Jump to content

IE3SH.EXE has stopped working & BHO.DDL not found

rvn_sanz

By rvn_sanz
in Resolved Malware Removal Logs

 Share

Recommended Posts

rvn_sanz

rvn_sanz

Posted
Posted

I have a problem with my laptop. The following error keep coming up when I start-up.

 

"This application has failed to start because BHO.DDL was not found. Re-installing the application may fix the problems." and "ie3sh.exe Application has stopped working" 

 

I have done a the Malware Removal and still have the same problem and I am getting so :angry: ....

 

I have saved the following two logs onto my desktop;

  • DDS.txt
  • Attach.txt

 

Please help me :unsure:

 

PS. I hope that i'm doing this post the way I'm surposed to

 

 

________________________________________________________________________________________

 

 

Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Hello rvn_sanz and :welcome:! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

  • If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
  • I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
  • Make sure you read all of the instructions and fixes thoroughly before continuing with them.
  • Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
  • Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
  • Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.
Please post your log files in your next reply.
Link to post
Share on other sites
rvn_sanz

rvn_sanz

Posted
  • Author
Posted

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16520  BrowserJavaVersion: 10.21.2
Run by Rachel at 16:12:55 on 2013-11-17
Microsoft® Windows Vista™ Business   6.0.6002.2.1252.27.1033.18.3062.1257 [GMT 13:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\sm56hlpr.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Windows\System32\ACEngSvr.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\AVG\AVG2014\avgwdsvc.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Nuance\PaperPort\pptd40nt.exe
C:\Program Files\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Browny02\Brother\BrStMonW.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe
C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
C:\Users\Rachel\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\AVG\AVG2014\avgnsx.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.1.2\loggingserver.exe
C:\Users\Rachel\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Browny02\BrYNSvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\System32\alg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\System32\svchost.exe -k Akamai
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.

uSearch Bar = Preserve

uProxyOverride = <local>;*.local
uURLSearchHooks: <No Name>: {f4c28532-b9d0-4950-a2df-e83f9929242b} -
dURLSearchHooks: {A3BC75A2-1F87-4686-AA43-5347D756017C} - <orphaned>
BHO: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - <orphaned>
BHO: PlusIEEventHelper Class: {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - c:\program files\nuance\pdf viewer plus\bin\PlusIEContextMenu.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: BrowserHelper Class: {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - c:\program files\sgpsa\SearchAssistant.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} -
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Search Assistant BHO: {c4b22c87-45ef-4f43-89f2-40db2078864e} -
BHO: Toolbar BHO: {da71fd14-5f7b-46ae-b8b1-44074a38f331} -
BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: Fast Browser Search Toolbar Helper: {FCBCCB87-9224-4B8D-B117-F56D924BEB18} -
TB: Fast Browser Search Toolbar: {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -
TB: Fast Browser Search Toolbar: {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -
TB: MyFunCards: {210f1b36-3b7f-41a4-b5da-3eb87f5a56c2} -
TB: AVG Security Toolbar: {95B7759C-8C7F-4BF1-B163-73684A933233} -
uRun: [VoipRaider] "c:\program files\voipraider.com\voipraider\VoipRaider.exe" -nosplash -minimized
uRun: [skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [MobileDocuments] c:\program files\common files\apple\internet services\ubd.exe
uRun: [iCloudServices] c:\program files\common files\apple\internet services\iCloudServices.exe
uRun: [com.apple.dav.bookmarks.daemon] c:\program files\common files\apple\internet services\BookmarkDAV_client.exe
uRun: [ApplePhotoStreams] c:\program files\common files\apple\internet services\ApplePhotoStreams.exe
uRun: [Akamai NetSession Interface] "c:\users\rachel\appdata\local\akamai\netsession_win.exe"
uRun: [iSUSPM] c:\programdata\flexnet\connect\11\ISUSPM.exe -scheduler
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [FBSSA] c:\program files\sgpsa\ie3sh.exe
mRun: [Windows Defender] c:\program files\windows defender\MSASCui.exe -hide
mRun: [WinampAgent] "c:\program files\winamp\winampa.exe"
mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
mRun: [TrayMin900] c:\windows\system32\drivers\Tray900.exe
mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [sMSERIAL] sm56hlpr.exe
mRun: [skytel] Skytel.exe
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [RevHDD] c:\windows\system\RevHDD.exe
mRun: [RemoteControl] "c:\program files\asustek\asusdvd\PDVDServ.exe"
mRun: [PhiBtn] c:\windows\system32\drivers\PhiBtn.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [LanguageShortcut] "c:\program files\asustek\asusdvd\language\Language.exe"
mRun: [igfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [AVG_UI] "c:\program files\avg\avg2014\avgui.exe" /TRAYONLY
mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
mRun: [ATKOSD2] "c:\program files\atkosd2\ATKOSD2.exe"
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [indexSearch] "c:\program files\nuance\paperport\IndexSearch.exe"
mRun: [PaperPort PTD] "c:\program files\nuance\paperport\pptd40nt.exe"
mRun: [PPort12reminder] "c:\program files\nuance\paperport\ereg\ereg.exe" -r "c:\programdata\scansoft\paperport\12\config\ereg\Ereg.ini"
mRun: [PDFHook] c:\program files\nuance\pdf viewer plus\pdfpro5hook.exe
mRun: [PDF5 Registry Controller] c:\program files\nuance\pdf viewer plus\RegistryController.exe
mRun: [ControlCenter4] c:\program files\controlcenter4\BrCcBoot.exe /autorun
mRun: [brStsMon00] c:\program files\browny02\brother\BrStMonW.exe /AUTORUN
mRun: [bCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [Autodesk Sync] c:\program files\autodesk\autodesk sync\AdSync.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRunOnce: [Malwarebytes Anti-Malware] c:\program files\malwarebytes' anti-malware\mbamgui.exe /install /silent
mPolicies-Explorer: BindDirectlyToPropertySetStorage = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~1\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~1\office14\ONBttnIE.dll/105
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre7\bin\jp2iexp.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll









TCP: NameServer = 192.168.1.254
TCP: Interfaces\{9F5E7671-E5C4-4D19-8290-0E193119BA2C} : DHCPNameServer = 192.168.1.254
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\17.1.2\ViProtocol.dll
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: igfxcui - igfxdev.dll
AppInit_DLLs= c:\progra~1\browse~1\sprote~1.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\rachel\appdata\roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\

FF - prefs.js: browser.search.selectedEngine - Translator 3.1 B2 Customized Web Search

FF - prefs.js: keyword.enabled - false
FF - plugin: c:\progra~1\micros~1\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~1\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\common files\avg secure search\sitesafetyinstaller\17.1.2\npsitesafety.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\programdata\visan\plugins\npRLSecurePluginLayer.dll
FF - plugin: c:\programdata\visan\reseller2\npRLViewer.dll
FF - plugin: c:\users\rachel\appdata\roaming\facebook\npfbplugin_1_0_3.dll
FF - plugin: c:\users\rachel\appdata\roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\extensions\{d10ab397-6889-47b7-8626-466a5750dd66}\plugins\np-mswmp.dll
FF - plugin: c:\users\rachel\appdata\roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\extensions\{d10ab397-6889-47b7-8626-466a5750dd66}\plugins\npConduitFirefoxPlugin.dll
FF - plugin: c:\users\rachel\appdata\roaming\mozilla\plugins\np-mswmp.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_9_900_117.dll
.
---- FIREFOX POLICIES ----

FF - user.js: extensions.privitize.id - ee5a87ac0000000000000015afe6e903
FF - user.js: extensions.privitize.appId - {301966DF-A84B-4255-AAB9-574B5CE237E4}
FF - user.js: extensions.privitize.instlDay - 15871
FF - user.js: extensions.privitize.vrsn - 1.8.21.6
FF - user.js: extensions.privitize.vrsni - 1.8.21.6
FF - user.js: extensions.privitize.vrsnTs - 1.8.21.620:22:12
FF - user.js: extensions.privitize.prtnrId - privitize
FF - user.js: extensions.privitize.prdct - privitize
FF - user.js: extensions.privitize.aflt - 5
FF - user.js: extensions.privitize.smplGrp - none
FF - user.js: extensions.privitize.tlbrId - base
FF - user.js: extensions.privitize.instlRef -
FF - user.js: extensions.privitize.dfltLng -
FF - user.js: extensions.privitize.excTlbr - true
FF - user.js: extensions.privitize.ffxUnstlRst - false
FF - user.js: extensions.privitize.admin - false
FF - user.js: extensions.privitize.autoRvrt - false
FF - user.js: extensions.privitize.rvrt - false
FF - user.js: extensions.privitize.newTab - true

.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2013-9-2 145720]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2013-9-2 223032]
R0 RapportKELL;RapportKELL;c:\windows\system32\drivers\RapportKELL.sys [2012-5-20 56248]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2013-8-1 193848]
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [2012-10-2 37664]
R1 RapportCerberus_34302;RapportCerberus_34302;c:\programdata\trusteer\rapport\store\exts\rapportcerberus\34302\RapportCerberus32_34302.sys [2011-12-16 228208]
R1 RapportEI;RapportEI;c:\program files\trusteer\rapport\bin\RapportEI.sys [2012-5-20 71480]
R1 RapportPG;RapportPG;c:\program files\trusteer\rapport\bin\RapportPG.sys [2012-5-20 164152]
R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2008-1-21 21504]
R2 Autodesk Content Service;Autodesk Content Service;c:\program files\autodesk\content service\Connect.Service.ContentService.exe [2012-1-31 19232]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2014\avgwdsvc.exe [2013-9-25 301152]
R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\nuance\paperport\PDFProFiltSrvPP.exe [2010-3-9 144672]
R2 TomTomHOMEService;TomTomHOMEService;c:\program files\tomtom home 2\TomTomHOMEService.exe [2012-12-5 92632]
R2 vToolbarUpdater17.1.2;vToolbarUpdater17.1.2;c:\program files\common files\avg secure search\vtoolbarupdater\17.1.2\ToolbarUpdater.exe [2013-11-12 1734680]
R3 BrYNSvc;BrYNSvc;c:\program files\browny02\BrYNSvc.exe [2013-3-14 245760]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 MyFunCards_5mService;MyFunCardsService;c:\progra~1\myfunc~2\bar\1.bin\5mbarsvc.exe --> c:\progra~1\myfunc~2\bar\1.bin\5mbarsvc.exe [?]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-9-5 171680]
S3 BrSerIb;Brother Serial Interface Driver(WDM);c:\windows\system32\drivers\BrSerIb.sys [2013-3-14 71424]
S3 BrUsbSIb;Brother Serial USB Driver(WDM);c:\windows\system32\drivers\BrUsbSib.sys [2013-3-14 11520]
S3 camdrv41;Philips SPC 900NC PC Camera;c:\windows\system32\drivers\camdrv41.sys [2007-4-23 1347584]
S3 FNETTHJM;Verbatim Turbo USB 2.0;c:\windows\system32\drivers\fnetthjm.sys [2011-8-7 24448]
S3 iBurstu;iBurst Terminal;c:\windows\system32\drivers\iBurstu.sys [2009-5-27 37362]
S3 RapportIaso;RapportIaso;c:\programdata\trusteer\rapport\store\exts\rapportms\39624\RapportIaso.sys [2012-5-29 21520]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
.
=============== File Associations ===============
.
FileExt: .scr: AutoCADScriptFile=c:\windows\system32\notepad.exe "%1"
.
=============== Created Last 30 ================
.
2013-11-16 08:25:35    62576    ----a-w-    c:\programdata\microsoft\windows defender\definition updates\{86c25852-339f-4ff2-b750-c38c0aa71021}\offreg.dll
2013-11-16 08:19:10    7796464    ----a-w-    c:\programdata\microsoft\windows defender\definition updates\{86c25852-339f-4ff2-b750-c38c0aa71021}\mpengine.dll
2013-11-15 21:34:37    --------    d-----w-    c:\program files\iPod
2013-11-15 21:34:35    --------    d-----w-    c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-11-13 06:01:16    297984    ----a-w-    c:\windows\system32\gdi32.dll
2013-11-13 06:01:12    993792    ----a-w-    c:\windows\system32\crypt32.dll
2013-11-13 06:01:07    444928    ----a-w-    c:\windows\system32\IKEEXT.DLL
2013-11-13 06:01:06    596480    ----a-w-    c:\windows\system32\FWPUCLNT.DLL
2013-10-27 23:12:14    --------    d-----w-    c:\users\rachel\appdata\roaming\AVG2014
2013-10-27 23:05:20    --------    d-----w-    c:\programdata\AVG2014
2013-10-27 23:01:21    --------    d-----w-    c:\users\rachel\appdata\local\Avg2014
2013-10-25 05:18:08    22856    ----a-w-    c:\windows\system32\drivers\mbam.sys
2013-10-25 05:18:08    --------    d-----w-    c:\program files\Malwarebytes' Anti-Malware
.
==================== Find3M  ====================
.
2013-11-11 12:17:18    37664    ----a-w-    c:\windows\system32\drivers\avgtpx86.sys
2013-10-25 19:31:32    45056    ----a-w-    c:\windows\system32\acovcnt.exe
2013-10-13 09:48:06    1806848    ----a-w-    c:\windows\system32\jscript9.dll
2013-10-13 09:35:52    1427968    ----a-w-    c:\windows\system32\inetcpl.cpl
2013-10-13 09:35:38    1129472    ----a-w-    c:\windows\system32\wininet.dll
2013-10-13 09:30:14    142848    ----a-w-    c:\windows\system32\ieUnatt.exe
2013-10-13 09:29:02    420864    ----a-w-    c:\windows\system32\vbscript.dll
2013-10-13 09:25:39    2382848    ----a-w-    c:\windows\system32\mshtml.tlb
2013-10-09 04:49:19    71048    ----a-w-    c:\windows\system32\FlashPlayerCPLApp.cpl
2013-10-09 04:49:19    692616    ----a-w-    c:\windows\system32\FlashPlayerApp.exe
2013-09-03 00:35:12    238872    ------w-    c:\windows\system32\MpSigStub.exe
2013-09-01 21:28:06    145720    ----a-w-    c:\windows\system32\drivers\avgidshx.sys
2013-09-01 21:28:00    223032    ----a-w-    c:\windows\system32\drivers\avglogx.sys
2013-08-29 07:36:04    2050048    ----a-w-    c:\windows\system32\win32k.sys
2013-08-27 02:47:50    219648    ----a-w-    c:\windows\system32\d3d10_1core.dll
2013-08-27 02:47:50    189952    ----a-w-    c:\windows\system32\d3d10core.dll
2013-08-27 02:47:50    160768    ----a-w-    c:\windows\system32\d3d10_1.dll
2013-08-27 02:47:50    1029120    ----a-w-    c:\windows\system32\d3d10.dll
2013-08-27 01:52:08    1172480    ----a-w-    c:\windows\system32\d3d10warp.dll
2013-08-27 01:50:40    486400    ----a-w-    c:\windows\system32\d3d10level9.dll
2013-08-27 01:32:20    683008    ----a-w-    c:\windows\system32\d2d1.dll
2013-08-27 01:28:36    1069056    ----a-w-    c:\windows\system32\DWrite.dll
2013-08-27 01:28:35    798208    ----a-w-    c:\windows\system32\FntCache.dll
.
============= FINISH: 16:18:59.19 ===============

______________________________________________________________________________

 

DDS (Ver_2012-11-20.01)
.
Microsoft® Windows Vista™ Business
Boot Device: \Device\HarddiskVolume2
Install Date: 31/07/2008 6:20:24 p.m.
System Uptime: 17/11/2013 1:23:58 p.m. (3 hours ago)
.
Motherboard: ASUSTeK Computer Inc.         |  | X51L      
Processor: Intel® Pentium® Dual  CPU  T2390  @ 1.86GHz | Socket 478 | 1867/133mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 116 GiB total, 4.843 GiB free.
D: is FIXED (NTFS) - 107 GiB total, 1.062 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
.
==== Installed Programs ======================
.
µTorrent
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.7)
Akamai NetSession Interface
Akamai NetSession Interface Service
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ASUS Data Security Manager
ASUS Splendid Video Enhancement Technology
ASUSDVD
Atheros Driver Installation Program
ATK Generic Function Service
ATK Hotkey
ATKOSD2
AutoCAD 2011 - English
AutoCAD 2013 - English
AutoCAD 2013 Language Pack - English
Autodesk Content Service
Autodesk Content Service Language Pack
Autodesk Design Review 2013
Autodesk Inventor Fusion 2013
Autodesk Inventor Fusion plug-in for AutoCAD 2013
Autodesk Inventor Fusion plug-in language pack for AutoCAD 2013
Autodesk Material Library 2013
Autodesk Material Library Base Resolution Image Library 2013
Autodesk Sync
AVG 2013
AVG 2014
Bonjour
Brother MFL-Pro Suite MFC-7360N
Compatibility Pack for the 2007 Office system
CyberLink LabelPrint
D3DX10
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition
Download Updater (AOL LLC)
Facebook Plug-In
FARO LS 1.1.406.58
Fast Browser Search (My Web Tattoo)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
iCloud
Intel® Graphics Media Accelerator Driver
iTunes
Java 7 Update 21
Java Auto Updater
Java SE Runtime Environment 6
LightScribe System Software  1.12.37.1
LiveUpdate (Symantec Corporation)
Malwarebytes Anti-Malware version 1.75.0.1300
MediaShow
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2010
Microsoft Office File Validation Add-In
Microsoft Office Groove MUI (English) 2010
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office Live Add-in 1.5
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Word MUI (English) 2010
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Motorola SM56 Data Fax Modem
Mozilla Firefox 25.0.1 (x86 en-US)
Mozilla Maintenance Service
MSVCRT
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB2758694)
MyFunCards Toolbar
MyTomTom 3.2.0.906
NB Probe
Nuance PaperPort 12
Nuance PDF Viewer Plus
OGA Notifier 2.0.0048.0
PaperPort Image Printer
Philips SPC 900NC PC Camera
Power4Gear eXtreme
QuickTime
Rapport
Realtek 8139 and 8139C+ Ethernet Network Card Driver for Windows Vista
Realtek High Definition Audio Driver
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02
RocketLife
Scansoft PDF Professional
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2861188)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)
Security Update for Microsoft Excel 2010 (KB2826033) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2553284) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2687423) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2760781) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826023) 32-Bit Edition
Security Update for Microsoft Office 2010 (KB2826035) 32-Bit Edition
Security Update for Microsoft Outlook 2010 (KB2837597) 32-Bit Edition
Security Update for Windows Media Encoder (KB2447961)
Security Update for Windows Media Encoder (KB954156)
Security Update for Windows Media Encoder (KB979332)
Segoe UI
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition
SIPPS
Skype Click to Call
Skype™ 6.9
SPIF225 USB to SATA Bridge 98 Driver Installer
Synaptics Pointing Device Driver
TomTom HOME
TomTom HOME Visual Studio Merge Modules
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2836939)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition
Visual Studio 2012 x86 Redistributables
Visual Studio C++ 10.0 Runtime
Winamp
Winamp Detector Plug-in
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live Sync
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Media Encoder 9 Series
Windows Media Player Firefox Plugin
WinFlash
Wireless Console 2
.
==== End Of File ===========================
 

Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Step 1

Please uninstall the following applications:

µTorrent

AVG 2013

MyFunCards Toolbar

Step 2

Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
Step 3

Please download AdwCleaner by Xplode onto your desktop.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Clean.
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[s1].txt as well.
Step 4
  • Launch Malwarebytes' Anti-Malware
  • Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
  • Go to Scanner tab and select Perform Quick Scan, then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.

In your next reply, post the following log files:

  • Junkware Removal Tool log
  • AdwCleaner log
  • Malwarebytes' Anti-Malware log
Link to post
Share on other sites
rvn_sanz

rvn_sanz

Posted
  • Author
Posted

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows Vista Business x86
Ran by Rachel on Tue 19/11/2013 at 19:36:15.60
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [service] myfuncards_5mservice
Successfully deleted: [service] myfuncards_5mservice



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\bho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\dnu.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\wmhelper.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DA71FD14-5F7B-46AE-B8B1-44074A38F331}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilivid
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\fun web products
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\funwebproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\mywebsearch
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DA71FD14-5F7B-46AE-B8B1-44074A38F331}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DA71FD14-5F7B-46AE-B8B1-44074A38F331}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bho.pshelper
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bho.pshelper.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdate
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloaduibrowser
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloaduibrowser.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloadupdcontroller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnupdater.downloadupdcontroller.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\s
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\myfuncards_5mbar uninstall
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB07183.IEToolbar
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB07183.IEToolbar.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB07183.TBSB07183
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB07183.TBSB07183.3
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB07183.IEToolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB07183.IEToolbar.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB07183.TBSB07183
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB07183.TBSB07183.3
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3072253
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{37DB6622-2B03-4867-95FC-2A8B8C950EF1}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{93FCADFC-3BD6-4429-9232-C5F6D6ABBA2C}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2A69}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C4B22C87-45EF-4F43-89F2-40DB2078864E}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DA71FD14-5F7B-46AE-B8B1-44074A38F331}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}



~~~ Files

Successfully deleted: [File] "C:\Program Files\mozilla firefox\plugins\npdnu.dll"
Successfully deleted: [File] "C:\Program Files\mozilla firefox\plugins\npdnu.xpt"
Successfully deleted: [File] "C:\Program Files\mozilla firefox\plugins\npdnupdater2.dll"
Successfully deleted: [File] "C:\Program Files\mozilla firefox\plugins\npdnupdater2.xpt"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\drivercure"
Successfully deleted: [Folder] "C:\ProgramData\softsafe"
Successfully deleted: [Folder] "C:\Users\Rachel\AppData\Roaming\drivercure"
Successfully deleted: [Folder] "C:\Users\Rachel\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\Rachel\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\Rachel\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Rachel\appdata\locallow\funwebproducts"
Successfully deleted: [Folder] "C:\Users\Rachel\appdata\locallow\myfuncards_5m"
Successfully deleted: [Folder] "C:\Users\Rachel\appdata\locallow\mywebsearch"
Successfully deleted: [Folder] "C:\Program Files\conduit"
Successfully deleted: [Folder] "C:\Program Files\fast browser search"
Successfully deleted: [Folder] "C:\Program Files\myfuncards_5m"
Successfully deleted: [Folder] "C:\Program Files\optimizer pro"
Successfully deleted: [Folder] "C:\Program Files\sgpsa"
Successfully deleted: [Folder] "C:\Program Files\winamp toolbar"
Successfully deleted: [Folder] "C:\Program Files\Common Files\software update utility"



~~~ FireFox

Failed to delete: [File] "C:\Program Files\Mozilla Firefox\searchplugins\avg_igeared.xml"
Failed to delete: [File] "C:\Program Files\Mozilla Firefox\searchplugins\bearsharewebsearch.xml"
Failed to delete: [File] "C:\Program Files\Mozilla Firefox\searchplugins\search_results.xml"
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\user.js
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\user.js
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\searchplugins\bearsharewebsearch.xml
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\searchplugins\conduit.xml
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\searchplugins\conduit.xml
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\searchplugins\privitize.xml
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\searchplugins\privitize.xml
Successfully deleted: [File] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\searchplugins\search_results.xml
Successfully deleted: [Folder] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\conduitcommon
Successfully deleted: [Folder] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\smartbar
Successfully deleted: [Folder] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\winamptoolbardata
Successfully deleted: [Folder] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\extensions\5mffxtbr@MyFunCards_5m.com
Successfully deleted: [Folder] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\extensions\staged
Successfully deleted: [Folder] C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\5mffxtbr@myfuncards_5m.com
Successfully deleted the following from C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\prefs.js






user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");




user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP








user_pref("CT3221187.SearchCaption", "Entertainment.Foryourbrowser Customized Web Search");
user_pref("CT3221187.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");




user_pref("CT3221187.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT3221187.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP



user_pref("CommunityToolbar.ConduitSearchList", "uTorrentControl2 Customized Web Search");

















user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.13.0.6");

user_pref("CommunityToolbar.ToolbarsList", "CT3072253,CT3221187");
user_pref("CommunityToolbar.ToolbarsList2", "CT3072253,CT3221187");
user_pref("CommunityToolbar.ToolbarsList4", "CT3072253,CT3221187");
user_pref("CommunityToolbar.globalUserId", "2daaeb84-02c6-40ff-8124-f1a9357bb5d3");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Jun 30 2012 11:09:21 GMT+1200 (New Zealand Standard Time)");
user_pref("CommunityToolbar.notifications.alertEnabled", false);
user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri May 18 2012 06:32:13 GMT+1200 (New Zealand Standard Time)");

user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Jul 01 2012 12:35:09 GMT+1200 (New Zealand Standard Time)");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);

user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "2a1a9e17-0aa1-4a17-91a3-7d307515c994");

user_pref("CommunityToolbar.originalSearchEngine", "AOL Web Search");
user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");

user_pref("browser.search.selectedEngine", "Conduit Search");

user_pref("extensions.mywebsearch.prevKwdEnabled", true);


user_pref("extensions.toolbar.mindspark._27Members_.initialized", true);
user_pref("extensions.toolbar.mindspark._27Members_.installation.installDate", "2012021309");
user_pref("extensions.toolbar.mindspark._27Members_.installation.partnerId", "YRxdm005YYnz");
user_pref("extensions.toolbar.mindspark._27Members_.installation.partnerSubId", "CKvTr4jila4CFcVKpgodhi16Hw");
user_pref("extensions.toolbar.mindspark._27Members_.installation.success", true);
user_pref("extensions.toolbar.mindspark._27Members_.installation.toolbarId", "AC79DE46-1F81-4495-B0B4-CA9F696060F0");
user_pref("extensions.toolbar.mindspark._27Members_.lastActivePing", "1329901769167");
user_pref("extensions.toolbar.mindspark._27Members_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._27Members_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._27Members_.options.keywordEnabled", true);
user_pref("extensions.toolbar.mindspark._27Members_.options.tabEnabled", true);

user_pref("extensions.toolbar.mindspark._27Members_.weather.location", "10001");

user_pref("extensions.toolbar.mindspark._5mMembers_.initialized", true);
user_pref("extensions.toolbar.mindspark._5mMembers_.installation.installDate", "2012070100");
user_pref("extensions.toolbar.mindspark._5mMembers_.installation.partnerId", "ZUxdm898YYnz");
user_pref("extensions.toolbar.mindspark._5mMembers_.installation.partnerSubId", "");
user_pref("extensions.toolbar.mindspark._5mMembers_.installation.success", true);
user_pref("extensions.toolbar.mindspark._5mMembers_.installation.toolbarId", "7ACDCAE9-792B-4EC1-BB7B-676A39CA2550");
user_pref("extensions.toolbar.mindspark._5mMembers_.lastActivePing", "1341199662386");
user_pref("extensions.toolbar.mindspark._5mMembers_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.lastInstalled", "myfuncards@mindspark.com");
user_pref("winamp_toolbar.search.searchtype", "web");
Successfully deleted the following from C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\prefs.js

user_pref("CT3300850.1000234.weatherData", "{\"icon\":\"26.png\",\"temperature\":\"9￯﾿ﾯ￯ﾾ﾿￯ﾾﾯ￯﾿ﾯ￯ﾾﾾ￯ﾾ﾿￯﾿ﾯ￯ﾾﾾ￯ﾾﾯ￯﾿ﾯï

user_pref("CT3300850.embeddedsData", "[{\"appId\":\"130122138225099745\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"get

user_pref("CT3300850.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnN
user_pref("CT3300850.mam_gk_settings1.8.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNTRfMCIsImlzVGVzdCI6dHJ1ZSwiaXNXZWxjb21lRXhwZXJpZW5j


user_pref("CT3300850.search.searchAppId", "130122138225099745");
user_pref("CT3300850.search.searchCount", "0");
user_pref("CT3300850.smartbar.CTID", "CT3300850");
user_pref("CT3300850.smartbar.Uninstall", "0");
user_pref("CT3300850.smartbar.homepage", "true");
user_pref("CT3300850.smartbar.toolbarName", "Translator 3.1 B2 ");

user_pref("Smartbar.ConduitSearchEngineList", "");
user_pref("Smartbar.ConduitSearchUrlList", "");

user_pref("Smartbar.keywordURLSelectedCTID", "");
user_pref("avg.install.userSPSettings", "Search Results");
user_pref("browser.search.defaultenginename", "Translator 3.1 B2 Customized Web Search");
user_pref("browser.search.defaultthis.engineName", "Translator 3.1 B2 Customized Web Search");

user_pref("browser.search.selectedEngine", "Translator 3.1 B2 Customized Web Search");
user_pref("extensions.privitize.admin", false);
user_pref("extensions.privitize.aflt", "5");
user_pref("extensions.privitize.appId", "{301966DF-A84B-4255-AAB9-574B5CE237E4}");
user_pref("extensions.privitize.autoRvrt", "false");
user_pref("extensions.privitize.dfltLng", "");
user_pref("extensions.privitize.excTlbr", true);
user_pref("extensions.privitize.ffxUnstlRst", false);
user_pref("extensions.privitize.id", "ee5a87ac0000000000000015afe6e903");
user_pref("extensions.privitize.instlDay", "15871");
user_pref("extensions.privitize.instlRef", "");

user_pref("extensions.privitize.lastVrsnTs", "1.8.21.620:22:12");
user_pref("extensions.privitize.newTab", true);

user_pref("extensions.privitize.prdct", "privitize");
user_pref("extensions.privitize.prtnrId", "privitize");
user_pref("extensions.privitize.rvrt", "false");
user_pref("extensions.privitize.smplGrp", "none");
user_pref("extensions.privitize.tlbrId", "base");

user_pref("extensions.privitize.vrsn", "1.8.21.6");
user_pref("extensions.privitize.vrsnTs", "1.8.21.620:22:12");
user_pref("extensions.privitize.vrsni", "1.8.21.6");

user_pref("extensions.toolbar.mindspark._12Members_.initialized", true);
user_pref("extensions.toolbar.mindspark._12Members_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._12Members_.installation.installDate", "2013072120");
user_pref("extensions.toolbar.mindspark._12Members_.installation.partnerId", "^9N^xdm005^YYA^nz");
user_pref("extensions.toolbar.mindspark._12Members_.installation.partnerSubId", "COiknaW9v7gCFcFfpQodd1gA7w");
user_pref("extensions.toolbar.mindspark._12Members_.installation.success", true);
user_pref("extensions.toolbar.mindspark._12Members_.installation.toolbarId", "1FCB4F0A-0491-4268-94CC-F0EB910FE3F7");
user_pref("extensions.toolbar.mindspark._12Members_.lastActivePing", "1375997045428");
user_pref("extensions.toolbar.mindspark._12Members_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._12Members_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._12Members_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._12Members_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._12Members_.weather.location", "10001");

user_pref("extensions.toolbar.mindspark._paMembers_.initialized", true);
user_pref("extensions.toolbar.mindspark._paMembers_.installation.contextKey", "");
user_pref("extensions.toolbar.mindspark._paMembers_.installation.installDate", "2013090617");
user_pref("extensions.toolbar.mindspark._paMembers_.installation.partnerId", "^Z1^xdm038^YYA^nz");
user_pref("extensions.toolbar.mindspark._paMembers_.installation.partnerSubId", "CJ3O88-EtrkCFUVLpAodOWIAGg");
user_pref("extensions.toolbar.mindspark._paMembers_.installation.success", true);
user_pref("extensions.toolbar.mindspark._paMembers_.installation.toolbarId", "E3B6B3DC-8F99-4EBC-A20B-15AA87ED8147");
user_pref("extensions.toolbar.mindspark._paMembers_.lastActivePing", "1379560167942");
user_pref("extensions.toolbar.mindspark._paMembers_.options.defaultSearch", false);
user_pref("extensions.toolbar.mindspark._paMembers_.options.homePageEnabled", false);
user_pref("extensions.toolbar.mindspark._paMembers_.options.keywordEnabled", false);
user_pref("extensions.toolbar.mindspark._paMembers_.options.tabEnabled", false);
user_pref("extensions.toolbar.mindspark._paMembers_.weather.location", "10001");
user_pref("extensions.toolbar.mindspark.lastInstalled", "filmfanatic2@mindspark.com");
user_pref("plugin.state.npconduitfirefoxplugin", 2);
user_pref("smartbar.addressBarOwnerCTID", "CT3300850");


user_pref("smartbar.defaultSearchOwnerCTID", "CT3300850");
user_pref("smartbar.homePageOwnerCTID", "CT3300850");
user_pref("smartbar.machineId", "UFVJUEGV2M+6V1DOXXDYLKXRG1SEBGWDVUQGBRKCFSR8ZUB8DWXRC3APKFM6CYRXZ4XTCAHEDCYL5U0DIR/O2Q");
user_pref("smartbar.originalSearchAddressUrl", "");
Emptied folder: C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\rzwj1h7b.default\minidumps [10 files]
Emptied folder: C:\Users\Rachel\AppData\Roaming\mozilla\firefox\profiles\odweiflo.default-1341219731324\minidumps [122 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 19/11/2013 at 19:42:20.43
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

 

 

 

 

 

# AdwCleaner v3.012 - Report created 19/11/2013 at 20:07:51
# Updated 11/11/2013 by Xplode
# Operating System : Windows Vista Business Service Pack 2 (32 bits)
# Username : Rachel - RACHEL-PC
# Running from : C:\Users\Rachel\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\EbookBoroowsea
Folder Deleted : C:\Program Files\AVG Secure Search
Folder Deleted : C:\Program Files\NCH Software
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Users\Rachel\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\Rachel\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Rachel\AppData\LocalLow\AVG Security Toolbar
Folder Deleted : C:\Users\Rachel\AppData\Roaming\NCH Software
Folder Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\odweiflo.default-1341219731324\Smartbar
Folder Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\odweiflo.default-1341219731324\CT3300850
Folder Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\rzwj1h7b.default\CT3221187
Folder Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\rzwj1h7b.default\Extensions\{0B38152B-1B20-484D-A11F-5E04A9B0661F}
Folder Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\odweiflo.default-1341219731324\Extensions\{d10ab397-6889-47b7-8626-466a5750dd66}
Folder Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\rzwj1h7b.default\Extensions\{8f87928d-7319-47d9-b1b2-044536872f60}
File Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\rzwj1h7b.default\searchplugins\aol-web-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\odweiflo.default-1341219731324\searchplugins\conduit-search.xml
File Deleted : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\rzwj1h7b.default\searchplugins\conduit-search.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Search_Results.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.XBTBPos00
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.XBTBPos00.1
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415C-8A37-763AE183E7E4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C4B22C87-45EF-4F43-89F2-40DB2078864E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D59156-647B-4B06-B20E-0E297A1077BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EBB289A-2D7B-465B-825F-1530B813E95A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BE990A32-C2EC-4654-8FD0-26FECEA81998}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CD5C92AE-97B0-4BC3-BA65-BA0308D543BF}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3088C799-9630-4719-A471-4544D7CABC2D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C4B22C87-45EF-4F43-89F2-40DB2078864E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0974BA1E-64EC-11DE-B2A5-E43756D89593}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C4B22C87-45EF-4F43-89F2-40DB2078864E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{1BB22D38-A411-4B13-A746-C2A4F4EC7344}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{1BB22D38-A411-4B13-A746-C2A4F4EC7344}]
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\AppDataLow\Software\MyFunCards_5m
Key Deleted : HKCU\Software\AppDataLow\Software\ShopperReports3
Key Deleted : HKCU\Software\AppDataLow\Software\smartbar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\iLividSRTB
Key Deleted : HKLM\Software\MyFunCards_5m
Key Deleted : HKLM\Software\NCH Software
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\SP Global
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyFunCards_5mbar Uninstall
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus Updater
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16520


-\\ Mozilla Firefox v25.0.1 (en-US)

[ File : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\odweiflo.default-1341219731324\prefs.js ]

Line Deleted : user_pref("CT3300850.1000082.isPlayDisplay", "true");

Line Deleted : user_pref("CT3300850.1000234.TWC_TMP_city", "AUCKLAND");
Line Deleted : user_pref("CT3300850.1000234.TWC_TMP_country", "NZ");
Line Deleted : user_pref("CT3300850.1000234.TWC_country", "NEW ZEALAND");
Line Deleted : user_pref("CT3300850.1000234.TWC_locId", "NZXX0003");
Line Deleted : user_pref("CT3300850.1000234.TWC_location", "Auckland, New Zealand");
Line Deleted : user_pref("CT3300850.1000234.TWC_region", "OT");
Line Deleted : user_pref("CT3300850.1000234.TWC_temp_dis", "c");
Line Deleted : user_pref("CT3300850.1000234.TWC_wind_dis", "kmh");
Line Deleted : user_pref("CT3300850.1000234.weatherData", "{\"icon\":\"26.png\",\"temperature\":\"9????????????????????????????????????????????????????????????????????????????????????????????????????????????????????[...]
Line Deleted : user_pref("CT3300850.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3300850.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3300850.FF19Solved", "true");
Line Deleted : user_pref("CT3300850.FirstTime", "true");
Line Deleted : user_pref("CT3300850.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3300850.PG_ENABLE.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3300850.UserID", "UN30671903221862291");
Line Deleted : user_pref("CT3300850.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3300850.autoDisableScopes", -1);
Line Deleted : user_pref("CT3300850.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3300850.countryCode", "NZ");
Line Deleted : user_pref("CT3300850.defaultSearch", "true");
Line Deleted : user_pref("CT3300850.embeddedsData", "[{\"appId\":\"130122138225099745\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT3300850.enableFix404ByUser", "TRUE");
Line Deleted : user_pref("CT3300850.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3300850.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3300850.fixPageNotFoundErrorByUser", "false");
Line Deleted : user_pref("CT3300850.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3300850.fixUrls", true);
Line Deleted : user_pref("CT3300850.fullUserID", "UN30671903221862291.UP.20130627131801");
Line Deleted : user_pref("CT3300850.homepageuserchanged", true);
Line Deleted : user_pref("CT3300850.installDate", "19/6/2013 21:52:05");
Line Deleted : user_pref("CT3300850.installSessionId", "4287638D-35D7-4CC5-948A-8DE40EE118BF");
Line Deleted : user_pref("CT3300850.installSp", "false");
Line Deleted : user_pref("CT3300850.installType", "xpe");
Line Deleted : user_pref("CT3300850.installUsage", "2013-06-19T12:54:37.8297822+03:00");
Line Deleted : user_pref("CT3300850.installUsageEarly", "2013-06-19T12:54:28.8596672+03:00");
Line Deleted : user_pref("CT3300850.installerVersion", "1.4.2.3");
Line Deleted : user_pref("CT3300850.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3300850.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3300850.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3300850.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3300850.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3300850.keyword", "true");

Line Deleted : user_pref("CT3300850.lastVersion", "10.22.3.518");
Line Deleted : user_pref("CT3300850.mam_gk_appStateReportTime.enc", "MTM3MTY4MzUwNzcwOQ==");
Line Deleted : user_pref("CT3300850.mam_gk_appState_CouponBuddy.enc", "b2Zm");
Line Deleted : user_pref("CT3300850.mam_gk_appState_Easytobook.enc", "b2Zm");
Line Deleted : user_pref("CT3300850.mam_gk_appState_Easytobook_targeted.enc", "b2Zm");
Line Deleted : user_pref("CT3300850.mam_gk_appState_PriceGong.enc", "b2Zm");
Line Deleted : user_pref("CT3300850.mam_gk_appsDefaultEnabled.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3300850.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiI0YmQyN2M3Ny03NzE5LTQxMWQtOWU4YS1iNTViNTU0NmY1YjgiLCJ[...]
Line Deleted : user_pref("CT3300850.mam_gk_currentVersion.enc", "MS44LjAuNA==");
Line Deleted : user_pref("CT3300850.mam_gk_first_time.enc", "MQ==");
Line Deleted : user_pref("CT3300850.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Line Deleted : user_pref("CT3300850.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3300850.mam_gk_lastLoginTime.enc", "MTM3MTY4MzUwODM1MQ==");
Line Deleted : user_pref("CT3300850.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
Line Deleted : user_pref("CT3300850.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3300850.mam_gk_showCloseButton.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3300850.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3300850.mam_gk_userId.enc", "YjJhMDVmZDAtOTYyYi00YmQ1LTgzYTYtZjcyNDBjN2U1ZmFk");
Line Deleted : user_pref("CT3300850.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT3300850.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.bleepingcomputer.com%2Fdownload%2Fadwcleaner%2Fdl%2F125%2F\",\"EB_MAIN_FRAME_TITLE\":\"Downloading%20AdwCleaner\[...]
Line Deleted : user_pref("CT3300850.openThankYouPage", "true");
Line Deleted : user_pref("CT3300850.openUninstallPage", "true");
Line Deleted : user_pref("CT3300850.originalSearchEngine", "");
Line Deleted : user_pref("CT3300850.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3300850.search.searchAppId", "130122138225099745");
Line Deleted : user_pref("CT3300850.search.searchCount", "0");
Line Deleted : user_pref("CT3300850.searchFromAddressBarEnabledByUser", "false");
Line Deleted : user_pref("CT3300850.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3300850.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3300850.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3300850.searchRevert", "false");
Line Deleted : user_pref("CT3300850.searchSuggestEnabledByUser", "false");
Line Deleted : user_pref("CT3300850.searchUserMode", "1");
Line Deleted : user_pref("CT3300850.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3300850.selectToSearchBoxEnabledByUser", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3300850.sendUsageEnabled", "false");
Line Deleted : user_pref("CT3300850.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3300850.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3300850.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3300850\"}");

Line Deleted : user_pref("CT3300850.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Translator 3.1 B2 \"}");
Line Deleted : user_pref("CT3300850.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3300850.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3300850.serviceLayer_services_Configuration_lastUpdate", "1384842858653");
Line Deleted : user_pref("CT3300850.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1384657665888");
Line Deleted : user_pref("CT3300850.serviceLayer_services_appTracking_lastUpdate", "1377468675962");
Line Deleted : user_pref("CT3300850.serviceLayer_services_appsMetadata_lastUpdate", "1384760795017");
Line Deleted : user_pref("CT3300850.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1383801798854");
Line Deleted : user_pref("CT3300850.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1371635672206");
Line Deleted : user_pref("CT3300850.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1371635683503");
Line Deleted : user_pref("CT3300850.serviceLayer_services_location_lastUpdate", "1372228235345");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.15.2.23_lastUpdate", "1371712418008");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372241807461");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.16.4.519_lastUpdate", "1372842936535");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.16.70.505_lastUpdate", "1378168969526");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.19.2.505_lastUpdate", "1378795275728");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.20.0.513_lastUpdate", "1380679710302");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.20.1.508_lastUpdate", "1382678156310");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.21.1.507_lastUpdate", "1384407872166");
Line Deleted : user_pref("CT3300850.serviceLayer_services_login_10.22.3.518_lastUpdate", "1384837897134");
Line Deleted : user_pref("CT3300850.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "1384842857736");
Line Deleted : user_pref("CT3300850.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1383801799147");
Line Deleted : user_pref("CT3300850.serviceLayer_services_searchAPI_lastUpdate", "1384842858548");
Line Deleted : user_pref("CT3300850.serviceLayer_services_serviceMap_lastUpdate", "1384842857866");
Line Deleted : user_pref("CT3300850.serviceLayer_services_toolbarContextMenu_lastUpdate", "1384760872646");
Line Deleted : user_pref("CT3300850.serviceLayer_services_toolbarSettings_lastUpdate", "1384837896997");
Line Deleted : user_pref("CT3300850.serviceLayer_services_translation_lastUpdate", "1384760794673");
Line Deleted : user_pref("CT3300850.settingsINI", true);
Line Deleted : user_pref("CT3300850.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3300850.showToolbarPermission", "false");
Line Deleted : user_pref("CT3300850.smartbar.CTID", "CT3300850");
Line Deleted : user_pref("CT3300850.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3300850.smartbar.toolbarName", "Translator 3.1 B2 ");
Line Deleted : user_pref("CT3300850.startPage", "true");
Line Deleted : user_pref("CT3300850.toolbarBornServerTime", "19-6-2013");
Line Deleted : user_pref("CT3300850.toolbarCurrentServerTime", "19-11-2013");
Line Deleted : user_pref("CT3300850.toolbarLoginClientTime", "Wed Jun 19 2013 21:54:40 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3300850.versionFromInstaller", "10.15.2.23");
Line Deleted : user_pref("CT3300850_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1384844599683,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\17.1.2.1");
Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Deleted : user_pref("smartbar.machineId", "UFVJUEGV2M+6V1DOXXDYLKXRG1SEBGWDVUQGBRKCFSR8ZUB8DWXRC3APKFM6CYRXZ4XTCAHEDCYL5U0DIR/O2Q");

[ File : C:\Users\Rachel\AppData\Roaming\Mozilla\Firefox\Profiles\rzwj1h7b.default\prefs.js ]

Line Deleted : user_pref("CT3072253..clientLogIsEnabled", false);
Line Deleted : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129749445881800338", true);
Line Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129805375651312503", true);
Line Deleted : user_pref("CT3072253.CTID", "CT3072253");
Line Deleted : user_pref("CT3072253.CurrentServerDate", "2-7-2012");
Line Deleted : user_pref("CT3072253.DSInstall", true);
Line Deleted : user_pref("CT3072253.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT3072253.DialogsGetterLastCheckTime", "Sun Jul 01 2012 21:07:52 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT3072253.EnableClickToSearchBox", false);
Line Deleted : user_pref("CT3072253.EnableSearchHistory", false);
Line Deleted : user_pref("CT3072253.EnableSearchSuggest", false);
Line Deleted : user_pref("CT3072253.FirstServerDate", "8-5-2012");
Line Deleted : user_pref("CT3072253.FirstTime", true);
Line Deleted : user_pref("CT3072253.FirstTimeFF3", true);
Line Deleted : user_pref("CT3072253.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT3072253.HPInstall", true);
Line Deleted : user_pref("CT3072253.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT3072253.HomePageProtectorEnabled", false);

Line Deleted : user_pref("CT3072253.Initialize", true);
Line Deleted : user_pref("CT3072253.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT3072253.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT3072253.InstallationId", "fft5288.tmp.exe");
Line Deleted : user_pref("CT3072253.InstallationType", "XPE");
Line Deleted : user_pref("CT3072253.InstalledDate", "Tue May 08 2012 17:57:37 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT3072253.IsGrouping", false);
Line Deleted : user_pref("CT3072253.IsInitSetupIni", true);
Line Deleted : user_pref("CT3072253.IsMulticommunity", false);
Line Deleted : user_pref("CT3072253.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT3072253.IsOpenUninstallPage", false);
Line Deleted : user_pref("CT3072253.IsProtectorsInit", true);
Line Deleted : user_pref("CT3072253.LanguagePackLastCheckTime", "Mon Jul 02 2012 15:27:45 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT3072253.LastLogin_3.12.0.8", "Tue May 08 2012 17:57:40 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.LastLogin_3.12.2.3", "Fri Jun 01 2012 12:04:13 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.LastLogin_3.13.0.6", "Mon Jul 02 2012 20:39:08 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.LatestVersion", "3.13.0.6");
Line Deleted : user_pref("CT3072253.Locale", "en");
Line Deleted : user_pref("CT3072253.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT3072253.MCDetectTooltipShow", false);

Line Deleted : user_pref("CT3072253.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT3072253.MyStuffEnabledAtInstallation", false);
Line Deleted : user_pref("CT3072253.OriginalFirstVersion", "3.12.0.8");
Line Deleted : user_pref("CT3072253.SHRINK_TOOLBAR", 1);

Line Deleted : user_pref("CT3072253.SearchBackToDefaultEngine", false);
Line Deleted : user_pref("CT3072253.SearchBoxWidth", 100);
Line Deleted : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT3072253.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Mon Jul 02 2012 15:27:42 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.SearchInNewTabUserEnabled", false);
Line Deleted : user_pref("CT3072253.SearchProtectorEnabled", true);
Line Deleted : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT3072253.SendProtectorDataViaLogin", true);
Line Deleted : user_pref("CT3072253.ServiceMapLastCheckTime", "Mon Jul 02 2012 15:27:43 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.SettingsLastCheckTime", "Mon Jul 02 2012 19:42:21 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.SettingsLastUpdate", "1339665152");
Line Deleted : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Mon Jun 25 2012 11:18:25 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1331805997");
Line Deleted : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT3072253.UserID", "UN43730890512085796");
Line Deleted : user_pref("CT3072253.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT3072253.alertChannelId", "1463702");
Line Deleted : user_pref("CT3072253.approveUntrustedApps", true);
Line Deleted : user_pref("CT3072253.autoDisableScopes", -1);
Line Deleted : user_pref("CT3072253.backendstorage.cb_experience_000", "3131");
Line Deleted : user_pref("CT3072253.backendstorage.cb_firstuse0100", "31");
Line Deleted : user_pref("CT3072253.backendstorage.cb_user_id_000", "43423134303936353135383030305F46697265666F78");
Line Deleted : user_pref("CT3072253.backendstorage.cbcountry_000", "4E5A");
Line Deleted : user_pref("CT3072253.backendstorage.cbcountry_001", "4E5A");
Line Deleted : user_pref("CT3072253.backendstorage.cbfirsttime", "547565204D617920303820323031322031373A35373A343220474D542B3132303020284E6577205A65616C616E64205374616E646172642054696D6529");
Line Deleted : user_pref("CT3072253.backendstorage.url_history0001", "687474703A2F2F7777772E66616365626F6F6B2E636F6D2F3F7265663D746E5F746E6D6E3A3A3A636C69636B68616E646C65723A3A3A313334313035373030353336342C2C2C68747[...]
Line Deleted : user_pref("CT3072253.components.1000080", true);
Line Deleted : user_pref("CT3072253.components.129573915102477663", false);
Line Deleted : user_pref("CT3072253.components.129593762370823811", false);
Line Deleted : user_pref("CT3072253.components.129749445881800338", false);
Line Deleted : user_pref("CT3072253.components.129805375651312503", false);

Line Deleted : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Fri Jun 29 2012 10:58:25 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3072253.initDone", true);
Line Deleted : user_pref("CT3072253.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT3072253.isSearchProtectorNotifyChanges", false);
Line Deleted : user_pref("CT3072253.myStuffEnabled", true);
Line Deleted : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT3072253.navigateToUrlOnSearch", false);
Line Deleted : user_pref("CT3072253.oldAppsList", "129295695672325902,129571859753931591,111,129593762370823811,129805375651312503,129749445881800338,129573915102477663,1000080,1000515,1000,1001,1002,1003,1004,1005,[...]
Line Deleted : user_pref("CT3072253.revertSettingsEnabled", true);
Line Deleted : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT3072253.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3072253.testingCtid", "");
Line Deleted : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Mon Jul 02 2012 15:27:43 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Tue Jun 19 2012 22:39:21 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3072253.usageEnabled", false);
Line Deleted : user_pref("CT3072253.usagesFlag", 2);
Line Deleted : user_pref("CT3221187..clientLogIsEnabled", false);
Line Deleted : user_pref("CT3221187.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT3221187.BrowserCompStateIsOpen_318468675945019280", true);
Line Deleted : user_pref("CT3221187.CT3221187", "CT3221187");
Line Deleted : user_pref("CT3221187.CurrentServerDate", "2-7-2012");
Line Deleted : user_pref("CT3221187.DSInstall", false);
Line Deleted : user_pref("CT3221187.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT3221187.DialogsGetterLastCheckTime", "Sun Jul 01 2012 21:07:54 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT3221187.EnableSearchSuggest", false);
Line Deleted : user_pref("CT3221187.FirstServerDate", "17-5-2012");
Line Deleted : user_pref("CT3221187.FirstTime", true);
Line Deleted : user_pref("CT3221187.FirstTimeFF3", true);
Line Deleted : user_pref("CT3221187.FirstTimeHiddenVer", true);
Line Deleted : user_pref("CT3221187.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT3221187.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT3221187.HPInstall", false);
Line Deleted : user_pref("CT3221187.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT3221187.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT3221187.Initialize", true);
Line Deleted : user_pref("CT3221187.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT3221187.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT3221187.InstallationType", "Unknown");
Line Deleted : user_pref("CT3221187.InstalledDate", "Fri May 18 2012 06:32:08 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.IsGrouping", false);
Line Deleted : user_pref("CT3221187.IsInitSetupIni", true);
Line Deleted : user_pref("CT3221187.IsMulticommunity", false);
Line Deleted : user_pref("CT3221187.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT3221187.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT3221187.IsProtectorsInit", true);
Line Deleted : user_pref("CT3221187.LanguagePackLastCheckTime", "Mon Jul 02 2012 15:27:45 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT3221187.LastLogin_3.13.0.6", "Mon Jul 02 2012 19:27:00 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.LatestVersion", "3.13.0.6");
Line Deleted : user_pref("CT3221187.Locale", "en");
Line Deleted : user_pref("CT3221187.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT3221187.MCDetectTooltipShow", false);

Line Deleted : user_pref("CT3221187.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT3221187.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT3221187.OriginalFirstVersion", "3.13.0.6");
Line Deleted : user_pref("CT3221187.SHRINK_TOOLBAR", 1);
Line Deleted : user_pref("CT3221187.SearchBoxWidth", 389);
Line Deleted : user_pref("CT3221187.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT3221187.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT3221187.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT3221187.SearchInNewTabLastCheckTime", "Mon Jul 02 2012 15:27:43 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.SearchInNewTabUserEnabled", false);
Line Deleted : user_pref("CT3221187.SearchProtectorEnabled", false);
Line Deleted : user_pref("CT3221187.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT3221187.SendProtectorDataViaLogin", true);
Line Deleted : user_pref("CT3221187.ServiceMapLastCheckTime", "Mon Jul 02 2012 15:27:43 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.SettingsLastCheckTime", "Mon Jul 02 2012 19:42:22 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.SettingsLastUpdate", "1337169810");
Line Deleted : user_pref("CT3221187.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT3221187.ThirdPartyComponentsLastCheck", "Fri May 18 2012 06:32:04 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.ThirdPartyComponentsLastUpdate", "1331805997");
Line Deleted : user_pref("CT3221187.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT3221187.UserID", "UN52937326775834931");
Line Deleted : user_pref("CT3221187.ValidationData_Toolbar", 0);
Line Deleted : user_pref("CT3221187.alertChannelId", "1649271");
Line Deleted : user_pref("CT3221187.approveUntrustedApps", false);
Line Deleted : user_pref("CT3221187.components.1000080", true);
Line Deleted : user_pref("CT3221187.components.129815686839599140", false);
Line Deleted : user_pref("CT3221187.components.129815686839872590", false);
Line Deleted : user_pref("CT3221187.components.129815686840146040", false);
Line Deleted : user_pref("CT3221187.components.129815686840429256", false);
Line Deleted : user_pref("CT3221187.components.129815686840702706", false);
Line Deleted : user_pref("CT3221187.components.129815686840976156", false);
Line Deleted : user_pref("CT3221187.components.129815686841259372", false);
Line Deleted : user_pref("CT3221187.components.129815686841650013", false);
Line Deleted : user_pref("CT3221187.components.129815686841923462", false);
Line Deleted : user_pref("CT3221187.components.129815686842206678", false);
Line Deleted : user_pref("CT3221187.components.129815686842470361", false);
Line Deleted : user_pref("CT3221187.components.129815686842743810", false);
Line Deleted : user_pref("CT3221187.components.1719085778491873076", false);
Line Deleted : user_pref("CT3221187.components.2407177105248532368", false);
Line Deleted : user_pref("CT3221187.components.318468675945019280", false);
Line Deleted : user_pref("CT3221187.components.5528125214290727738", false);
Line Deleted : user_pref("CT3221187.components.5629951767040405053", false);
Line Deleted : user_pref("CT3221187.components.6159402653770820051", false);
Line Deleted : user_pref("CT3221187.components.8016402186211342224", false);
Line Deleted : user_pref("CT3221187.components.8816469210238113543", false);

Line Deleted : user_pref("CT3221187.globalFirstTimeInfoLastCheckTime", "Fri May 18 2012 06:32:07 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3221187.initDone", true);
Line Deleted : user_pref("CT3221187.isAppTrackingManagerOn", true);
Line Deleted : user_pref("CT3221187.myStuffEnabled", true);
Line Deleted : user_pref("CT3221187.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT3221187.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT3221187.navigateToUrlOnSearch", false);
Line Deleted : user_pref("CT3221187.revertSettingsEnabled", true);
Line Deleted : user_pref("CT3221187.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT3221187.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3221187.testingCtid", "");
Line Deleted : user_pref("CT3221187.toolbarAppMetaDataLastCheckTime", "Mon Jul 02 2012 15:27:44 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.toolbarContextMenuLastCheckTime", "Fri May 18 2012 06:32:08 GMT+1200 (New Zealand Standard Time)");
Line Deleted : user_pref("CT3221187.usageEnabled", false);
Line Deleted : user_pref("CT3221187.usagesFlag", 2);













Line Deleted : user_pref("aol_toolbar.surf.date", "108");
Line Deleted : user_pref("aol_toolbar.surf.lastDate", "2");
Line Deleted : user_pref("aol_toolbar.surf.lastMonth", "6");
Line Deleted : user_pref("aol_toolbar.surf.lastYear", "2012");
Line Deleted : user_pref("aol_toolbar.surf.month", "245");
Line Deleted : user_pref("aol_toolbar.surf.prevMonth", "4763");
Line Deleted : user_pref("aol_toolbar.surf.total", "9718");
Line Deleted : user_pref("aol_toolbar.surf.week", "245");
Line Deleted : user_pref("aol_toolbar.surf.year", "9674");
Line Deleted : user_pref("winamp_toolbar.buttons.layout", "shoutcast_30026;mobile/android_33522;post_to_twitter_33500;post_to_facebook_33511;post_to_AIM_33511;");
Line Deleted : user_pref("winamp_toolbar.firsttime.showwindow", false);
Line Deleted : user_pref("winamp_toolbar.guid", "{9C2CAD83-4CC0-D88E-4DE2-AEB633DE1A53}");
Line Deleted : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.19.1");
Line Deleted : user_pref("winamp_toolbar.metrics.activestampdate", "2");
Line Deleted : user_pref("winamp_toolbar.metrics.activestampmonth", "6");
Line Deleted : user_pref("winamp_toolbar.metrics.activestampyear", "2012");
Line Deleted : user_pref("winamp_toolbar.metrics.originalDate", "8");
Line Deleted : user_pref("winamp_toolbar.metrics.originalHours", "5");
Line Deleted : user_pref("winamp_toolbar.metrics.originalMinutes", "57");
Line Deleted : user_pref("winamp_toolbar.metrics.originalMonth", "5");
Line Deleted : user_pref("winamp_toolbar.metrics.originalSeconds", "22");
Line Deleted : user_pref("winamp_toolbar.metrics.originalYear", "2012");
Line Deleted : user_pref("winamp_toolbar.remote.publish.xml", "1341199659698");
Line Deleted : user_pref("winamp_toolbar.rtw.active", true);
Line Deleted : user_pref("winamp_toolbar.search.cid", "08-05-2012");
Line Deleted : user_pref("winamp_toolbar.search.focusnewtab", true);
Line Deleted : user_pref("winamp_toolbar.search.instd", "20120507014820674");
Line Deleted : user_pref("winamp_toolbar.search.newtab", true);
Line Deleted : user_pref("winamp_toolbar.search.oid", "08-05-2012");
Line Deleted : user_pref("winamp_toolbar.search.populateoncomplete", true);
Line Deleted : user_pref("winamp_toolbar.search.savehistory", true);
Line Deleted : user_pref("winamp_toolbar.search.source", "tb50-ff-winamp");
Line Deleted : user_pref("winamp_toolbar.skin.custom", true);
Line Deleted : user_pref("winamp_toolbar.surf.show", true);
Line Deleted : user_pref("winamp_toolbar.upgrade.showwindow", false);
Line Deleted : user_pref("winamp_toolbar.winamp.artist", "");
Line Deleted : user_pref("winamp_toolbar.winamp.button.focus", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.forward", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.open", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.pause", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.play", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.rewind", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.stop", true);
Line Deleted : user_pref("winamp_toolbar.winamp.button.volume", true);
Line Deleted : user_pref("winamp_toolbar.winamp.ticker.show", true);
Line Deleted : user_pref("winamp_toolbar.winamp.title", "-999999");
Line Deleted : user_pref("winamp_toolbar.winamp.volume", "");

-\\ Google Chrome v

[ File : C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [44848 octets] - [19/11/2013 20:05:05]
AdwCleaner[s0].txt - [45708 octets] - [19/11/2013 20:07:51]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [45769 octets] ##########
 

 

 

 

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.11.19.03

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Rachel :: RACHEL-PC [administrator]

19/11/2013 8:17:34 p.m.
mbam-log-2013-11-19 (20-17-34).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 231056
Time elapsed: 17 minute(s), 14 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
 

Link to post
Share on other sites
Maniac

Maniac

Posted
Posted

Step 1

  • Download OTC to your desktop and run it
  • Click Yes to beginning the Cleanup process and remove these components, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process. Choose Yes.
Step 2
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Uninstall
  • Confirm with Yes
Step 3

Some malware prevention tips:

users.telenet.be/bluepatchy/miekiemoes/prevention.html

Safe surfing! :)

Link to post
Share on other sites
  • 3 weeks later...
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.