| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: DuckDuckGo läßt sich nicht enfernenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
02.09.2013, 19:48
| #1 | |
| /// TB-Ausbilder   |  DuckDuckGo läßt sich nicht enfernen Servus, Zitat:
 |
|
02.09.2013, 20:10
| #2 | |
 | DuckDuckGo läßt sich nicht enfernenZitat:
und weiter geht's: Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 21:14 on 02/09/2013 by ADMIN
Administrator - Elevation successful
========== filefind ==========
Searching for "*Ask.com*"
No files found.
Searching for "*Ask Toolbar*"
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Scheduled Update for Ask Toolbar.vir --a---- 3808 bytes [18:53 16/09/2012] [21:56 07/02/2013] CBFD53DFDC6AE7B4F90AD0CC6F353BF8
Searching for "*Ask Search*"
No files found.
Searching for "*SoftonicDownloader*"
No files found.
Searching for "*Conduit*"
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll --a---- 1207392 bytes [10:43 06/12/2012] [10:43 06/12/2012] C963B2DECF0872C4A79D4E5E97062E8C
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt --a---- 166 bytes [20:38 20/12/2010] [20:38 20/12/2010] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl --a---- 148 bytes [20:38 20/12/2010] [20:38 20/12/2010] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt --a---- 136 bytes [20:38 20/12/2010] [20:38 20/12/2010] 4822F1CBA7EE2F77496FDCE234D32C20
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif --a---- 173 bytes [20:38 20/12/2010] [20:38 20/12/2010] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG --a---- 255 bytes [20:38 20/12/2010] [20:38 20/12/2010] AF3A51D0B8D6F04EE33307A654560DBE
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml --a---- 931 bytes [20:38 20/12/2010] [20:38 20/12/2010] 27321E5730943A3A73EA8699E9EBB540
C:\Users\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml --a---- 182 bytes [20:38 20/12/2010] [20:38 20/12/2010] 09537830AF4F5ED99783297FA09DC218
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1006347_1002062_DE.xml --a---- 184 bytes [12:14 14/01/2011] [12:14 14/01/2011] 97113968FFCE93788CE025CD390A27C1
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml --a---- 182 bytes [14:15 26/12/2010] [14:15 26/12/2010] 09537830AF4F5ED99783297FA09DC218
C:\Users\xxxxxxx\AppData\LocalLow\Conduit\Toolbar\Facebook\http___facebook_conduit-services_com_Settings_ashx_locale=de-de&browserType=IE&toolbarVersion=5_5_3_2.xml --a---- 11092 bytes [12:14 14/01/2011] [18:12 02/04/2011] DFE1156D289BCE111E7C1EEA48E3EC78
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062498888125000_png.png --a---- 509 bytes [12:14 14/01/2011] [12:14 14/01/2011] 40ECBDFF6DF6593ACDEAD0021DCC7336
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062499232812500_png.png --a---- 670 bytes [12:14 14/01/2011] [12:14 14/01/2011] D9CE725CB6F7C294C96BDF01D653A8D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634072035335451250_png.png --a---- 623 bytes [12:14 14/01/2011] [12:14 14/01/2011] 0A4D5304331171BE0EBAA12DB0706726
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084042422158750_png.png --a---- 1255 bytes [12:14 14/01/2011] [12:14 14/01/2011] 9E8DF6405FF11276857592FE66436A9E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084971246361250_png.png --a---- 1526 bytes [12:14 14/01/2011] [12:14 14/01/2011] 7BA55E9BB92E4627EA667C7E8787B35C
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16blue_gif-rss16Images-633988161463742500_gif.gif --a---- 427 bytes [12:14 14/01/2011] [12:14 14/01/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16blue_gif-rss16Images-633988162125930000_gif.gif --a---- 427 bytes [12:14 14/01/2011] [12:14 14/01/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16green_gif-rss16Images-633988159593125000_gif.gif --a---- 428 bytes [12:14 14/01/2011] [12:14 14/01/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16green_gif-rss16Images-633988160488906250_gif.gif --a---- 428 bytes [12:14 14/01/2011] [12:14 14/01/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16grey_gif-rss16Images-633988160722031250_gif.gif --a---- 434 bytes [12:14 14/01/2011] [12:14 14/01/2011] 0BADAB39E32A083649569D477A58E5EC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_b7889fd7-df2c-48c3-bd9e-8456e2016654Rss-rss01x16_gif-rss16Images-633988153360618750_gif.gif --a---- 433 bytes [12:14 14/01/2011] [12:14 14/01/2011] 310391CF3C98762DE1251AC2FED42D16
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_Menu-silkset_accept_gif-Silk_1-634051179887806250_gif.gif --a---- 403 bytes [12:14 14/01/2011] [12:14 14/01/2011] 87B062CE740BE13817F46B8F381E8A2B
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png --a---- 705 bytes [12:14 14/01/2011] [12:14 14/01/2011] 70B83DCDF7A6FA34240E1AA1D23EE535
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png --a---- 746 bytes [12:14 14/01/2011] [12:14 14/01/2011] 2AE805114215925E00858FD2FEFF1439
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png --a---- 669 bytes [12:14 14/01/2011] [12:14 14/01/2011] 6CFEA2D0DB786FDB4D72C1C1DE036822
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png --a---- 338 bytes [12:14 14/01/2011] [12:14 14/01/2011] DB45ACA16C515F2FD8CB3B6F5E4FC386
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png --a---- 545 bytes [12:14 14/01/2011] [12:14 14/01/2011] 6EB69BFCBFD422247C103705B532BFE1
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png --a---- 514 bytes [12:14 14/01/2011] [12:14 14/01/2011] 7F396C3A400239B9B66DEC2D503D86BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png --a---- 3355 bytes [12:14 14/01/2011] [12:14 14/01/2011] EC261A170D34BE434129E71B9C2C0408
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png --a---- 594 bytes [12:14 14/01/2011] [12:14 14/01/2011] 62C86296694EF7F41D380804A58EF5CA
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png --a---- 415 bytes [12:14 14/01/2011] [12:14 14/01/2011] E42D284CC0436B66C1DB4AAFFCCC1957
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png --a---- 461 bytes [12:14 14/01/2011] [12:14 14/01/2011] B4AEAC6600360BC4148538F716453AAC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png --a---- 699 bytes [12:14 14/01/2011] [12:14 14/01/2011] 640E17444F44717CA5039BCB7FD3551E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif --a---- 403 bytes [12:14 14/01/2011] [12:14 14/01/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif --a---- 414 bytes [12:14 14/01/2011] [12:14 14/01/2011] A9E001CBC00B06B121DFBC80707F5298
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif --a---- 278 bytes [12:14 14/01/2011] [12:14 14/01/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif --a---- 405 bytes [12:14 14/01/2011] [12:14 14/01/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_home_page_gif.gif --a---- 405 bytes [12:14 14/01/2011] [12:14 14/01/2011] AA39D8A6B65E208901EBA9F3D4728D3E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif --a---- 361 bytes [12:14 14/01/2011] [12:14 14/01/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif --a---- 425 bytes [12:14 14/01/2011] [12:14 14/01/2011] 6427565C7105DC497287866100F260BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif --a---- 381 bytes [12:14 14/01/2011] [12:14 14/01/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif --a---- 351 bytes [12:14 14/01/2011] [12:14 14/01/2011] C3EBA0237D68F665AF6D663906221092
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_tell_a_friend_gif.gif --a---- 392 bytes [12:14 14/01/2011] [12:14 14/01/2011] 5E7217A3357550F9749A095631F51015
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif --a---- 399 bytes [12:14 14/01/2011] [12:14 14/01/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif --a---- 405 bytes [12:14 14/01/2011] [12:14 14/01/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif --a---- 371 bytes [12:14 14/01/2011] [12:14 14/01/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif --a---- 322 bytes [12:14 14/01/2011] [12:14 14/01/2011] 948781E4B6478290050ECA4423B89B1E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_site_search_gif.gif --a---- 625 bytes [12:14 14/01/2011] [12:14 14/01/2011] C23D4DB18B6BB4F38ECBA57AD414A5CF
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif --a---- 606 bytes [12:14 14/01/2011] [12:14 14/01/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif --a---- 240 bytes [12:14 14/01/2011] [12:14 14/01/2011] AE5A39669C623937C0839E079E1088D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_videosurf_gif.gif --a---- 1035 bytes [12:14 14/01/2011] [12:14 14/01/2011] 7BF61D475BF289E4900EBA788DED51C3
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif --a---- 335 bytes [18:12 02/04/2011] [18:12 02/04/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16blue_gif-rss16Images-633988161463742500_gif.gif --a---- 427 bytes [18:12 02/04/2011] [18:12 02/04/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16blue_gif-rss16Images-633988162125930000_gif.gif --a---- 427 bytes [18:12 02/04/2011] [18:12 02/04/2011] DE38BD848E7E916050B57C8FF00C9D80
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16green_gif-rss16Images-633988159593125000_gif.gif --a---- 428 bytes [11:38 02/04/2011] [11:38 02/04/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16green_gif-rss16Images-633988160488906250_gif.gif --a---- 428 bytes [11:38 02/04/2011] [11:38 02/04/2011] FC707EC713D600572DE988236BDD3A84
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16grey_gif-rss16Images-633988160722031250_gif.gif --a---- 434 bytes [18:12 02/04/2011] [18:12 02/04/2011] 0BADAB39E32A083649569D477A58E5EC
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_54_b7889fd7-df2c-48c3-bd9e-8456e2016654_Images_Rss-rss01x16_gif-rss16Images-633988153360618750_gif.gif --a---- 433 bytes [11:38 02/04/2011] [11:38 02/04/2011] 310391CF3C98762DE1251AC2FED42D16
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_MarketPlace_b7_654_b7889fd7-df2c-48c3-bd9e-8456e2016654_Appearance_634140226209507502_png.png --a---- 1278 bytes [12:14 14/01/2011] [12:14 14/01/2011] FAE6AA1F72FCBCD4D1082D4D06265B7A
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitAutoCompleteSearch.xpt --a---- 166 bytes [21:49 20/12/2010] [21:49 20/12/2010] 806EA6CC4DCBF88A20AA3331BCDC9918
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.idl --a---- 148 bytes [21:49 20/12/2010] [21:49 20/12/2010] 0A9AAEB4839D78CB03740D8A8EF0D863
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components\ConduitToolbar.xpt --a---- 136 bytes [21:49 20/12/2010] [21:49 20/12/2010] 4822F1CBA7EE2F77496FDCE234D32C20
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.gif --a---- 173 bytes [21:49 20/12/2010] [21:49 20/12/2010] 225B6898AE7D6E0CE88B3FE57BD750F2
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.PNG --a---- 255 bytes [21:49 20/12/2010] [21:49 20/12/2010] AF3A51D0B8D6F04EE33307A654560DBE
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin\conduit.xml --a---- 931 bytes [21:49 20/12/2010] [21:49 20/12/2010] 27321E5730943A3A73EA8699E9EBB540
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\DOMStore\XCZY1X32\storage.conduit[1].xml --a---- 13 bytes [21:16 11/11/2011] [21:16 11/11/2011] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\contextmenu_toolbar_conduit-services_com[1].txt --a---- 5624 bytes [21:16 11/11/2011] [21:16 11/11/2011] 008A9ED67B706E1C56569441ADD9BB72
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\settings_toolbar_conduit-services_com[1].txt --a---- 30583 bytes [21:16 11/11/2011] [21:16 11/11/2011] 2CC546F241698F48F9C760EAFBADDBDD
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M\translation_toolbar_conduit-services_com[1].txt --a---- 101383 bytes [21:16 11/11/2011] [21:16 11/11/2011] 334D941427950794DB906645975AFF25
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\appsmetadata_toolbar_conduit-services_com[1].txt --a---- 81 bytes [21:16 11/11/2011] [21:16 11/11/2011] EB6EEE69B578EF10A521BFF0F98DA037
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\contextmenu_toolbar_conduit-services_com[1].txt --a---- 5625 bytes [21:16 11/11/2011] [21:16 11/11/2011] 9270590F46BFBAF0C0247EDF65291797
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\contextmenu_toolbar_conduit-services_com[2].txt --a---- 7158 bytes [21:16 11/11/2011] [21:16 11/11/2011] 975C952D94CC90E3174437C36DD068BF
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA\contextmenu_toolbar_conduit-services_com[1].txt --a---- 6691 bytes [21:16 11/11/2011] [21:16 11/11/2011] 22C13F28D75B95B054B566E3EFD671B6
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_1006347_1002062_DE.xml --a---- 184 bytes [21:16 11/11/2011] [21:16 11/11/2011] 76C284659F77056211BD059E8BE790DA
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit\Toolbar\Facebook\http___facebook_conduit-services_com_Settings_ashx_locale=de-de&browserType=IE&toolbarVersion=6_3_8_0.xml --a---- 11092 bytes [21:16 11/11/2011] [21:16 11/11/2011] DFE1156D289BCE111E7C1EEA48E3EC78
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062498888125000_png.png --a---- 509 bytes [21:16 11/11/2011] [21:16 11/11/2011] 40ECBDFF6DF6593ACDEAD0021DCC7336
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634062499232812500_png.png --a---- 670 bytes [21:16 11/11/2011] [21:16 11/11/2011] D9CE725CB6F7C294C96BDF01D653A8D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634084042422158750_png.png --a---- 1255 bytes [21:16 11/11/2011] [21:16 11/11/2011] 9E8DF6405FF11276857592FE66436A9E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634449636811350000_png.png --a---- 529 bytes [21:16 11/11/2011] [21:16 11/11/2011] 810FDF4A283DB1CFFFF73828531AC0D7
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450328731600000_gif.gif --a---- 751 bytes [21:16 11/11/2011] [21:16 11/11/2011] 37EFC5213E8D077F0D53566FCAB2F422
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450329932693750_png.png --a---- 543 bytes [21:16 11/11/2011] [21:16 11/11/2011] 79525287B3FA7899A4F6F9DA3961B984
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_634450333556443750_gif.gif --a---- 779 bytes [21:16 11/11/2011] [21:16 11/11/2011] 94223BBE299C4CB066F1825D6873D9D4
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_images_634450514020931251_24PX_png.png --a---- 1245 bytes [21:16 11/11/2011] [21:16 11/11/2011] 7872C86EF94AFD26D7D5CB7B3035FE56
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_50_261_CT2613550_Images_Menu-silkset_accept_gif-Silk_1-634450335085812500_gif.gif --a---- 778 bytes [21:16 11/11/2011] [21:16 11/11/2011] 77BEF4D5D2C3A1919EBCE6A325F3AB66
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_About_png.png --a---- 821 bytes [21:16 11/11/2011] [21:16 11/11/2011] 99D5F75C338F2A877CBF891E0F18746E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Browse_png.png --a---- 729 bytes [21:16 11/11/2011] [21:16 11/11/2011] F2291FAB46ED9291A1A2FFE9F88E9D84
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Contact_png.png --a---- 531 bytes [21:16 11/11/2011] [21:16 11/11/2011] A847C5F6CE2C700048749892DD2E0619
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Hide_png.png --a---- 669 bytes [21:16 11/11/2011] [21:16 11/11/2011] FED9E00C76F647EE6A0B7CC684C89F0C
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_LikeIcon_png.png --a---- 263 bytes [21:16 11/11/2011] [21:16 11/11/2011] 36BD416D16391EFAAAFB2C3C54EAE986
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_MoreFromPublisher_png.png --a---- 734 bytes [21:16 11/11/2011] [21:16 11/11/2011] 943ADFD9E0DF1507F7BC419802BF4303
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_More_png.png --a---- 562 bytes [21:16 11/11/2011] [21:16 11/11/2011] 36C6FB9C84D4AF5C5D7C5B277A0E4A01
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Options_png.png --a---- 493 bytes [21:16 11/11/2011] [21:16 11/11/2011] 275C9DA2D536F18F528C80E050C3D705
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Privacy_png.png --a---- 706 bytes [21:16 11/11/2011] [21:16 11/11/2011] 3AD88BD8E832DA39FAAEDF07AD595F94
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Refresh_png.png --a---- 674 bytes [21:16 11/11/2011] [21:16 11/11/2011] 650731EEF807C292E699779B12CBE552
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_Conduit_com_bankImages_ConduitEngine_ContextMenu_Upgrade_png.png --a---- 607 bytes [21:16 11/11/2011] [21:16 11/11/2011] 9B4D914888BCFFCBAE6757A0E450551C
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Events_png.png --a---- 705 bytes [21:16 11/11/2011] [21:16 11/11/2011] 70B83DCDF7A6FA34240E1AA1D23EE535
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Friends_png.png --a---- 746 bytes [21:16 11/11/2011] [21:16 11/11/2011] 2AE805114215925E00858FD2FEFF1439
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Groups_png.png --a---- 669 bytes [21:16 11/11/2011] [21:16 11/11/2011] 6CFEA2D0DB786FDB4D72C1C1DE036822
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Home_png.png --a---- 338 bytes [21:16 11/11/2011] [21:16 11/11/2011] DB45ACA16C515F2FD8CB3B6F5E4FC386
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Inbox_png.png --a---- 545 bytes [21:16 11/11/2011] [21:16 11/11/2011] 6EB69BFCBFD422247C103705B532BFE1
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Logout_png.png --a---- 514 bytes [21:16 11/11/2011] [21:16 11/11/2011] 7F396C3A400239B9B66DEC2D503D86BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Photos_png.png --a---- 3355 bytes [21:16 11/11/2011] [21:16 11/11/2011] EC261A170D34BE434129E71B9C2C0408
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Profile_png.png --a---- 594 bytes [21:16 11/11/2011] [21:16 11/11/2011] 62C86296694EF7F41D380804A58EF5CA
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Settings_png.png --a---- 415 bytes [21:16 11/11/2011] [21:16 11/11/2011] E42D284CC0436B66C1DB4AAFFCCC1957
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Share_png.png --a---- 461 bytes [21:16 11/11/2011] [21:16 11/11/2011] B4AEAC6600360BC4148538F716453AAC
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_bankImages_FaceBook_Status_png.png --a---- 699 bytes [21:16 11/11/2011] [21:16 11/11/2011] 640E17444F44717CA5039BCB7FD3551E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_ClientImages_radio_gif.gif --a---- 419 bytes [21:17 11/11/2011] [21:17 11/11/2011] 01B83C91554738F6AFFB7895BBBA73FB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_about_gif.gif --a---- 403 bytes [21:16 11/11/2011] [21:16 11/11/2011] EC3C2B4E0DEC4D880BAFF88ABBF94188
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_clear_history_gif.gif --a---- 414 bytes [21:16 11/11/2011] [21:16 11/11/2011] A9E001CBC00B06B121DFBC80707F5298
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_contact_gif.gif --a---- 278 bytes [21:16 11/11/2011] [21:16 11/11/2011] 15DEF39E438E807E2F0E22D44FDC7FB7
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_help_gif.gif --a---- 405 bytes [21:16 11/11/2011] [21:16 11/11/2011] 995595D4C685D659E8F03CD0A287EDDF
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_options_gif.gif --a---- 361 bytes [21:16 11/11/2011] [21:16 11/11/2011] 464E244E7E2F27FB85E0C3AB69D72104
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_privacy_gif.gif --a---- 425 bytes [21:16 11/11/2011] [21:16 11/11/2011] 6427565C7105DC497287866100F260BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_refresh_gif.gif --a---- 381 bytes [21:16 11/11/2011] [21:16 11/11/2011] AE7C9F67594A84B096D225601ACB0B2A
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_shrink_gif.gif --a---- 351 bytes [21:16 11/11/2011] [21:16 11/11/2011] C3EBA0237D68F665AF6D663906221092
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_main_menu_upgrade_gif.gif --a---- 399 bytes [21:16 11/11/2011] [21:16 11/11/2011] 8BE02D510B4B2E05AD2611B1E9A0BD56
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_images_search_gif.gif --a---- 405 bytes [21:16 11/11/2011] [21:16 11/11/2011] 66018EAE0906C9831A821CAE5D1089BB
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_news_icon_gif.gif --a---- 371 bytes [21:16 11/11/2011] [21:16 11/11/2011] 84896837EDB1A78C14DB6A2F3A0AEE3A
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_search_icon_gif.gif --a---- 322 bytes [21:16 11/11/2011] [21:16 11/11/2011] 948781E4B6478290050ECA4423B89B1E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_searchengines_softonic_gif.gif --a---- 606 bytes [21:16 11/11/2011] [21:16 11/11/2011] 2A1D4FB45F62D3D260F2134228FAB05E
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_tfd_gif.gif --a---- 240 bytes [21:16 11/11/2011] [21:16 11/11/2011] AE5A39669C623937C0839E079E1088D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___storage_conduit_com_images_SearchEngines_video_gif.gif --a---- 335 bytes [21:16 11/11/2011] [21:16 11/11/2011] 766433EF38BDA83C4FD4932027A4B9D5
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\CacheIcons\http___weather_conduit_com_images_weather_Default_sunny_night_gif.gif --a---- 204 bytes [21:17 11/11/2011] [21:17 11/11/2011] 5EBD213E8A460652C883CBF68C152B5B
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=GottenApps&locale=de-de.xml --a---- 7158 bytes [21:16 11/11/2011] [21:16 11/11/2011] 975C952D94CC90E3174437C36DD068BF
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=OtherApps&locale=de-de.xml --a---- 5625 bytes [21:16 11/11/2011] [21:16 11/11/2011] 9270590F46BFBAF0C0247EDF65291797
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=SharedApps&locale=de-de.xml --a---- 6691 bytes [21:16 11/11/2011] [21:16 11/11/2011] 22C13F28D75B95B054B566E3EFD671B6
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\ExternalComponent\http___contextmenu_toolbar_conduit-services_com__name=Toolbar&locale=de-de.xml --a---- 5624 bytes [21:16 11/11/2011] [21:16 11/11/2011] 008A9ED67B706E1C56569441ADD9BB72
Searching for "*Babylon*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com\defaults\preferences\babylon.js.vir --a---- 790 bytes [09:01 25/08/2013] [17:07 23/08/2012] 60B791BE510FEBD82F7B030EEEE4FD7B
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\hanging_gardens_of_babylon.txt --a---- 4180 bytes [16:12 16/10/2010] [14:48 27/08/2004] B273CD535924187A093DC16EB0BE42F6
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\hanging_gardens_of_babylon_battle.txt --a---- 4180 bytes [16:12 16/10/2010] [14:48 27/08/2004] B273CD535924187A093DC16EB0BE42F6
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\overlays\overlay_babylon.cas --a---- 11804 bytes [16:15 16/10/2010] [09:48 04/12/2002] 8448A2CC181D360CC1C5D07BCA4245E3
C:\Program Files (x86)\The Creative Assembly\Rome - Total War\data\settlement_plans\underlays\underlay_babylon.cas --a---- 7777 bytes [16:15 16/10/2010] [09:49 04/12/2002] 36365EBDD546FFD6D478CE4BB9F794DD
C:\Program Files (x86)\Winamp\Plugins\Milkdrop2\presets\stahlregen + geiss + shifter - babylon.milk --a---- 26473 bytes [20:18 28/04/2009] [20:18 28/04/2009] FD56279AD850D3AA87454766302DACF1
C:\Users\ADMIN.Ace\AppData\Roaming\Microsoft\Windows\Recent\Babylon.lnk --a---- 875 bytes [21:31 07/02/2013] [21:31 07/02/2013] 9D836E907EC2492FD6DE8823EF29C016
Searching for "*Crossrider*"
No files found.
Searching for "*ZoneAlarm LTD Toolbar*"
No files found.
Searching for "*DuckDuckGo*"
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml --a---- 10530 bytes [11:30 21/07/2013] [11:30 21/07/2013] A6574189A7EDFCB62C01DA52590E0CF6
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml --a---- 10530 bytes [10:55 31/08/2013] [10:55 31/08/2013] A6574189A7EDFCB62C01DA52590E0CF6
========== folderfind ==========
Searching for "*Ask.com*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Ask.com d------ [09:43 01/09/2013]
Searching for "*Ask Toolbar*"
No folders found.
Searching for "*Ask Search*"
No folders found.
Searching for "*SoftonicDownloader*"
No folders found.
Searching for "*Conduit*"
C:\Users\AppData\LocalLow\Conduit d------ [19:08 03/11/2010]
C:\Users\xxxxxxx\AppData\LocalLow\Conduit d------ [20:12 16/11/2010]
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_CT2613550 d------ [12:14 14/01/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit d------ [21:16 11/11/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_CT2613550 d------ [21:16 11/11/2011]
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit\Repository\conduit_CT2613550_de-de d------ [21:16 11/11/2011]
Searching for "*Babylon*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com d------ [09:43 01/09/2013]
Searching for "*Crossrider*"
No folders found.
Searching for "*ZoneAlarm LTD Toolbar*"
C:\Users\xxxxi\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar d------ [06:26 12/08/2012]
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar d------ [14:40 11/08/2012]
Searching for "*DuckDuckGo*"
No folders found.
========== regfind ==========
Searching for "Ask.com"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\MAPI/IPM.Task]
"PreviewDetails"="prop:*System.DueDate;*System.Task.CompletionStatus;*System.Task.Owner;*System.Keywords"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\Updater\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\assets\oobe\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Ask.com\assets\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\content\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\skin\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\preferences\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\searchplugins\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\skin\ ask_32x.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDF3E992C0908741B7C11F4B4E0F775]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\assets\oobe\b.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B3BC4CF5ECE1F54BBA174C13A1AB907]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\TaskScheduler.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\UpdateTask.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\defaults\preferences\defaults.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEABAA33A5E68374DBF197F2A00CD011]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\searchplugins\askcom.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E656433EAEAD2EB479907D4FE70AA98E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Program Files (x86)\Ask.com\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]
"A28B4D68DEBAA244EB686953B7074FEF"="C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wu.default\extensions\toolbar@ask.com\chrome\content\about.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"HelpLink"="hxxp://about.ask.com/en/docs/about/index.shtml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"Publisher"="Ask.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar\ButtonData\208]
"displayicon"="hxxp://apnwidgets.ask.com/widget/TWCWeather/images/weatherIcons16/alert.png"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar\Macro]
"InstallDir"="C:\Program Files (x86)\Ask.com\"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"URL"="hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=U3&apn_dtid=OSJ000YYDE&apn_uid=1C4D2F40-200D-4D3C-B0BE-7EC20B329ED2&apn_sauid=3189768B-FED8-41C4-9B4B-4CFF582D94F5"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"FaviconURL"="hxxp://www.ask.com/favicon.ico"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com]
Searching for "Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF\InstallProperties]
"DisplayName"="Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEE57F91-46AE-4F46-B09D-97D11ED65F6E}]
"Path"="\Scheduled Update for Ask Toolbar"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar]
Searching for "Ask Search"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7EF54776-F063-4D14-97A6-09FF4BF8935C}]
"DisplayName"="Ask Search"
Searching for "SoftonicDownloader"
No data found.
Searching for "Conduit"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966]
"045F27F206F16624596059B2126D46D0"="C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\iSyncConduit.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966\045F27F206F16624596059B2126D46D0]
"File"="iSyncConduit.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\ChannelsSettings]
"URL"="hxxp://alert.services.conduit.com/channels/?aid=EB_CHANNEL_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\DynamicDialogs]
"URL"="hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Login]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/AlertLogin"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Translation]
"URL"="hxxp://alerts.conduit-services.com/translation/?locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Usage]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/SetAlertUsageRequest"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=6.3.8.0]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"DisplayTrusteSeal"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppRegisterUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppUninstallUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\HostingUsage]
"ServiceUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SearchSettings]
"ServiceUrl"="hxxp://API.search.conduit.com/Settings/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarGrouping]
"ServiceUrl"="hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=GetGroup&ctid=EB_ORIGINAL_CTID&lut=0&locale=EB_OS_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForSB]
"ServiceUrl"="hxxp://settings.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsPublisherForSB]
"ServiceUrl"="hxxp://settings.publisher.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUninstall]
"ServiceUrl"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialog]
"ServiceUrl"="hxxp://UninstallDialog.conduit-services.com/view/view.aspx?ctid=EB_TOOLBAR_ID&version=EB_TOOLBAR_VERSION"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialogUsage]
"ServiceUrl"="hxxp://uninstalldialogusage.toolbar.conduit-services.com/Usage.ashx"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_de-de]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1121525870]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1139983309]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2607372324]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3054915312]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3279788275]
"dbname"="conduit_CT2613550_de-de"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3497721787]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3658808454]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\393351170]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\916659265]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings]
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"URLFromService"="hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"ConduitEnabled"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"URLFromService"="hxxp://search.conduit.com?SearchSource=10&ctid=CT2613550"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"ConduitEnabled"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\RadioPlayer]
"ServerUrl"="hxxp://radio.services.conduit.com/RadioRequest.ctp"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather]
"SearchServerUrl"="hxxp://search.conduit.com/"
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather\de-de]
"Forecast"="<FORECAST><LOCATION_ID>GMXX0007</LOCATION_ID><DAYS><DAY1><DATE>20111111</DATE><DAY>Freitag</DAY><F_MIN>29</F_MIN><F_MAX>40</F_MAX><C_MIN>-1</C_MIN><C_MAX>4</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:20 pm</SUNSET><SUNRISE>7:20 am</SUNRISE><MOONRISE>4:24 pm</MOONRISE><MOONSET>8:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTION><CONDITION_ICON>hxxp://weather.conduit.com/images/weather/Default/sunny_big.gif</CONDITION_ICON></DAY1><DAY2><DATE>20111112</DATE><DAY>Samstag</DAY><F_MIN>29</F_MIN><F_MAX>46</F_MAX><C_MIN>-1</C_MIN><C_MAX>7</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:18 pm</SUNSET><SUNRISE>7:22 am</SUNRISE><MOONRISE>5:05 pm</MOONRISE><MOONSET>9:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTIO
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=5.5.3.2]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"TrusteURL"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Write us link"="mailto:geremy@conduit.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.search.conduit.com/root/EB_TOOLBAR_ID/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\169875435]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2149621329]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\786731368]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\LanguagePack]
"LanguagePackServerUrl"="hxxp://translation.users.conduit.com/Translation.ashx"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ServiceURL"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.5.3.2/tbedrs.dll"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.5.3.2/tbedrs.dll"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Conduit]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Data\Feeds\1002062]
"Url"="hxxp://alerts.conduit-services.com/root/1006347/1002062/DE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPServicesServerName"="hxxp://alert.services.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"ALPClientsServerName"="hxxp://alert.client.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings]
"AutoUpdateServerName"="hxxp://alert.storage.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\ChannelsSettings]
"URL"="hxxp://alert.services.conduit.com/channels/?aid=EB_CHANNEL_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\DynamicDialogs]
"URL"="hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Login]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/AlertLogin"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Translation]
"URL"="hxxp://alerts.conduit-services.com/translation/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Community Alerts\Settings\Services\Usage]
"URL"="hxxp://alert.services.conduit.com/Alerts/AlertServices.asmx/SetAlertUsageRequest"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Conduit\Toolbar\Facebook\InfoService\hxxp://facebook.conduit-services.com/Settings.ashx?locale=de-de&browserType=IE&toolbarVersion=6.3.8.0]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"Server"="users.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"GroupingServerURL"="hxxp://grouping.services.conduit.com/"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"PrivacyPageURL"="hxxp://www.conduit.com/privacy/Default.aspx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"DisplayTrusteSeal"="hxxp://trust.conduit.com/EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UsageURL"="hxxp://usage.users.conduit.com/UsersWebService.asmx/UsersRequests"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"ClientLogURL"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar]
"UninstallURL"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppRegisterUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppRegistration.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsMetaData]
"ServiceUrl"="hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppsSettings]
"ServiceUrl"="hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_COMP_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingFirstTime]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/FirstTime.ashx?current=EB_APPTRACKING_CURRENT_STATE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppTrackingUsage]
"ServiceUrl"="hxxp://tracking.usage.app.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\AppUninstallUsage]
"ServiceUrl"="hxxp://apps.usage.conduit-services.com/AppOperations/AppUninstall.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\BrowserToolbarsInfo]
"ServiceUrl"="hxxp://counting.usage.toolbar.conduit-services.com/usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ClientErrorLog]
"ServiceUrl"="hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx?op=ReportDiagnosticsEvent"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\DynamicDialogs]
"ServiceUrl"="hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\GottenAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\HostingUsage]
"ServiceUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\OtherAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SearchSettings]
"ServiceUrl"="hxxp://API.search.conduit.com/Settings/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\SharedAppsContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarAppUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarComponentUsage]
"ServiceUrl"="hxxp://component.usage.toolbar.conduit-services.com/ToolbarComponentUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarContextMenu]
"ServiceUrl"="hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarGrouping]
"ServiceUrl"="hxxp://grouping.services.conduit.com/GroupingRequest.ctp?type=GetGroup&ctid=EB_ORIGINAL_CTID&lut=0&locale=EB_OS_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarLogin]
"ServiceUrl"="hxxp://login.toolbar.conduit-services.com/Login.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettings]
"ServiceUrl"="hxxp://settings.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForPublisher]
"ServiceUrl"="hxxp://settings.publisher.toolbar.conduit-services.com/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsForSB]
"ServiceUrl"="hxxp://settings.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarSettingsPublisherForSB]
"ServiceUrl"="hxxp://settings.publisher.smartbar.conduit-services.com/settings/?ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarTranslation]
"ServiceUrl"="hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUninstall]
"ServiceUrl"="hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\ToolbarUsage]
"ServiceUrl"="hxxp://usage.toolbar.conduit-services.com/ToolbarUsage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialog]
"ServiceUrl"="hxxp://UninstallDialog.conduit-services.com/view/view.aspx?ctid=EB_TOOLBAR_ID&version=EB_TOOLBAR_VERSION"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550\UninstallDialogUsage]
"ServiceUrl"="hxxp://uninstalldialogusage.toolbar.conduit-services.com/Usage.ashx"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_CT2613550]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\conduit_CT2613550_de-de]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1121525870]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\1139983309]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\2607372324]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3054915312]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3279788275]
"dbname"="conduit_CT2613550_de-de"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3497721787]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\3658808454]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\393351170]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\Repository\MetaData\916659265]
"dbname"="conduit_CT2613550_CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings]
"SocialDomains"="social.conduit.com;apps.conduit.com;services.apps.conduit.com"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"URLFromService"="hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\BrowserSearch]
"ConduitEnabled"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"URLFromService"="hxxp://search.conduit.com?SearchSource=10&ctid=CT2613550"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\FeatureProtector\HomePage]
"ConduitEnabled"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"AddStuffLink"="hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\MyStuff]
"ConduitEnable"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\RadioPlayer]
"ServerUrl"="hxxp://radio.services.conduit.com/RadioRequest.ctp"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Search\Settings]
"ContextMenuSearchUrl"="hxxp://search.conduit.com/ResultsExt.aspx?q=MYSEARCHTERM&ctid=EB_CTID&octid=EB_ORIGINAL_CTID&SearchSource=8"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsDataUrlConduit"="hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsEnabledByConduit"="TRUE"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\SearchInNewTab]
"AboutTabsUsageUrl"="hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Update]
"ModuleURL"="hxxp://ieupdate.conduit.com/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Upgrade]
"ModuleURL"="hxxp://ieupgrade.conduit-download.com/IEUpgrade/ver5.7.4.0/tbedrs.dll"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather]
"SearchServerUrl"="hxxp://search.conduit.com/"
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\ZoneAlarm-Sicherheit\toolbar\settings\Weather\de-de]
"Forecast"="<FORECAST><LOCATION_ID>GMXX0007</LOCATION_ID><DAYS><DAY1><DATE>20111111</DATE><DAY>Freitag</DAY><F_MIN>29</F_MIN><F_MAX>40</F_MAX><C_MIN>-1</C_MIN><C_MAX>4</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:20 pm</SUNSET><SUNRISE>7:20 am</SUNRISE><MOONRISE>4:24 pm</MOONRISE><MOONSET>8:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTION><CONDITION_ICON>hxxp://weather.conduit.com/images/weather/Default/sunny_big.gif</CONDITION_ICON></DAY1><DAY2><DATE>20111112</DATE><DAY>Samstag</DAY><F_MIN>29</F_MIN><F_MAX>46</F_MAX><C_MIN>-1</C_MIN><C_MAX>7</C_MAX><UV_DESCRIPTION>Niedrig</UV_DESCRIPTION><UV_INDEX>1</UV_INDEX><SUNSET>4:18 pm</SUNSET><SUNRISE>7:22 am</SUNRISE><MOONRISE>5:05 pm</MOONRISE><MOONSET>9:04 am</MOONSET><MOON_PHASE>Abnehmend vorspringend</MOON_PHASE><CONDITION_DESCRIPTION>Sonnig</CONDITION_DESCRIPTIO
Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\Shared\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\CR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\FF\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\ADMIN.Ace\AppData\Roaming\BabylonToolbar\IE\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
Searching for "Crossrider"
No data found.
Searching for "ZoneAlarm LTD Toolbar"
No data found.
Searching for "DuckDuckGo"
No data found.
Searching for " "
[HKEY_LOCAL_MACHINE\SOFTWARE\Canon\WIA\Devices\MP550 series]
"ProductId"="MP550 "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/> <Capability Type="Shell"/> </Resource> </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_APPLE&PROD_IPOD&REV_1.70#000A27002297E590&0#]
"DeviceDesc"="iPod "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_SANDISK&PROD_CRUZER&REV_8.01#432430165D808A62&0#]
"DeviceDesc"="Cruzer "
-= EOF =-
Geändert von Pechvogel44 (02.09.2013 um 20:26 Uhr) |
|
03.09.2013, 09:38
| #3 |
| /// TB-Ausbilder | DuckDuckGo läßt sich nicht enfernen Servus,
__________________wir entfernen die letzten Reste und kontrollieren nochmal alles. Wichtig: Du hast deinen Benutzernamen durch xxxx unkenntlich gemacht. Vor dem Fix musst du deinen richtigen Benutzernamen für die jeweilige Stelle einfügen, sonst wird der Fix nicht funktionieren! Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKCU - No Name - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} - No File
Toolbar: HKCU - No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF NetworkProxy: "http", "127.0.0.1"
FF NetworkProxy: "http_port", 62707
FF NetworkProxy: "type", 0
Task: {EEE57F91-46AE-4F46-B09D-97D11ED65F6E} - \Scheduled Update for Ask Toolbar No Task File
C:\Users\ADMIN.Ace\AppData\Roaming\Mozilla\Firefox\Profiles\wvfcx3wuxxxxx.defaultx\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Users\xxxxxxx\AppData\LocalLow\Conduit
C:\Users\xxxxxxx\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\3udiwpab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit
C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ZoneAlarm-Sicherheit
C:\Users\xxxxi\AppData\Roaming\Mozilla\Firefox\Profiles\r6n9rara.default\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\Mozilla\Firefox\Profiles\xke09otc.default-1359736880158\searchplugins\duckduckgo.xml
C:\Users\xxxxxxx\AppData\Roaming\CheckPoint
Reg: reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com" /f
Reg: reg delete "HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\AskToolbar" /f
Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Conduit" /f
Reg: reg delete "HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\ZoneAlarm-Sicherheit" /f
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Downloade Dir bitte  Malwarebytes Anti-Malware
Schritt 3 ESET Online Scanner
Schritt 4 Downloade Dir bitte  SecurityCheck und:
Bitte poste mit deiner nächsten Antwort
|
|
| Themen zu DuckDuckGo läßt sich nicht enfernen |
| duckduckgo, enfernen, entferne, firefox, gefährlich, liebe, nervt, neustart, seite, seriös, standard, startseite, stelle, suchmaschine, suchmaschinen, troja, wirkt |
Hybrid-Darstellung
