercontent.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.google-analytics.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"ssl.gstatic.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"tools.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.google.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true},"www.googleadservices.com:443":{"settings":[{"id":4,"value":100}],"supports_spdy":true}}},"ntp":{"promo_build":8,"promo_closed":false,"promo_end":1329551880.0,"promo_feature_mask":0,"promo_group":38,"promo_group_max":99,"promo_group_timeslice":0,"promo_is_logged_in_to_plus":false,"promo_line":"Have an Android 4.0 phone or tablet? Learn more about <a href=\"hxxp://chrome.blogspot.com/2012/02/introducing-chrome-for-android.html\">Chrome for Android Beta</a>.","promo_platform":7,"promo_resource_cache_update":"1331157782.068906","promo_start":1329465480.0,"promo_views":0,"promo_views_max":9,"sign_in_promo":{"group_max":100}},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66","plugins_list":[{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\17.0.963.66\\gcswf32.dll","version":"11,1,102,63"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32.dll","version":"11,1,102,55"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"AVG Internet Security","path":"C:\\Users\\Anna\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\jmfkcklnlgedgbglfkkgedjfmejoahla\\12.0.0.1901_0\\plugins/avgnpss.dll","version":"12.0.0.1901"},{"enabled":true,"name":"AVG Internet Security"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Acrobat 9.0\\Acrobat\\Browser\\nppdf32.dll","version":"9.5.0.270"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.290.11","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll","version":"6.0.290.11"},{"enabled":true,"name":"Java Platform SE 6 U29","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll","version":"6.0.290.11"},{"enabled":true,"name":"Java"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime Plug-in 7.7.1","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.7.1 (1680.42)"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Google Talk Plugin","path":"C:\\Users\\Anna\\AppData\\Roaming\\Mozilla\\plugins\\npgoogletalk.dll","version":"2.6.1.5251"},{"enabled":true,"name":"Google Talk Plugin Video Accelerator","path":"C:\\Users\\Anna\\AppData\\Roaming\\Mozilla\\plugins\\npgtpo3dautoplugin.dll","version":"0,1,44,14"},{"enabled":true,"name":"Google Talk Plugin"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPAUTHZ.DLL","version":"14.0.4730.1010"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~1\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Google Earth Plugin","path":"C:\\Program Files (x86)\\Google\\Google Earth\\plugin\\npgeplugin.dll","version":"6.1.0.5001"},{"enabled":true,"name":"Google Earth Plugin"},{"enabled":true,"name":"Picasa","path":"C:\\Program Files (x86)\\Google\\Picasa3\\npPicasa3.dll","version":"3, 1, 0, 0"},{"enabled":true,"name":"Picasa"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.99\\npGoogleUpdate3.dll","version":"1.3.21.99"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files (x86)\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"iTunes Application Detector"},{"enabled":true,"name":"Facebook Video Calling Plugin","path":"C:\\Users\\Anna\\AppData\\Local\\Facebook\\Video\\Skype\\npFacebookVideoCalling.dll","version":"1.1.1.1"},{"enabled":true,"name":"Facebook Video Calling Plugin"},{"enabled":true,"name":"Shockwave for Director","path":"C:\\Windows\\system32\\Adobe\\Director\\np32dsw.dll","version":"11.6.3r633"},{"enabled":true,"name":"Shockwave"},{"enabled":true,"name":"Silverlight Plug-In","path":"c:\\Program Files (x86)\\Microsoft Silverlight\\4.1.10111.0\\npctrl.dll","version":"4.1.10111.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Default Plug-in","path":"default_plugin","version":"1"},{"enabled":true,"name":"Default Plug-in"}]},"profile":{"content_settings":{"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exited_cleanly":true},"tabs":{"use_compact_navigation_bar":false,"use_vertical_tabs":false}}*************************AdwCleaner[R1].txt - [47860 octets] - [11/09/2012 16:22:53]AdwCleaner[R2].txt - [47921 octets] - [11/09/2012 17:50:09]AdwCleaner[s1].txt - [48739 octets] - [11/09/2012 17:50:36]########## EOF - C:\AdwCleaner[s1].txt - [48800 octets] ########## Link to post Share on other sites More sharing options...
Maniac Posted September 11, 2012 ID:596027 Share Posted September 11, 2012 How are things now? Do you still experience any problem with WhiteSmoke? Link to post Share on other sites More sharing options...
mathisona Posted September 11, 2012 Author ID:596034 Share Posted September 11, 2012 well the toolbar is gone, but I am still getting redirected when clicking on links. For example, i googled celebrity news,i clicked on a link for tmz.com and it brought me to forex.com. i closed out of firefox and googled world news, clicked on cnn and it took me to the correct page. then i went back to me search results and clicked on abc news link and it brought me to 8.26.70.252. Looks like i am still infected with something. Link to post Share on other sites More sharing options...
Maniac Posted September 11, 2012 ID:596042 Share Posted September 11, 2012 At the top of the Firefox window, click the Firefox button, go over to the Help sub-menu(on Windows XP, click the Help menu at the top of the Firefox window) and select Troubleshooting Information.Click the Reset Firefox button in the upper-right corner of the Troubleshooting Information page.click Reset Firefox in the confirmation window that opens. Firefox will close and be reset. When it's done. Click Finish and Firefox will open. Reboot your system. Link to post Share on other sites More sharing options...
mathisona Posted September 11, 2012 Author ID:596046 Share Posted September 11, 2012 OK Looks like that did it. Thank you so very much for your assistance. I truly am grateful :-) Link to post Share on other sites More sharing options...
Maniac Posted September 12, 2012 ID:596068 Share Posted September 12, 2012 Glad I could help! Please manually delete AdwCleaner.Some malware prevention tips:www.users.telenet.be/bluepatchy/miekiemoes/prevention.htmlSafe surfing! Link to post Share on other sites More sharing options...
Maurice Naggar Posted September 12, 2012 ID:596323 Share Posted September 12, 2012 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts