Trojaner-Board
Seite 2 von 4 1 2 34
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart (https://www.trojaner-board.de/132946-bitte-um-hilfe-ordner-oeffnet-automatisch-neustart.html)

cosinus 04.04.2013 11:19
JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




Im Anschluss:

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Danach eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in CODE-Tags hier in den Thread.

4cani 04.04.2013 13:27
[CODE]hier der log.JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.8.1 (04.03.2013:1)
OS: Microsoft Windows XP x86
Ran by Pietro on 04.04.2013 at 13:40:55,79
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\\software\microsoft\internet explorer\main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_current_user\software\filescout



~~~ Files

Successfully deleted: [File] "C:\end"
Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll



~~~ Folders

Successfully deleted: [Folder] "C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\file scout"
Successfully deleted: [Folder] "C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\performersoft"
Successfully deleted: [Folder] "C:\Programme\Gemeinsame Dateien\umbrella"



~~~ FireFox

Successfully deleted: [File] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\user.js
Successfully deleted: [File] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\searchplugins\conduit.xml
Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\conduitcommon
Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\extensions\LogMeInClient@logmein.com
Successfully deleted the following from C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\prefs.js

user_pref("CT2197656.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2197656.CTID", "CT2197656");
user_pref("CT2197656.CommunitiesChangesLastCheckTime", "0");
user_pref("CT2197656.CurrentServerDate", "20-9-2010");
user_pref("CT2197656.DialogsAlignMode", "LTR");
user_pref("CT2197656.DownloadReferralCookieData", "");
user_pref("CT2197656.FirstServerDate", "13-1-2010");
user_pref("CT2197656.FirstTime", true);
user_pref("CT2197656.FirstTimeFF3", true);
user_pref("CT2197656.FirstTimeSettingsDone", true);
user_pref("CT2197656.GroupingInvalidateCache", false);
user_pref("CT2197656.GroupingLastCheckTime", "0");
user_pref("CT2197656.GroupingLastServerUpdateTime", "0");
user_pref("CT2197656.GroupingServerCheckInterval", 1440);
user_pref("CT2197656.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2197656.Initialize", true);
user_pref("CT2197656.InitializeCommonPrefs", true);
user_pref("CT2197656.InstallationAndCookieDataSentCount", 1);
user_pref("CT2197656.InstalledDate", "Wed Jan 13 2010 09:45:00 GMT+0100");
user_pref("CT2197656.InvalidateCache", false);
user_pref("CT2197656.IsGrouping", false);
user_pref("CT2197656.IsMulticommunity", false);
user_pref("CT2197656.IsOpenThankYouPage", true);
user_pref("CT2197656.IsOpenUninstallPage", true);
user_pref("CT2197656.LanguagePackLastCheckTime", "Mon Sep 20 2010 09:11:25 GMT+0200");
user_pref("CT2197656.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2197656.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2197656.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:47 GMT+0100");
user_pref("CT2197656.LastLogin_2.5.6.0", "Fri Mar 26 2010 10:02:45 GMT+0100");
user_pref("CT2197656.LastLogin_2.5.8.6", "Sat Aug 14 2010 09:38:54 GMT+0200");
user_pref("CT2197656.LastLogin_2.7.2.0", "Mon Sep 20 2010 09:11:24 GMT+0200");
user_pref("CT2197656.LatestVersion", "2.7.2.0");
user_pref("CT2197656.Locale", "en-us");
user_pref("CT2197656.LoginCache", 4);
user_pref("CT2197656.MCDetectTooltipHeight", "83");
user_pref("CT2197656.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2197656.MCDetectTooltipWidth", "295");
user_pref("CT2197656.RadioLastCheckTime", "0");
user_pref("CT2197656.RadioLastUpdateIPServer", "0");
user_pref("CT2197656.RadioLastUpdateServer", "0");
user_pref("CT2197656.SHRINK_TOOLBAR", 1);
user_pref("CT2197656.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2197656&octid=EB_ORIGINAL_CTID&SearchSource=1");
user_pref("CT2197656.SearchFromAddressBarIsInit", true);
user_pref("CT2197656.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2197656&q=");
user_pref("CT2197656.SearchInNewTabEnabled", true);
user_pref("CT2197656.SearchInNewTabIntervalMM", 1440);
user_pref("CT2197656.SearchInNewTabLastCheckTime", "Mon Sep 20 2010 09:11:24 GMT+0200");
user_pref("CT2197656.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2197656.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2197656.SettingsCheckIntervalMin", 120);
user_pref("CT2197656.SettingsLastCheckTime", "Mon Sep 20 2010 09:11:23 GMT+0200");
user_pref("CT2197656.SettingsLastUpdate", "1283883615");
user_pref("CT2197656.ThirdPartyComponentsInterval", 504);
user_pref("CT2197656.ThirdPartyComponentsLastCheck", "Mon Sep 20 2010 09:11:23 GMT+0200");
user_pref("CT2197656.ThirdPartyComponentsLastUpdate", "1274024365");
user_pref("CT2197656.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2197656.UserID", "UN33991039097292663");
user_pref("CT2197656.ValidationData_Search", 0);
user_pref("CT2197656.ValidationData_Toolbar", 2);
user_pref("CT2197656.alertChannelId", "596102");
user_pref("CT2197656.clientLogIsEnabled", true);
user_pref("CT2197656.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2197656.components.1000034", false);
user_pref("CT2197656.components.1000082", false);
user_pref("CT2197656.components.1000234", false);
user_pref("CT2197656.myStuffEnabled", true);
user_pref("CT2197656.myStuffPublihserMinWidth", 400);
user_pref("CT2197656.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2197656.myStuffServiceIntervalMM", 1440);
user_pref("CT2197656.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2197656.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2319505.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2319505.CT2436753.CommunityChanged", true);
user_pref("CT2319505.CT2438091.CommunityChanged", true);
user_pref("CT2319505.CT2439704.CommunityChanged", true);
user_pref("CT2319505.CT2442024.CommunityChanged", true);
user_pref("CT2319505.CT2442042.CommunityChanged", true);
user_pref("CT2319505.CTID", "CT2319505");
user_pref("CT2319505.CommunitiesChangesLastCheckTime", "Fri Mar 12 2010 17:56:08 GMT+0100");
user_pref("CT2319505.CommunityChanged", true);
user_pref("CT2319505.CurrentServerDate", "12-3-2010");
user_pref("CT2319505.DialogsAlignMode", "LTR");
user_pref("CT2319505.FeedLastCount128764853596838177", 50);
user_pref("CT2319505.FeedPollDate128764853596838177", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764877651838405", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764921528556346", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764922136681407", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764929494025056", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764934074025307", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FirstServerDate", "17-12-2009");
user_pref("CT2319505.FirstTime", true);
user_pref("CT2319505.FirstTimeFF3", true);
user_pref("CT2319505.GroupingLastCheckTime", "Fri Mar 12 2010 09:14:40 GMT+0100");
user_pref("CT2319505.GroupingLastErrorCode", "");
user_pref("CT2319505.GroupingLastResponse", true);
user_pref("CT2319505.GroupingLastServerUpdateTime", "129125382913730000");
user_pref("CT2319505.GroupingServerCheckInterval", 1440);
user_pref("CT2319505.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2319505.Initialize", true);
user_pref("CT2319505.InitializeCommonPrefs", true);
user_pref("CT2319505.InstalledDate", "Thu Dec 17 2009 16:05:37 GMT+0100");
user_pref("CT2319505.InvalidateCache", false);
user_pref("CT2319505.IsGrouping", true);
user_pref("CT2319505.IsMulticommunity", false);
user_pref("CT2319505.IsOpenThankYouPage", true);
user_pref("CT2319505.IsOpenUninstallPage", true);
user_pref("CT2319505.LanguagePackLastCheckTime", "Fri Mar 12 2010 15:51:13 GMT+0100");
user_pref("CT2319505.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2319505.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2319505.LastLogin_2.5.2.13", "Mon Jan 04 2010 15:14:07 GMT+0100");
user_pref("CT2319505.LastLogin_2.5.2.14", "Wed Jan 13 2010 09:22:52 GMT+0100");
user_pref("CT2319505.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:45 GMT+0100");
user_pref("CT2319505.LastLogin_2.5.6.0", "Fri Mar 12 2010 15:51:13 GMT+0100");
user_pref("CT2319505.LatestVersion", "2.1.0.18");
user_pref("CT2319505.Locale", "en-us");
user_pref("CT2319505.LoginCache", 4);
user_pref("CT2319505.MCDetectTooltipHeight", "83");
user_pref("CT2319505.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2319505.MCDetectTooltipWidth", "295");
user_pref("CT2319505.RadioIsPodcast", false);
user_pref("CT2319505.RadioLastCheckTime", "Fri Mar 12 2010 15:51:13 GMT+0100");
user_pref("CT2319505.RadioLastUpdateIPServer", "4");
user_pref("CT2319505.RadioLastUpdateServer", "129057893328970000");
user_pref("CT2319505.RadioMediaID", "12965783");
user_pref("CT2319505.RadioMediaType", "Media Player");
user_pref("CT2319505.RadioMenuSelectedID", "EBRadioMenu_CT231950512965783");
user_pref("CT2319505.RadioShrinked", "shrinked");
user_pref("CT2319505.RadioStationName", "%3D%3D%3D%3D%3D%20News%20%26%20Talk%20%3D%3D%3D%3D%3D");
user_pref("CT2319505.RadioStationURL", "hxxp://www.cnn.com/audio/radio/liveaudio.asx");
user_pref("CT2319505.SHRINK_TOOLBAR", 1);
user_pref("CT2319505.SearchFromAddressBarIsInit", true);
user_pref("CT2319505.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2319505&SearchSource=2&q=");
user_pref("CT2319505.SearchInNewTabEnabled", true);
user_pref("CT2319505.SearchInNewTabIntervalMM", 1440);
user_pref("CT2319505.SearchInNewTabServiceUrl", "hxxp://hosting.conduit-services.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2319505.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2319505.SettingsCheckIntervalMin", 120);
user_pref("CT2319505.SettingsLastCheckTime", "Fri Mar 12 2010 17:56:08 GMT+0100");
user_pref("CT2319505.SettingsLastUpdate", "1268057491");
user_pref("CT2319505.ThirdPartyComponentsInterval", 504);
user_pref("CT2319505.ThirdPartyComponentsLastCheck", "Tue Mar 02 2010 21:54:05 GMT+0100");
user_pref("CT2319505.ThirdPartyComponentsLastUpdate", "1262598007");
user_pref("CT2319505.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2319505.UserID", "UN09225496386369703");
user_pref("CT2319505.backendstorage.hxxp://conduit-fb-toolbar_conduit_com/fbtoolbar.firsttime", "74727565");
user_pref("CT2319505.clientLogIsEnabled", true);
user_pref("CT2319505.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2319505.components.1000034", false);
user_pref("CT2319505.components.1000234", false);
user_pref("CT2319505.myStuffEnabled", true);
user_pref("CT2319505.myStuffPublihserMinWidth", 400);
user_pref("CT2319505.myStuffSearchUrl", "hxxp://search.conduit.com/Results.aspx?q=SEARCH_TERM&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID&SearchType=ToolbarComponents");
user_pref("CT2319505.myStuffServiceIntervalMM", 1440);
user_pref("CT2319505.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2319505.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2405727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2405727.CTID", "CT2405727");
user_pref("CT2405727.CurrentServerDate", "6-4-2010");
user_pref("CT2405727.DialogsAlignMode", "LTR");
user_pref("CT2405727.EMailNotifierPollDate", "Tue Apr 06 2010 16:22:16 GMT+0200");
user_pref("CT2405727.ExternalComponentPollDate129078516974368471", "Tue Apr 06 2010 09:13:51 GMT+0200");
user_pref("CT2405727.ExternalComponentPollDate8694032229628448321", "Mon Mar 29 2010 11:54:05 GMT+0200");
user_pref("CT2405727.FirstServerDate", "16-3-2010");
user_pref("CT2405727.FirstTime", true);
user_pref("CT2405727.FirstTimeFF3", true);
user_pref("CT2405727.GroupingServerCheckInterval", 1440);
user_pref("CT2405727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2405727.Initialize", true);
user_pref("CT2405727.InitializeCommonPrefs", true);
user_pref("CT2405727.InstalledDate", "Tue Mar 16 2010 09:28:07 GMT+0100");
user_pref("CT2405727.InvalidateCache", false);
user_pref("CT2405727.IsGrouping", false);
user_pref("CT2405727.IsMulticommunity", false);
user_pref("CT2405727.IsOpenThankYouPage", true);
user_pref("CT2405727.IsOpenUninstallPage", true);
user_pref("CT2405727.LanguagePackLastCheckTime", "Tue Apr 06 2010 09:13:53 GMT+0200");
user_pref("CT2405727.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2405727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2405727.LastLogin_2.5.6.0", "Fri Mar 26 2010 10:02:46 GMT+0100");
user_pref("CT2405727.LastLogin_2.5.8.6", "Tue Apr 06 2010 13:13:55 GMT+0200");
user_pref("CT2405727.LatestVersion", "2.1.0.18");
user_pref("CT2405727.Locale", "en");
user_pref("CT2405727.LoginCache", 4);
user_pref("CT2405727.MCDetectTooltipHeight", "83");
user_pref("CT2405727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2405727.MCDetectTooltipWidth", "295");
user_pref("CT2405727.RadioIsPodcast", false);
user_pref("CT2405727.RadioLastCheckTime", "Tue Apr 06 2010 09:13:53 GMT+0200");
user_pref("CT2405727.RadioLastUpdateIPServer", "3");
user_pref("CT2405727.RadioLastUpdateServer", "3");
user_pref("CT2405727.RadioMediaID", "9962");
user_pref("CT2405727.RadioMediaType", "Media Player");
user_pref("CT2405727.RadioMenuSelectedID", "EBRadioMenu_CT2405727_RECENT9962");
user_pref("CT2405727.RadioStationName", "California%20Rock");
user_pref("CT2405727.RadioStationURL", "hxxp://feedlive.net/california.asx");
user_pref("CT2405727.RadioVolume", "100");
user_pref("CT2405727.SHRINK_TOOLBAR", 1);
user_pref("CT2405727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2405727&octid=EB_ORIGINAL_CTID");
user_pref("CT2405727.SearchFromAddressBarIsInit", true);
user_pref("CT2405727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405727&q=");
user_pref("CT2405727.SearchInNewTabEnabled", true);
user_pref("CT2405727.SearchInNewTabIntervalMM", 1440);
user_pref("CT2405727.SearchInNewTabLastCheckTime", "Tue Apr 06 2010 09:13:51 GMT+0200");
user_pref("CT2405727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2405727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2405727.SettingsCheckIntervalMin", 120);
user_pref("CT2405727.SettingsLastCheckTime", "Tue Apr 06 2010 15:11:35 GMT+0200");
user_pref("CT2405727.SettingsLastUpdate", "1269767550");
user_pref("CT2405727.ThirdPartyComponentsInterval", 504);
user_pref("CT2405727.ThirdPartyComponentsLastCheck", "Tue Mar 16 2010 09:28:04 GMT+0100");
user_pref("CT2405727.ThirdPartyComponentsLastUpdate", "1267120534");
user_pref("CT2405727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2405727.UserID", "UN59044191848858177");
user_pref("CT2405727.ValidationData_Toolbar", 2);
user_pref("CT2405727.WeatherNetwork", "");
user_pref("CT2405727.WeatherPollDate", "Tue Apr 06 2010 15:14:15 GMT+0200");
user_pref("CT2405727.WeatherUnit", "C");
user_pref("CT2405727.alertChannelId", "800210");
user_pref("CT2405727.clientLogIsEnabled", true);
user_pref("CT2405727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2405727.myStuffEnabled", true);
user_pref("CT2405727.myStuffPublihserMinWidth", 400);
user_pref("CT2405727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=2&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2405727.myStuffServiceIntervalMM", 1440);
user_pref("CT2405727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2405727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT292072..clientLogIsEnabled", true);
user_pref("CT292072..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT292072..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT292072.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT292072.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT292072.AppTrackingLastCheckTime", "Wed Aug 29 2012 09:02:43 GMT+0200");
user_pref("CT292072.CTID", "CT292072");
user_pref("CT292072.CurrentServerDate", "12-10-2012");
user_pref("CT292072.DialogsAlignMode", "LTR");
user_pref("CT292072.DialogsGetterLastCheckTime", "Thu Oct 11 2012 10:06:37 GMT+0200");
user_pref("CT292072.DownloadReferralCookieData", "");
user_pref("CT292072.EMailNotifierPollDate", "Mon Jan 04 2010 16:50:30 GMT+0100");
user_pref("CT292072.FeedLastCount127980423826619355", 0);
user_pref("CT292072.FeedPollDate128433105078593902", "Fri Oct 12 2012 17:38:53 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593903", "Fri Oct 12 2012 18:01:42 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593904", "Fri Oct 12 2012 18:01:38 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593905", "Fri Oct 12 2012 18:01:40 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593906", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593907", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDate128526559992594353", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDate128706408669044644", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDatehxxp://www.radiomarte.it/rdmarte.asx", "Thu Dec 16 2010 18:04:49 GMT+0100");
user_pref("CT292072.FeedTTL128433105078593904", 10);
user_pref("CT292072.FeedTTL128433105078593905", 30);
user_pref("CT292072.FeedTTL128433105078593907", 5);
user_pref("CT292072.FeedTTL128706408669044644", 5);
user_pref("CT292072.FirstServerDate", "17-12-2009");
user_pref("CT292072.FirstTime", true);
user_pref("CT292072.FirstTimeFF3", true);
user_pref("CT292072.FirstTimeSettingsDone", true);
user_pref("CT292072.GroupingServerCheckInterval", 1440);
user_pref("CT292072.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT292072.HasUserGlobalKeys", true);
user_pref("CT292072.HomePageProtectorEnabled", false);
user_pref("CT292072.Initialize", true);
user_pref("CT292072.InitializeCommonPrefs", true);
user_pref("CT292072.InstallationAndCookieDataSentCount", 3);
user_pref("CT292072.InstalledDate", "Thu Dec 17 2009 16:04:09 GMT+0100");
user_pref("CT292072.InvalidateCache", false);
user_pref("CT292072.IsAlertDBUpdated", true);
user_pref("CT292072.IsGrouping", false);
user_pref("CT292072.IsMulticommunity", false);
user_pref("CT292072.IsOpenThankYouPage", true);
user_pref("CT292072.IsOpenUninstallPage", true);
user_pref("CT292072.LanguagePackLastCheckTime", "Fri Oct 12 2012 09:02:22 GMT+0200");
user_pref("CT292072.LanguagePackReloadIntervalMM", 1440);
user_pref("CT292072.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT292072.LastLogin_2.5.2.13", "Mon Jan 04 2010 15:14:07 GMT+0100");
user_pref("CT292072.LastLogin_2.5.2.14", "Wed Jan 13 2010 09:22:38 GMT+0100");
user_pref("CT292072.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:46 GMT+0100");
user_pref("CT292072.LastLogin_2.5.6.0", "Thu Feb 11 2010 11:41:06 GMT+0100");
user_pref("CT292072.LastLogin_2.5.8.6", "Thu Aug 19 2010 09:02:55 GMT+0200");
user_pref("CT292072.LastLogin_2.7.2.0", "Mon Mar 21 2011 09:07:53 GMT+0100");
user_pref("CT292072.LastLogin_3.10.0.1", "Wed Apr 25 2012 09:07:49 GMT+0200");
user_pref("CT292072.LastLogin_3.11.0.3", "Mon May 07 2012 17:00:45 GMT+0200");
user_pref("CT292072.LastLogin_3.12.2.3", "Sun May 20 2012 17:56:29 GMT+0200");
user_pref("CT292072.LastLogin_3.13.0.6", "Sun Jul 08 2012 18:45:37 GMT+0200");
user_pref("CT292072.LastLogin_3.14.1.0", "Wed Aug 29 2012 17:02:43 GMT+0200");
user_pref("CT292072.LastLogin_3.15.1.0", "Fri Oct 12 2012 17:01:42 GMT+0200");
user_pref("CT292072.LastLogin_3.2.5.2", "Thu Jan 06 2011 17:36:28 GMT+0100");
user_pref("CT292072.LastLogin_3.3.2.1", "Fri Apr 01 2011 17:06:40 GMT+0200");
user_pref("CT292072.LastLogin_3.3.3.2", "Fri Jun 24 2011 16:04:12 GMT+0200");
user_pref("CT292072.LastLogin_3.5.0.12", "Tue Aug 02 2011 13:51:31 GMT+0200");
user_pref("CT292072.LastLogin_3.6.0.10", "Wed Oct 05 2011 08:59:12 GMT+0200");
user_pref("CT292072.LastLogin_3.7.0.6", "Tue Oct 11 2011 17:21:57 GMT+0200");
user_pref("CT292072.LastLogin_3.8.0.8", "Mon Dec 05 2011 13:36:17 GMT+0100");
user_pref("CT292072.LastLogin_3.8.1.0", "Tue Jan 31 2012 17:22:52 GMT+0100");
user_pref("CT292072.LastLogin_3.9.0.3", "Mon Feb 13 2012 09:28:39 GMT+0100");
user_pref("CT292072.LatestVersion", "3.14.1.0");
user_pref("CT292072.Locale", "de");
user_pref("CT292072.LoginCache", 4);
user_pref("CT292072.MCDetectTooltipHeight", "83");
user_pref("CT292072.MCDetectTooltipShow", false);
user_pref("CT292072.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT292072.MCDetectTooltipWidth", "295");
user_pref("CT292072.MyStuffEnabledAtInstallation", true);
user_pref("CT292072.RadioIsPodcast", false);
user_pref("CT292072.RadioLastCheckTime", "Fri Oct 12 2012 09:02:42 GMT+0200");
user_pref("CT292072.RadioLastUpdateIPServer", "0");
user_pref("CT292072.RadioLastUpdateServer", "129696277231000000");
user_pref("CT292072.RadioMediaID", "8415661");
user_pref("CT292072.RadioMediaType", "Media Player");
user_pref("CT292072.RadioMenuSelectedID", "EBRadioMenu_CT292072_RECENT8415661");
user_pref("CT292072.RadioShrinked", "expanded");
user_pref("CT292072.RadioShrinkedFromSetup", false);
user_pref("CT292072.RadioStationName", "IDN%20(Italian%20Dance%20Network)");
user_pref("CT292072.RadioStationURL", "hxxp://www.italiandancenetwork.com/stream/links/listen.asx");
user_pref("CT292072.RadioVolume", "100");
user_pref("CT292072.SHRINK_TOOLBAR", 1);
user_pref("CT292072.SavedHomepage", "www.google.de");
user_pref("CT292072.SearchBoxWidth", 150);
user_pref("CT292072.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT292072&octid=EB_ORIGINAL_CTID&SearchSource=1");
user_pref("CT292072.SearchEngineBeforeUnload", "DAEMON Search");
user_pref("CT292072.SearchFromAddressBarIsInit", true);
user_pref("CT292072.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT292072&q=");
user_pref("CT292072.SearchInNewTabEnabled", true);
user_pref("CT292072.SearchInNewTabIntervalMM", 1440);
user_pref("CT292072.SearchInNewTabLastCheckTime", "Fri Oct 12 2012 09:02:18 GMT+0200");
user_pref("CT292072.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT292072.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
user_pref("CT292072.SearchProtectorEnabled", false);
user_pref("CT292072.SearchProtectorToolbarDisabled", true);
user_pref("CT292072.ServiceMapLastCheckTime", "Fri Oct 12 2012 09:02:19 GMT+0200");
user_pref("CT292072.SettingsCheckIntervalMin", 120);
user_pref("CT292072.SettingsLastCheckTime", "Fri Oct 12 2012 17:08:52 GMT+0200");
user_pref("CT292072.SettingsLastUpdate", "1349971046");
user_pref("CT292072.ThirdPartyComponentsInterval", 504);
user_pref("CT292072.ThirdPartyComponentsLastCheck", "Sun Sep 30 2012 09:22:26 GMT+0200");
user_pref("CT292072.ThirdPartyComponentsLastUpdate", "1331806000");
user_pref("CT292072.ToolbarDisabled", false);
user_pref("CT292072.TrusteLinkUrl", "hxxp://trust.conduit.com/CT292072");
user_pref("CT292072.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,
user_pref("CT292072.UserID", "UN28161568897515626");
user_pref("CT292072.ValidationData_Search", 2);
user_pref("CT292072.ValidationData_Toolbar", 2);
user_pref("CT292072.WeatherNetwork", "");
user_pref("CT292072.WeatherPollDate", "Fri Oct 12 2012 18:02:56 GMT+0200");
user_pref("CT292072.WeatherUnit", "C");
user_pref("CT292072.alertChannelId", "2050");
user_pref("CT292072.approveUntrustedApps", false);
user_pref("CT292072.backendstorage.ct292072ads1", "25374225323261647325323225334125354225374225323261696425323225334125323235313939332532322532432532327469746C6525323225334125
user_pref("CT292072.backendstorage.ct292072current_term", "616E6E65782B622B6C253235433325323541346E646572");
user_pref("CT292072.backendstorage.ct292072sdate", "3132");
user_pref("CT292072.clientLogIsEnabled", true);
user_pref("CT292072.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT292072.components.1000034", false);
user_pref("CT292072.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPa
user_pref("CT292072.globalFirstTimeInfoLastCheckTime", "Mon Oct 08 2012 09:12:55 GMT+0200");
user_pref("CT292072.homepageProtectorEnableByLogin", true);
user_pref("CT292072.initDone", true);
user_pref("CT292072.isAppTrackingManagerOn", false);
user_pref("CT292072.myStuffEnabled", true);
user_pref("CT292072.myStuffPublihserMinWidth", 400);
user_pref("CT292072.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT292072.myStuffServiceIntervalMM", 1440);
user_pref("CT292072.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT292072.oldAppsList", "128344096801806658,128530302388825347,1000048,111,1000082,128537290694631967,128562659353262628,128839743997025524,128880706733682176,129245
user_pref("CT292072.revertSettingsEnabled", true);
user_pref("CT292072.searchProtectorDialogDelayInSec", 10);
user_pref("CT292072.searchProtectorEnableByLogin", true);
user_pref("CT292072.testingCtid", "");
user_pref("CT292072.toolbarAppMetaDataLastCheckTime", "Fri Oct 12 2012 09:02:22 GMT+0200");
user_pref("CT292072.toolbarContextMenuLastCheckTime", "Sat Oct 06 2012 09:12:53 GMT+0200");
user_pref("CT292072.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT292072.usagesFlag", 2);
user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT292072");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT292072/CT292072", "\"d41d8cd98f00b204e9800998ecf8427e3\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/2050/2050/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/715594/711454/DE", "\"3-192980-48286800\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/830903/826706/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832216/828019/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/833802/829605/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/836077/831880/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/836095/831898/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT292072", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "oIwsta2spzadhjRgiY1Nhw==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "WiZSpHJzJ/uTUKvfHHyj/w==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "9H/gICSaMqbmx+Gd+8W4Sg==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "eJfMrdrGnhGHiiPiYjgAww==");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.2.1", "\"0652eeacc6cb1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.2.1", "\"0652eeacc6cb1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"8028f138140cc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"0ee90707f77cc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"0ee90707f77cc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT292072", "\"f1c77625c0e9bd1c80a2fd6901845fa9\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2010 4:33:06 PM", "634293235860000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT292072&octid=CT292072", "\"1321973020\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT292072/CT292072", "\"1310989086\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"c6960976a618e81645094348c65a4014\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"5f18cd8784b2c41199661ad75d198ddb\"");
user_pref("CommunityToolbar.EngineHiddenByUser", true);
user_pref("CommunityToolbar.EngineOwner", "");
user_pref("CommunityToolbar.EngineOwnerGuid", "");
user_pref("CommunityToolbar.EngineOwnerToolbarId", "");
user_pref("CommunityToolbar.IsEngineShown", false);
user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Dokumente und Einstellungen\\Pietro\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\nim9nd3a.default\\conduitCommon\\mo
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/52/156/CT1561552/Gadgets/a4709183-4a1f-4321-a83e-4ae33d3f7f99.html", "360x250");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/72/29/CT292072/Gadgets/22e85617-7e46-4e8d-b90d-2be1d9b7f726.html", "122x23");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://tvtoolbar.org/tvtoolbar/gadget/tvplayer.php?subcategory=368&category=24", "327x39");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/11.swf&player=flash", "226x113");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/131.swf&player=flash", "261x166");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/152.swf&player=flash", "233x74");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/179.swf&player=flash", "418x122");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/180.swf&player=flash", "226x94");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/53.swf&player=flash", "330x160");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/55.swf&player=flash", "337x92");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/79.swf&player=flash", "216x96");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/13.swf&player=flash", "418x60");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/178.swf&player=flash", "389x80");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://storage.conduit.com/72/29/CT292072/Gadgets/22e85617-7e46-4e8d-b90d-2be1d9b7f726.html", "774x659");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/11.swf&player=flash", "500x430");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/179.swf&player=flash", "490x358");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/55.swf&player=flash", "488x430");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/79.swf&player=flash", "488x430");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash2.php?source=swf/58.swf&player=flash", "700x650");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/178.swf&player=flash", "488x430");
user_pref("CommunityToolbar.OriginalEngineOwner", "");
user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.ToolbarsList", "CT292072,CT2319505,CT2197656,CT2405727");
user_pref("CommunityToolbar.ToolbarsList2", "CT292072,CT2197656,CT2405727");
user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Mar 21 2011 15:23:09 GMT+0100");
user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 18 2011 22:18:45 GMT+0200");
user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
user_pref("CommunityToolbar.alert.locale", "en");
user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jun 23 2011 18:07:03 GMT+0200");
user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.alert.showTrayIcon", false);
user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.alert.userId", "{ada1af42-700e-4dfd-92fa-5012f0c62045}");
user_pref("CommunityToolbar.globalUserId", "0191840a-6c8c-491d-a17e-7c15504599a0");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT292072");
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Oct 06 2012 09:13:05 GMT+0200");
user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Oct 12 2012 09:24:38 GMT+0200");
user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Oct 12 2012 09:24:30 GMT+0200");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "8cdb738e-9409-4f66-84b7-45b28b6cc357");
user_pref("CommunityToolbar.twitter.user_16332734.LastCheckTime", "Mon Dec 21 2009 15:05:52 GMT+0100");
user_pref("browser.search.defaultthis.engineName", "Deutschland Radio Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.aol.com/search/search?query={searchTerms}&invocationType=tb50-ff-aolTB50CL-chromesbox-en-us");
user_pref("extensions.alexa.searchconf", "{\n  \"google\" : {\n    \"urlexp\" : \"hxxp:\\\\/\\\\/www\\\\.google\\\\..*\\\\/.*[?#&]q=([^&]+)\"\n  },\n  \"bing\"  : {\n    \"ur
user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n  <replacements>\n    <replacement>\n      <key><![CDATA[__REGION__PLACEHO
user_pref("extensions.seoquake.params.0.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.1.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.108.icon", "AAABAAIAEBAAAAAAAABoBQAAJgAAACAgAAAAAAAAqAgAAI4FAAAoAAAAEAAAACAAAAABAAgAAAAAAEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///wAGgvsA63YdA
user_pref("extensions.seoquake.params.2.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.20.icon", "AAABAAEAEBAAAAEAGABoAwAAFgAAACgAAAAQAAAAIAAAAAEAGAAAAAAAAAAAABMLAAATCwAAAAAAAAAAAAAVpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv
user_pref("extensions.seoquake.params.3.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.51.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAABILAAASCwAAAAAAAAAAAACgoKB+oKCg56CgoP+goKD/oKCg/6CgoP+goKD/oKCg/6
user_pref("extensions.veohsearchrecs.SupportedSites", "<?xml version=\"1.0\" ?>\r\n<results revision=\"1.5.2\">\r\n    <sites>\r\n        <searchsite MatchesDomain=\"google.\"
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT292072&q=");





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.04.2013 at 14:17:50,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---


[CODE]hier die nächste.AdwCleaner Logfile:
Code:
# AdwCleaner v2.200 - Datei am 04/04/2013 um 14:28:44 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits)
# Benutzer : Pietro - COMPUTERCASA
# Bootmodus : Normal
# Ausgeführt unter : C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Programme\Mozilla Firefox\searchplugins\StartWeb.xml
Ordner Gelöscht : C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Tarma Installer

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]

***** [Internet Browser] *****

-\\ Internet Explorer v6.0.2900.2180

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v20.0 (de)

*************************

AdwCleaner[S1].txt - [1085 octets] - [04/04/2013 14:28:44]

########## EOF - C:\AdwCleaner[S1].txt - [1145 octets] ##########
--- --- ---

cosinus 04.04.2013 15:18
Was ist mit OTL?

4cani 04.04.2013 16:14
ich werde gegen 19 Uhr zu Hause sein und wenn OTL schon fertig ist werde ich den log posten.
Danke dir

cosinus 04.04.2013 16:32
Ok, aber eine Bitte: lass solche Zwischenrufe, poste nur wenn es Probleme gibt oder wenn du die Logs hast (diese dann auch posten in CODE-Tags)

4cani 05.04.2013 19:32
Code:
sorry, als code tag ist zu lang.

4cani 05.04.2013 19:34
Code:
hier der 2. log.

cosinus 06.04.2013 03:20
Ich weiß nicht was du mit den OTL-Logs gemacht hast, aber was du in den ZIP gepackt hast, da steht großer Quatsch drin bzw. mein Texteditor kann es nicht darstellen :confused:

Bitte die Original-Logdatei so belassen und hier hochladen => File-Upload.net - Ihr kostenloser File Hoster!
Und hier verlinken

4cani 06.04.2013 13:46
Code:
hxxp://www.file-upload.net/download-7433312/Extras.Txt.html
hxxp://www.file-upload.net/download-7433313/OTL.Txt.html

cosinus 06.04.2013 16:59
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes - denk bitte vorher daran, Malwarebytes über den Updatebutton zu aktualisieren

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


4cani 07.04.2013 11:30
Code:
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.04.06.06

Windows XP Service Pack 2 x86 NTFS
Internet Explorer 6.0.2900.2180
Pietro :: COMPUTERCASA [Administrator]

07.04.2013 00:47:24
mbam-log-2013-04-07 (00-47-24).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 321662
Laufzeit: 1 Stunde(n), 1 Minute(n), 5 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus 07.04.2013 22:17
Was ist mit dem anderen Log (ESET)?

4cani 07.04.2013 22:46
Code:
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=1
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=94862f2ad1e97542a8ddeb084c9a863c
# engine=13567
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-04-07 09:39:23
# local_time=2013-04-07 11:39:23 (+0100, Westeuropäische Normalzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# scanned=153495
# found=6
# cleaned=0
# scan_time=38266
sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=D9F91FA435BDBB0764D4CEC8ED99BFF722D87F93 ft=1 fh=602781cac6882f06 vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP32\A0003022.dll"
sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP35\A0003176.dll"
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP41\A0006102.dll"
sh=5B80FC504E8CA6B6BEB68C2B398DEAFCE811426C ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo application" ac=I fn="D:\Firefox 12.0 (de) - 2012-05-07.pcv"
sh=D84249CE051B0513391DECC5419C0F27AEC7F645 ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo application" ac=I fn="D:\Dokumente und Einstellungen\Pietro\Anwendungsdaten\Mozilla\Firefox\Profiles\4yyze240.default\extensions\plugin@yontoo.com\content\overlay.js"

cosinus 08.04.2013 09:47
Wo kommt denn dieser Tarma-Müll schon wieder her?
Hast du JRT vorher nicht neu runtergeladen?

Bitte JRT und adwCleaner nochmal machen, beide Tools vorher neu runterladen bitte!

4cani 08.04.2013 13:39
Code:
sorry, ich glaube es stand nicht da das ich es erneut herunterladen muss aber jetzt habe ich es getan und hier der lo: von JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.8.3 (04.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Pietro on 08.04.2013 at 14:16:34,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\extensions\LogMeInClient@logmein.com





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2013 at 14:33:38,74
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
# AdwCleaner v2.200 - Datei am 08/04/2013 um 14:45:15 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits)
# Benutzer : Pietro - COMPUTERCASA
# Bootmodus : Normal
# Ausgeführt unter : C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Desktop\AdwCleaner(1).exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v6.0.2900.2180

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v20.0 (de)

*************************

AdwCleaner[R1].txt - [639 octets] - [08/04/2013 14:45:15]
AdwCleaner[S1].txt - [1214 octets] - [04/04/2013 14:28:44]

########## EOF - C:\AdwCleaner[R1].txt - [758 octets] ##########


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:19 Uhr.
Seite 2 von 4 1 2 34
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132