Trojaner-Board
Seite 2 von 4 1 2 34
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Bitte um Hilfe, Ordner öffnet sich automatisch nach jeder neustart (https://www.trojaner-board.de/132946-bitte-um-hilfe-ordner-oeffnet-automatisch-neustart.html)

cosinus 04.04.2013 11:19
JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




Im Anschluss:

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Danach eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in CODE-Tags hier in den Thread.

4cani 04.04.2013 13:27
[CODE]hier der log.JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.8.1 (04.03.2013:1)
OS: Microsoft Windows XP x86
Ran by Pietro on 04.04.2013 at 13:40:55,79
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\\software\microsoft\internet explorer\main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_current_user\software\filescout



~~~ Files

Successfully deleted: [File] "C:\end"
Successfully deleted: [File] C:\eula.1028.txt
Successfully deleted: [File] C:\eula.1031.txt
Successfully deleted: [File] C:\eula.1033.txt
Successfully deleted: [File] C:\eula.1036.txt
Successfully deleted: [File] C:\eula.1040.txt
Successfully deleted: [File] C:\eula.1041.txt
Successfully deleted: [File] C:\eula.1042.txt
Successfully deleted: [File] C:\eula.2052.txt
Successfully deleted: [File] C:\install.res.1028.dll
Successfully deleted: [File] C:\install.res.1031.dll
Successfully deleted: [File] C:\install.res.1033.dll
Successfully deleted: [File] C:\install.res.1036.dll
Successfully deleted: [File] C:\install.res.1040.dll
Successfully deleted: [File] C:\install.res.1041.dll
Successfully deleted: [File] C:\install.res.1042.dll
Successfully deleted: [File] C:\install.res.2052.dll
Successfully deleted: [File] C:\install.res.3082.dll



~~~ Folders

Successfully deleted: [Folder] "C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\file scout"
Successfully deleted: [Folder] "C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\performersoft"
Successfully deleted: [Folder] "C:\Programme\Gemeinsame Dateien\umbrella"



~~~ FireFox

Successfully deleted: [File] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\user.js
Successfully deleted: [File] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\searchplugins\conduit.xml
Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\conduitcommon
Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\extensions\LogMeInClient@logmein.com
Successfully deleted the following from C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\prefs.js

user_pref("CT2197656.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2197656.CTID", "CT2197656");
user_pref("CT2197656.CommunitiesChangesLastCheckTime", "0");
user_pref("CT2197656.CurrentServerDate", "20-9-2010");
user_pref("CT2197656.DialogsAlignMode", "LTR");
user_pref("CT2197656.DownloadReferralCookieData", "");
user_pref("CT2197656.FirstServerDate", "13-1-2010");
user_pref("CT2197656.FirstTime", true);
user_pref("CT2197656.FirstTimeFF3", true);
user_pref("CT2197656.FirstTimeSettingsDone", true);
user_pref("CT2197656.GroupingInvalidateCache", false);
user_pref("CT2197656.GroupingLastCheckTime", "0");
user_pref("CT2197656.GroupingLastServerUpdateTime", "0");
user_pref("CT2197656.GroupingServerCheckInterval", 1440);
user_pref("CT2197656.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2197656.Initialize", true);
user_pref("CT2197656.InitializeCommonPrefs", true);
user_pref("CT2197656.InstallationAndCookieDataSentCount", 1);
user_pref("CT2197656.InstalledDate", "Wed Jan 13 2010 09:45:00 GMT+0100");
user_pref("CT2197656.InvalidateCache", false);
user_pref("CT2197656.IsGrouping", false);
user_pref("CT2197656.IsMulticommunity", false);
user_pref("CT2197656.IsOpenThankYouPage", true);
user_pref("CT2197656.IsOpenUninstallPage", true);
user_pref("CT2197656.LanguagePackLastCheckTime", "Mon Sep 20 2010 09:11:25 GMT+0200");
user_pref("CT2197656.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2197656.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2197656.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:47 GMT+0100");
user_pref("CT2197656.LastLogin_2.5.6.0", "Fri Mar 26 2010 10:02:45 GMT+0100");
user_pref("CT2197656.LastLogin_2.5.8.6", "Sat Aug 14 2010 09:38:54 GMT+0200");
user_pref("CT2197656.LastLogin_2.7.2.0", "Mon Sep 20 2010 09:11:24 GMT+0200");
user_pref("CT2197656.LatestVersion", "2.7.2.0");
user_pref("CT2197656.Locale", "en-us");
user_pref("CT2197656.LoginCache", 4);
user_pref("CT2197656.MCDetectTooltipHeight", "83");
user_pref("CT2197656.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2197656.MCDetectTooltipWidth", "295");
user_pref("CT2197656.RadioLastCheckTime", "0");
user_pref("CT2197656.RadioLastUpdateIPServer", "0");
user_pref("CT2197656.RadioLastUpdateServer", "0");
user_pref("CT2197656.SHRINK_TOOLBAR", 1);
user_pref("CT2197656.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2197656&octid=EB_ORIGINAL_CTID&SearchSource=1");
user_pref("CT2197656.SearchFromAddressBarIsInit", true);
user_pref("CT2197656.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2197656&q=");
user_pref("CT2197656.SearchInNewTabEnabled", true);
user_pref("CT2197656.SearchInNewTabIntervalMM", 1440);
user_pref("CT2197656.SearchInNewTabLastCheckTime", "Mon Sep 20 2010 09:11:24 GMT+0200");
user_pref("CT2197656.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2197656.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2197656.SettingsCheckIntervalMin", 120);
user_pref("CT2197656.SettingsLastCheckTime", "Mon Sep 20 2010 09:11:23 GMT+0200");
user_pref("CT2197656.SettingsLastUpdate", "1283883615");
user_pref("CT2197656.ThirdPartyComponentsInterval", 504);
user_pref("CT2197656.ThirdPartyComponentsLastCheck", "Mon Sep 20 2010 09:11:23 GMT+0200");
user_pref("CT2197656.ThirdPartyComponentsLastUpdate", "1274024365");
user_pref("CT2197656.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2197656.UserID", "UN33991039097292663");
user_pref("CT2197656.ValidationData_Search", 0);
user_pref("CT2197656.ValidationData_Toolbar", 2);
user_pref("CT2197656.alertChannelId", "596102");
user_pref("CT2197656.clientLogIsEnabled", true);
user_pref("CT2197656.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2197656.components.1000034", false);
user_pref("CT2197656.components.1000082", false);
user_pref("CT2197656.components.1000234", false);
user_pref("CT2197656.myStuffEnabled", true);
user_pref("CT2197656.myStuffPublihserMinWidth", 400);
user_pref("CT2197656.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2197656.myStuffServiceIntervalMM", 1440);
user_pref("CT2197656.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2197656.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2319505.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2319505.CT2436753.CommunityChanged", true);
user_pref("CT2319505.CT2438091.CommunityChanged", true);
user_pref("CT2319505.CT2439704.CommunityChanged", true);
user_pref("CT2319505.CT2442024.CommunityChanged", true);
user_pref("CT2319505.CT2442042.CommunityChanged", true);
user_pref("CT2319505.CTID", "CT2319505");
user_pref("CT2319505.CommunitiesChangesLastCheckTime", "Fri Mar 12 2010 17:56:08 GMT+0100");
user_pref("CT2319505.CommunityChanged", true);
user_pref("CT2319505.CurrentServerDate", "12-3-2010");
user_pref("CT2319505.DialogsAlignMode", "LTR");
user_pref("CT2319505.FeedLastCount128764853596838177", 50);
user_pref("CT2319505.FeedPollDate128764853596838177", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764877651838405", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764921528556346", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764922136681407", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764929494025056", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FeedPollDate128764934074025307", "Fri Mar 12 2010 18:57:26 GMT+0100");
user_pref("CT2319505.FirstServerDate", "17-12-2009");
user_pref("CT2319505.FirstTime", true);
user_pref("CT2319505.FirstTimeFF3", true);
user_pref("CT2319505.GroupingLastCheckTime", "Fri Mar 12 2010 09:14:40 GMT+0100");
user_pref("CT2319505.GroupingLastErrorCode", "");
user_pref("CT2319505.GroupingLastResponse", true);
user_pref("CT2319505.GroupingLastServerUpdateTime", "129125382913730000");
user_pref("CT2319505.GroupingServerCheckInterval", 1440);
user_pref("CT2319505.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2319505.Initialize", true);
user_pref("CT2319505.InitializeCommonPrefs", true);
user_pref("CT2319505.InstalledDate", "Thu Dec 17 2009 16:05:37 GMT+0100");
user_pref("CT2319505.InvalidateCache", false);
user_pref("CT2319505.IsGrouping", true);
user_pref("CT2319505.IsMulticommunity", false);
user_pref("CT2319505.IsOpenThankYouPage", true);
user_pref("CT2319505.IsOpenUninstallPage", true);
user_pref("CT2319505.LanguagePackLastCheckTime", "Fri Mar 12 2010 15:51:13 GMT+0100");
user_pref("CT2319505.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2319505.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2319505.LastLogin_2.5.2.13", "Mon Jan 04 2010 15:14:07 GMT+0100");
user_pref("CT2319505.LastLogin_2.5.2.14", "Wed Jan 13 2010 09:22:52 GMT+0100");
user_pref("CT2319505.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:45 GMT+0100");
user_pref("CT2319505.LastLogin_2.5.6.0", "Fri Mar 12 2010 15:51:13 GMT+0100");
user_pref("CT2319505.LatestVersion", "2.1.0.18");
user_pref("CT2319505.Locale", "en-us");
user_pref("CT2319505.LoginCache", 4);
user_pref("CT2319505.MCDetectTooltipHeight", "83");
user_pref("CT2319505.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2319505.MCDetectTooltipWidth", "295");
user_pref("CT2319505.RadioIsPodcast", false);
user_pref("CT2319505.RadioLastCheckTime", "Fri Mar 12 2010 15:51:13 GMT+0100");
user_pref("CT2319505.RadioLastUpdateIPServer", "4");
user_pref("CT2319505.RadioLastUpdateServer", "129057893328970000");
user_pref("CT2319505.RadioMediaID", "12965783");
user_pref("CT2319505.RadioMediaType", "Media Player");
user_pref("CT2319505.RadioMenuSelectedID", "EBRadioMenu_CT231950512965783");
user_pref("CT2319505.RadioShrinked", "shrinked");
user_pref("CT2319505.RadioStationName", "%3D%3D%3D%3D%3D%20News%20%26%20Talk%20%3D%3D%3D%3D%3D");
user_pref("CT2319505.RadioStationURL", "hxxp://www.cnn.com/audio/radio/liveaudio.asx");
user_pref("CT2319505.SHRINK_TOOLBAR", 1);
user_pref("CT2319505.SearchFromAddressBarIsInit", true);
user_pref("CT2319505.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2319505&SearchSource=2&q=");
user_pref("CT2319505.SearchInNewTabEnabled", true);
user_pref("CT2319505.SearchInNewTabIntervalMM", 1440);
user_pref("CT2319505.SearchInNewTabServiceUrl", "hxxp://hosting.conduit-services.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2319505.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2319505.SettingsCheckIntervalMin", 120);
user_pref("CT2319505.SettingsLastCheckTime", "Fri Mar 12 2010 17:56:08 GMT+0100");
user_pref("CT2319505.SettingsLastUpdate", "1268057491");
user_pref("CT2319505.ThirdPartyComponentsInterval", 504);
user_pref("CT2319505.ThirdPartyComponentsLastCheck", "Tue Mar 02 2010 21:54:05 GMT+0100");
user_pref("CT2319505.ThirdPartyComponentsLastUpdate", "1262598007");
user_pref("CT2319505.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2319505.UserID", "UN09225496386369703");
user_pref("CT2319505.backendstorage.hxxp://conduit-fb-toolbar_conduit_com/fbtoolbar.firsttime", "74727565");
user_pref("CT2319505.clientLogIsEnabled", true);
user_pref("CT2319505.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2319505.components.1000034", false);
user_pref("CT2319505.components.1000234", false);
user_pref("CT2319505.myStuffEnabled", true);
user_pref("CT2319505.myStuffPublihserMinWidth", 400);
user_pref("CT2319505.myStuffSearchUrl", "hxxp://search.conduit.com/Results.aspx?q=SEARCH_TERM&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID&SearchType=ToolbarComponents");
user_pref("CT2319505.myStuffServiceIntervalMM", 1440);
user_pref("CT2319505.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2319505.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2405727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2405727.CTID", "CT2405727");
user_pref("CT2405727.CurrentServerDate", "6-4-2010");
user_pref("CT2405727.DialogsAlignMode", "LTR");
user_pref("CT2405727.EMailNotifierPollDate", "Tue Apr 06 2010 16:22:16 GMT+0200");
user_pref("CT2405727.ExternalComponentPollDate129078516974368471", "Tue Apr 06 2010 09:13:51 GMT+0200");
user_pref("CT2405727.ExternalComponentPollDate8694032229628448321", "Mon Mar 29 2010 11:54:05 GMT+0200");
user_pref("CT2405727.FirstServerDate", "16-3-2010");
user_pref("CT2405727.FirstTime", true);
user_pref("CT2405727.FirstTimeFF3", true);
user_pref("CT2405727.GroupingServerCheckInterval", 1440);
user_pref("CT2405727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2405727.Initialize", true);
user_pref("CT2405727.InitializeCommonPrefs", true);
user_pref("CT2405727.InstalledDate", "Tue Mar 16 2010 09:28:07 GMT+0100");
user_pref("CT2405727.InvalidateCache", false);
user_pref("CT2405727.IsGrouping", false);
user_pref("CT2405727.IsMulticommunity", false);
user_pref("CT2405727.IsOpenThankYouPage", true);
user_pref("CT2405727.IsOpenUninstallPage", true);
user_pref("CT2405727.LanguagePackLastCheckTime", "Tue Apr 06 2010 09:13:53 GMT+0200");
user_pref("CT2405727.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2405727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2405727.LastLogin_2.5.6.0", "Fri Mar 26 2010 10:02:46 GMT+0100");
user_pref("CT2405727.LastLogin_2.5.8.6", "Tue Apr 06 2010 13:13:55 GMT+0200");
user_pref("CT2405727.LatestVersion", "2.1.0.18");
user_pref("CT2405727.Locale", "en");
user_pref("CT2405727.LoginCache", 4);
user_pref("CT2405727.MCDetectTooltipHeight", "83");
user_pref("CT2405727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2405727.MCDetectTooltipWidth", "295");
user_pref("CT2405727.RadioIsPodcast", false);
user_pref("CT2405727.RadioLastCheckTime", "Tue Apr 06 2010 09:13:53 GMT+0200");
user_pref("CT2405727.RadioLastUpdateIPServer", "3");
user_pref("CT2405727.RadioLastUpdateServer", "3");
user_pref("CT2405727.RadioMediaID", "9962");
user_pref("CT2405727.RadioMediaType", "Media Player");
user_pref("CT2405727.RadioMenuSelectedID", "EBRadioMenu_CT2405727_RECENT9962");
user_pref("CT2405727.RadioStationName", "California%20Rock");
user_pref("CT2405727.RadioStationURL", "hxxp://feedlive.net/california.asx");
user_pref("CT2405727.RadioVolume", "100");
user_pref("CT2405727.SHRINK_TOOLBAR", 1);
user_pref("CT2405727.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2405727&octid=EB_ORIGINAL_CTID");
user_pref("CT2405727.SearchFromAddressBarIsInit", true);
user_pref("CT2405727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405727&q=");
user_pref("CT2405727.SearchInNewTabEnabled", true);
user_pref("CT2405727.SearchInNewTabIntervalMM", 1440);
user_pref("CT2405727.SearchInNewTabLastCheckTime", "Tue Apr 06 2010 09:13:51 GMT+0200");
user_pref("CT2405727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2405727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2405727.SettingsCheckIntervalMin", 120);
user_pref("CT2405727.SettingsLastCheckTime", "Tue Apr 06 2010 15:11:35 GMT+0200");
user_pref("CT2405727.SettingsLastUpdate", "1269767550");
user_pref("CT2405727.ThirdPartyComponentsInterval", 504);
user_pref("CT2405727.ThirdPartyComponentsLastCheck", "Tue Mar 16 2010 09:28:04 GMT+0100");
user_pref("CT2405727.ThirdPartyComponentsLastUpdate", "1267120534");
user_pref("CT2405727.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2405727.UserID", "UN59044191848858177");
user_pref("CT2405727.ValidationData_Toolbar", 2);
user_pref("CT2405727.WeatherNetwork", "");
user_pref("CT2405727.WeatherPollDate", "Tue Apr 06 2010 15:14:15 GMT+0200");
user_pref("CT2405727.WeatherUnit", "C");
user_pref("CT2405727.alertChannelId", "800210");
user_pref("CT2405727.clientLogIsEnabled", true);
user_pref("CT2405727.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2405727.myStuffEnabled", true);
user_pref("CT2405727.myStuffPublihserMinWidth", 400);
user_pref("CT2405727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=2&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2405727.myStuffServiceIntervalMM", 1440);
user_pref("CT2405727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2405727.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT292072..clientLogIsEnabled", true);
user_pref("CT292072..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT292072..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT292072.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT292072.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT292072.AppTrackingLastCheckTime", "Wed Aug 29 2012 09:02:43 GMT+0200");
user_pref("CT292072.CTID", "CT292072");
user_pref("CT292072.CurrentServerDate", "12-10-2012");
user_pref("CT292072.DialogsAlignMode", "LTR");
user_pref("CT292072.DialogsGetterLastCheckTime", "Thu Oct 11 2012 10:06:37 GMT+0200");
user_pref("CT292072.DownloadReferralCookieData", "");
user_pref("CT292072.EMailNotifierPollDate", "Mon Jan 04 2010 16:50:30 GMT+0100");
user_pref("CT292072.FeedLastCount127980423826619355", 0);
user_pref("CT292072.FeedPollDate128433105078593902", "Fri Oct 12 2012 17:38:53 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593903", "Fri Oct 12 2012 18:01:42 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593904", "Fri Oct 12 2012 18:01:38 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593905", "Fri Oct 12 2012 18:01:40 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593906", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDate128433105078593907", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDate128526559992594353", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDate128706408669044644", "Fri Oct 12 2012 17:08:53 GMT+0200");
user_pref("CT292072.FeedPollDatehxxp://www.radiomarte.it/rdmarte.asx", "Thu Dec 16 2010 18:04:49 GMT+0100");
user_pref("CT292072.FeedTTL128433105078593904", 10);
user_pref("CT292072.FeedTTL128433105078593905", 30);
user_pref("CT292072.FeedTTL128433105078593907", 5);
user_pref("CT292072.FeedTTL128706408669044644", 5);
user_pref("CT292072.FirstServerDate", "17-12-2009");
user_pref("CT292072.FirstTime", true);
user_pref("CT292072.FirstTimeFF3", true);
user_pref("CT292072.FirstTimeSettingsDone", true);
user_pref("CT292072.GroupingServerCheckInterval", 1440);
user_pref("CT292072.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT292072.HasUserGlobalKeys", true);
user_pref("CT292072.HomePageProtectorEnabled", false);
user_pref("CT292072.Initialize", true);
user_pref("CT292072.InitializeCommonPrefs", true);
user_pref("CT292072.InstallationAndCookieDataSentCount", 3);
user_pref("CT292072.InstalledDate", "Thu Dec 17 2009 16:04:09 GMT+0100");
user_pref("CT292072.InvalidateCache", false);
user_pref("CT292072.IsAlertDBUpdated", true);
user_pref("CT292072.IsGrouping", false);
user_pref("CT292072.IsMulticommunity", false);
user_pref("CT292072.IsOpenThankYouPage", true);
user_pref("CT292072.IsOpenUninstallPage", true);
user_pref("CT292072.LanguagePackLastCheckTime", "Fri Oct 12 2012 09:02:22 GMT+0200");
user_pref("CT292072.LanguagePackReloadIntervalMM", 1440);
user_pref("CT292072.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT292072.LastLogin_2.5.2.13", "Mon Jan 04 2010 15:14:07 GMT+0100");
user_pref("CT292072.LastLogin_2.5.2.14", "Wed Jan 13 2010 09:22:38 GMT+0100");
user_pref("CT292072.LastLogin_2.5.4.7", "Wed Jan 27 2010 19:02:46 GMT+0100");
user_pref("CT292072.LastLogin_2.5.6.0", "Thu Feb 11 2010 11:41:06 GMT+0100");
user_pref("CT292072.LastLogin_2.5.8.6", "Thu Aug 19 2010 09:02:55 GMT+0200");
user_pref("CT292072.LastLogin_2.7.2.0", "Mon Mar 21 2011 09:07:53 GMT+0100");
user_pref("CT292072.LastLogin_3.10.0.1", "Wed Apr 25 2012 09:07:49 GMT+0200");
user_pref("CT292072.LastLogin_3.11.0.3", "Mon May 07 2012 17:00:45 GMT+0200");
user_pref("CT292072.LastLogin_3.12.2.3", "Sun May 20 2012 17:56:29 GMT+0200");
user_pref("CT292072.LastLogin_3.13.0.6", "Sun Jul 08 2012 18:45:37 GMT+0200");
user_pref("CT292072.LastLogin_3.14.1.0", "Wed Aug 29 2012 17:02:43 GMT+0200");
user_pref("CT292072.LastLogin_3.15.1.0", "Fri Oct 12 2012 17:01:42 GMT+0200");
user_pref("CT292072.LastLogin_3.2.5.2", "Thu Jan 06 2011 17:36:28 GMT+0100");
user_pref("CT292072.LastLogin_3.3.2.1", "Fri Apr 01 2011 17:06:40 GMT+0200");
user_pref("CT292072.LastLogin_3.3.3.2", "Fri Jun 24 2011 16:04:12 GMT+0200");
user_pref("CT292072.LastLogin_3.5.0.12", "Tue Aug 02 2011 13:51:31 GMT+0200");
user_pref("CT292072.LastLogin_3.6.0.10", "Wed Oct 05 2011 08:59:12 GMT+0200");
user_pref("CT292072.LastLogin_3.7.0.6", "Tue Oct 11 2011 17:21:57 GMT+0200");
user_pref("CT292072.LastLogin_3.8.0.8", "Mon Dec 05 2011 13:36:17 GMT+0100");
user_pref("CT292072.LastLogin_3.8.1.0", "Tue Jan 31 2012 17:22:52 GMT+0100");
user_pref("CT292072.LastLogin_3.9.0.3", "Mon Feb 13 2012 09:28:39 GMT+0100");
user_pref("CT292072.LatestVersion", "3.14.1.0");
user_pref("CT292072.Locale", "de");
user_pref("CT292072.LoginCache", 4);
user_pref("CT292072.MCDetectTooltipHeight", "83");
user_pref("CT292072.MCDetectTooltipShow", false);
user_pref("CT292072.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT292072.MCDetectTooltipWidth", "295");
user_pref("CT292072.MyStuffEnabledAtInstallation", true);
user_pref("CT292072.RadioIsPodcast", false);
user_pref("CT292072.RadioLastCheckTime", "Fri Oct 12 2012 09:02:42 GMT+0200");
user_pref("CT292072.RadioLastUpdateIPServer", "0");
user_pref("CT292072.RadioLastUpdateServer", "129696277231000000");
user_pref("CT292072.RadioMediaID", "8415661");
user_pref("CT292072.RadioMediaType", "Media Player");
user_pref("CT292072.RadioMenuSelectedID", "EBRadioMenu_CT292072_RECENT8415661");
user_pref("CT292072.RadioShrinked", "expanded");
user_pref("CT292072.RadioShrinkedFromSetup", false);
user_pref("CT292072.RadioStationName", "IDN%20(Italian%20Dance%20Network)");
user_pref("CT292072.RadioStationURL", "hxxp://www.italiandancenetwork.com/stream/links/listen.asx");
user_pref("CT292072.RadioVolume", "100");
user_pref("CT292072.SHRINK_TOOLBAR", 1);
user_pref("CT292072.SavedHomepage", "www.google.de");
user_pref("CT292072.SearchBoxWidth", 150);
user_pref("CT292072.SearchEngine", "Suchen||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT292072&octid=EB_ORIGINAL_CTID&SearchSource=1");
user_pref("CT292072.SearchEngineBeforeUnload", "DAEMON Search");
user_pref("CT292072.SearchFromAddressBarIsInit", true);
user_pref("CT292072.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT292072&q=");
user_pref("CT292072.SearchInNewTabEnabled", true);
user_pref("CT292072.SearchInNewTabIntervalMM", 1440);
user_pref("CT292072.SearchInNewTabLastCheckTime", "Fri Oct 12 2012 09:02:18 GMT+0200");
user_pref("CT292072.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT292072.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
user_pref("CT292072.SearchProtectorEnabled", false);
user_pref("CT292072.SearchProtectorToolbarDisabled", true);
user_pref("CT292072.ServiceMapLastCheckTime", "Fri Oct 12 2012 09:02:19 GMT+0200");
user_pref("CT292072.SettingsCheckIntervalMin", 120);
user_pref("CT292072.SettingsLastCheckTime", "Fri Oct 12 2012 17:08:52 GMT+0200");
user_pref("CT292072.SettingsLastUpdate", "1349971046");
user_pref("CT292072.ThirdPartyComponentsInterval", 504);
user_pref("CT292072.ThirdPartyComponentsLastCheck", "Sun Sep 30 2012 09:22:26 GMT+0200");
user_pref("CT292072.ThirdPartyComponentsLastUpdate", "1331806000");
user_pref("CT292072.ToolbarDisabled", false);
user_pref("CT292072.TrusteLinkUrl", "hxxp://trust.conduit.com/CT292072");
user_pref("CT292072.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,
user_pref("CT292072.UserID", "UN28161568897515626");
user_pref("CT292072.ValidationData_Search", 2);
user_pref("CT292072.ValidationData_Toolbar", 2);
user_pref("CT292072.WeatherNetwork", "");
user_pref("CT292072.WeatherPollDate", "Fri Oct 12 2012 18:02:56 GMT+0200");
user_pref("CT292072.WeatherUnit", "C");
user_pref("CT292072.alertChannelId", "2050");
user_pref("CT292072.approveUntrustedApps", false);
user_pref("CT292072.backendstorage.ct292072ads1", "25374225323261647325323225334125354225374225323261696425323225334125323235313939332532322532432532327469746C6525323225334125
user_pref("CT292072.backendstorage.ct292072current_term", "616E6E65782B622B6C253235433325323541346E646572");
user_pref("CT292072.backendstorage.ct292072sdate", "3132");
user_pref("CT292072.clientLogIsEnabled", true);
user_pref("CT292072.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT292072.components.1000034", false);
user_pref("CT292072.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPa
user_pref("CT292072.globalFirstTimeInfoLastCheckTime", "Mon Oct 08 2012 09:12:55 GMT+0200");
user_pref("CT292072.homepageProtectorEnableByLogin", true);
user_pref("CT292072.initDone", true);
user_pref("CT292072.isAppTrackingManagerOn", false);
user_pref("CT292072.myStuffEnabled", true);
user_pref("CT292072.myStuffPublihserMinWidth", 400);
user_pref("CT292072.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT292072.myStuffServiceIntervalMM", 1440);
user_pref("CT292072.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT292072.oldAppsList", "128344096801806658,128530302388825347,1000048,111,1000082,128537290694631967,128562659353262628,128839743997025524,128880706733682176,129245
user_pref("CT292072.revertSettingsEnabled", true);
user_pref("CT292072.searchProtectorDialogDelayInSec", 10);
user_pref("CT292072.searchProtectorEnableByLogin", true);
user_pref("CT292072.testingCtid", "");
user_pref("CT292072.toolbarAppMetaDataLastCheckTime", "Fri Oct 12 2012 09:02:22 GMT+0200");
user_pref("CT292072.toolbarContextMenuLastCheckTime", "Sat Oct 06 2012 09:12:53 GMT+0200");
user_pref("CT292072.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT292072.usagesFlag", 2);
user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT292072");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT292072/CT292072", "\"d41d8cd98f00b204e9800998ecf8427e3\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/2050/2050/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/715594/711454/DE", "\"3-192980-48286800\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/830903/826706/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832216/828019/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/833802/829605/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/836077/831880/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/836095/831898/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT292072", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "oIwsta2spzadhjRgiY1Nhw==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "WiZSpHJzJ/uTUKvfHHyj/w==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "9H/gICSaMqbmx+Gd+8W4Sg==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "eJfMrdrGnhGHiiPiYjgAww==");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"8076e3ce381dcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.2.1", "\"0652eeacc6cb1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10.0.1", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11.0.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.2.1", "\"0652eeacc6cb1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"8028f138140cc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"0ee90707f77cc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"0ee90707f77cc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.0.8", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.1.0", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.0.3", "\"801a319dd78ccc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT292072", "\"f1c77625c0e9bd1c80a2fd6901845fa9\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2010 4:33:06 PM", "634293235860000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT292072&octid=CT292072", "\"1321973020\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT292072/CT292072", "\"1310989086\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"c6960976a618e81645094348c65a4014\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"5f18cd8784b2c41199661ad75d198ddb\"");
user_pref("CommunityToolbar.EngineHiddenByUser", true);
user_pref("CommunityToolbar.EngineOwner", "");
user_pref("CommunityToolbar.EngineOwnerGuid", "");
user_pref("CommunityToolbar.EngineOwnerToolbarId", "");
user_pref("CommunityToolbar.IsEngineShown", false);
user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Dokumente und Einstellungen\\Pietro\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\nim9nd3a.default\\conduitCommon\\mo
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/52/156/CT1561552/Gadgets/a4709183-4a1f-4321-a83e-4ae33d3f7f99.html", "360x250");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://storage.conduit.com/72/29/CT292072/Gadgets/22e85617-7e46-4e8d-b90d-2be1d9b7f726.html", "122x23");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://tvtoolbar.org/tvtoolbar/gadget/tvplayer.php?subcategory=368&category=24", "327x39");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/11.swf&player=flash", "226x113");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/131.swf&player=flash", "261x166");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/152.swf&player=flash", "233x74");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/179.swf&player=flash", "418x122");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/180.swf&player=flash", "226x94");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/53.swf&player=flash", "330x160");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/55.swf&player=flash", "337x92");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/79.swf&player=flash", "216x96");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/13.swf&player=flash", "418x60");
user_pref("CommunityToolbar.MiniIPageGadgetPosition.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/178.swf&player=flash", "389x80");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://storage.conduit.com/72/29/CT292072/Gadgets/22e85617-7e46-4e8d-b90d-2be1d9b7f726.html", "774x659");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/11.swf&player=flash", "500x430");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/179.swf&player=flash", "490x358");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/55.swf&player=flash", "488x430");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash.php?source=swf/79.swf&player=flash", "488x430");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash2.php?source=swf/58.swf&player=flash", "700x650");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://www.tv-toolbar.com/Gadgets/Games/flash3.php?source=swf/178.swf&player=flash", "488x430");
user_pref("CommunityToolbar.OriginalEngineOwner", "");
user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.ToolbarsList", "CT292072,CT2319505,CT2197656,CT2405727");
user_pref("CommunityToolbar.ToolbarsList2", "CT292072,CT2197656,CT2405727");
user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Mon Mar 21 2011 15:23:09 GMT+0100");
user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 18 2011 22:18:45 GMT+0200");
user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
user_pref("CommunityToolbar.alert.locale", "en");
user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Jun 23 2011 18:07:03 GMT+0200");
user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.alert.showTrayIcon", false);
user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.alert.userId", "{ada1af42-700e-4dfd-92fa-5012f0c62045}");
user_pref("CommunityToolbar.globalUserId", "0191840a-6c8c-491d-a17e-7c15504599a0");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT292072");
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Oct 06 2012 09:13:05 GMT+0200");
user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Fri Oct 12 2012 09:24:38 GMT+0200");
user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Fri Oct 12 2012 09:24:30 GMT+0200");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "8cdb738e-9409-4f66-84b7-45b28b6cc357");
user_pref("CommunityToolbar.twitter.user_16332734.LastCheckTime", "Mon Dec 21 2009 15:05:52 GMT+0100");
user_pref("browser.search.defaultthis.engineName", "Deutschland Radio Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.aol.com/search/search?query={searchTerms}&invocationType=tb50-ff-aolTB50CL-chromesbox-en-us");
user_pref("extensions.alexa.searchconf", "{\n  \"google\" : {\n    \"urlexp\" : \"hxxp:\\\\/\\\\/www\\\\.google\\\\..*\\\\/.*[?#&]q=([^&]+)\"\n  },\n  \"bing\"  : {\n    \"ur
user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n  <replacements>\n    <replacement>\n      <key><![CDATA[__REGION__PLACEHO
user_pref("extensions.seoquake.params.0.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.1.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.108.icon", "AAABAAIAEBAAAAAAAABoBQAAJgAAACAgAAAAAAAAqAgAAI4FAAAoAAAAEAAAACAAAAABAAgAAAAAAEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///wAGgvsA63YdA
user_pref("extensions.seoquake.params.2.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.20.icon", "AAABAAEAEBAAAAEAGABoAwAAFgAAACgAAAAQAAAAIAAAAAEAGAAAAAAAAAAAABMLAAATCwAAAAAAAAAAAAAVpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv8Vpv
user_pref("extensions.seoquake.params.3.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7PT7/3zF6/9Ptu//RbHx/0227/+Tzvb/9vv5/97
user_pref("extensions.seoquake.params.51.icon", "AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAABILAAASCwAAAAAAAAAAAACgoKB+oKCg56CgoP+goKD/oKCg/6CgoP+goKD/oKCg/6
user_pref("extensions.veohsearchrecs.SupportedSites", "<?xml version=\"1.0\" ?>\r\n<results revision=\"1.5.2\">\r\n    <sites>\r\n        <searchsite MatchesDomain=\"google.\"
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT292072&q=");





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.04.2013 at 14:17:50,57
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---


[CODE]hier die nächste.AdwCleaner Logfile:
Code:
# AdwCleaner v2.200 - Datei am 04/04/2013 um 14:28:44 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits)
# Benutzer : Pietro - COMPUTERCASA
# Bootmodus : Normal
# Ausgeführt unter : C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Programme\Mozilla Firefox\searchplugins\StartWeb.xml
Ordner Gelöscht : C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Tarma Installer

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [speedanalysis@SpeedAnalysis.com]

***** [Internet Browser] *****

-\\ Internet Explorer v6.0.2900.2180

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v20.0 (de)

*************************

AdwCleaner[S1].txt - [1085 octets] - [04/04/2013 14:28:44]

########## EOF - C:\AdwCleaner[S1].txt - [1145 octets] ##########
--- --- ---

cosinus 04.04.2013 15:18
Was ist mit OTL?

4cani 04.04.2013 16:14
ich werde gegen 19 Uhr zu Hause sein und wenn OTL schon fertig ist werde ich den log posten.
Danke dir

cosinus 04.04.2013 16:32
Ok, aber eine Bitte: lass solche Zwischenrufe, poste nur wenn es Probleme gibt oder wenn du die Logs hast (diese dann auch posten in CODE-Tags)

4cani 05.04.2013 19:32
Code:
sorry, als code tag ist zu lang.

4cani 05.04.2013 19:34
Code:
hier der 2. log.

cosinus 06.04.2013 03:20
Ich weiß nicht was du mit den OTL-Logs gemacht hast, aber was du in den ZIP gepackt hast, da steht großer Quatsch drin bzw. mein Texteditor kann es nicht darstellen :confused:

Bitte die Original-Logdatei so belassen und hier hochladen => File-Upload.net - Ihr kostenloser File Hoster!
Und hier verlinken

4cani 06.04.2013 13:46
Code:
hxxp://www.file-upload.net/download-7433312/Extras.Txt.html
hxxp://www.file-upload.net/download-7433313/OTL.Txt.html

cosinus 06.04.2013 16:59
Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes - denk bitte vorher daran, Malwarebytes über den Updatebutton zu aktualisieren

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


4cani 07.04.2013 11:30
Code:
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Datenbank Version: v2013.04.06.06

Windows XP Service Pack 2 x86 NTFS
Internet Explorer 6.0.2900.2180
Pietro :: COMPUTERCASA [Administrator]

07.04.2013 00:47:24
mbam-log-2013-04-07 (00-47-24).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 321662
Laufzeit: 1 Stunde(n), 1 Minute(n), 5 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

cosinus 07.04.2013 22:17
Was ist mit dem anderen Log (ESET)?

4cani 07.04.2013 22:46
Code:
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=1
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=94862f2ad1e97542a8ddeb084c9a863c
# engine=13567
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-04-07 09:39:23
# local_time=2013-04-07 11:39:23 (+0100, Westeuropäische Normalzeit)
# country="Germany"
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# scanned=153495
# found=6
# cleaned=0
# scan_time=38266
sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=D9F91FA435BDBB0764D4CEC8ED99BFF722D87F93 ft=1 fh=602781cac6882f06 vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP32\A0003022.dll"
sh=75DFDC05C5D5F0C3B930B5B6871B6528EC9C22EA ft=1 fh=cff868ace0c06f1a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP35\A0003176.dll"
sh=410B32FD3FE4642644AD91AC60C69B86EC2762DD ft=1 fh=0e378a435beab91a vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\System Volume Information\_restore{CB5C8FD2-5438-4188-888F-E6B7E5FE958C}\RP41\A0006102.dll"
sh=5B80FC504E8CA6B6BEB68C2B398DEAFCE811426C ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo application" ac=I fn="D:\Firefox 12.0 (de) - 2012-05-07.pcv"
sh=D84249CE051B0513391DECC5419C0F27AEC7F645 ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo application" ac=I fn="D:\Dokumente und Einstellungen\Pietro\Anwendungsdaten\Mozilla\Firefox\Profiles\4yyze240.default\extensions\plugin@yontoo.com\content\overlay.js"

cosinus 08.04.2013 09:47
Wo kommt denn dieser Tarma-Müll schon wieder her?
Hast du JRT vorher nicht neu runtergeladen?

Bitte JRT und adwCleaner nochmal machen, beide Tools vorher neu runterladen bitte!

4cani 08.04.2013 13:39
Code:
sorry, ich glaube es stand nicht da das ich es erneut herunterladen muss aber jetzt habe ich es getan und hier der lo: von JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.8.3 (04.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Pietro on 08.04.2013 at 14:16:34,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Anwendungsdaten\mozilla\firefox\profiles\pxnrfpcd.default\extensions\LogMeInClient@logmein.com





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2013 at 14:33:38,74
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
# AdwCleaner v2.200 - Datei am 08/04/2013 um 14:45:15 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Microsoft Windows XP Service Pack 2 (32 bits)
# Benutzer : Pietro - COMPUTERCASA
# Bootmodus : Normal
# Ausgeführt unter : C:\Dokumente und Einstellungen\Pietro.COMPUTERCASA\Desktop\AdwCleaner(1).exe
# Option [Suche]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****


***** [Internet Browser] *****

-\\ Internet Explorer v6.0.2900.2180

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v20.0 (de)

*************************

AdwCleaner[R1].txt - [639 octets] - [08/04/2013 14:45:15]
AdwCleaner[S1].txt - [1214 octets] - [04/04/2013 14:28:44]

########## EOF - C:\AdwCleaner[R1].txt - [758 octets] ##########


Alle Zeitangaben in WEZ +1. Es ist jetzt 17:02 Uhr.
Seite 2 von 4 1 2 34
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20