Jump to content

Virus Medfos.b

brandeeteer
 Share

Recommended Posts

MrCharlie

MrCharlie

Posted
Posted

Welcome to the forum.

Please uninstall: Pogo Games (remove only)

Then..........

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 48 hours, please send me a PM)

Link to post
Share on other sites
brandeeteer

brandeeteer

Posted
  • Author
Posted

RogueKiller V8.3.2 [Dec 7 2012] by Tigzy

mail : tigzyRK<at>gmail<dot>com

Feedback : http://www.geekstogo.com/forum/files/file/413-roguekiller/

Website : http://tigzy.geekstogo.com/roguekiller.php

Blog : http://tigzyrk.blogspot.com/

Operating System : Windows 7 (6.1.7600 ) 64 bits version

Started in : Normal mode

User : Brandee [Admin rights]

Mode : Scan -- Date : 12/08/2012 12:07:30

¤¤¤ Bad processes : 4 ¤¤¤

[sUSP PATH] UtilityApplication.exe -- C:\ProgramData\Verizon\UA_ar\UtilityApplication.exe -> KILLED [TermProc]

[][DLL] rundll32.exe -- C:\Windows\SysWOW64\rundll32.exe : C:\Users\Brandee\AppData\Roaming\uizcp.dll -> KILLED [TermProc]

[][DLL] rundll32.exe -- C:\Windows\SysWOW64\rundll32.exe : C:\Users\Brandee\AppData\Roaming\msronb.dll -> KILLED [TermProc]

[][DLL] rundll32.exe -- C:\Windows\SysWOW64\rundll32.exe : C:\Users\Brandee\AppData\Roaming\qwmchn.dll -> KILLED [TermProc]

¤¤¤ Registry Entries : 14 ¤¤¤

[RUN][NOTFOUND] HKCU\[...]\Run : msronb (rundll32.exe "C:\Users\Brandee\AppData\Roaming\msronb.dll",Number_Check) -> FOUND

[RUN][NOTFOUND] HKUS\S-1-5-21-3678893597-235715445-1402705935-1000[...]\Run : msronb (rundll32.exe "C:\Users\Brandee\AppData\Roaming\msronb.dll",Number_Check) -> FOUND

[RUN][sUSP PATH] HKLM\[...]\Wow6432Node\RunOnce : PogoArcadeIECleanup (C:\Users\Brandee\AppData\Local\Temp\PogoArcadeAutocleanup.bat) -> FOUND

[services][ROGUE ST] HKLM\[...]\ControlSet001\Services\71109507 (C:\Windows\system32\drivers\59063593.sys) -> FOUND

[services][ROGUE ST] HKLM\[...]\ControlSet002\Services\71109507 (C:\Windows\system32\drivers\59063593.sys) -> FOUND

[sTARTUP][sUSP PATH] Launch Utility Application.lnk @Common : C:\ProgramData\Verizon\UA_ar\UtilityApplication.exe -> FOUND

[DNS] HKLM\[...]\ControlSet001\Services\Interfaces\{4B7438A2-7906-4A51-A12F-F88DB1AAF86A} : NameServer (10.0.80.11,10.0.80.12) -> FOUND

[DNS] HKLM\[...]\ControlSet002\Services\Interfaces\{4B7438A2-7906-4A51-A12F-F88DB1AAF86A} : NameServer (10.0.80.11,10.0.80.12) -> FOUND

[HJ DESK] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

[HJ DESK] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

[HJ DESK] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND

[HJ DESK] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

--> C:\Windows\system32\drivers\etc\hosts

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: WDC WD5000BEVT-75A0RT0 ATA Device +++++

--- User ---

[MBR] 8fff589b9a17868f32f12762a38dc630

[bSP] 8fb5f825e3fff5a0332dbf7838ed38cf : Windows 7/8 MBR Code

Partition table:

0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo

1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 10000 Mo

2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 20686848 | Size: 60000 Mo

3 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 143566848 | Size: 406838 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[1]_S_12082012_02d1207.txt >>

RKreport[1]_S_12082012_02d1207.txt

Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Run RogueKiller again and click Scan

When the scan completes > click on the Registry tab

Put a check next to all of these and uncheck the rest: (if found)

[RUN][NOTFOUND] HKCU\[...]\Run : msronb (rundll32.exe "C:\Users\Brandee\AppData\Roaming\msronb.dll",Number_Check) -> FOUND

[RUN][NOTFOUND] HKUS\S-1-5-21-3678893597-235715445-1402705935-1000[...]\Run : msronb (rundll32.exe "C:\Users\Brandee\AppData\Roaming\msronb.dll",Number_Check) -> FOUND

[services][ROGUE ST] HKLM\[...]\ControlSet001\Services\71109507 (C:\Windows\system32\drivers\59063593.sys) -> FOUND

[services][ROGUE ST] HKLM\[...]\ControlSet002\Services\71109507 (C:\Windows\system32\drivers\59063593.sys) -> FOUND

Now click Delete on the right hand column under Options

-------------

Next click on the Process tab and put a check next to these and uncheck the rest. (if found)

[][DLL] rundll32.exe -- C:\Windows\SysWOW64\rundll32.exe : C:\Users\Brandee\AppData\Roaming\uizcp.dll -> KILLED [TermProc]

[][DLL] rundll32.exe -- C:\Windows\SysWOW64\rundll32.exe :

C:\Users\Brandee\AppData\Roaming\msronb.dll -> KILLED [TermProc]

[][DLL] rundll32.exe -- C:\Windows\SysWOW64\rundll32.exe : C:\Users\Brandee\AppData\Roaming\qwmchn.dll -> KILLED [TermProc]

Now click Delete on the right hand column under Options

~~~~~~~~~~~~~~~~~~~~

Download Security Check by screen317 from HERE or HERE.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt.
  • Please Post the contents of that document.
  • Do Not Attach It!!!

MrC

Link to post
Share on other sites
brandeeteer

brandeeteer

Posted
  • Author
Posted

Results of screen317's Security Check version 0.99.56

Windows 7 x64 (UAC is enabled)

Out of date service pack!!

Internet Explorer 9

``````````````Antivirus/Firewall Check:``````````````

Windows Firewall Enabled!

Microsoft Security Essentials

Antivirus up to date!

`````````Anti-malware/Other Utilities Check:`````````

Malwarebytes Anti-Malware version 1.65.1.1000

Java 6 Update 32

Java SE Development Kit 6 Update 20

JavaFX 1.3 SDK

Java version out of Date!

Adobe Flash Player 10 Flash Player out of Date!

Adobe Flash Player 11.1.102.63 Flash Player out of Date!

Adobe Reader 9 Adobe Reader out of Date!

Mozilla Firefox 4.0b6 Firefox out of Date!

````````Process Check: objlist.exe by Laurent````````

Microsoft Security Essentials MSMpEng.exe

Microsoft Security Essentials msseces.exe

`````````````````System Health check`````````````````

Total Fragmentation on Drive C: 10%

````````````````````End of Log``````````````````````

Link to post
Share on other sites
MrCharlie

MrCharlie

Posted
Posted

Please uninstall all of these from your control panels add/remove programs:

Java™ 6 Update 32

Java™ SE Development Kit 6 Update 20

JavaFX™ 1.3 SDK

The link below has the latest download links for Java and a link for JavaRa.exe

Running JavaRa will remove any leftover Java from your system after you uninstall Java

Then install the latest version of Java:

http://forums.whatth...showtopic=68632

~~~~~~~~~~~~~~~~

Next............

Please run a full scan with Microsoft Safety Scanner:

http://www.microsoft...us/default.aspx

Next............

thisisujrt.gif Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

~~~~~~~~~~~~~~~~~~~~

At some point please update these programs.....

Older versions are vulnerable to malware:

Adobe Flash Player 10 Flash Player out of Date!

Adobe Flash Player 11.1.102.63 Flash Player out of Date!

Adobe Reader 9 Adobe Reader out of Date!

Mozilla Firefox 4.0b6 Firefox out of Date!

MrC

Link to post
Share on other sites
brandeeteer

brandeeteer

Posted
  • Author
Posted

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 4.0.0 (12.08.2012:4)

OS: Windows 7 Home Premium x64

Ran by Brandee on Sat 12/08/2012 at 22:02:07.82

Blog: http://thisisudax.blogspot.com

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser\\{043c5167-00bb-4324-af7e-62013faedacf}

~~~ Registry Keys

Successfully deleted: [Registry Key] "hkey_current_user\software\appdatalow\software\competeinc"

Successfully deleted: [Registry Key] "hkey_current_user\software\softonic"

Successfully deleted: [Registry Key] "hkey_local_machine\software\competeinc"

Successfully deleted: [Registry Key] "hkey_local_machine\software\conduit"

Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{043c5167-00bb-4324-af7e-62013faedacf}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Users\Brandee\AppData\Roaming\iwin"

Successfully deleted: [Folder] "C:\Users\Brandee\appdata\locallow\conduit"

~~~ FireFox

Successfully deleted: [Folder] C:\Users\Brandee\AppData\Roaming\mozilla\firefox\profiles\q21n25wk.default\conduitcommon

Successfully deleted the following from C:\Users\Brandee\AppData\Roaming\mozilla\firefox\profiles\q21n25wk.default\prefs.js

user_pref("CT1937708..clientLogIsEnabled", false);

user_pref("CT1937708..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

user_pref("CT1937708..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

user_pref("CT1937708.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

user_pref("CT1937708.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");

user_pref("CT1937708.AppTrackingLastCheckTime", "Mon Nov 19 2012 21:31:45 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.CT1937708", "CT1937708");

user_pref("CT1937708.CurrentServerDate", "8-12-2012");

user_pref("CT1937708.DSInstall", false);

user_pref("CT1937708.DialogsAlignMode", "LTR");

user_pref("CT1937708.DialogsGetterLastCheckTime", "Thu Dec 06 2012 19:13:41 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"1/11/2012 6:49:00 AM\",\"SourceId\":0,\

user_pref("CT1937708.EMailNotifierPollDate", "Sat Dec 08 2012 12:04:06 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.FirstServerDate", "11-1-2012");

user_pref("CT1937708.FirstTime", true);

user_pref("CT1937708.FirstTimeFF3", true);

user_pref("CT1937708.FixPageNotFoundErrors", false);

user_pref("CT1937708.GroupingServerCheckInterval", 1440);

user_pref("CT1937708.GroupingServiceUrl", "http://grouping.services.conduit.com/");

user_pref("CT1937708.HPInstall", false);

user_pref("CT1937708.HasUserGlobalKeys", true);

user_pref("CT1937708.HomePageProtectorEnabled", false);

user_pref("CT1937708.HomepageBeforeUnload", "http://start.pogo.iplay.com/?o=shp");

user_pref("CT1937708.Initialize", true);

user_pref("CT1937708.InitializeCommonPrefs", true);

user_pref("CT1937708.InstallationAndCookieDataSentCount", 3);

user_pref("CT1937708.InstallationType", "DirectDownload");

user_pref("CT1937708.InstalledDate", "Tue Jan 10 2012 22:44:01 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.IsAlertDBUpdated", true);

user_pref("CT1937708.IsGrouping", false);

user_pref("CT1937708.IsInitSetupIni", true);

user_pref("CT1937708.IsMulticommunity", false);

user_pref("CT1937708.IsOpenThankYouPage", true);

user_pref("CT1937708.IsOpenUninstallPage", true);

user_pref("CT1937708.IsProtectorsInit", true);

user_pref("CT1937708.LanguagePackLastCheckTime", "Fri Dec 07 2012 17:34:37 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.LanguagePackReloadIntervalMM", 1440);

user_pref("CT1937708.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");

user_pref("CT1937708.LastLogin_3.10.0.1", "Sun Apr 29 2012 20:27:59 GMT-0400 (Eastern Daylight Time)");

user_pref("CT1937708.LastLogin_3.11.0.3", "Sun May 06 2012 20:25:23 GMT-0400 (Eastern Daylight Time)");

user_pref("CT1937708.LastLogin_3.12.2.3", "Mon May 21 2012 20:30:18 GMT-0400 (Eastern Daylight Time)");

user_pref("CT1937708.LastLogin_3.13.0.6", "Sun Jul 08 2012 16:01:20 GMT-0400 (Eastern Daylight Time)");

user_pref("CT1937708.LastLogin_3.14.1.0", "Fri Aug 31 2012 17:14:54 GMT-0400 (Eastern Daylight Time)");

user_pref("CT1937708.LastLogin_3.15.1.0", "Thu Nov 08 2012 22:22:30 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.LastLogin_3.16.0.3", "Sat Dec 08 2012 08:18:25 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.LastLogin_3.9.0.3", "Mon Feb 13 2012 18:00:54 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.LatestVersion", "3.16.0.3");

user_pref("CT1937708.Locale", "en-us");

user_pref("CT1937708.MCDetectTooltipHeight", "83");

user_pref("CT1937708.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

user_pref("CT1937708.MCDetectTooltipWidth", "295");

user_pref("CT1937708.MyStuffEnabledAtInstallation", true);

user_pref("CT1937708.OriginalFirstVersion", "3.9.0.3");

user_pref("CT1937708.SearchCaption", "TheKnot Customized Web Search");

user_pref("CT1937708.SearchEngineBeforeUnload", "Google");

user_pref("CT1937708.SearchFromAddressBarIsInit", true);

user_pref("CT1937708.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1937708&q=");

user_pref("CT1937708.SearchInNewTabEnabled", true);

user_pref("CT1937708.SearchInNewTabIntervalMM", 1440);

user_pref("CT1937708.SearchInNewTabLastCheckTime", "Fri Dec 07 2012 17:34:36 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

user_pref("CT1937708.SearchProtectorEnabled", false);

user_pref("CT1937708.SearchProtectorToolbarDisabled", false);

user_pref("CT1937708.SendProtectorDataViaLogin", true);

user_pref("CT1937708.ServiceMapLastCheckTime", "Fri Dec 07 2012 17:34:36 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.SettingsLastCheckTime", "Sat Dec 08 2012 10:22:48 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.SettingsLastUpdate", "1354705172");

user_pref("CT1937708.TBHomePageUrl", "http://search.conduit.com/?ctid=CT1937708&SearchSource=13");

user_pref("CT1937708.ThirdPartyComponentsInterval", 504);

user_pref("CT1937708.ThirdPartyComponentsLastCheck", "Sun Dec 02 2012 08:11:52 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.ThirdPartyComponentsLastUpdate", "1331805997");

user_pref("CT1937708.ToolbarShrinkedFromSetup", false);

user_pref("CT1937708.TrusteLinkUrl", "http://trust.conduit.com/CT1937708");

user_pref("CT1937708.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com

user_pref("CT1937708.UserID", "UN59472231089734655");

user_pref("CT1937708.ValidationData_Search", 1);

user_pref("CT1937708.ValidationData_Toolbar", 2);

user_pref("CT1937708.alertChannelId", "471016");

user_pref("CT1937708.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP

user_pref("CT1937708.globalFirstTimeInfoLastCheckTime", "Thu Dec 06 2012 19:13:41 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.homepageProtectorEnableByLogin", true);

user_pref("CT1937708.initDone", true);

user_pref("CT1937708.isAppTrackingManagerOn", false);

user_pref("CT1937708.myStuffEnabled", true);

user_pref("CT1937708.myStuffPublihserMinWidth", 400);

user_pref("CT1937708.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

user_pref("CT1937708.myStuffServiceIntervalMM", 1440);

user_pref("CT1937708.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

user_pref("CT1937708.oldAppsList", "128671024943906929,128671024974844430,111,128671540509750122,128674285669494196,128671543723344452,128671533878812851,128708047588575188,12

user_pref("CT1937708.revertSettingsEnabled", false);

user_pref("CT1937708.searchProtectorDialogDelayInSec", 10);

user_pref("CT1937708.searchProtectorEnableByLogin", true);

user_pref("CT1937708.testingCtid", "");

user_pref("CT1937708.toolbarAppMetaDataLastCheckTime", "Fri Dec 07 2012 17:34:37 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.toolbarContextMenuLastCheckTime", "Fri Dec 07 2012 17:34:37 GMT-0500 (Eastern Standard Time)");

user_pref("CT1937708.usagesFlag", 2);

user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT1937708/CT1937708", "\"570102db8fcada1e3aefb7f74e8ecf1b3\"");

user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/471016/466887/US", "\"0\"");

user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT1937708", "\"0\"");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us", "C5ZJe6gL80JBW5CuLy+wkg==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us", "mfQ70fvlD2zuBxSBj8rQqA==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us", "k9un27OkAvkwB2ZmvXxTnA==");

user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us", "FqddrIU7eyJgaaLyHDeVMQ==");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:155b\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:14f1\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:155b\"");

user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");

user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT1937708", "\"f1c77625c0e9bd1c80a2fd6901845fa9\"");

user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"ad9cd3b32c68906c8c16d35d5ffc7f70\"");

user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"5164bce59c5535f5d4cec4c4329d33a7\"");

user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Brandee\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\q21n25wk.default\\conduitCommon\\modules\\3.16.0.3");

user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.16.0.3");

user_pref("CommunityToolbar.MiniIPageGadgetSize.http://storage.conduit.com/8/193/CT1937708/Gadgets/0089c514-0331-41b3-accf-a96234702438.html", "950x799");

user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");

user_pref("CommunityToolbar.ToolbarsList", "CT1937708");

user_pref("CommunityToolbar.ToolbarsList2", "CT1937708");

user_pref("CommunityToolbar.ToolbarsList4", "CT1937708");

user_pref("CommunityToolbar.globalUserId", "3df62f37-76c2-495a-94f3-0c6ddbcdcd0f");

user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Mon Dec 03 2012 21:31:37 GMT-0500 (Eastern Standard Time)");

user_pref("CommunityToolbar.notifications.alertEnabled", true);

user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);

user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Dec 07 2012 17:34:47 GMT-0500 (Eastern Standard Time)");

user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");

user_pref("CommunityToolbar.notifications.locale", "en");

user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);

user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Dec 07 2012 17:34:38 GMT-0500 (Eastern Standard Time)");

user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");

user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");

user_pref("CommunityToolbar.notifications.showTrayIcon", false);

user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);

user_pref("CommunityToolbar.notifications.userId", "b895aaa4-615e-4096-970e-a8c5e6d08bcb");

user_pref("CommunityToolbar.originalHomepage", "http://start.pogo.iplay.com/?o=shp");

user_pref("CommunityToolbar.originalSearchEngine", "Google");

user_pref("browser.search.defaultenginename", "Web Search");

user_pref("extensions.enabledItems", "{53F9B74B-B22A-4EB0-9FEB-14F05390930C}:1502.2011.310.1640,wisestamp@wisestamp.com:2.2.1,{64161300-e22b-11db-8314-0800200c9a66}:0.9.5.8,vs

user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Mozilla F

user_pref("extensions.ntk.HISTORY", "[{\"title\":\"Google\",\"icon\":{\"spec\":\"moz-anno:favicon:http://www.google.com/favicon.ico\"},\"uri\":\"http://www.google.com/\",\"acc

user_pref("extensions.ntk.love", "\n<br />\n<b>Warning</b>: Cannot modify header information - headers already sent by (output started at /home/content/89/5104989/html/getRel

user_pref("extensions.ntk.searchShortcuts", "http://www.aol.com::aol;http://www.apple.com::Apple;http://www.baidu.com::baidu;http://www.bankofamerica.com::Bank of America;http

user_pref("extensions.vshare@toolbar.install-event-fired", true);

user_pref("vshare.install.date", "1287878400000");

user_pref("vshare.install.finished", "1.0.0");

user_pref("vshare.install.guid", "{2b85b6d7-c2a3-4133-84ef-ba0f0fd1352f}");

user_pref("vshare.install.isHidden", true);

user_pref("vshare.install.istoolbarhp", true);

user_pref("vshare.install.istoolbarsearch", true);

user_pref("vshare.install.laststatreq", "1305331200000");

user_pref("vshare.install.newtab", false);

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Sat 12/08/2012 at 22:07:59.64

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.