162.210.192.14 Next step?

krwebber53 · November 29, 2013

DDS (Ver_2012-11-20.01) - NTFS_AMD64

Internet Explorer: 11.0.9600.16428 BrowserJavaVersion: 10.45.2

Run by webberk at 13:30:32 on 2013-11-29

Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.5861.3651 [GMT -6:00]

.

AV: AVG Internet Security 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: IObit Malware Fighter *Disabled/Outdated* {A751AC20-3B48-5237-898A-78C4436BB78D}

SP: AVG Internet Security 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}

FW: AVG Internet Security 2014 *Enabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe

C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe

C:\Program Files (x86)\AVG\AVG2014\avgfws.exe

C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe

C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files (x86)\FileZilla Server\FileZilla Server.exe

C:\Windows\system32\taskhost.exe

C:\Program Files (x86)\Seagate\Seagate_Media\Sync\MediaAggreService.exe

C:\ProgramData\Premium\SaveAs\SaveAs.exe

C:\Program Files (x86)\IObit\Smart Defrag 2\SmartDefrag.exe

C:\Program Files\Siber Systems\GoodSync\Gs-Server.exe

C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe

C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe

C:\Windows\System32\igfxtray.exe

C:\Program Files\Logitech\SetPointP\SetPoint.exe

C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe

C:\Program Files (x86)\Quicken\bagent.exe

C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

C:\Users\webberk\AppData\Local\Akamai\netsession_win.exe

C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe

C:\Program Files (x86)\Actual Window Manager\ActualWindowManagerCenter.exe

C:\Program Files (x86)\Samsung\Kies\Kies.exe

C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

C:\Program Files (x86)\Livedrive\Livedrive.exe

C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe

C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe

C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe

C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe

C:\Program Files (x86)\Digsby\lib\digsby-app.exe

C:\Users\webberk\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

C:\Users\webberk\AppData\Local\Akamai\netsession_win.exe

C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\adobe\Acrobat 10.0\Acrobat\acrotray.exe

C:\Program Files (x86)\Actual Window Manager\ActualWindowManagerCenter64.exe

C:\Program Files (x86)\AVG\AVG2014\avgui.exe

C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe

C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe

C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

C:\Program Files (x86)\Seagate\Seagate_Media\AgrregationStatus\stxmediamenumgr.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\itunes\iTunesHelper.exe

C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe

C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe

C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperAgent.exe

C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

C:\Program Files (x86)\Actual Window Manager\ActualWindowManagerShellCenter64.exe

C:\Program Files (x86)\Seagate\Seagate Dashboard\MemeoDashboard.exe

C:\Windows\SysWOW64\NLSSRV32.EXE

C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe

C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe

C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe

C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k imgsvc

C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbarsvc.exe

C:\Windows\SysWOW64\vmnat.exe

C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe

C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

C:\Windows\SysWOW64\vmnetdhcp.exe

C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\loggingserver.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files (x86)\Seagate\Seagate Dashboard\HipServAgent\HipServAgent.exe

C:\Windows\system32\svchost.exe -k SDRSVC

C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe

C:\PROGRAM FILES (X86)\NETGEAR\STORA DESKTOP APPLICATIONS\HIPSERVAGENT\HIPSERVAGENT.EXE

C:\Program Files\GPSoftware\Directory Opus\dopus.exe

C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uURLSearchHooks: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll

uURLSearchHooks: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll

uURLSearchHooks: YTNavAssistPlugin Class: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\yt.dll

uURLSearchHooks: <No Name>: {f15ff29f-85a1-43cd-9674-e5ba40016c97} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vSrcAs.dll

uURLSearchHooks: {93a3111f-4f74-4ed8-895e-d9708497629e} - <orphaned>

mURLSearchHooks: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll

dURLSearchHooks: YTNavAssistPlugin Class: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\yt.dll

dURLSearchHooks: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - <orphaned>

dURLSearchHooks: <No Name>: {f15ff29f-85a1-43cd-9674-e5ba40016c97} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vSrcAs.dll

dURLSearchHooks: {93a3111f-4f74-4ed8-895e-d9708497629e} - <orphaned>

BHO: SnagIt Toolbar Loader: {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll

BHO: &Yahoo! Toolbar Helper: {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\yt.dll

BHO: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll

BHO: Search Assistant BHO: {0631bff0-6846-48ca-982d-d62d7f376e97} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vSrcAs.dll

BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll

BHO: Toolbar BHO: {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll

BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\java\jre7\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Evernote extension: {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll

BHO: {95B7759C-8C7F-4BF1-B163-73684A933233} - <orphaned>

BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

BHO: Adobe PDF Conversion Toolbar Helper: {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

BHO: Advanced SystemCare Browser Protection: {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll

BHO: Startpage24 Browser Helper: {BBD43808-9D13-4B0B-B023-178FD1FAE442} - C:\ProgramData\Startpage24\Plugin\link64_plugin.dll

BHO: Toolbar BHO: {beea7fa9-d1f4-49a2-9b1f-6fb7a2d9bc2a} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vbar.dll

BHO: Search Assistant BHO: {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll

BHO: Free Download Manager: {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll

BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll

BHO: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll

BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\java\jre7\bin\jp2ssv.dll

BHO: SmartSelect Class: {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

BHO: SingleInstance Class: {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll

TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

TB: &RoboForm Toolbar: {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

TB: IncrediMail MediaBar 2 Toolbar: {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll

TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

TB: VideoDownloadConverter: {48586425-6BB7-4F51-8DC6-38C88E3EBB58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll

TB: Yahoo! Toolbar: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn4\yt.dll

TB: IncrediMail MediaBar 2 Toolbar: {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\prxtbInc2.dll

TB: Snagit: {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll

TB: Adobe PDF: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

TB: DailyBibleGuide: {2a942ab7-2073-49bc-a7e1-77e93835889a} - C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\2vbar.dll

TB: VideoDownloadConverter: {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll

TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll

TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

TB: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll

uRun: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

uRun: [Directory Opus Desktop Dblclk] "C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe" /dblclk

uRun: [QuickenScheduledUpdates] C:\Program Files (x86)\Quicken\bagent.exe

uRun: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

uRun: [FA82178918DCCA1C45348F45238FC204F7277D5F._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service

uRun: [Akamai NetSession Interface] "C:\Users\webberk\AppData\Local\Akamai\netsession_win.exe"

uRun: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart

uRun: [Actual Window Manager] c:\program files (x86)\actual window manager\actualwindowmanagercenter.exe

uRun: [ActualWindowManagerCenter.exe] c:\program files (x86)\actual window manager\actualwindowmanagercenter.exe

uRun: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload

uRun: [] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

uRun: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

uRun: [Livedrive] "C:\Program Files (x86)\Livedrive\Livedrive.exe" /setup

uRun: [KiesAirMessage] C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup

uRun: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"

mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [seagate Dashboard] C:\Program Files (x86)\Seagate\Seagate Dashboard\MemeoLauncher.exe --silent --no_ui

mRun: [VideoDownloadConverter Search Scope Monitor] "C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h

mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY

mRun: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"

mRun: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

mRun: [DiscWizardMonitor.exe] "C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe"

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe

mRun: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot

mRun: [FreeAgentTheaterTrayIcon] "C:\Program Files (x86)\Seagate\Seagate_Media\AgrregationStatus\StxMediaMenuMgr.exe"

mRun: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

mRun: [searchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"

dRun: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

dRun: [Advanced SystemCare 6] "C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart

StartupFolder: C:\Users\webberk\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Digsby.lnk - C:\Program Files (x86)\Digsby\digsby.exe

StartupFolder: C:\Users\webberk\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\webberk\AppData\Roaming\Dropbox\bin\Dropbox.exe

StartupFolder: C:\Users\webberk\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\EVERNO~1.LNK - C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: EnableShellExecuteHooks = dword:1

mPolicies-Explorer: NoDrives = dword:0

mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableLUA = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: PromptOnSecureDesktop = dword:0

IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

IE: Clip Image - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=4

IE: Clip selection - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=3

IE: Clip this page - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=1

IE: Clip URL - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\Clip.html?clipAction=0

IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

IE: Customize Menu - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

IE: Download all with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlall.htm

IE: Download selected with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlselected.htm

IE: Download video with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dlfvideo.htm

IE: Download with Free Download Manager - C:\Program Files (x86)\Free Download Manager\dllink.htm

IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: Fill Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html

IE: New Note - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\NewNote.html

IE: RoboForm Editor - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComEditIdent.html

IE: Save Forms - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html

IE: Show RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\microsoft office\Office12\ONBttnIE.dll

IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

IE: {38E51477-DDB4-4aed-9D61-D0C193E10749} - {38E51477-DDB4-4aed-9D61-D0C193E10749} - C:\Program Files (x86)\SoundTaxi\YouTubeRipper.dll

IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\\EvernoteIERes\AddNote.html

LSP: %windir%\system32\vsocklib.dll

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

TCP: NameServer = 207.203.159.23 205.172.132.23

TCP: Interfaces\{6BAB9BC1-F74C-4B1F-9E36-170D3EE9BE46} : NameServer = 205.152.144.23,205.152.37.23

TCP: Interfaces\{6BAB9BC1-F74C-4B1F-9E36-170D3EE9BE46} : DHCPNameServer = 207.203.159.23 205.172.132.23

Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files (x86)\Belarc\Advisor\System\BAVoilaX.dll

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

Handler: startpage24 - {879506D7-73DF-8D45-BBDD-123467926D12} - C:\ProgramData\Startpage24\Plugin\link64_plugin.dll

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.3\ViProtocol.dll

SSODL: WebCheck - <orphaned>

SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll

STS: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

SEH: Directory Opus Shell Execute Hook - {EE761688-C137-4b04-8FAB-3C9CDF0886F0} - C:\Program Files\GPSoftware\Directory Opus\dopuslib32.dll

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: SnagIt Toolbar Loader: {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitBHO64.dll

x64-BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll

x64-BHO: RoboForm Toolbar Helper: {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

x64-BHO: {7D4F1959-3F72-49d5-8E59-F02F8AA6815D} - <orphaned>

x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

x64-BHO: BrowserHelper Class: {EDF48A39-1442-463F-9F4E-F376A78D034A} - C:\Program Files (x86)\Livedrive\ExplorerExtensions.dll

x64-TB: Snagit: {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll

x64-TB: &RoboForm Toolbar: {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll

x64-TB: IObit Apps Toolbar: {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files (x86)\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE64.dll

x64-Run: [LogMeIn GUI] "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"

x64-Run: [igfxTray] C:\Windows\System32\igfxtray.exe

x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe

x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe

x64-Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming

x64-Run: [Fences] "C:\Program Files (x86)\Stardock\Fences\Fences.exe" /startup

x64-Run: [seagate Scheduler2 Service] "C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe"

x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

x64-IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

x64-IE: {724d43aa-0d85-11d4-9908-00400523e39a} - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll

x64-Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - <orphaned>

x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>

x64-Handler: startpage24 - {879506D7-73DF-8D45-BBDD-123467926D12} - <orphaned>

x64-Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - <orphaned>

x64-Notify: GoToAssist - C:\Program Files (x86)\Citrix\GoToAssist\570\G2AWinLogon_x64.dll

x64-Notify: igfxcui - igfxdev.dll

x64-Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll

x64-SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\System32\CbFsMntNtf3.dll

x64-STS: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\System32\CbFsMntNtf3.dll

x64-STS: FencesShlExt Class - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files (x86)\Stardock\Fences\FencesMenu64.dll

x64-SEH: Directory Opus Shell Execute Hook - {3CF9ECE0-1A9F-11D2-8C73-00C06C2005DE} - C:\Program Files\GPSoftware\Directory Opus\dopuslib.dll

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\

FF - prefs.js: browser.search.defaulturl -

FF - prefs.js: browser.search.selectedEngine - Bing

FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.2.0\npsitesafety.dll

FF - plugin: C:\Program Files (x86)\DailyBibleGuide\bar\1.bin\NP2vStub.dll

FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\java\jre7\bin\plugin2\npjp2.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll

FF - plugin: C:\Program Files (x86)\mozilla firefox\plugins\npCouponPrinter.dll

FF - plugin: C:\Program Files (x86)\mozilla firefox\plugins\npMozCouponPrinter.dll

FF - plugin: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll

FF - plugin: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll

FF - plugin: C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll

FF - plugin: C:\Program Files (x86)\Virtual Earth 3D\npVE3D.dll

FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll

FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll

FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll

FF - plugin: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll

FF - plugin: C:\ProgramData\Startpage24\Plugin\firefox\plugins\nplink64.dll

FF - plugin: C:\ProgramData\Startpage24\Plugin\nplink64chrome.dll

FF - plugin: C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\extensions\DeviceDetection@logitech.com\plugins\npLogitechDeviceDetection.dll

FF - plugin: C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\extensions\LogMeInClient@logmein.com\plugins\npLMI64.dll

FF - plugin: C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\extensions\LogMeInClient@logmein.com\plugins\npRACtrl.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll

FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

FF - ExtSQL: 2013-10-10 04:55; ascsurfingprotection@iobit.com; C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\extensions\ascsurfingprotection@iobit.com

FF - ExtSQL: !HIDDEN! 2012-07-21 08:56; 2vffxtbr@DailyBibleGuide.com; C:\Program Files (x86)\DailyBibleGuide\bar\1.bin

FF - ExtSQL: !HIDDEN! 2012-10-24 09:12; 4zffxtbr@VideoDownloadConverter_4z.com; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin

FF - ExtSQL: !HIDDEN! 2012-11-26 22:38; infoatoms@infoatoms.com; C:\Program Files (x86)\mozilla firefox\extensions\infoatoms@infoatoms.com

.

---- FIREFOX POLICIES ----

FF - user.js: yahoo.ytff.general.dontshowhpoffer - true

FF - user.js: network.http.pipelining.maxrequests - 8

FF - user.js: network.http.request.max-start-delay - 0

FF - user.js: network.http.max-connections - 48

FF - user.js: network.http.max-connections-per-server - 16

FF - user.js: network.http.max-persistent-connections-per-proxy - 16

FF - user.js: network.http.max-persistent-connections-per-server - 8

FF - user.js: browser.turbo.enabled - true

FF - user.js: browser.display.show_image_placeholders - true

FF - user.js: browser.chrome.favicons - false

FF - user.js: browser.urlbar.autocomplete.enabled - true

FF - user.js: browser.cache.memory.capacity - 65536

FF - user.js: content.notify.ontimer - true

FF - user.js: content.interrupt.parsing - true

FF - user.js: content.max.tokenizing.time - 2250000

FF - user.js: content.switch.threshold - 750000

FF - user.js: plugin.expose_full_path - true

FF - user.js: ui.submenuDelay - 0

FF - user.js: extentions.webcake.installId - 1da09ee7-d43f-4628-98db-bf4ad1f56847

FF - user.js: extentions.webcake.defaultEnableAppsList - layers,brain/features,newOffers/wc

.

============= SERVICES / DRIVERS ===============

.

R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2013-10-24 194872]

R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2013-10-31 294712]

R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2013-10-1 123704]

R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2013-9-10 31544]

R0 dlkmdldr;dlkmdldr;C:\Windows\System32\drivers\dlkmdldr.sys [2013-11-15 15664]

R0 SmartDefragDriver;SmartDefragDriver;C:\Windows\System32\drivers\SmartDefragDriver.sys [2013-10-10 17720]

R0 vididr;Acronis Virtual Disk;C:\Windows\System32\drivers\vididr.sys [2013-5-16 210016]

R0 vidsflt53;Acronis Disk Storage Filter (53);C:\Windows\System32\drivers\vsflt53.sys [2013-5-16 141920]

R0 vsock;vSockets Driver;C:\Windows\System32\drivers\vsock.sys [2013-6-5 70296]

R1 Avgdiska;AVG Disk Driver;C:\Windows\System32\drivers\avgdiska.sys [2013-11-5 150808]

R1 Avgfwfd;AVG network filter service;C:\Windows\System32\drivers\avgfwd6a.sys [2012-9-4 57144]

R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2013-11-4 240920]

R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2013-10-31 212280]

R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2013-8-1 251192]

R1 avgtp;avgtp;C:\Windows\System32\drivers\avgtpx64.sys [2013-3-26 46368]

R1 CbFs;CbFs;C:\Windows\System32\drivers\cbfs.sys [2012-9-4 191960]

R1 cbfs3;cbfs3;C:\Windows\System32\drivers\cbfs3.sys [2013-3-27 352008]

R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-24 574272]

R2 Application Updater;Application Updater;C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe [2013-11-27 807800]

R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [2013-9-24 1358944]

R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-9-24 348008]

R2 DeviceMonitorService;DeviceMonitorService;C:\Program Files (x86)\Motorola Media Link\Lite\NServiceEntry.exe [2012-6-5 87400]

R2 DisplayLinkService;DisplayLinkManager;C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [2013-10-7 9281840]

R2 FreeAgentTheater Service;Seagate Media;C:\Program Files (x86)\Seagate\Seagate_Media\Sync\MediaAggreService.exe [2012-12-20 237248]

R2 GsServer;GoodSync Server;C:\Program Files\Siber Systems\GoodSync\Gs-Server.exe [2013-5-21 5825168]

R2 IMFservice;IMF Service;C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [2013-2-4 821592]

R2 LMIGuardianSvc;LMIGuardianSvc;C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe [2010-10-1 376144]

R2 LMIInfo;LogMeIn Kernel Information Provider;C:\Program Files (x86)\LogMeIn\x64\rainfo.sys [2008-8-11 16056]

R2 LMIRfsDriver;LogMeIn Remote File System Driver;C:\Windows\System32\drivers\LMIRfsDriver.sys [2009-12-7 72216]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-3-7 701512]

R2 MemeoBackgroundService;MemeoBackgroundService;C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [2011-4-6 25824]

R2 Motorola Device Manager;Motorola Device Manager Service;C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [2013-7-31 137528]

R2 nlsX86cc;NLS Service;C:\Windows\SysWOW64\NLSSRV32.EXE [2011-12-20 68896]

R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [2013-4-24 483864]

R2 PST Service;PST Service;C:\Program Files (x86)\Motorola\MotForwardDaemon\ForwardDaemon.exe [2012-10-2 65657]

R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-8-14 39056]

R2 SeagateDashboardService;Seagate Dashboard Service;C:\Program Files (x86)\Seagate\Seagate Dashboard\SeagateDashboardService.exe [2011-11-3 8704]

R2 SgtSch2Svc;Seagate Scheduler2 Service;C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe [2011-6-30 1191408]

R2 VideoDownloadConverter_4zService;VideoDownloadConverterService;C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbarsvc.exe [2012-10-24 42504]

R2 VMUSBArbService;VMware USB Arbitration Service;C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe [2012-10-11 918680]

R2 vToolbarUpdater17.1.3;vToolbarUpdater17.1.3;C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe [2013-11-20 1643696]

R3 BBUpdate;BBUpdate;C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.EXE [2013-7-23 240288]

R3 DisplayLinkUsbIo_x64;DisplayLinkUsbIo_x64;C:\Windows\System32\drivers\DisplayLinkUsbIo_x64_7.4.51572.0.sys [2013-10-8 46384]

R3 dlkmd;dlkmd;C:\Windows\System32\drivers\dlkmd.sys [2013-11-15 388912]

R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2012-1-3 70168]

R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;C:\Windows\System32\drivers\LEqdUsb.sys [2011-9-2 76056]

R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;C:\Windows\System32\drivers\LHidEqd.sys [2011-9-2 15128]

R3 MBAMProtector;MBAMProtector;C:\Windows\System32\drivers\mbam.sys [2013-3-7 25928]

R3 SndTAudio;SndTAudio;C:\Windows\System32\drivers\SndTAudio.sys [2011-1-19 33336]

S2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544]

S2 BBSvc;BingBar Service;C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.EXE [2013-7-23 193696]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 LivedriveVSSService;Livedrive VSS Service;C:\Program Files (x86)\Livedrive\VSSService.exe [2013-7-29 210584]

S2 MBAMScheduler;MBAMScheduler;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-3-7 418376]

S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2013-8-20 103576]

S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2009-12-1 61280]

S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\windows live\Family Safety\fsssvc.exe [2009-8-5 704864]

S3 GSService;GSService;C:\Windows\SysWOW64\GSService.exe [2013-2-13 403832]

S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2013-11-18 111616]

S3 ivusb;Initio Driver for USB Default Controller;C:\Windows\System32\drivers\ivusb.sys [2010-7-29 29720]

S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\2.1.121\McCHSvc.exe [2010-9-3 227232]

S3 SMServer;SMServer;C:\Windows\SysWOW64\snmvtsvc.exe [2011-1-19 245760]

S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2013-8-20 204568]

S3 StorSvc;Storage Service;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-13 27136]

S3 STSService;STSService;C:\Program Files (x86)\SoundTaxi Media Suite\STSService.exe [2010-4-12 344064]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-4-5 59392]

S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]

S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-4-20 1255736]

S4 DailyBibleGuideService;DailyBibleGuideService;C:\PROGRA~2\DAILYB~2\bar\1.bin\2vbarsvc.exe [2012-7-21 42504]

S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;C:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe [2009-7-22 61976]

S4 RsFx0105;RsFx0105 Driver;C:\Windows\System32\drivers\RsFx0105.sys [2011-9-22 311144]

S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2011-9-22 431464]

.

=============== File Associations ===============

.

ShellExec: Sidebar.exe: open=C:\Program Files (x86)\Windows Sidebar\Sidebar.exe

.

=============== Created Last 30 ================

.

2013-11-28 15:44:01 -------- d-----w- C:\Program Files (x86)\IObit Apps Toolbar

2013-11-28 15:44:01 -------- d-----w- C:\Program Files (x86)\Application Updater

2013-11-15 15:47:15 388912 ----a-w- C:\Windows\System32\drivers\dlkmd.sys

2013-11-15 15:47:15 15664 ----a-w- C:\Windows\System32\drivers\dlkmdldr.sys

2013-11-15 15:06:12 1930752 ----a-w- C:\Windows\System32\authui.dll

2013-11-15 15:06:11 197120 ----a-w- C:\Windows\System32\credui.dll

2013-11-15 15:06:11 190464 ----a-w- C:\Windows\System32\SmartcardCredentialProvider.dll

2013-11-15 15:06:11 1796096 ----a-w- C:\Windows\SysWow64\authui.dll

2013-11-15 15:06:11 168960 ----a-w- C:\Windows\SysWow64\credui.dll

2013-11-15 15:06:11 152576 ----a-w- C:\Windows\SysWow64\SmartcardCredentialProvider.dll

2013-11-13 22:41:14 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-11-10 04:56:40 -------- d-----w- C:\Signs2

2013-11-06 03:55:48 150808 ----a-w- C:\Windows\System32\drivers\avgdiska.sys

2013-11-05 03:52:42 240920 ----a-w- C:\Windows\System32\drivers\avgidsdrivera.sys

2013-11-04 16:23:49 -------- d-----w- C:\ProgramData\Oracle

2013-11-04 16:23:25 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2013-11-01 05:00:18 212280 ----a-w- C:\Windows\System32\drivers\avgldx64.sys

2013-11-01 04:49:46 294712 ----a-w- C:\Windows\System32\drivers\avgloga.sys

.

==================== Find3M ====================

.

2013-11-22 14:20:28 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-11-22 14:20:28 692616 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

2013-11-20 15:57:23 46368 ----a-w- C:\Windows\System32\drivers\avgtpx64.sys

2013-10-31 13:40:24 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll

2013-10-31 13:40:23 92488 ----a-w- C:\Windows\System32\LMIinit.dll

2013-10-31 13:40:23 35656 ----a-w- C:\Windows\System32\LMIport.dll

2013-10-25 04:25:58 194872 ----a-w- C:\Windows\System32\drivers\avgidsha.sys

2013-10-20 13:59:03 107368 ----a-w- C:\Windows\System32\LMIRfsClientNP.dll.000.bak

2013-10-12 02:30:42 830464 ----a-w- C:\Windows\System32\nshwfp.dll

2013-10-12 02:29:21 859648 ----a-w- C:\Windows\System32\IKEEXT.DLL

2013-10-12 02:29:08 324096 ----a-w- C:\Windows\System32\FWPUCLNT.DLL

2013-10-12 02:03:08 656896 ----a-w- C:\Windows\SysWow64\nshwfp.dll

2013-10-12 02:01:25 216576 ----a-w- C:\Windows\SysWow64\FWPUCLNT.DLL

2013-10-10 19:35:10 9584 ----a-w- C:\Windows\SysWow64\ractrlkeyhook.dll

2013-10-10 17:00:13 81920 ----a-w- C:\Windows\SysWow64\davclnt.dll

2013-10-10 17:00:13 259584 ----a-w- C:\Windows\System32\WebClnt.dll

2013-10-10 17:00:13 205824 ----a-w- C:\Windows\SysWow64\WebClnt.dll

2013-10-10 17:00:13 140800 ----a-w- C:\Windows\System32\drivers\mrxdav.sys

2013-10-10 17:00:13 102400 ----a-w- C:\Windows\System32\davclnt.dll

2013-10-10 16:58:46 1903552 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-10-10 16:58:45 327168 ----a-w- C:\Windows\System32\mswsock.dll

2013-10-10 16:58:45 231424 ----a-w- C:\Windows\SysWow64\mswsock.dll

2013-10-10 16:58:20 155584 ----a-w- C:\Windows\System32\drivers\ataport.sys

2013-10-08 20:02:12 46384 ----a-w- C:\Windows\System32\drivers\DisplayLinkUsbIo_x64_7.4.51572.0.sys

2013-10-08 20:02:10 947200 ----a-w- C:\Windows\System32\DisplayLinkUsbCo64_7.4.51572.0.dll

2013-10-07 10:43:24 1227056 ----a-w- C:\Windows\System32\dlumd9.dll

2013-10-07 10:43:24 1227056 ----a-w- C:\Windows\System32\dlumd64.dll

2013-10-07 10:43:24 1227056 ----a-w- C:\Windows\System32\dlumd11.dll

2013-10-07 10:43:24 1227056 ----a-w- C:\Windows\System32\dlumd10.dll

2013-10-07 10:43:22 1010480 ----a-w- C:\Windows\SysWow64\dlumd9.dll

2013-10-07 10:43:22 1010480 ----a-w- C:\Windows\SysWow64\dlumd32.dll

2013-10-07 10:43:22 1010480 ----a-w- C:\Windows\SysWow64\dlumd11.dll

2013-10-07 10:43:22 1010480 ----a-w- C:\Windows\SysWow64\dlumd10.dll

2013-10-05 20:25:35 1474048 ----a-w- C:\Windows\System32\crypt32.dll

2013-10-05 19:57:25 1168384 ----a-w- C:\Windows\SysWow64\crypt32.dll

2013-10-03 02:23:48 404480 ----a-w- C:\Windows\System32\gdi32.dll

2013-10-03 02:00:44 311808 ----a-w- C:\Windows\SysWow64\gdi32.dll

2013-10-01 06:52:08 123704 ----a-w- C:\Windows\System32\drivers\avgmfx64.sys

2013-09-28 01:09:10 497152 ----a-w- C:\Windows\System32\drivers\afd.sys

2013-09-26 14:44:54 57144 ----a-w- C:\Windows\System32\drivers\avgfwd6a.sys

2013-09-25 02:26:40 95680 ----a-w- C:\Windows\System32\drivers\ksecdd.sys

2013-09-25 02:26:40 154560 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

2013-09-25 02:23:33 28672 ----a-w- C:\Windows\System32\sspisrv.dll

2013-09-25 02:23:33 135680 ----a-w- C:\Windows\System32\sspicli.dll

2013-09-25 02:23:01 28160 ----a-w- C:\Windows\System32\secur32.dll

2013-09-25 02:22:59 340992 ----a-w- C:\Windows\System32\schannel.dll

2013-09-25 02:21:50 307200 ----a-w- C:\Windows\System32\ncrypt.dll

2013-09-25 02:21:07 1447936 ----a-w- C:\Windows\System32\lsasrv.dll

2013-09-25 01:58:17 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll

2013-09-25 01:57:26 22016 ----a-w- C:\Windows\SysWow64\secur32.dll

2013-09-25 01:57:24 247808 ----a-w- C:\Windows\SysWow64\schannel.dll

2013-09-25 01:56:42 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll

2013-09-25 01:03:24 30720 ----a-w- C:\Windows\System32\lsass.exe

2013-09-15 18:20:22 499712 ----a-w- C:\Windows\SysWow64\msvcp71.dll

2013-09-15 18:20:22 348160 ----a-w- C:\Windows\SysWow64\msvcr71.dll

2013-09-10 06:43:02 31544 ----a-w- C:\Windows\System32\drivers\avgrkx64.sys

2013-09-04 12:12:11 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys

2013-09-04 12:11:51 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys

2013-09-04 12:11:49 99840 ----a-w- C:\Windows\System32\drivers\usbccgp.sys

2013-09-04 12:11:43 52736 ----a-w- C:\Windows\System32\drivers\usbehci.sys

2013-09-04 12:11:43 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys

2013-09-04 12:11:42 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys

2013-09-04 12:11:40 7808 ----a-w- C:\Windows\System32\drivers\usbd.sys

2012-01-10 20:36:38 4763456 ----a-w- C:\Program Files (x86)\procexp.exe

.

============= FINISH: 13:30:53.15 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Professional

Boot Device: \Device\HarddiskVolume2

Install Date: 11/30/2009 2:09:53 PM

System Uptime: 11/29/2013 11:55:31 AM (2 hours ago)

.

Motherboard: LENOVO | | LENOVO

Processor: Intel® Core2 Duo CPU E6750 @ 2.66GHz | LGA 775 | 2667/333mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 898 GiB total, 726.848 GiB free.

D: is CDROM ()

E: is FIXED (NTFS) - 2794 GiB total, 2568.517 GiB free.

L: is FIXED (NTFS) - 898 GiB total, 726.848 GiB free.

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Intel® 82566DM-2 Gigabit Network Connection

Device ID: PCI\VEN_8086&DEV_10BD&SUBSYS_303817AA&REV_02\3&18D45AA6&0&C8

Manufacturer: Intel

Name: Intel® 82566DM-2 Gigabit Network Connection

PNP Device ID: PCI\VEN_8086&DEV_10BD&SUBSYS_303817AA&REV_02\3&18D45AA6&0&C8

Service: e1express

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Cisco Systems VPN Adapter for 64-bit Windows

Device ID: ROOT\NET\0000

Manufacturer: Cisco Systems

Name: Cisco Systems VPN Adapter for 64-bit Windows

PNP Device ID: ROOT\NET\0000

Service: CVirtA

.

Class GUID: {4d36e96f-e325-11ce-bfc1-08002be10318}

Description: HID-compliant mouse

Device ID: HID\VID_046D&PID_C52B&MI_01&COL01\7&79E838D&0&0000

Manufacturer: Microsoft

Name: HID-compliant mouse

PNP Device ID: HID\VID_046D&PID_C52B&MI_01&COL01\7&79E838D&0&0000

Service: mouhid

.

==== System Restore Points ===================

.

RP656: 10/20/2013 1:31:04 PM - Scheduled Checkpoint

RP657: 10/28/2013 12:00:11 AM - Scheduled Checkpoint

RP658: 11/4/2013 10:21:24 AM - Installed Java 7 Update 45

RP659: 11/5/2013 2:17:40 PM - Installed Clientele

RP660: 11/13/2013 6:55:38 PM - Scheduled Checkpoint

RP661: 11/15/2013 9:03:53 AM - Windows Modules Installer

RP662: 11/15/2013 9:31:22 AM - Windows Update

RP663: 11/18/2013 9:37:31 AM - Windows Update

RP664: 11/25/2013 7:19:37 PM - Scheduled Checkpoint

.

==== Installed Programs ======================

.

Update for Microsoft Office 2007 (KB2508958)

7-Zip 9.20 (x64 edition)

Actual Window Manager 7.5.1

ACUCOBOL-GT Thin Client 8.1.2

ACUCOBOL-GT Thin Client 8.1.3

ACUCOBOL-GT Thin Client 9.1.2

Adobe Acrobat X Pro

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader XI (11.0.05)

Advanced SystemCare 6

Agent Ransack 2010 (64-bit)

Akamai NetSession Interface

Android SDK Tools

AnswerWorks 5.0 English Runtime

AnyDVD

AnyMedia Player 3.4.0

Apple Application Support

Apple Mobile Device Support

Apple Software Update

ASPCA Reminder by We-Care.com v4.1.22.1

Aspi Installer

Audacity 2.0.3

Audible Download Manager

Aura DVD Copy 1.3.2

Aura DVD Ripper for iPod 1.3.5

Aura DVD Ripper Professional 1.3.9

Aura Flash to Video Converter 1.1.0

Aura Software Manager 1.0.3

Aura Video Converter 1.6.0

Aura Video Converter Professional 1.3.9

Aura Video Editor 1.0.8

Aura YouTube Downloader 1.0.8

Auslogics Duplicate File Finder

AVG 2014

AVG SafeGuard toolbar

AVS Audio Converter 7

AVS Audio Editor 7.1

AVS Audio Recorder version 4.0

AVS Cover Editor 2.0.1.3

AVS Disc Creator 5

AVS Document Converter 2.2.3

AVS DVD Copy 4.1.2.283

AVS Image Converter 2.2.2.218

AVS Media Player 4.1.9.95

AVS Photo Editor

AVS Registry Cleaner version 2.2

AVS Ringtone Maker version 1.6

AVS Screen Capture version 2.0.1

AVS Update Manager 1.0

AVS Video Converter 8

AVS Video Editor 6

AVS Video Recorder 2.5

AVS Video ReMaker 4.1.1.144

AVS4YOU Software Navigator 1.4

Belarc Advisor 7.2

Bible Search Pro

BibleCodesPredictionsSetup version 1.0

BibleReader

Bing Bar

Bing Maps 3D

Bonjour

CCH Small Firm Services (xulRunner)

CCleaner

CD to WAV and MP3 Ripper

Cisco Connect

Cisco Systems VPN Client 5.0.07.0290

Cisco WebEx Meetings

Citrix Presentation Server Client

Client32

Clientele

CloneDVD2

CommandTRADE

Compare and Merge 2.3

ContinueToSave

ContinueToSave 1.74

Coupon Printer for Windows

DailyBibleGuide Toolbar

Desktop Icon Position Saver (64-bit)

Digsby

DIRECTV2PC Playback Advisor

DisplayLink Core Software

DisplayLink Graphics

DisplayLink iPad Software

Dropbox

DVD-Cloner V9.70 Build 1115

e-Sword

e-Sword Bible Screen Saver

EDI File Editor

Epicor Clientele Loader 7.3.6 Ctelwin

eReg

Evernote v. 5.0.2

extend® Version 8.1.2

extend® Version 9.1.2

Extreme Translator

Extreme Translator Templates

FBackup 4

ffdshow [rev 2527] [2008-12-19]

FileZilla Client 3.6.0.2

FileZilla Server

FixCleaner

FolderSizes 4

Free CD Ripper 3.1

Free Download Manager 3.9.2

Free YouTube Downloader 3.5.134

FreeScreenSharing

GetFoldersize 2.3.2

GoldWave v5.06

GoodSync

Google Chrome

Google Earth Plug-in

Google Toolbar for Internet Explorer

Google Update Helper

GoToAssist Corporate

GoToMeeting 4.5.0.457

GPSoftware Directory Opus

H&R Block Alabama 2009

H&R Block Alabama 2011

H&R Block Alabama 2012

H&R Block Business 2009 (Remove Only)

H&R Block Business 2010 (Remove Only)

H&R Block Business 2011 (Remove Only)

H&R Block Premium + Efile + State 2009

H&R Block Premium + Efile + State 2010

H&R Block Premium + Efile + State 2011

H&R Block Premium + Efile + State 2012

Hardware Helper

Hebrew English Transliterated Bible

HipaaEdiViewer

Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2135068)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2160831)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2278944)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2293451)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2303365)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2376419)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2387011)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2401992)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2402012)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2402815)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2425130)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2434700)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2736182)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB2890573)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB983504)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB983537)

Hotfix for Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU (KB983578)

Hotfix for Microsoft Visual Studio LightSwitch 2011 - ENU (KB2603917)

Hotfix for Microsoft Visual Studio LightSwitch 2011 - ENU (KB2890573)

HP Color LaserJet 2600 series

iCloud

ImgBurn

IncrediMail

IncrediMail 2.0

IncrediMail MediaBar 2 Toolbar

Intel® Graphics Media Accelerator Driver

Intel® Network Connections Drivers

Internet Explorer Toolbar 4.9 by SweetPacks

IObit Apps Toolbar v8.3

IObit Malware Fighter

Ipswitch WS_FTP 12

iSEEK AnswerWorks English Runtime

iTunes

Java 7 Update 17 (64-bit)

Java 7 Update 45

Java Auto Updater

Java SE Development Kit 7 Update 11

Java SE Development Kit 7 Update 17 (64-bit)

Java 6 Update 35

Java SE Development Kit 6 Update 21

Junk Mail filter update

JustCloud

K-Lite Mega Codec Pack 9.7.0

Lernout & Hauspie TruVoice American English TTS Engine

Liaison EDI Notepad

Linksys VPN Client

Livedrive

Logitech SetPoint 6.32

LogMeIn

Malwarebytes Anti-Malware version 1.75.0.1300

MBT Desktop

MBT LightWave Trading Platform

McAfee Security Scan Plus

MediaInfo 0.7.62

Memeo Instant Backup

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Extended

Microsoft .NET Framework 4 Multi-Targeting Pack

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Help Viewer 1.1

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (English) 2007

Microsoft Office Access Setup Metadata MUI (English) 2007

Microsoft Office Excel MUI (English) 2007

Microsoft Office File Validation Add-In

Microsoft Office Groove MUI (English) 2007

Microsoft Office Groove Setup Metadata MUI (English) 2007

Microsoft Office InfoPath MUI (English) 2007

Microsoft Office Live Add-in 1.5

Microsoft Office Live Meeting 2007

Microsoft Office Office 64-bit Components 2007

Microsoft Office OneNote MUI (English) 2007

Microsoft Office Outlook MUI (English) 2007

Microsoft Office PowerPoint MUI (English) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (English) 2007

Microsoft Office Shared 64-bit MUI (English) 2007

Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office Ultimate 2007

Microsoft Office Word MUI (English) 2007

Microsoft Silverlight

Microsoft Silverlight 4 SDK

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft SQL Server 2008 (64-bit)

Microsoft SQL Server 2008 Browser

Microsoft SQL Server 2008 Common Files

Microsoft SQL Server 2008 Database Engine Services

Microsoft SQL Server 2008 Database Engine Shared

Microsoft SQL Server 2008 Native Client

Microsoft SQL Server 2008 R2 Management Objects

Microsoft SQL Server 2008 RsFx Driver

Microsoft SQL Server 2008 Setup Support Files

Microsoft SQL Server Compact 3.5 SP2 ENU

Microsoft SQL Server Compact 3.5 SP2 x64 ENU

Microsoft SQL Server System CLR Types

Microsoft SQL Server VSS Writer

Microsoft Sync Framework Runtime Native v1.0 (x86)

Microsoft Sync Framework Services Native v1.0 (x86)

Microsoft Team Foundation Server 2010 Object Model - ENU

Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU

Microsoft Team Foundation Server 2010 Object Model for Lightswitch 2011 - ENU

Microsoft Visual C# 2008 Express Edition

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219

Microsoft Visual F# 2.0 Runtime

Microsoft Visual Studio LightSwitch 2011 - ENU

Microsoft Visual Studio LightSwitch 2011 Deployment Prerequisites

Microsoft Visual Studio Macro Tools

MobileMe Control Panel

MobileNoter

MotoCast

Motorola Device Manager

Motorola Device Software Update

MOTOROLA MEDIA LINK

Motorola Mobile Drivers Installation 6.2.0

Movavi Video Suite 10

Movavi YouTube Converter 3

Mozilla Firefox 20.0.1 (x86 en-US)

Mozilla Maintenance Service

Mozilla Thunderbird 17.0.3 (x86 en-US)

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MSXML 4.0 SP3 Parser

MSXML 4.0 SP3 Parser (KB2721691)

MSXML 4.0 SP3 Parser (KB2758694)

MyFreeCodec

NASA World Wind 1.4

Notepad++

OptimizerPro

Paint.NET v3.5.8

PC Inspector File Recovery

Pdf995 (installed by H&R Block)

PdfEdit995 (installed by H&R Block)

PDFKey Pro

Photo Notifier and Animation Creator

PlayMemories Home

PocketBible NET Bible (NET)

Quicken 2010

Quicken 2013

QuickTime

RealDownloader

RealNetworks - Microsoft Visual C++ 2008 Runtime

RealNetworks - Microsoft Visual C++ 2010 Runtime

RealPlayer

RealUpgrade 1.1

Recover PDF Password 3.0.118

RoboForm 7-9-2-5 (All Users)

Safari

Samsung Kies

Samsung Story Album Viewer

SAMSUNG USB Driver for Mobile Phones

SaveAs

Seagate Dashboard

Seagate DiscWizard

Seagate Media Software

Search Assistant SimpleSpeedy 1.74

SeaTools for Windows

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2827329) 32-Bit Edition

Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition

Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition

Security Update for Microsoft Office Outlook 2007 (KB2825644) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition

Security Update for Microsoft Visual Studio LightSwitch 2011 - ENU (KB2645410)

Security Update for Microsoft Visual Studio Macro Tools (KB2669970)

Service Pack 3 for SQL Server 2008 (KB2546951) (64-bit)

Shared C Run-time for x64

Smart Defrag 2

Snagit 10

SoundTaxi 4.0.0

SoundTaxi Media Suite 4.0.0

SouthWare PDF Creator

Sql Server Customer Experience Improvement Program

SSH Secure Shell

Stardock Fences 2

Startpage24

Stellarium 0.11.2

Stora Desktop Applications

Sybase Adaptive Server Enterprise Suite

Tanach Plus

TaxCut Business 2008 (Remove Only)

TaxCut Premium + State + Efile 2008

The Scriptures

theWord

Tune Sweeper

TuneCab Online 3.4.0

TuneCab Online Extras 3.4.2

TuneSync

U/SQL Client (4.30.0000)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2836939)

Update for Microsoft Office 2007 Help for Common Features (KB963673)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office Access 2007 Help (KB963663)

Update for Microsoft Office Excel 2007 Help (KB963678)

Update for Microsoft Office Infopath 2007 Help (KB963662)

Update for Microsoft Office OneNote 2007 Help (KB963670)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Help (KB963677)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2825642) 32-Bit Edition

Update for Microsoft Office Powerpoint 2007 Help (KB963669)

Update for Microsoft Office Publisher 2007 Help (KB963667)

Update for Microsoft Office Script Editor Help (KB963671)

Update for Microsoft Office Word 2007 Help (KB963665)

Updater By SweetPacks 2.0.0.586

Verizon V CAST Media Manager

Video Download Converter version 1.0.0.0

VideoDownloadConverter Toolbar

Visual Studio 2010 Prerequisites - English

Visual Studio 2010 x64 Redistributables

Visual Studio 2012 x64 Redistributables

Visual Studio 2012 x86 Redistributables

VMware Player

VNC Enterprise Edition E4.5.3

VNC Mirror Driver 1.8.0

VNC Printer Driver 1.6.0

WCF RIA Services V1.0 SP1

Web Deployment Tool

WebCake 3.00

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live ID Sign-in Assistant

Windows Live Mail

Windows Live Messenger

Windows Live Movie Maker

Windows Live Photo Gallery

Windows Live Sync

Windows Live Upload Tool

Windows Live Writer

WinPcap 4.1.3

WinStars 2.0

WinZip 15.5

Wireshark 1.8.5 (64-bit)

WiseFixer 3.2

WizeFeed 2.1.5

Wizetrade® Commodities

Wizetrade® Options

Wizetrade® Stocks

WoLoSoft SuperEdi 4.3.2

Xilisoft HD Video Converter 6

Xtend

Xvid 1.1.3 final uninstall

XXClone ver 2.01.2b

Yahoo! Messenger

Yahoo! Software Update

Yahoo! Toolbar

.

==== Event Viewer Messages From Past Week ========

.

11/29/2013 12:02:16 PM, Error: Service Control Manager [7001] - The PnP-X IP Bus Enumerator service depends on the Function Discovery Provider Host service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

11/29/2013 12:00:15 PM, Error: Service Control Manager [7034] - The MBAMScheduler service terminated unexpectedly. It has done this 1 time(s).

11/29/2013 11:56:41 AM, Error: Service Control Manager [7000] - The Aspi32 service failed to start due to the following error: This driver has been blocked from loading

11/29/2013 11:56:41 AM, Error: Application Popup [1060] - \SystemRoot\SysWow64\Drivers\Aspi32.SYS has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

11/26/2013 6:58:23 PM, Error: Schannel [36888] - The following fatal alert was generated: 10. The internal error state is 10.

11/26/2013 6:02:21 PM, Error: Service Control Manager [7001] - The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

11/26/2013 6:01:08 PM, Error: Service Control Manager [7022] - The VMware USB Arbitration Service service hung on starting.

11/26/2013 11:00:39 AM, Error: Service Control Manager [7011] - A timeout (120000 milliseconds) was reached while waiting for a transaction response from the avgwd service.

11/25/2013 11:08:40 AM, Error: Schannel [36888] - The following fatal alert was generated: 43. The internal error state is 252.

11/23/2013 1:29:44 AM, Error: Service Control Manager [7011] - A timeout (120000 milliseconds) was reached while waiting for a transaction response from the WSearch service.

11/22/2013 8:15:13 AM, Error: Service Control Manager [7034] - The Advanced SystemCare Service 6 service terminated unexpectedly. It has done this 1 time(s).

.

==== End Of File ===========================

Maniac · November 30, 2013

Hello krwebber53! My name is Borislav and I will be glad to help you solve your malware problem.

Please note:

If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.
I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.
Make sure you read all of the instructions and fixes thoroughly before continuing with them.
Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.
Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.
Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.

Step 1

Please uninstall the following applications:

AVG SafeGuard toolbar

ContinueToSave

ContinueToSave 1.74

Coupon Printer for Windows

DailyBibleGuide Toolbar

IncrediMail MediaBar 2 Toolbar

Internet Explorer Toolbar 4.9 by SweetPacks

IObit Apps Toolbar v8.3

IObit Malware Fighter

OptimizerPro

Updater By SweetPacks 2.0.0.586

WebCake 3.00

Step 2

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.

Step 3

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the content of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[s1].txt as well.

Step 4

Launch Malwarebytes' Anti-Malware
Go to Update tab and select Check for Updates. If an update is found, it will download and install the latest version.
Go to Scanner tab and select Perform Quick Scan, then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer,please do so immediately.
In your next reply, post the following log files:
- Junkware Removal Tool log
- AdwCleaner log
- Malwarebytes' Anti-Malware log

krwebber53 · December 3, 2013

AdwCleaner.exe did produce a file and displayed it in Notepad, but I do not find the file in C:\

I did find a file AdwCleaner[s0].txt in C:\AdwCleaner folder and copied it at the end of this post.

Here is JRT.txt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.8 (11.05.2013:1)

OS: Windows 7 Professional x64

Ran by webberk on Tue 12/03/2013 at 10:05:11.48

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

Successfully stopped: [service] videodownloadconverter_4zservice

Successfully deleted: [service] videodownloadconverter_4zservice

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\videodownloadconverter search scope monitor

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\New Windows\Allow\\*.crossrider.com

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\babygloss

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\babyoptfile

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\sweetim_urlsearchhook.toolbarurlsearchhook

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\yt.ytnavassistplugin

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\yt.ytnavassistplugin.1

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4FBBF769-ECEB-420A-B536-133B1D505C36}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\bho.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\extension.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\iehelperv2.5.0.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\nctaudiocdgrabber2.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\priam_bho.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\secman.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A0B10EBE-4E51-4CAE-949B-E6B9E7D68CEA}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babylon

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\fixcleaner

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\optimizer pro

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\wajam

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\wecarereminder

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\i want this

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\search settings

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2799653475-1206912365-1311522834-1001\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\fixcleaner

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\freeze.com

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminstaller

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\updater by sweetpacks

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\wajam

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.dynamicbarbutton

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.dynamicbarbutton.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.feedmanager

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.feedmanager.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlmenu

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlmenu.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlpanel

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.htmlpanel.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.multiplebutton

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.multiplebutton.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.pseudotransparentplugin

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.pseudotransparentplugin.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radio

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radio.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radiosettings

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.radiosettings.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.scriptbutton

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.scriptbutton.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.settingsplugin

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.settingsplugin.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.thirdpartyinstaller

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.thirdpartyinstaller.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.urlalertbutton

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.urlalertbutton.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.xmlsessionplugin

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\videodownloadconverter_4z.xmlsessionplugin.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylon_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylon_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\i want this_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\i want this_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\optimizerpro_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\optimizerpro_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasapi32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasmancs

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\babylon.exe

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\videodownloadconverter_4zbar uninstall

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2724386

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askchecker_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askchecker_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\wsconduit__166_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\wsconduit__166_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_avs-video-to-go_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_avs-video-to-go_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\askchecker_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\askchecker_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\wsconduit__166_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\wsconduit__166_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_avs-video-to-go_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_avs-video-to-go_RASMANCS

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{34e26447-bf30-4c78-a5b9-61dfa8a55e67}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{34e26447-bf30-4c78-a5b9-61dfa8a55e67}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

~~~ Files

Successfully deleted: [File] "C:\Windows\syswow64\conduitengine.tmp"

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\pc optimizer pro"

Failed to delete: [Folder] "C:\ProgramData\premium"

Successfully deleted: [Folder] "C:\ProgramData\saveas"

Successfully deleted: [Folder] "C:\ProgramData\softsafe"

Successfully deleted: [Folder] "C:\Users\webberk\AppData\Roaming\fixcleaner"

Successfully deleted: [Folder] "C:\Users\webberk\AppData\Roaming\optimizer pro"

Successfully deleted: [Folder] "C:\Users\webberk\AppData\Roaming\webcake"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\local\conduit"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\local\cre"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\local\swvupdater"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\local\visi_coupon"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\local\wajam"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\locallow\conduit"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\locallow\pricegong"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\locallow\sweetim"

Successfully deleted: [Folder] "C:\Users\webberk\appdata\locallow\videodownloadconverter_4z"

Successfully deleted: [Folder] "C:\Program Files (x86)\babylon"

Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"

Successfully deleted: [Folder] "C:\Program Files (x86)\dailybibleguide"

Successfully deleted: [Folder] "C:\Program Files (x86)\driver-soft"

Successfully deleted: [Folder] "C:\Program Files (x86)\fixcleaner"

Successfully deleted: [Folder] "C:\Program Files (x86)\free youtube downloader"

Successfully deleted: [Folder] "C:\Program Files (x86)\myfree codec"

Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"

Successfully deleted: [Folder] "C:\Program Files (x86)\saveas"

Successfully deleted: [Folder] "C:\Program Files (x86)\simplespeedy"

Successfully deleted: [Folder] "C:\Program Files (x86)\sweetim"

Successfully deleted: [Folder] "C:\Program Files (x86)\video download converter"

Successfully deleted: [Folder] "C:\Program Files (x86)\videodownloadconverter_4z"

Failed to delete: [Folder] "C:\Program Files (x86)\Common Files\spigot"

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro"

Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\we-care reminder"

Successfully deleted: [Folder] "C:\Users\webberk\AppData\Roaming\microsoft\windows\start menu\programs\wajam"

Successfully deleted: [Folder] "C:\ai_recyclebin"

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"

Successfully deleted: [Folder] "C:\Windows\syswow64\wnlt"

~~~ FireFox

Successfully deleted: [File] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\user.js

Successfully deleted: [File] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\{eee6c361-6118-11dc-9c72-001320c79847}.xpi

Successfully deleted: [File] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\searchplugins\mystart search.xml

Successfully deleted: [File] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\searchplugins\sweetim.xml

Successfully deleted: [File] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\searchplugins\websearch.xml

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\fctb

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\engine@conduit.com

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\crossriderapp2258@crossrider.com

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\2vffxtbr@dailybibleguide.com

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\4zffxtbr@videodownloadconverter_4z.com

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\plugin@getwebcake.com

Successfully deleted: [Folder] C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\extensions\staged

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\4zffxtbr@videodownloadconverter_4z.com

Successfully deleted the following from C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\prefs.js

user_pref("CT2724386.CT2724407.CommunityChanged", true);

user_pref("CT2724386.CT2724431.CommunityChanged", true);

user_pref("CT2724386.CT2727162.CommunityChanged", true);

user_pref("CT2724386.CT2727622.CommunityChanged", true);

user_pref("CT2724386.CT2727646.CommunityChanged", true);

user_pref("CT2724386.CT2727678.CommunityChanged", true);

user_pref("CT2724386.CT2727750.CommunityChanged", true);

user_pref("CT2724386.CTID", "ct2724386");

user_pref("CT2724386.CommunitiesChangesLastCheckTime", "Mon Mar 28 2011 10:04:59 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.CommunityChanged", true);

user_pref("CT2724386.CurrentServerDate", "29-3-2011");

user_pref("CT2724386.DialogsAlignMode", "LTR");

user_pref("CT2724386.DownloadReferralCookieData", "");

user_pref("CT2724386.FirstServerDate", "28-3-2011");

user_pref("CT2724386.FirstTime", true);

user_pref("CT2724386.FirstTimeFF3", true);

user_pref("CT2724386.FirstTimeSettingsDone", true);

user_pref("CT2724386.FixPageNotFoundErrors", true);

user_pref("CT2724386.GroupingLastCheckTime", "Mon Mar 28 2011 21:04:06 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.GroupingLastErrorCode", "");

user_pref("CT2724386.GroupingLastResponse", true);

user_pref("CT2724386.GroupingLastServerUpdateTime", "129453855667800000");

user_pref("CT2724386.GroupingServerCheckInterval", 1440);

user_pref("CT2724386.Initialize", true);

user_pref("CT2724386.InitializeCommonPrefs", true);

user_pref("CT2724386.InstallationAndCookieDataSentCount", 3);

user_pref("CT2724386.InstallationId", "IncrediMail_MediaBar_2.exe");

user_pref("CT2724386.InstallationType", "ConduitIntegration");

user_pref("CT2724386.InstalledDate", "Mon Mar 28 2011 09:04:07 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.IsGrouping", true);

user_pref("CT2724386.IsMulticommunity", false);

user_pref("CT2724386.IsOpenThankYouPage", false);

user_pref("CT2724386.IsOpenUninstallPage", true);

user_pref("CT2724386.LanguagePackLastCheckTime", "Mon Mar 28 2011 09:04:14 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.LanguagePackReloadIntervalMM", 1440);

user_pref("CT2724386.LastLogin_2.7.2.0", "Tue Mar 29 2011 09:04:37 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.LatestVersion", "3.3.3.2");

user_pref("CT2724386.Locale", "en");

user_pref("CT2724386.LoginCache", 4);

user_pref("CT2724386.MCDetectTooltipHeight", "83");

user_pref("CT2724386.MCDetectTooltipWidth", "295");

user_pref("CT2724386.RadioIsPodcast", false);

user_pref("CT2724386.RadioMediaID", "21080102");

user_pref("CT2724386.RadioMediaType", "Media Player");

user_pref("CT2724386.RadioMenuSelectedID", "EBRadioMenu_CT272438621080102");

user_pref("CT2724386.RadioStationName", "Mix%201620%20Am");

user_pref("CT2724386.SearchFromAddressBarIsInit", true);

user_pref("CT2724386.SearchInNewTabEnabled", true);

user_pref("CT2724386.SearchInNewTabIntervalMM", 1440);

user_pref("CT2724386.SearchProtectorToolbarDisabled", true);

user_pref("CT2724386.SettingsCheckIntervalMin", 120);

user_pref("CT2724386.SettingsLastCheckTime", "Mon Mar 28 2011 09:04:04 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.SettingsLastUpdate", "1300904766");

user_pref("CT2724386.ThirdPartyComponentsInterval", 504);

user_pref("CT2724386.ThirdPartyComponentsLastCheck", "Mon Mar 28 2011 09:04:03 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ThirdPartyComponentsLastUpdate", "1246786978");

user_pref("CT2724386.ToolbarDisabled", true);

user_pref("CT2724386.UserID", "UN80016074927960551");

user_pref("CT2724386.WeatherNetwork", "");

user_pref("CT2724386.WeatherPollDate", "Tue Mar 29 2011 10:05:15 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.WeatherUnit", "C");

user_pref("CT2724386.clientLogIsEnabled", true);

user_pref("CT2724386.ct2724386.DialogsAlignMode", "LTR");

user_pref("CT2724386.ct2724386.FirstTimeSettingsDone", true);

user_pref("CT2724386.ct2724386.GroupingInvalidateCache", false);

user_pref("CT2724386.ct2724386.GroupingLastCheckTime", "Tue Mar 29 2011 09:04:09 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ct2724386.GroupingLastErrorCode", "");

user_pref("CT2724386.ct2724386.GroupingLastResponse", true);

user_pref("CT2724386.ct2724386.GroupingLastServerUpdateTime", "129453855667800000");

user_pref("CT2724386.ct2724386.InvalidateCache", false);

user_pref("CT2724386.ct2724386.LanguagePackLastCheckTime", "Mon Mar 28 2011 09:04:35 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ct2724386.Locale", "en");

user_pref("CT2724386.ct2724386.RadioLastCheckTime", "Tue Mar 29 2011 09:04:53 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ct2724386.RadioLastUpdateIPServer", "3");

user_pref("CT2724386.ct2724386.RadioLastUpdateServer", "129249036863500000");

user_pref("CT2724386.ct2724386.SearchInNewTabLastCheckTime", "Tue Mar 29 2011 09:04:38 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ct2724386.SettingsCheckIntervalMin", 120);

user_pref("CT2724386.ct2724386.SettingsLastCheckTime", "Mon Mar 28 2011 09:04:08 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ct2724386.SettingsLastUpdate", "1300904766");

user_pref("CT2724386.ct2724386.ThirdPartyComponentsLastCheck", "Mon Mar 28 2011 09:04:08 GMT-0500 (Central Daylight Time)");

user_pref("CT2724386.ct2724386.ThirdPartyComponentsLastUpdate", "1246786978");

user_pref("CT2724386.myStuffEnabled", true);

user_pref("CT2724386.myStuffPublihserMinWidth", 400);

user_pref("CT2724386.myStuffServiceIntervalMM", 1440);

user_pref("CommunityToolbar.EngineHiddenByUser", true);

user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");

user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");

user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");

user_pref("CommunityToolbar.IsEngineShown", false);

user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);

user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");

user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");

user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");

user_pref("CommunityToolbar.ToolbarsList", "CT2724386,ConduitEngine");

user_pref("CommunityToolbar.ToolbarsList2", "CT2724386");

user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu May 05 2011 08:54:59 GMT-0500 (Central Daylight Time)");

user_pref("CommunityToolbar.alert.alertInfoInterval", 60);

user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue May 17 2011 11:13:45 GMT-0500 (Central Daylight Time)");

user_pref("CommunityToolbar.alert.locale", "");

user_pref("CommunityToolbar.alert.loginIntervalMin", 0);

user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue May 17 2011 10:13:38 GMT-0500 (Central Daylight Time)");

user_pref("CommunityToolbar.alert.loginLastUpdateTime", "");

user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);

user_pref("CommunityToolbar.alert.showTrayIcon", false);

user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);

user_pref("CommunityToolbar.alert.userId", "74e31f20-15d3-493d-a6c3-9d829af4067e");

user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Mar 29 2011 09:04:15 GMT-0500 (Central Daylight Time)");

user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);

user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);

user_pref("ConduitEngine.AppTrackingLastCheckTime", "Sun May 15 2011 08:55:12 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.CTID", "ConduitEngine");

user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sun May 08 2011 08:54:57 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.FirstServerDate", "05/05/2011 16");

user_pref("ConduitEngine.FirstTime", true);

user_pref("ConduitEngine.FirstTimeFF3", true);

user_pref("ConduitEngine.HasUserGlobalKeys", true);

user_pref("ConduitEngine.Initialize", true);

user_pref("ConduitEngine.InitializeCommonPrefs", true);

user_pref("ConduitEngine.InstalledDate", "Thu May 05 2011 08:54:58 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.IsMulticommunity", false);

user_pref("ConduitEngine.IsOpenThankYouPage", false);

user_pref("ConduitEngine.IsOpenUninstallPage", true);

user_pref("ConduitEngine.LanguagePackLastCheckTime", "Tue May 10 2011 08:55:04 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.LastLogin_3.3.3.2", "Tue May 10 2011 08:55:04 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);

user_pref("ConduitEngine.SettingsLastCheckTime", "Tue May 10 2011 08:55:02 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.UserID", "UN30833192118588890");

user_pref("ConduitEngine.componentAlertEnabled", false);

user_pref("ConduitEngine.engineLocale", "en-US");

user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Tue May 10 2011 08:54:58 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Tue May 10 2011 08:55:05 GMT-0500 (Central Daylight Time)");

user_pref("ConduitEngine.initDone", true);

user_pref("ConduitEngine.isAppTrackingManagerOn", true);

user_pref("ConduitEngine.usagesFlag", 2);

user_pref("aol_toolbar.default.homepage.check", false);

user_pref("aol_toolbar.default.search.check", false);

user_pref("browser.search.defaultenginename,S", "WebSearch");

user_pref("browser.search.order.1", "WebSearch");

user_pref("browser.search.order.1,S", "WebSearch");

user_pref("browser.search.selectedEngine,S", "WebSearch");

user_pref("extensions.50ec7f819e1cb.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.locatio

user_pref("extensions.50eeee4553ac0.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.locatio

user_pref("extensions.BabylonToolbar.prtkDS", 0);

user_pref("extensions.BabylonToolbar.prtkHmpg", 0);

user_pref("extensions.crossrider.bic", "137412ff4f39c74ca835bd1b992bad3e");

user_pref("extensions.crossriderapp2258.2258.InstallationThankYouPage", true);

user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1336764547);

user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.searchUserConifrmation", false);

user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.setHomepage", false);

user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.setNewTab", false);

user_pref("extensions.crossriderapp2258.2258.InstallationUserSettings.setSearch", false);

user_pref("extensions.crossriderapp2258.2258.active", true);

user_pref("extensions.crossriderapp2258.2258.addressbar", "");

user_pref("extensions.crossriderapp2258.2258.addressbarenhanced", "");

user_pref("extensions.crossriderapp2258.2258.affid", "0");

user_pref("extensions.crossriderapp2258.2258.backgroundjs", "\n\n//\n");

user_pref("extensions.crossriderapp2258.2258.backgroundver", 51);

user_pref("extensions.crossriderapp2258.2258.can_run_bg_code", true);

user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", "");

user_pref("extensions.crossriderapp2258.2258.changeprevious", false);

user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1336764547");

user_pref("extensions.crossriderapp2258.2258.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie.InstallerParams.value", "%7B%22source_id%22%3A%2222241%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%2222241%26subid%3D

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1336764547");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.expiration", "Thu May 30 2013 10:35:59 GMT-0500 (Central Daylight Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_arbitrary_code.value", "%22var%20start_time%3D1368590400%3C%3DMath.floor%28new%20Date/1E3%29%3F378693E4%3A1368504E3%3B

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.expiration", "Thu May 30 2013 10:35:59 GMT-0500 (Central Daylight Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_cf_ab_cap1.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_cf_ab_cap1.value", "%22lbcmmpmjjaockhkcofljpakjcbmjmgla%2Cankoaclbfmdocnmjbokdkohpehjjinen%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_cf_bu1.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_cf_bu1.value", "1360856520");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.expiration", "Thu Jun 06 2013 10:10:44 GMT-0500 (Central Daylight Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_country_code.value", "%22US%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1369927908");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_currenttime.value", "%221368543727%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_ib_delay.value", "24");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_ib_disclosure.value", "1367944039");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_ib_list.expiration", "Thu May 30 2013 16:10:46 GMT-0500 (Central Daylight Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_ib_list.value", "%7B%2232456a9136582027c21cd93a74f21b22%22%3A%7B%22p%22%3A%22/%22%7D%2C%2210b846b88e1b816925858abd9e10

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2222241%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%2222241%26su

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2222241%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_pc_20120828.value", "1346783678139");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_product_id.value", "%221145%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%2235781%22");

user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie.dbtest.value", "1346783677221");

user_pref("extensions.crossriderapp2258.2258.cookie.lastrequest.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.cookie.lastrequest.value", "%7B%22path%22%3A%22/epd/epdEUinit.aspx%22%2C%22host%22%3A%22supportline.microfocus.com%22%2C%22scheme%

user_pref("extensions.crossriderapp2258.2258.description", "I Want This!");

user_pref("extensions.crossriderapp2258.2258.domain", "");

user_pref("extensions.crossriderapp2258.2258.emailsig", "");

user_pref("extensions.crossriderapp2258.2258.enablesearch", false);

user_pref("extensions.crossriderapp2258.2258.exposesites", "");

user_pref("extensions.crossriderapp2258.2258.fbremoteurl", "");

user_pref("extensions.crossriderapp2258.2258.group", 0);

user_pref("extensions.crossriderapp2258.2258.homepage", "");

user_pref("extensions.crossriderapp2258.2258.iframe", false);

user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22159A334243B74FF9ADC770810E96F074IE%22%2C%22installer_verifier

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_appVer.value", "144");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_lastVersion.value", "0");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_meta.value", "%7B%7D");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.expiration", "Thu May 30 2013 16:10:43 GMT-0500 (Central Daylight Time)");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_nextCheck.value", "true");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT-0600 (Central Standard Time)");

user_pref("extensions.crossriderapp2258.2258.internaldb.Resources_queue.value", "%7B%7D");

user_pref("extensions.crossriderapp2258.2258.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.started||_GPL_PLUGIN.prepare({pid:21,baseCDN:\"co

user_pref("extensions.crossriderapp2258.2258.manifesturl", "");

user_pref("extensions.crossriderapp2258.2258.name", "I Want This");

user_pref("extensions.crossriderapp2258.2258.newtab", "");

user_pref("extensions.crossriderapp2258.2258.opensearch", "");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=function(b){if(void 0===this||null===this)throw n

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000014.name", "GPL Plugin (Loader)");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000014.ver", 15);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{},rules:{},started:!1,allowed:!1,log:function(b)

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000015.name", "GPL Background (BG)");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_1000015.ver", 38);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(window.getSelection){return window.getSelectio

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.name", "CrossriderAppUtils");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.ver", 3);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIEWindow=false;if(typeof window!==\"undefined\"

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.name", "CrossriderUtils");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.ver", 3);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _firefoxVersion!==\"undefined\"&&

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.name", "FFAppAPIWrapper");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.ver", 7);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_17.name", "jQuery");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_17.ver", 4);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_47.name", "resources_background");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_47.ver", 3);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j){return(typeof j===\"object\"&&j!==null);};v

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.name", "appApiMessage");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.ver", 2);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function(){var k={};var f=appAPI.appInfo.name;var l=fu

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_72.name", "appApiValidation");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_72.ver", 3);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigator!==\"undefined\"&&typeof navigator.userAgent

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_78.name", "CrossriderInfo");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_78.ver", 3);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";var a=function(){var d=function(g){if(g===tru

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_98.name", "omniCommands");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_98.ver", 2);

user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_0", "14,78,16,64,47,72,98,1000015");

user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_1", "17,14,78,13,16,64,72,98,1000014");

user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_5", "14,78,13,16,64,47,72");

user_pref("extensions.crossriderapp2258.2258.pluginsversion", 69);

user_pref("extensions.crossriderapp2258.2258.premium", true);

user_pref("extensions.crossriderapp2258.2258.publisher", "Innovative Apps");

user_pref("extensions.crossriderapp2258.2258.searchstatus", 0);

user_pref("extensions.crossriderapp2258.2258.setnewtab", false);

user_pref("extensions.crossriderapp2258.2258.settingsurl", "");

user_pref("extensions.crossriderapp2258.2258.updateinterval", 360);

user_pref("extensions.crossriderapp2258.2258.ver", 144);

user_pref("extensions.crossriderapp2258.adsOldValue", -1);

user_pref("extensions.crossriderapp2258.apps", "2258");

user_pref("extensions.crossriderapp2258.bic", "137412ff4f39c74ca835bd1b992bad3e");

user_pref("extensions.crossriderapp2258.cid", 2258);

user_pref("extensions.crossriderapp2258.firstrun", false);

user_pref("extensions.crossriderapp2258.hadappinstalled", true);

user_pref("extensions.crossriderapp2258.installationdate", 1336828491);

user_pref("extensions.crossriderapp2258.lastcheck", 22832111);

user_pref("extensions.crossriderapp2258.lastcheckitem", 22832132);

user_pref("extensions.crossriderapp2258.misc.lastBgWorkerTimer", "1342757421206");

user_pref("extensions.crossriderapp2258.misc.lastDomWorkerTimer", "1342757421202");

user_pref("extensions.crossriderapp2258.modetype", "production");

user_pref("extensions.crossriderapp2258.statsDailyCounter", 14);

user_pref("extensions.toolbar.mindspark._2vMembers_.hp.user.defined", true);

user_pref("extensions.toolbar.mindspark._2vMembers_.initialized", true);

user_pref("extensions.toolbar.mindspark._2vMembers_.installation.contextKey", "");

user_pref("extensions.toolbar.mindspark._2vMembers_.installation.installDate", "2012072308");

user_pref("extensions.toolbar.mindspark._2vMembers_.installation.partnerId", "XMxdm034YYus");

user_pref("extensions.toolbar.mindspark._2vMembers_.installation.partnerSubId", "");

user_pref("extensions.toolbar.mindspark._2vMembers_.installation.success", true);

user_pref("extensions.toolbar.mindspark._2vMembers_.installation.toolbarId", "815D076D-87E7-43F2-8C37-1E0570ABA176");

user_pref("extensions.toolbar.mindspark._2vMembers_.lastActivePing", "1369926631187");

user_pref("extensions.toolbar.mindspark._2vMembers_.options.defaultSearch", false);

user_pref("extensions.toolbar.mindspark._2vMembers_.options.homePageEnabled", false);

user_pref("extensions.toolbar.mindspark._2vMembers_.options.keywordEnabled", false);

user_pref("extensions.toolbar.mindspark._2vMembers_.options.tabEnabled", false);

user_pref("extensions.toolbar.mindspark._2vMembers_.weather.location", "30301");

user_pref("extensions.toolbar.mindspark.lastInstalled", "dailybibleguide@mindspark.com");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.AutoSearchEventData", "auto%20search");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.ClearCacheDate", 25);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.DNSCatch", false);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.DisplayEULA", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.DnsCatchEventData", "dns%20catch");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.EBOMode", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.FirstLaunchShown", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.InstallDomain", "freecause.com");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.InstallType", "standard");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.LoadLayoutDate.100770", 25);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.NewTabSearchEventData", "tab%20search");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.ShowRecommendedOptions", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.StateReportDate", "1343228190825");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.TopRightSearchEventData", "top%20right%20search");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.beforeInstallSaved", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.beforeinstall.homepage", "hxxp%3A//mystart.incredimail.com%3Fa%3D1uwspE0znNK");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.beforeinstall.search", "Secure%20Search");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.customNewTab", false);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.helpUsImprove", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.hideOthers", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.partnerauth", false);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.processAddrBar", false);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.restoreSearch", false);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.runcmd.", "bb_acct_status_1343231674");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.searchHistory", true);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.session", "17E2E8BC2E615F0244984A94C835B00BBC70588D1A5682DCB67A82A54F6C0DA4A7EB419A12641248D14B3D957F2572E692C06E9416C73C8

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.showFirstLaunchOptions", false);

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.tb_lang", "en");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.tool_id", "100770");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.user_id", "111493086");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.user_key", "469f77b980ea12f60bb6e5fbd1f09a2fe310545a");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.user_layouts", "100770");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.user_lnames", "fcreward.100770.b");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.xml_service_url", "6bb94bbf55fe2f255901a560824a6ebe");

user_pref("freecause003e1c8febd6f07475514b31c0f547ec.yahooSearch", false);

user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "WebSearch");

user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "WebSearch");

user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");

user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");

user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");

user_pref("sweetim.toolbar.searchguard.enable", "");

Emptied folder: C:\Users\webberk\AppData\Roaming\mozilla\firefox\profiles\knmvngqb.default\minidumps [8 files]

~~~ Chrome

Successfully deleted: [Folder] C:\Users\webberk\appdata\local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on Tue 12/03/2013 at 10:20:19.53

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Here is mbam-log-2013-12-03

Malwarebytes Anti-Malware (PRO) 1.75.0.1300

www.malwarebytes.org

Database version: v2013.12.03.05

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16428

webberk :: LENOVO64 [administrator]

Protection: Enabled

12/3/2013 10:47:49 AM

mbam-log-2013-12-03 (10-47-49).txt

Scan type: Quick scan

Scan options disabled: P2P

Objects scanned: 64922

Time elapsed: 9 minute(s), 24 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

FILE AdwCleaner

# AdwCleaner v3.014 - Report created 03/12/2013 at 10:33:27

# Updated 01/12/2013 by Xplode

# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

# Username : webberk - LENOVO64

# Running from : C:\Users\webberk\Desktop\AdwCleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Premium

Folder Deleted : C:\ProgramData\coenitinnuuetoosiave

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\coenitinnuuetoosiave

Folder Deleted : C:\Program Files (x86)\AVG SafeGuard toolbar

Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search

Folder Deleted : C:\Program Files (x86)\Common Files\Spigot

Folder Deleted : C:\Users\webberk\AppData\Local\AVG SafeGuard toolbar

Folder Deleted : C:\Users\webberk\AppData\Local\PackageAware

Folder Deleted : C:\Users\admin\AppData\Local\visi_coupon

Folder Deleted : C:\Users\admin\AppData\LocalLow\Conduit

Folder Deleted : C:\Users\admin\AppData\LocalLow\IncrediMail_MediaBar_2

Folder Deleted : C:\Users\admin\AppData\LocalLow\VideoDownloadConverter_4z

Folder Deleted : C:\Users\Administrator\AppData\Local\visi_coupon

Folder Deleted : C:\Users\Administrator\AppData\LocalLow\Conduit

Folder Deleted : C:\Users\Administrator\AppData\LocalLow\IncrediMail_MediaBar_2

Folder Deleted : C:\Users\Administrator\AppData\LocalLow\PriceGong

Folder Deleted : C:\Users\Administrator\AppData\LocalLow\VideoDownloadConverter_4z

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Conduit

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\ConduitEngine

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\CT2724386

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\g45ga@qxkwa.com

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\50ec7f819e11e@50ec7f819e157.com

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\50eeee4553a13@50eeee4553a4c.com

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\ascsurfingprotection@iobit.com

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\DeviceDetection@logitech.com

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\LogMeInClient@logmein.com

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\{badea1ae-72ed-4f6a-8c37-4db9a4ac7bc9}

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800}

Folder Deleted : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\{E0B8C461-F8FB-49b4-8373-FE32E9252800}-trash

File Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon.lnk

File Deleted : C:\Windows\System32\roboot64.exe

File Deleted : C:\Users\webberk\AppData\Local\Temp\Uninstall.exe

File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\safeguard-secure-search.xml

File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml

File Deleted : C:\Users\webberk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage

File Deleted : C:\Users\webberk\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal

File Deleted : C:\Windows\System32\Tasks\LaunchApp

File Deleted : C:\Windows\System32\Tasks\PC Optimizer Pro Updates

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp

Key Deleted : HKLM\SOFTWARE\Classes\.bgl

Key Deleted : HKLM\SOFTWARE\Classes\.bof

Key Deleted : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]

Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin

Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_156f8a5f

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_ccfde35c

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{48586425-6BB7-4F51-8DC6-38C88E3EBB58}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66292684-B2C2-4C7C-B3D2-BF446E30744C}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6BFF4BCB-7A73-45A7-AC4C-389A34E1D1EF}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{84B7B98F-E018-4DBB-AB4C-4DDD3DFCB5FB}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A86782D8-7B41-452F-A217-1854F72DBA54}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C547C6C2-561B-4169-A2A5-20BA771CA93B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FF48DBA6-5DD8-4D10-9EB0-0FA968502E66}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{192F487E-E812-40C0-B0DE-CB4BFA20F37B}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79332472-47F3-4E32-B07F-CF8DF4C58499}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BC153A3C-0BB7-4EED-83AE-28E6E398F56E}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48586425-6BB7-4F51-8DC6-38C88E3EBB58}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48586425-6BB7-4F51-8DC6-38C88E3EBB58}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C547C6C2-561B-4169-A2A5-20BA771CA93B}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6C1B9042-3D32-49A1-916B-0AA3A9CDDFD6}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A86782D8-7B41-452F-A217-1854F72DBA54}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D9083CE-8758-4704-BA57-3C891D7452BD}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AC5B6CDA-8F90-4740-9A8C-28AC5D3C73FE}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{48586425-6BB7-4F51-8DC6-38C88E3EBB58}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{48586425-6BB7-4F51-8DC6-38C88E3EBB58}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{93A3111F-4F74-4ED8-895E-D9708497629E}]

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B3595550-5007-4AEB-BB04-D00E62E836A8}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F0786343-938E-456B-8798-DE7EEC08F820}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7D4F1959-3F72-49D5-8E59-F02F8AA6815D}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKCU\Software\Myfree Codec

Key Deleted : HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z

Key Deleted : HKLM\Software\AVG Security Toolbar

Key Deleted : HKLM\Software\InfoAtoms

Key Deleted : HKLM\Software\Myfree Codec

Key Deleted : HKLM\Software\VideoDownloadConverter_4z

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F4E33CE5-A7AB-4F68-A7E7-F0AA84EF2D9E}

Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer

Key Deleted : [x64] HKLM\SOFTWARE\Updater By Sweetpacks

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OptimizerPro

Key Deleted : HKLM\Software\Classes\Installer\Features\5EC33E4FBA7A86F47A7E0FAA48FED2E9

Key Deleted : HKLM\Software\Classes\Installer\Products\5EC33E4FBA7A86F47A7E0FAA48FED2E9

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Mozilla Firefox v20.0.1 (en-US)

[ File : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\prefs.js ]

Line Deleted : user_pref("extensions.crossriderapp2258.2258.backgroundjs", "\n\n//\n");

Line Deleted : user_pref("extensions.crossriderapp2258.2258.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.started||_GPL_PLUGIN.prepare({pid:21,baseCDN:\"contentcache-a.akamaihd.net[...]

Line Deleted : user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIEWindow=false;if(typeof window!==\"undefined\"&&typeof window.navigator[...]

Line Deleted : user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _firefoxVersion!==\"undefined\"&&_firefoxVersion>14)&&type[...]

Line Deleted : user_pref("extensions.crossriderapp2258.2258.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j){return(typeof j===\"object\"&&j!==null);};var b=function(j){return(![...]

Line Deleted : user_pref("extensions.crossriderapp2258.2258.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigator!==\"undefined\"&&typeof navigator.userAgent!==\"undefined\"){(functi[...]

Line Deleted : user_pref("extensions.crossriderapp2258.2258.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";var a=function(){var d=function(g){if(g===true){unsafeWindow.appAPI=ap[...]

Line Deleted : user_pref("extensions.enabledAddons", "2vffxtbr%40DailyBibleGuide.com:5.3.1.13538,ascsurfingprotection%40iobit.com:1.0,crossriderapp2258%40crossrider.com:0.91.143,DeviceDetection%40logitech.com:1.23.0[...]

-\\ Google Chrome v31.0.1650.57

[ File : C:\Users\webberk\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [20346 octets] - [03/12/2013 10:31:34]

AdwCleaner[s0].txt - [20098 octets] - [03/12/2013 10:33:27]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [20159 octets] ##########

Maniac · December 3, 2013

Thanks for your information! I will fix this in my instructions.

Well done!

Step 1

Download TFC to your desktop

Open the file and close any other windows.
It will close all programs itself when run, make sure to let it run uninterrupted.
Click the Start button to begin the process. The program should not take long to finish its job
Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Step 2

Please scan your machine with ESET OnlineScan

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer.
  Save it to your Desktop.
- Double click on the to download the ESET Smart Installer. icon on your Desktop.
Check "YES, I accept the Terms of Use."
Click the Start button.
Accept any security warnings from your browser.
Under Scan Settings, check "Scan Archives" and "Remove found threats"
Click Advanced settings and select the following:
- Scan potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth technology
ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
When the scan completes, click List Threats
Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
Click the Back button.
Click the Finish button.

krwebber53 · December 5, 2013

Looks like that fixed the problem. Thanks for your help. Apprecia$ion coming your way. Here is the last scan results FYI.

C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\IncrediMail_MediaBar_2\ldrtbInc2.dll a variant of Win32/Toolbar.Conduit.P application

C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\IncrediMail_MediaBar_2\tbInc2.dll a variant of Win32/Toolbar.Conduit.B application

C:\AdwCleaner\Quarantine\C\Users\admin\AppData\LocalLow\IncrediMail_MediaBar_2\ldrtbInc2.dll.vir a variant of Win32/Toolbar.Conduit.P application cleaned by deleting - quarantined

C:\AdwCleaner\Quarantine\C\Users\admin\AppData\LocalLow\IncrediMail_MediaBar_2\tbInc2.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined

C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\LocalLow\IncrediMail_MediaBar_2\ldrtbInc2.dll.vir a variant of Win32/Toolbar.Conduit.P application cleaned by deleting - quarantined

C:\AdwCleaner\Quarantine\C\Users\Administrator\AppData\LocalLow\IncrediMail_MediaBar_2\tbInc2.dll.vir a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined

C:\AdwCleaner\Quarantine\C\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\50ec7f819e11e@50ec7f819e157.com\content\bg.js.vir Win32/Adware.MultiPlug.H application cleaned by deleting - quarantined

C:\AdwCleaner\Quarantine\C\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\50eeee4553a13@50eeee4553a4c.com\content\bg.js.vir Win32/Adware.MultiPlug.H application cleaned by deleting - quarantined

C:\AdwCleaner\Quarantine\C\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\Extensions\g45ga@qxkwa.com\content\bg.js.vir Win32/Adware.MultiPlug.H application cleaned by deleting - quarantined

C:\Qoobox\Quarantine\C\Program Files (x86)\I Want This\I Want This.dll.vir Win32/Toolbar.CrossRider application cleaned by deleting - quarantined

C:\Qoobox\Quarantine\C\Program Files (x86)\I Want This\I Want This.exe.vir a variant of Win32/Toolbar.CrossRider.E application cleaned by deleting - quarantined

C:\Qoobox\Quarantine\C\Program Files (x86)\I Want This\I Want ThisGui.exe.vir a variant of Win32/Toolbar.CrossRider.F application cleaned by deleting - quarantined

C:\Qoobox\Quarantine\C\Program Files (x86)\I Want This\Uninstall.exe.vir a variant of Win32/Toolbar.CrossRider.E application cleaned by deleting - quarantined

C:\Users\webberk\Documents\PDFdownload (1).exe Win32/InstalleRex.E application cleaned by deleting - quarantined

C:\Users\webberk\Documents\PDFdownload.exe Win32/InstalleRex.E application cleaned by deleting - quarantined

C:\Windows\System32\config\systemprofile\AppData\LocalLow\IncrediMail_MediaBar_2\ldrtbInc2.dll a variant of Win32/Toolbar.Conduit.P application cleaned by deleting - quarantined

C:\Windows\System32\config\systemprofile\AppData\LocalLow\IncrediMail_MediaBar_2\tbInc2.dll a variant of Win32/Toolbar.Conduit.B application cleaned by deleting - quarantined

E:\Downloads\ActualWindowsUpgrade.exe Win32/InstalleRex.E application cleaned by deleting - quarantined

E:\Downloads\cbsidlm-cbsi134-Starry_Night_Backyard_ESD-SEO-10066547.exe a variant of Win32/CNETInstaller.B application cleaned by deleting - quarantined

E:\Downloads\cbsidlm-tr1_13-Kindle_for_PC-ORG-75185974.exe Win32/DownloadAdmin.G application cleaned by deleting - quarantined

E:\Downloads\FreeYouTubeDownloaderInstaller.exe Win32/Somoto.A application cleaned by deleting - quarantined

E:\Downloads\MediaInfo_GUI_0.7.62_Windows.exe Win32/OpenCandy application cleaned by deleting - quarantined

E:\Downloads\setup(1).exe Win32/InstalleRex.E application cleaned by deleting - quarantined

E:\Downloads\Setup.exe Win32/DomaIQ.L application cleaned by deleting - quarantined

E:\Downloads\SetupImgBurn_2.5.7.0.exe a variant of Win32/Bundled.Toolbar.Ask application cleaned by deleting - quarantined

E:\Downloads\SoftonicDownloader_for_nasa-world-wind.exe a variant of Win32/SoftonicDownloader.E application cleaned by deleting - quarantined

E:\Downloads\SoftonicDownloader_for_stellarium.exe a variant of Win32/SoftonicDownloader.E application cleaned by deleting - quarantined

E:\Downloads\SoftonicDownloader_for_winstars.exe a variant of Win32/SoftonicDownloader.E application cleaned by deleting - quarantined

E:\Downloads\VideoDownloadConvert.exe Win32/AdInstaller application cleaned by deleting - quarantined

E:\Downloads\ZoGoDJtF Win32/DomaIQ.L application cleaned by deleting - quarantined

krwebber53 · December 5, 2013

Looks like I spoke too soon. Original problem is back. I went all day on 12/04/2013 without the IP Block, but on 12/05/2013 at 5:21 AM it started again.

Here from 12/05 protection log is the first couple of lines.

2013/12/05 05:21:34 -0600 LENOVO64 webberk IP-BLOCK 162.210.192.14 (Type: outgoing, Port: 53266, Process: svchost.exe)

2013/12/05 05:22:38 -0600 LENOVO64 webberk IP-BLOCK 162.210.192.14 (Type: outgoing, Port: 53273, Process: svchost.exe)

I was not even using this computer at that time and yet the error started occurring. I will be away from my computer until next Monday, but before then will go back through the steps above. Any additional advice you can give is greatly appreciated.

Thanks, Ken

krwebber53 · December 5, 2013

You can hold off doing anything with this issue for now. I realized I had gone back to a restore point earlier in Dec in an effort to correct a device driver issue with this system. After I have gone through all the steps as before, I will post the current status. Hopefully I will have the hardware issue and this malware/virus issue taken care of by then. Whatever the outcome, I will post again next Monday.

I certainly appreciate your assistance in this issue.

Ken

Maniac · December 5, 2013

Thank you, Ken!

I would like to know what is the current state before send you further instructions. Let me know how are things there when you return.

Thanks!

AdvancedSetup · December 10, 2013

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

AdvancedSetup · December 11, 2013

Topic reopened per user request.

Maniac · December 11, 2013

What's new there?

krwebber53 · December 12, 2013

I have rerun all the utility programs - ADW, DDS JRT. All show system is clean, but I am still getting the IP Block message from MalwareBytes. Here are the last logs:

AdwCleaner

# AdwCleaner v3.014 - Report created 10/12/2013 at 13:27:55

# Updated 01/12/2013 by Xplode

# Operating System : Windows 7 Professional Service Pack 1 (64 bits)

# Username : webberk - LENOVO64

# Running from : C:\Users\webberk\Desktop\AdwCleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Mozilla Firefox v20.0.1 (en-US)

[ File : C:\Users\webberk\AppData\Roaming\Mozilla\Firefox\Profiles\knmvngqb.default\prefs.js ]

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\webberk\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [20346 octets] - [03/12/2013 10:31:34]

AdwCleaner[R1].txt - [1100 octets] - [03/12/2013 11:29:38]

AdwCleaner[R2].txt - [1321 octets] - [05/12/2013 11:36:12]

AdwCleaner[R3].txt - [1281 octets] - [10/12/2013 13:14:22]

AdwCleaner[s0].txt - [20368 octets] - [03/12/2013 10:33:27]

AdwCleaner[s1].txt - [1354 octets] - [05/12/2013 11:37:39]

AdwCleaner[s2].txt - [1168 octets] - [10/12/2013 13:27:55]

########## EOF - C:\AdwCleaner\AdwCleaner[s2].txt - [1228 octets] ##########

Attach

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Professional

Boot Device: \Device\HarddiskVolume2

Install Date: 11/30/2009 2:09:53 PM

System Uptime: 12/10/2013 1:30:37 PM (0 hours ago)

.

Motherboard: LENOVO | | LENOVO

Processor: Intel® Core2 Duo CPU E6750 @ 2.66GHz | LGA 775 | 2667/333mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 898 GiB total, 728.872 GiB free.

D: is CDROM ()

E: is FIXED (NTFS) - 2794 GiB total, 2575.122 GiB free.

L: is FIXED (NTFS) - 898 GiB total, 728.872 GiB free.

X: is NetworkDisk (NTFS) - 800 GiB total, 36.75 GiB free.

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e96f-e325-11ce-bfc1-08002be10318}

Description: HID-compliant mouse

Device ID: HID\VID_046D&PID_C52B&MI_01&COL01\7&79E838D&0&0000

Manufacturer: Microsoft

Name: HID-compliant mouse

PNP Device ID: HID\VID_046D&PID_C52B&MI_01&COL01\7&79E838D&0&0000

Service: mouhid

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Cisco Systems VPN Adapter for 64-bit Windows

Device ID: ROOT\NET\0000

Manufacturer: Cisco Systems

Name: Cisco Systems VPN Adapter for 64-bit Windows

PNP Device ID: ROOT\NET\0000

Service: CVirtA

.

==== System Restore Points ===================

.

RP660: 11/13/2013 6:55:38 PM - Scheduled Checkpoint

RP661: 11/15/2013 9:03:53 AM - Windows Modules Installer

RP662: 11/15/2013 9:31:22 AM - Windows Update

RP663: 11/18/2013 9:37:31 AM - Windows Update

RP664: 11/25/2013 7:19:37 PM - Scheduled Checkpoint

RP665: 12/3/2013 12:00:09 AM - Scheduled Checkpoint

RP666: 12/3/2013 9:40:03 AM - Removed IObit Apps Toolbar v8.3.

RP667: 12/3/2013 9:49:47 AM - Removed IncrediMail.

RP668: 12/4/2013 12:17:12 PM - Restore Operation

.

==== Installed Programs ======================

.

Update for Microsoft Office 2007 (KB2508958)

7-Zip 9.20 (x64 edition)

Actual Window Manager 8.0.3

ACUCOBOL-GT Thin Client 8.1.2

ACUCOBOL-GT Thin Client 8.1.3

ACUCOBOL-GT Thin Client 9.1.2

Adobe Acrobat X Pro

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader XI (11.0.05)

Advanced SystemCare 6

Agent Ransack 2010 (64-bit)

Akamai NetSession Interface

Android SDK Tools

AnswerWorks 5.0 English Runtime

AnyDVD

AnyMedia Player 3.4.0

Apple Application Support

Apple Mobile Device Support

Apple Software Update

ASPCA Reminder by We-Care.com v4.1.22.1

Aspi Installer

Audacity 2.0.3

Audible Download Manager

Aura DVD Copy 1.3.2

Aura DVD Ripper for iPod 1.3.5

Aura DVD Ripper Professional 1.3.9

Aura Flash to Video Converter 1.1.0

Aura Software Manager 1.0.3

Aura Video Converter 1.6.0

Aura Video Converter Professional 1.3.9

Aura Video Editor 1.0.8

Aura YouTube Downloader 1.0.8

Auslogics Duplicate File Finder

AVG 2014

AVS Audio Converter 7

AVS Audio Editor 7.1

AVS Audio Recorder version 4.0

AVS Cover Editor 2.0.1.3

AVS Disc Creator 5

AVS Document Converter 2.2.3

AVS DVD Copy 4.1.2.283

AVS Image Converter 2.2.2.218

AVS Media Player 4.1.9.95

AVS Photo Editor

AVS Registry Cleaner version 2.2

AVS Ringtone Maker version 1.6

AVS Screen Capture version 2.0.1

AVS Update Manager 1.0

AVS Video Converter 8

AVS Video Editor 6

AVS Video Recorder 2.5

AVS Video ReMaker 4.1.1.144

AVS4YOU Software Navigator 1.4

Belarc Advisor 7.2

Bible Search Pro

BibleCodesPredictionsSetup version 1.0

BibleReader

Bing Bar

Bing Maps 3D

Bonjour

CCH Small Firm Services (xulRunner)

CCleaner

CD to WAV and MP3 Ripper

Cisco Connect

Cisco Systems VPN Client 5.0.07.0290

Cisco WebEx Meetings

Citrix Presentation Server Client

Client32

Clientele

CloneDVD2

CommandTRADE

Compare and Merge 2.3

Desktop Icon Position Saver (64-bit)

Digsby

DIRECTV2PC Playback Advisor

DisplayLink Core Software

DisplayLink Graphics

DisplayLink iPad Software

Dropbox

DVD-Cloner V9.70 Build 1115

e-Sword

e-Sword Bible Screen Saver

EDI File Editor

Epicor Clientele Loader 7.3.6 Ctelwin

eReg

ESET Online Scanner v3