| Onkelz77 | 30.08.2013 19:42 |
AdwCleaner Logfile: Code:
# AdwCleaner v3.001 - Report created 30/08/2013 at 15:52:02
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : NICOLE Engelchen - NICOLEENGELCHEN
# Running from : C:\Users\NICOLE Engelchen\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\Program Files (x86)\FilesFrog Update Checker
Folder Deleted : C:\Program Files (x86)\optimizer pro
Folder Deleted : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Local\PackageAware
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\LocalLow\CT2625848
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Babylon
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\DSite
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\dvdvideosoftiehelpers
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\ConduitCommon
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\Smartbar
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\CT2625848
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\CT3196716
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\Extensions\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}
Folder Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\Extensions\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1}
File Deleted : C:\END
File Deleted : C:\Users\NICOLE Engelchen\Desktop\Check for Updates.lnk
File Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\searchplugins\11-suche.xml
File Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\searchplugins\Askcom.xml
File Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\searchplugins\dvdvideosofttb-de-customized-web-search.xml
File Deleted : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hhmbl78o.default-1374774576054\searchplugins\Web Search.xml
File Deleted : C:\Windows\Tasks\DSite.job
File Deleted : C:\Windows\System32\Tasks\DSite
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\NICOLE Engelchen\Desktop\Search.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5555CC4C-FA2B-4D69-8296-B6AE5E95C0B7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{63BEF061-5EFC-4753-9806-ED0573BC7C4B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0E44BB13-2523-468B-BF51-58D5F52A84F6}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Somoto
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DeviceVM
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
Key Deleted : [x64] HKLM\SOFTWARE\DeviceVM
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16660
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v23.0.1 (de)
[ File : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hhmbl78o.default-1374774576054\prefs.js ]
Line Deleted : user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=00E79439E5BCC041&affID=119357&tt=280813_dt&tsp=4990");
Line Deleted : user_pref("browser.search.defaultenginename", "Web Search");
Line Deleted : user_pref("browser.search.selectedEngine", "Web Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=00E79439E5BCC041&affID=119357&tt=280813_dt&tsp=4990");
Line Deleted : user_pref("extensions.crossrider.bic", "140cab488aa0b3a7392eee6b63e8d4f4");
Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", false);
Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Line Deleted : user_pref("extensions.helperbar.Visibility", true);
Line Deleted : user_pref("extensions.helperbar.countryiso", "de");
Line Deleted : user_pref("extensions.helperbar.downloadprovider", "bundlore");
Line Deleted : user_pref("extensions.helperbar.installationid", "2c83c007-3953-42d3-c5e3-2865df6576f9");
Line Deleted : user_pref("extensions.helperbar.installdate", "29/08/2013");
Line Deleted : user_pref("extensions.helperbar.publisher", "bundlore");
[ File : C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hui3hyf8.default\prefs.js ]
Line Deleted : user_pref("CT2625848.1000082.isDisplayHidden", "true");
Line Deleted : user_pref("CT2625848.1000082.isPlayDisplay", "true");
Line Deleted : user_pref("CT2625848.1000082.shrinkState", "shrinked");
Line Deleted : user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
Line Deleted : user_pref("CT2625848.2625848a129894023611240511000000paramsGK1.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzY2MDU2NTA2OTUzLCJ1cGRhdGVSZXNwVGltZSI6MTM2NjA1NjUwNzMwMywiZGF0YSI6eyJzZXR0aW5ncyI6eyJpY29uIjoiaHR0cDovL3[...]
Line Deleted : user_pref("CT2625848.CBOpenMAMSettings.enc", "MA==");
Line Deleted : user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.FirstTime", "true");
Line Deleted : user_pref("CT2625848.FirstTimeFF3", "true");
Line Deleted : user_pref("CT2625848.LoginRevertSettingsEnabled", true);
Line Deleted : user_pref("CT2625848.PG_ENABLE", "dHJ1ZQ==");
Line Deleted : user_pref("CT2625848.RevertSettingsEnabled", true);
Line Deleted : user_pref("CT2625848.SearchAppState.enc", "Mw==");
Line Deleted : user_pref("CT2625848.SearchAppTracking.enc", "c2VudA==");
Line Deleted : user_pref("CT2625848.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
Line Deleted : user_pref("CT2625848.UserID", "UN54405107175903469");
Line Deleted : user_pref("CT2625848.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT2625848.autoDisableScopes", -1);
Line Deleted : user_pref("CT2625848.browser.search.defaultthis.engineName", true);
Line Deleted : user_pref("CT2625848.cb_experience_000.enc", "MTg4");
Line Deleted : user_pref("CT2625848.cb_firstuse0100.enc", "MQ==");
Line Deleted : user_pref("CT2625848.cb_user_id_000.enc", "Q0I2MjI0NTM3NjA4MzhfMTM1NzA0MjY0NzM5MF9GaXJlZm94");
Line Deleted : user_pref("CT2625848.cbcountry_001.enc", "REU=");
Line Deleted : user_pref("CT2625848.cbfirsttime.enc", "VHVlIEphbiAwMSAyMDEzIDEzOjAzOjAwIEdNVCswMTAw");
Line Deleted : user_pref("CT2625848.countryCode", "DE");
Line Deleted : user_pref("CT2625848.defaultSearch", "true");
Line Deleted : user_pref("CT2625848.embeddedsData", "[{\"appId\":\"129181467799155027\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT2625848.enableAlerts", "false");
Line Deleted : user_pref("CT2625848.enableFix404ByUser", "TRUE");
Line Deleted : user_pref("CT2625848.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT2625848.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT2625848.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT2625848.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT2625848.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT2625848.fixUrls", true);
Line Deleted : user_pref("CT2625848.fullUserID", "UN54405107175903469.XX.20130626083917");
Line Deleted : user_pref("CT2625848.hxxp___www_socialgrowthtechnologies_com_couponbuddy_v001.APP_WIN_FEATURES.enc", "b3BlbnBvc2l0aW9uPW9mZnNldDo1MDs1MCxzYXZlbG9jYXRpb249MCxyZXNpemFibGU9bm8sc2Nyb2xsYmFycz1ubyx0aXRsZW[...]
Line Deleted : user_pref("CT2625848.installId", "conduitnsisintegration");
Line Deleted : user_pref("CT2625848.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT2625848.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT2625848.isNewTabEnabled", true);
Line Deleted : user_pref("CT2625848.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT2625848.keyword", true);
Line Deleted : user_pref("CT2625848.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2625848&octid=CT2625848&SearchSource=15&CUI=UN54405107175903469&SSPV=&Lay=1&UM=false\"}[...]
Line Deleted : user_pref("CT2625848.lastVersion", "10.16.4.519");
Line Deleted : user_pref("CT2625848.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT2625848.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fmy.fulltiltpoker.eu%2Fde%2Fmy-promotions%2Fedge%3Fkey%3DcGxheWVyaXg9MTE0ODg5OTMmdG9rZW49S1kzRThSOENQNTRNSExOVUw1TFF[...]
Line Deleted : user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.openThankYouPage", "false");
Line Deleted : user_pref("CT2625848.openUninstallPage", "true");
Line Deleted : user_pref("CT2625848.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=");
Line Deleted : user_pref("CT2625848.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\\"01\\\\/01\\\\/2013 15\\\"}\"}");
Line Deleted : user_pref("CT2625848.price-gong.isManagedApp", "true");
Line Deleted : user_pref("CT2625848.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT2625848.search.searchAppId", "129181467799155027");
Line Deleted : user_pref("CT2625848.search.searchCount", "2");
Line Deleted : user_pref("CT2625848.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT2625848.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT2625848.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2625848\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTBDE.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB DE\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT2625848.serviceLayer_services_Configuration_lastUpdate", "1373835256085");
Line Deleted : user_pref("CT2625848.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1373535366049");
Line Deleted : user_pref("CT2625848.serviceLayer_services_appTracking_lastUpdate", "1363780416221");
Line Deleted : user_pref("CT2625848.serviceLayer_services_appsMetadata_lastUpdate", "1373835255939");
Line Deleted : user_pref("CT2625848.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1373176712373");
Line Deleted : user_pref("CT2625848.serviceLayer_services_location_lastUpdate", "1372112779675");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358446562647");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359658598787");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360462577443");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364330619266");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.15.0.562_lastUpdate", "1365964004361");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.15.2.523_lastUpdate", "1368642077927");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372184602261");
Line Deleted : user_pref("CT2625848.serviceLayer_services_login_10.16.4.519_lastUpdate", "1373898026061");
Line Deleted : user_pref("CT2625848.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1373176712405");
Line Deleted : user_pref("CT2625848.serviceLayer_services_searchAPI_lastUpdate", "1373835256020");
Line Deleted : user_pref("CT2625848.serviceLayer_services_serviceMap_lastUpdate", "1373835255931");
Line Deleted : user_pref("CT2625848.serviceLayer_services_setupAPI_lastUpdate", "1364330619511");
Line Deleted : user_pref("CT2625848.serviceLayer_services_toolbarContextMenu_lastUpdate", "1373176712433");
Line Deleted : user_pref("CT2625848.serviceLayer_services_toolbarSettings_lastUpdate", "1373898026134");
Line Deleted : user_pref("CT2625848.serviceLayer_services_translation_lastUpdate", "1373835256051");
Line Deleted : user_pref("CT2625848.serviceLayer_services_userApps1ec55dac-8dca-406b-9697-5d68893c1c0c_lastUpdate", "1366437294549");
Line Deleted : user_pref("CT2625848.serviceLayer_services_userApps_lastUpdate", "1366437294555");
Line Deleted : user_pref("CT2625848.settingsINI", true);
Line Deleted : user_pref("CT2625848.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT2625848.showToolbarPermission", "false");
Line Deleted : user_pref("CT2625848.smartbar.CTID", "CT2625848");
Line Deleted : user_pref("CT2625848.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT2625848.smartbar.homepage", true);
Line Deleted : user_pref("CT2625848.smartbar.toolbarName", "DVDVideoSoftTB DE ");
Line Deleted : user_pref("CT2625848.toolbarBornServerTime", "1-1-2013");
Line Deleted : user_pref("CT2625848.toolbarCurrentServerTime", "15-7-2013");
Line Deleted : user_pref("CT2625848.toolbarLoginClientTime", "Wed Mar 27 2013 21:19:11 GMT+0100");
Line Deleted : user_pref("CT2625848.url_history0001.enc", "aHR0cDovL3d3dy5zb2NjZXJnYW1lLmRlL2luZGV4LnBocD9XZXJ0PUFwU3RhdGlzdGlrZW46OjpjbGlja2hhbmRsZXI6OjoxMzY1MTA2ODYyNTkyLCwsaHR0cDovL3d3dy5zb2NjZXJnYW1lLmRlL2luZGV4[...]
Line Deleted : user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1373899548438,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3196716..clientLogIsEnabled", false);
Line Deleted : user_pref("CT3196716..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT3196716..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT3196716.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT3196716.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT3196716.AppTrackingLastCheckTime", "Sun Jan 06 2013 04:42:21 GMT+0100");
Line Deleted : user_pref("CT3196716.BrowserCompStateIsOpen_129774122767598898", true);
Line Deleted : user_pref("CT3196716.BrowserCompStateIsOpen_1359634299000", true);
Line Deleted : user_pref("CT3196716.BrowserCompStateIsOpen_1366704382000", true);
Line Deleted : user_pref("CT3196716.BrowserCompStateIsOpen_1367225922000", true);
Line Deleted : user_pref("CT3196716.BrowserCompStateIsOpen_8478564928926792879", true);
Line Deleted : user_pref("CT3196716.CT3196716", "CT3196716");
Line Deleted : user_pref("CT3196716.CommunitiesChangesLastCheckTime", "0");
Line Deleted : user_pref("CT3196716.CurrentServerDate", "15-7-2013");
Line Deleted : user_pref("CT3196716.DSChangedManually", false);
Line Deleted : user_pref("CT3196716.DSInstall", true);
Line Deleted : user_pref("CT3196716.DSProtectChoice", true);
Line Deleted : user_pref("CT3196716.DSProtectCount", 7);
Line Deleted : user_pref("CT3196716.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT3196716.DialogsGetterLastCheckTime", "Sun Jul 14 2013 18:52:39 GMT+0200");
Line Deleted : user_pref("CT3196716.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT3196716.EMailNotifierPollDate", "Mon Jul 15 2013 16:43:24 GMT+0200");
Line Deleted : user_pref("CT3196716.ExternalComponentPollDate129755756828511878", "Sun Jul 14 2013 18:52:35 GMT+0200");
Line Deleted : user_pref("CT3196716.ExternalComponentPollDate129757581393447276", "Sun Jul 14 2013 18:52:35 GMT+0200");
Line Deleted : user_pref("CT3196716.FirstServerDate", "29-4-2012");
Line Deleted : user_pref("CT3196716.FirstTime", true);
Line Deleted : user_pref("CT3196716.FirstTimeFF3", true);
Line Deleted : user_pref("CT3196716.FixPageNotFoundErrors", false);
Line Deleted : user_pref("CT3196716.GroupingInvalidateCache", false);
Line Deleted : user_pref("CT3196716.GroupingLastCheckTime", "0");
Line Deleted : user_pref("CT3196716.GroupingLastServerUpdateTime", "0");
Line Deleted : user_pref("CT3196716.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT3196716.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT3196716.HPChangedManually", true);
Line Deleted : user_pref("CT3196716.HPInstall", true);
Line Deleted : user_pref("CT3196716.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT3196716.HomePageProtectorEnabled", false);
Line Deleted : user_pref("CT3196716.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT2625848&SearchSource=13&CUI=SB_CUI");
Line Deleted : user_pref("CT3196716.Initialize", true);
Line Deleted : user_pref("CT3196716.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT3196716.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT3196716.InstallationType", "Unknown");
Line Deleted : user_pref("CT3196716.InstalledDate", "Sun Apr 29 2012 19:35:12 GMT+0200");
Line Deleted : user_pref("CT3196716.InvalidateCache", false);
Line Deleted : user_pref("CT3196716.IsAlertDBUpdated", true);
Line Deleted : user_pref("CT3196716.IsGrouping", false);
Line Deleted : user_pref("CT3196716.IsInitSetupIni", true);
Line Deleted : user_pref("CT3196716.IsMulticommunity", false);
Line Deleted : user_pref("CT3196716.IsOpenThankYouPage", true);
Line Deleted : user_pref("CT3196716.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT3196716.IsProtectorsInit", true);
Line Deleted : user_pref("CT3196716.LanguagePackLastCheckTime", "Mon Jul 15 2013 03:12:13 GMT+0200");
Line Deleted : user_pref("CT3196716.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT3196716.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT3196716.LastLogin_3.12.0.8", "Wed May 02 2012 17:33:47 GMT+0200");
Line Deleted : user_pref("CT3196716.LastLogin_3.12.2.3", "Wed May 30 2012 18:04:34 GMT+0200");
Line Deleted : user_pref("CT3196716.LastLogin_3.13.0.6", "Sun Nov 18 2012 17:58:29 GMT+0100");
Line Deleted : user_pref("CT3196716.LastLogin_3.16.0.100", "Thu Feb 14 2013 19:40:15 GMT+0100");
Line Deleted : user_pref("CT3196716.LastLogin_3.16.0.3", "Mon Dec 31 2012 01:10:18 GMT+0100");
Line Deleted : user_pref("CT3196716.LastLogin_3.18.0.7", "Sun Jul 14 2013 18:52:39 GMT+0200");
Line Deleted : user_pref("CT3196716.LastLogin_3.19.0.3", "Mon Jul 15 2013 16:18:25 GMT+0200");
Line Deleted : user_pref("CT3196716.LatestVersion", "3.19.0.3");
Line Deleted : user_pref("CT3196716.Locale", "en");
Line Deleted : user_pref("CT3196716.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT3196716.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT3196716.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT3196716.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT3196716.OriginalFirstVersion", "3.12.0.8");
Line Deleted : user_pref("CT3196716.RadioIsPodcast", false);
Line Deleted : user_pref("CT3196716.RadioLastCheckTime", "Mon Jul 15 2013 03:12:13 GMT+0200");
Line Deleted : user_pref("CT3196716.RadioLastUpdateIPServer", "3");
Line Deleted : user_pref("CT3196716.RadioLastUpdateServer", "3");
Line Deleted : user_pref("CT3196716.RadioMediaID", "9962");
Line Deleted : user_pref("CT3196716.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT3196716.RadioMenuSelectedID", "EBRadioMenu_CT31967169962");
Line Deleted : user_pref("CT3196716.RadioShrinked", "shrinked");
Line Deleted : user_pref("CT3196716.RadioShrinkedFromSetup", true);
Line Deleted : user_pref("CT3196716.RadioStationName", "California%20Rock");
Line Deleted : user_pref("CT3196716.RadioStationURL", "hxxp://feedlive.net/california.asx");
Line Deleted : user_pref("CT3196716.SavedHomepage", "data:text/plain,browser.startup.homepage=hxxp://de.search.yahoo.com/firefox/?fr=foxload-sfp");
Line Deleted : user_pref("CT3196716.SearchBoxWidth", 100);
Line Deleted : user_pref("CT3196716.SearchCaption", "WiseConvert Customized Web Search");
Line Deleted : user_pref("CT3196716.SearchEngineBeforeUnload", "WiseConvert Customized Web Search");
Line Deleted : user_pref("CT3196716.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT3196716.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=");
Line Deleted : user_pref("CT3196716.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT3196716.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT3196716.SearchInNewTabLastCheckTime", "Mon Jul 15 2013 03:12:13 GMT+0200");
Line Deleted : user_pref("CT3196716.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT3196716.SearchProtectorEnabled", true);
Line Deleted : user_pref("CT3196716.SearchProtectorToolbarDisabled", false);
Line Deleted : user_pref("CT3196716.SendProtectorDataViaLogin", true);
Line Deleted : user_pref("CT3196716.ServiceMapLastCheckTime", "Mon Jul 15 2013 03:12:13 GMT+0200");
Line Deleted : user_pref("CT3196716.SettingsLastCheckTime", "Mon Jul 15 2013 16:18:24 GMT+0200");
Line Deleted : user_pref("CT3196716.SettingsLastUpdate", "1373891662");
Line Deleted : user_pref("CT3196716.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3196716&SearchSource=13");
Line Deleted : user_pref("CT3196716.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT3196716.ThirdPartyComponentsLastCheck", "Sat Jun 29 2013 09:24:37 GMT+0200");
Line Deleted : user_pref("CT3196716.ThirdPartyComponentsLastUpdate", "1331805997");
Line Deleted : user_pref("CT3196716.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT3196716.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3196716");
Line Deleted : user_pref("CT3196716.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT3196716.UserID", "UN10324226219607857");
Line Deleted : user_pref("CT3196716.ValidationData_Search", 1);
Line Deleted : user_pref("CT3196716.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT3196716.WeatherNetwork", "");
Line Deleted : user_pref("CT3196716.WeatherPollDate", "Mon Jul 15 2013 16:18:25 GMT+0200");
Line Deleted : user_pref("CT3196716.WeatherUnit", "C");
Line Deleted : user_pref("CT3196716.alertChannelId", "1613210");
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B474953462D584D503D263F2D2E3135443B464E4F5B565E695B426D6265523B544243464959505B637D737B6E55217578654E675[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e-x305", "247E29327641363937333545397E3F493B2F77317E202520362D3842474A58515A5C585D505F593964595C49324B393A3F395047525C4173686B6965677B796F6D7B6E552175785926766[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e.:2z527", "2423");
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e06cg5el8:", "6E6D6A6F6B6B6E6D7770");
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737075717174737D76242F4B49474F42357D5D5C3D");
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj06eh;lhc=nba*dpjj.xx", "247E61393F236B25717374712A212C6E414F444D327A343C4251544758544F495A4E4D36505C56563A646449404B2E5A5B6450395241544B5663676E5A43625D6[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj3f@9lfdm%oo", "247E61393F236B25727574712A212C6E414F444D327A343F524C4558525059315B5B403742256257525A5558524B344D2C2C5047523561626B5740594A495C535E706F7320[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj6f@hc@c$nn", "247E61393F236B2576727777782B222D6F4250454E337B3543534D55504D50315B5B403742256257525A5558524B344D2C2C504752357275635740594B445C535E416D6E776[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj7@3 jj", "247E61393F236B2576727974742B222D6F4250454E337B35444D402D57573C333E215E534E5651544E47304928284C434E316E715F533C554649584F5A3D696A735F48615251645[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj7c==!mkp>n(@nds,wlo", "247E61393F236B25737478792A212C6E414F444D327A34434F49492D59575C4A5A344C5A505F3863585B483F4A2D6A5F5A625D605A533C553434584F5A3D7A7D6B[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj7fk;kg#8qkef)til", "247E61393F236B25737476742A212C6E414F444D327A344352574757532F445D57515235605558453C472A615E5C5B6F5B57616D523B5443564D583B67636D795E476[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj7fk;kg#ncep@mc+vkn", "247E61393F236B25737471712A212C6E414F444D327A344352574757532F5A4F515C4C594F3762575A473E492C58545E6A4F38513C534A553864656E5A435C4B5E5[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj96c:an#ncf", "247E61393F236B2575777177752B222D6F4250454E337B35464350474E5B305B50534045");
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cj?b>f!lad", "247E61393F236B25717871712A212C6E414F444D327A344B4E4A522D584D503D343F225F544F5752554F48314A777A4D444F326F7260543D56484859505B3E6A6B74604962516[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjb<@djn7njnqj)ss", "247E61393F236B25717179762A212C6E414F444D327A344E484C50565A435A565A5D56355F5F443B4629665B565E595C564F38513030544B56397679675B445D4F4A60[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjc9=8>@b$nn", "247E61393F236B2576737179722B222D6F4250454E337B3550464A454B4D4F315B5B403742256257525A5558524B344D2C2C504752357275635740594A4D5C535E416D6E776[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjc<=fbj#mm", "247E61393F236B257576737A2A212C6E414F444D327A344F4849524E562F59593E3540236055505853565049324B2A2A4E4550335F5B6571563F58435A515C3F7B717E242175[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjc<=fbj#ncf", "247E61393F236B25757677712A212C6E414F444D327A344F4849524E562F5A4F523F364124504C56624730493B4B424D306C626F74716669676C7466767D7979732068614A6[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjc<=fbj#ncf'ad", "247E61393F236B257575747A2A212C6E414F444D327A344F4849524E562F5A4F52334D50423944276459545C575A544D364F7D2152495437635F69755A435C4E5E556043[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjeik4!kk", "247E61393F236B25767177722A212C6E414F444D327A34515557402D57573C333E215E534E5651544E47304928284C434E315D5E67533C554645584F5A6A7E72767276614A6964[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjeik4!lad", "247E61393F236B25767179732A212C6E414F444D327A34515557402D584D503D343F224E4F58442D4635483F4A5A6E62666266513A595462767158415A3935295E55606F6F6B7[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjg<>f;;o?%oo", "247E61393F236B256F7673792A212C6E414F444D327A3453484A5247475B4B315B5B403742256257525A5558524B344D2C2C504752357275635740594B445C535E416D6E77[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjgj9:i=aem&pp", "247E61393F236B25766F7675742B222D6F4250454E337B3554574647564A4E525A335D5D423944276459545C575A544D364F2E2E5249543774776559425B465D545F426E6[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjh<>=<f8$nn", "247E61393F236B2573757129202B6D404E434C317933534749484751432F59593E3540236055505853565049324B2A2A4E4550335F6069553E5748475A515C696D746049686[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjhb>f!lad", "247E61393F236B2573737929202B6D404E434C317933534D49512C574C4F3C333E214D49535F442D4631483F4A2D595A634F385140534A5562666D594222625D6D7B7A614A636[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjhfk9i#;i?n'rgj", "247E61393F236B2571767429202B6D404E434C31793353515644542E46544A59325D5255423944276459545C575A544D364F2E2E5249543774776559425B4D475E55604[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cjhjj4l:<=&oo(qeaplngxrs[o5`ux", "247E61393F236B2572787629202B6D404E434C3179335355553F57454748315A5A335C504C5B575952635D5E665A406B60635047523561626B5740594[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cji6hdlck$nn", "247E61393F236B256F7670772A212C6E414F444D327A3455425450584F57305A5A3F364124615651595457514A334C2B2B4F465134717462563F584A4A5B525D406C6D76624[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cji8a k@c", "247E61393F236B256F75287E2A6C3F4D424B30783253424B2A554A4D3A313C7E4B47515D422B4436463D482B5758614D364F3E514853656468746477675B4424645F74226F227D[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cji;=!<@<$nn", "247E61393F236B25756F7129202B6D404E434C3179335446482C474B472F59593E3540234F5059452E473649404B585C634F38575262706F563F585F7C7674726B7B6F776F2[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cji>k3?a#mm", "247E61393F236B257377287E2A6C3F4D424B3078325348553D494B2D57573C333E215E534E5651544E47304928284C434E315D5E67533C5544574E59666A715D466560437120[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e31;cji>k3?a#ncf", "247E61393F236B257678287E2A6C3F4D424B3078325348553D494B2D584D503D343F224E4F58442D4635483F4A575B624E3756513462705E78696B6E625B445D4F5F5661712[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347513F445559424C5A315C5154412A4333323037483F4A5E68565B5970606E6C666164734C776C6F5C455E4E4D4B51635A6579247[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927767[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37504C4757514B4F47345F5457442D4637343A3A4B424D665E705B646571634A756A6D5A435C4D4A504F6158637C7179207[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4B524B4445494B49485450585952535F513863585B48314A3C3B363D4F46516F6B6E6D63776D687666507B707360496254534E54675[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Line Deleted : user_pref("CT3196716.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D6F517C71547873634C6557566[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C32293423524C5457474A4E50565D4A61515F5D575255643D685D604D364F3D3E3E3D544B5645486A736D696F527D7275624B645253535[...]
Line Deleted : user_pref("CT3196716.backendstorage./9b-0?3g>d", "6D6D3E706A436D437A764349762049787B7B254E7D7C502A2052582456245A595E305E32");
Line Deleted : user_pref("CT3196716.backendstorage./9b-0?3g@6:5;", "");
Line Deleted : user_pref("CT3196716.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Line Deleted : user_pref("CT3196716.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E604E376B7167617059");
Line Deleted : user_pref("CT3196716.backendstorage./9b/556,bi5a>g", "6E6D6C6B7174746E716F797478");
Line Deleted : user_pref("CT3196716.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Line Deleted : user_pref("CT3196716.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484776213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");
Line Deleted : user_pref("CT3196716.backendstorage./9b5ba==9cjag", "3A3B6E6F6C6E6E427A7478717874744C49784D4F21");
Line Deleted : user_pref("CT3196716.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6A6F6B6B6E6D7677797A79");
Line Deleted : user_pref("CT3196716.backendstorage./9b9643g3/9e", "6A");
Line Deleted : user_pref("CT3196716.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D");
Line Deleted : user_pref("CT3196716.backendstorage./9b<:222h64<", "393F352F3E");
Line Deleted : user_pref("CT3196716.backendstorage./9b=+03eh8h8j?:", "4443");
Line Deleted : user_pref("CT3196716.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Line Deleted : user_pref("CT3196716.backendstorage./9b?b0d:8aj62<h", "6D");
Line Deleted : user_pref("CT3196716.backendstorage./9ba@0<0bi6a7gn:6@l?", "6C");
Line Deleted : user_pref("CT3196716.backendstorage._key_edilia__uid", "65313664346330332D343466332D346563652D623362312D326230363561373762363634");
Line Deleted : user_pref("CT3196716.backendstorage.cb_experience_000", "343730");
Line Deleted : user_pref("CT3196716.backendstorage.cb_firstuse0100", "31");
Line Deleted : user_pref("CT3196716.backendstorage.cb_user_id_000", "43423438323236313535393834335F313335363035323633393437355F46697265666F78");
Line Deleted : user_pref("CT3196716.backendstorage.cbcountry_001", "4445");
Line Deleted : user_pref("CT3196716.backendstorage.cbfirsttime", "576564204F637420333120323031322031373A32313A313220474D542B30313030");
Line Deleted : user_pref("CT3196716.backendstorage.cbopenmamsettings", "30");
Line Deleted : user_pref("CT3196716.backendstorage.event_data", "253542253544");
Line Deleted : user_pref("CT3196716.backendstorage.facebook_mode", "32");
Line Deleted : user_pref("CT3196716.backendstorage.facebook_user_locale", "6465");
Line Deleted : user_pref("CT3196716.backendstorage.fb_like_wise_12", "74727565");
Line Deleted : user_pref("CT3196716.backendstorage.fired_events", "");
Line Deleted : user_pref("CT3196716.backendstorage.key_date", "3135");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appsdata", "7B2261707073223A5B7B226964223A225072696365476F6E67222C2275726C223A22687474703A2F2F7072696365676F6E672E636F6E64756974617070732E636F6D2F4D414D2F763[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appstate_couponbuddy", "6F6E");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appstate_easytobook", "6F6E");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appstate_easytobook_targeted", "6F6E");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appstate_pricegong", "6F6E");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appstate_windowshopper", "6F6E");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_appstatereporttime", "31333733383937393039353938");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_calledsetupservice", "31");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_configuration", "7B22636F6E66696775726174696F6E223A5B7B226964223A2245617379746F626F6F6B5F7461726765746564222C22637269746572696173223A5B7B22637269746572696149[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_currentbadgevalue", "31");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_currentversion", "312E392E302E34");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_eventscache", "7B2233653032356534632D303362652D343033382D616164302D323865626434643335653139223A7B22746F706963223A2273656E645573616765222C2264617461223A7B2263[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_existingusersrecoverydone", "31");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_first_time", "31");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_gadgetopen", "30");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_lastlogintime", "31333733383937393039393131");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_lastsettingsopen", "7B2273657474696E67735061676546756C6C55726C223A22687474703A2F2F6170702E6D616D2E636F6E647569742E636F6D2F6765746170702F4354333139363731362F7[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_localization", "7B22676164676574436F6E74656E74506F6C696379223A7B2254657874223A22436F6E74656E742D52696368746C696E6965227D2C226761646765744465736372697074696F6[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_mamenabled", "66616C7365");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_newapps", "5B5D");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A3234302C227374616D70223A223234395F31222C2269735465737422[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_settings1.6.0.1", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A3234302C227374616D70223A223234395F31222C2269735465737422[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_settings1.8.0.4", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A3234302C227374616D70223A2234365F30222C22697354657374223A[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_settings1.9.0.4", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A3234302C227374616D70223A2234365F30222C22697354657374223A[...]
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_showclosebutton", "74727565");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_showwelcomegadget", "66616C7365");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_user_approval_interacted", "31");
Line Deleted : user_pref("CT3196716.backendstorage.mam_gk_userid", "35323362313730342D303565652D343139662D386466302D663565666230636639383632");
Line Deleted : user_pref("CT3196716.backendstorage.pg_enable", "74727565");
Line Deleted : user_pref("CT3196716.backendstorage.searchappstate", "33");
Line Deleted : user_pref("CT3196716.backendstorage.searchapptracking", "31");
Line Deleted : user_pref("CT3196716.backendstorage.sf_just_installed", "46414C5345");
Line Deleted : user_pref("CT3196716.backendstorage.sf_status", "454E41424C4544");
Line Deleted : user_pref("CT3196716.backendstorage.sf_user_id", "6369645F323734323031333232323631313933363634");
Line Deleted : user_pref("CT3196716.backendstorage.shoppingapp.gk.exipres", "4D6F6E204E6F7620303520323031322031353A32323A343020474D542B30313030");
Line Deleted : user_pref("CT3196716.backendstorage.shoppingapp.gk.geolocation", "6765726D616E79");
Line Deleted : user_pref("CT3196716.backendstorage.url_history0001", "687474703A2F2F7777772E736F6363657267616D652E64652F696E6465782E7068703F576572743D567056657273746569676572756E67656E416E7A656967656E3A3A3A636C69636[...]
Line Deleted : user_pref("CT3196716.components.1000080", true);
Line Deleted : user_pref("CT3196716.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT3196716.globalFirstTimeInfoLastCheckTime", "Thu Jul 11 2013 09:37:50 GMT+0200");
Line Deleted : user_pref("CT3196716.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3196716.initDone", true);
Line Deleted : user_pref("CT3196716.isAppTrackingManagerOn", false);
Line Deleted : user_pref("CT3196716.isFirstRadioInstallation", false);
Line Deleted : user_pref("CT3196716.myStuffEnabled", true);
Line Deleted : user_pref("CT3196716.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT3196716.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT3196716.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT3196716.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT3196716.navigateToUrlOnSearch", false);
Line Deleted : user_pref("CT3196716.oldAppsList", "129755756823355459,129755756826636815,111,129757581393447276,129755756828511878,1000082,1000234,1000034,129876925696479818,129823208536028032,129755756829761921,129[...]
Line Deleted : user_pref("CT3196716.revertSettingsEnabled", true);
Line Deleted : user_pref("CT3196716.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT3196716.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT3196716.testingCtid", "");
Line Deleted : user_pref("CT3196716.toolbarAppMetaDataLastCheckTime", "Mon Jul 15 2013 03:12:13 GMT+0200");
Line Deleted : user_pref("CT3196716.toolbarContextMenuLastCheckTime", "Sat Jul 06 2013 09:42:30 GMT+0200");
Line Deleted : user_pref("CT3196716.usagesFlag", 2);
Line Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3196716&SearchSource=13");
Line Deleted : user_pref("CommunityToolbar.ConduitSearchList", "WiseConvert Customized Web Search");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3196716/CT3196716", "\"6860a28682e6bd60762ecb7ed55a4ee93\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1613210/1606743/DE", "\"0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3196716", "\"1367226736\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "G9mW7heT/8xIX1frcduu0A==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en&ctid=CT3196716", "b5I8zzzMgsg0XG/fawLlFw==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "mfQ70fvlD2zuBxSBj8rQqA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en&ctid=CT3196716", "9uXRY86McHhmOreOHsv6MA==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "UgzXjW7BIkfdx+x39Ruv3w==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en&ctid=CT3196716", "I1tfz7EBg4DmNytL9x55lQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "FqddrIU7eyJgaaLyHDeVMQ==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en&ctid=CT3196716", "ZI41WLbm1fFgx4gn0bs99Q==");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.8", "\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.100", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3196716", "\"dbe4460d95840339477519b3f77dc11a\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"944754b89341941e611adb0154d77ce1\"");
Line Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\NICOLE Engelchen\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\hui3hyf8.default\\conduitCommon\\modules\\3.19.0.3");
Line Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.19.0.3");
Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://facebook.conduitapps.com/v3.13/gadget.html", "409x475");
Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_7c43af3c", "356x332");
Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_ffba584d,pg_agreement_msg_key,true", "356x317");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "data:text/plain,keyword.URL=hxxp://de.search.yahoo.com/search?ei=UTF-8&fr=foxload&type=moz35awe&p=");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT3196716");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT3196716");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT3196716");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Thu Jun 21 2012 18:41:00 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "f6cce895-5631-4b1a-892e-f060b81eebb6");
Line Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3196716");
Line Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Jul 06 2013 09:42:31 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Jul 14 2013 18:52:47 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Line Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Jul 15 2013 03:12:14 GMT+0200");
Line Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.notifications.userId", "42ec9b58-b75e-497b-8831-387f3eb4e608");
Line Deleted : user_pref("CommunityToolbar.originalHomepage", "data:text/plain,browser.startup.homepage=hxxp://de.search.yahoo.com/firefox/?fr=foxload-sfp");
Line Deleted : user_pref("CommunityToolbar.originalSearchEngine", "data:text/plain,browser.search.defaultenginename=Yahoo");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2625848&SearchSource=13&CUI=SB_CUI");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT2625848");
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.defaultenginename", "Ask.com");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "WiseConvert Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("browser.search.selectedEngine", "WiseConvert Customized Web Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT2625848&SearchSource=13&CUI=SB_CUI");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=");
Line Deleted : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{ACAA314B-EEBA-48e4-AD47-84E31C44796C}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Common Files\\\\DVDVideoSof[...]
Line Deleted : user_pref("smartBar.searchInNewTabOwner", "CT2625848");
Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT2625848");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2625848&SearchSource=13&CUI=SB_CUI");
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&CU[...]
Line Deleted : user_pref("smartbar.machineId", "DBI5LLVOYJRAYGFOFGV+4UHZW8MVNTX7KGBJJMQJSQC8AZDMTR/EYDROCHCXF7YAA212+UIDXHMPUM9IJ9RXHQ");
Line Deleted : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3196716&SearchSource=13");
Line Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3196716&SearchSource=2&q=");
Line Deleted : user_pref("smartbar.originalSearchEngine", "WiseConvert Customized Web Search");
*************************
AdwCleaner[R0].txt - [58433 octets] - [30/08/2013 15:51:32]
AdwCleaner[S0].txt - [58681 octets] - [30/08/2013 15:52:02]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [58742 octets] ##########
--- --- ---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.5 (08.28.2013:1)
OS: Windows 7 Home Premium x64
Ran by NICOLE Engelchen on 30.08.2013 at 16:02:59,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\Default_Search_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL\\Default
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\searchURL\\Default
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
~~~ Files
Successfully deleted: [File] C:\Windows\syswow64\sho7525.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoFB40.tmp
~~~ Folders
~~~ FireFox
Successfully deleted the following from C:\Users\NICOLE Engelchen\AppData\Roaming\mozilla\firefox\profiles\hhmbl78o.default-1374774576054\prefs.js
user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=Bundlore&dpid=Bundlore&co=DE&userid=2c83c007-3953-42d3-c5e3-2865df6576f9&searchtype=ds&installDate=29/08/2013&q=");
Emptied folder: C:\Users\NICOLE Engelchen\AppData\Roaming\mozilla\firefox\profiles\hhmbl78o.default-1374774576054\minidumps [46 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.08.2013 at 16:08:06,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by NICOLE Engelchen (administrator) on 30-08-2013 16:14:55
Running from C:\Users\NICOLE Engelchen\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
() C:\Users\NICOLE Engelchen\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(ALPS) C:\Program Files\Apoint\Apvfb.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apntex.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [518784 2011-03-29] (Conexant Systems, Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [790688 2011-04-29] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [657568 2011-04-29] (Atheros Commnucations)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [226672 2011-02-17] (Alps Electric Co., Ltd.)
HKCU\...\Run: [EADM] - C:\Program Files (x86)\Origin\Origin.exe [3549528 2013-08-27] (Electronic Arts)
HKCU\...\Run: [AmazonMP3DownloaderHelper] - C:\Users\NICOLE Engelchen\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-13] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2757312 2011-02-15] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-27] (Sony Corporation)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-03-11] (Kaspersky Lab ZAO)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\NICOLE Engelchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: DVDVideoSoftTB_DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\NICOLE Engelchen\AppData\LocalLow\CT2625848\ldrtbDVDV.dll No File
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files (x86)\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - DVDVideoSoftTB_DE Toolbar - {0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff} - C:\Users\NICOLE Engelchen\AppData\LocalLow\CT2625848\ldrtbDVDV.dll No File
Toolbar: HKCU - No Name - {0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\NICOLE Engelchen\AppData\Roaming\Mozilla\Firefox\Profiles\hhmbl78o.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM - C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ( )
FF Plugin HKCU: @protectdisc.com/NPMPDRM - C:\Users\NICOLE Engelchen\AppData\Local\mpDRM\Binaries\NPMPDRM.dll ( )
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\NICOLE Engelchen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\NICOLE Engelchen\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wikipedia-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
==================== Services (Whitelisted) =================
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-04-29] (Atheros)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-03-11] (Kaspersky Lab ZAO)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
==================== Drivers (Whitelisted) ====================
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R0 KL1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-04-27] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-04-27] (Kaspersky Lab ZAO)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-30 16:14 - 2013-08-30 16:14 - 00000000 ____D C:\FRST
2013-08-30 16:13 - 2013-08-30 16:13 - 01072975 _____ (Farbar) C:\Users\NICOLE Engelchen\Downloads\FRST.exe
2013-08-30 16:08 - 2013-08-30 16:08 - 00001832 _____ C:\Users\NICOLE Engelchen\Desktop\JRT.txt
2013-08-30 16:02 - 2013-08-30 16:02 - 01023533 _____ (Thisisu) C:\Users\NICOLE Engelchen\Downloads\JRT.exe
2013-08-30 16:02 - 2013-08-30 16:02 - 00000000 ____D C:\Windows\ERUNT
2013-08-30 15:53 - 2013-08-30 15:53 - 00000000 ___RD C:\Users\NICOLE Engelchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-08-30 15:51 - 2013-08-30 15:52 - 00000000 ____D C:\AdwCleaner
2013-08-30 15:50 - 2013-08-30 15:51 - 00994642 _____ C:\Users\NICOLE Engelchen\Downloads\adwcleaner.exe
2013-08-30 14:28 - 2013-08-30 15:52 - 00000780 _____ C:\Users\NICOLE Engelchen\Desktop\Search.lnk
2013-08-30 14:28 - 2013-08-30 14:28 - 00000000 ____D C:\ProgramData\DSearchLink
2013-08-30 14:27 - 2013-08-30 14:27 - 00714816 _____ C:\Users\NICOLE Engelchen\Downloads\ZipOpenerSetup.exe
2013-08-30 09:42 - 2013-08-30 14:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 00:14 - 2013-08-30 00:14 - 00023054 _____ C:\ComboFix.txt
2013-08-29 22:45 - 2013-08-30 15:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-29 22:45 - 2013-08-29 22:45 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-29 20:41 - 2013-08-29 20:41 - 05037351 _____ (Swearware) C:\Users\NICOLE Engelchen\Downloads\ComboFix(1).exe
2013-08-29 20:27 - 2013-08-29 20:28 - 05683448 _____ (Systweak Inc ) C:\Users\NICOLE Engelchen\Downloads\rcpafterdownloadcm_ad_13127_cm2.exe
2013-08-29 18:52 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-29 18:52 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-29 18:52 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-29 18:52 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-29 18:52 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-29 18:52 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-29 18:52 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-29 18:52 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-29 18:43 - 2013-08-30 00:15 - 00000000 ____D C:\Qoobox
2013-08-29 18:41 - 2013-08-29 21:04 - 00000000 ____D C:\Windows\erdnt
2013-08-29 18:40 - 2013-08-29 18:40 - 05114906 ____R (Swearware) C:\Users\NICOLE Engelchen\Downloads\ComboFix.exe
2013-08-19 14:16 - 2013-08-19 14:16 - 00000000 ____D C:\Users\NICOLE Engelchen\Documents\Amazon MP3
2013-08-19 14:16 - 2013-08-19 14:16 - 00000000 ____D C:\Users\NICOLE Engelchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-08-19 14:16 - 2013-08-19 14:16 - 00000000 ____D C:\Users\NICOLE Engelchen\AppData\Roaming\Amazon
2013-08-19 14:15 - 2013-08-19 14:15 - 02328864 _____ C:\Users\NICOLE Engelchen\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-08-15 01:40 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-15 01:40 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-15 01:40 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-15 01:40 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-15 01:40 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-15 01:40 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-15 01:40 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-15 01:40 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-15 01:40 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-15 01:40 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-15 01:40 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-15 01:40 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-15 01:40 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-15 01:40 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 23:27 - 2013-08-14 23:27 - 00000000 ____D C:\dad1e1ea442a997dd412de
2013-08-14 20:40 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 20:40 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 20:40 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 20:40 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 20:40 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 20:40 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 20:40 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 20:40 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 20:40 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 20:40 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 20:40 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 20:40 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 20:40 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 20:40 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 20:39 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 20:39 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 20:39 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 20:39 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 20:39 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 20:39 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 20:39 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 20:39 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 20:39 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 20:39 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 20:39 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 20:39 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 20:39 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-03 14:44 - 2013-08-03 14:44 - 00875072 _____ C:\Users\NICOLE Engelchen\Downloads\FLVPlayerSetup.exe
==================== One Month Modified Files and Folders =======
2013-08-30 16:14 - 2013-08-30 16:14 - 01579080 _____ (Farbar) C:\Users\NICOLE Engelchen\Downloads\FRST64.exe
2013-08-30 16:14 - 2013-08-30 16:14 - 00000000 ____D C:\FRST
2013-08-30 16:13 - 2013-08-30 16:13 - 01072975 _____ (Farbar) C:\Users\NICOLE Engelchen\Downloads\FRST.exe
2013-08-30 16:08 - 2013-08-30 16:08 - 00001832 _____ C:\Users\NICOLE Engelchen\Desktop\JRT.txt
2013-08-30 16:02 - 2013-08-30 16:02 - 01023533 _____ (Thisisu) C:\Users\NICOLE Engelchen\Downloads\JRT.exe
2013-08-30 16:02 - 2013-08-30 16:02 - 00000000 ____D C:\Windows\ERUNT
2013-08-30 16:00 - 2011-09-06 15:07 - 00697322 _____ C:\Windows\system32\perfh007.dat
2013-08-30 16:00 - 2011-09-06 15:07 - 00148328 _____ C:\Windows\system32\perfc007.dat
2013-08-30 16:00 - 2009-07-14 07:13 - 00874346 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-30 16:00 - 2009-07-14 06:45 - 00020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-30 16:00 - 2009-07-14 06:45 - 00020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-30 15:57 - 2012-03-12 20:46 - 01912523 _____ C:\Windows\WindowsUpdate.log
2013-08-30 15:54 - 2012-04-19 21:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-30 15:53 - 2013-08-30 15:53 - 00000000 ___RD C:\Users\NICOLE Engelchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-08-30 15:53 - 2012-10-31 16:51 - 00000000 ____D C:\Program Files (x86)\Origin
2013-08-30 15:53 - 2012-03-12 21:02 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-30 15:53 - 2012-03-12 20:51 - 00004006 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{49D64A9A-1CDE-4A0A-8E14-900255DE8A69}
2013-08-30 15:53 - 2011-09-06 05:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-08-30 15:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-30 15:53 - 2009-07-14 06:51 - 00087719 _____ C:\Windows\setupact.log
2013-08-30 15:52 - 2013-08-30 15:51 - 00000000 ____D C:\AdwCleaner
2013-08-30 15:52 - 2013-08-30 14:28 - 00000780 _____ C:\Users\NICOLE Engelchen\Desktop\Search.lnk
2013-08-30 15:52 - 2013-08-29 22:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-30 15:52 - 2010-11-21 05:47 - 00210546 _____ C:\Windows\PFRO.log
2013-08-30 15:51 - 2013-08-30 15:50 - 00994642 _____ C:\Users\NICOLE Engelchen\Downloads\adwcleaner.exe
2013-08-30 14:28 - 2013-08-30 14:28 - 00000000 ____D C:\ProgramData\DSearchLink
2013-08-30 14:28 - 2013-08-30 09:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-30 14:27 - 2013-08-30 14:27 - 00714816 _____ C:\Users\NICOLE Engelchen\Downloads\ZipOpenerSetup.exe
2013-08-30 00:15 - 2013-08-29 18:43 - 00000000 ____D C:\Qoobox
2013-08-30 00:14 - 2013-08-30 00:14 - 00023054 _____ C:\ComboFix.txt
2013-08-30 00:02 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-29 23:15 - 2012-03-13 16:51 - 00000000 ____D C:\Users\NICOLE~1\AppData\Local\CrashDumps
2013-08-29 22:45 - 2013-08-29 22:45 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-29 21:56 - 2012-05-25 17:33 - 00000000 ____D C:\Program Files (x86)\Java
2013-08-29 21:35 - 2013-05-26 19:39 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2013-08-29 21:09 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-29 21:04 - 2013-08-29 18:41 - 00000000 ____D C:\Windows\erdnt
2013-08-29 20:41 - 2013-08-29 20:41 - 05037351 _____ (Swearware) C:\Users\NICOLE Engelchen\Downloads\ComboFix(1).exe
2013-08-29 20:28 - 2013-08-29 20:27 - 05683448 _____ (Systweak Inc ) C:\Users\NICOLE Engelchen\Downloads\rcpafterdownloadcm_ad_13127_cm2.exe
2013-08-29 19:24 - 2013-05-26 19:39 - 00000000 ____D C:\Users\NICOLE Engelchen\AppData\Roaming\vlc
2013-08-29 19:08 - 2009-07-14 07:08 - 00001134 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-29 19:00 - 2012-03-12 20:45 - 00000000 ____D C:\Users\NICOLE Engelchen
2013-08-29 18:52 - 2013-07-05 13:37 - 00000000 ____D C:\Windows\Minidump
2013-08-29 18:40 - 2013-08-29 18:40 - 05114906 ____R (Swearware) C:\Users\NICOLE Engelchen\Downloads\ComboFix.exe
2013-08-29 17:33 - 2012-04-02 21:06 - 00000000 ____D C:\Users\NICOLE~1\AppData\Local\Adobe
2013-08-26 08:31 - 2013-02-20 22:02 - 00000000 ____D C:\Users\NICOLE~1\AppData\Local\FullTiltPoker.eu
2013-08-26 08:31 - 2013-02-20 22:01 - 00000000 ____D C:\Program Files (x86)\Full Tilt Poker.Eu
2013-08-22 15:37 - 2012-03-12 20:48 - 00000000 ____D C:\Users\NICOLE Engelchen\Documents\Bluetooth Folder
2013-08-21 06:54 - 2012-04-19 21:10 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-21 06:54 - 2012-04-19 21:10 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-21 06:54 - 2012-04-19 21:10 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-19 14:16 - 2013-08-19 14:16 - 00000000 ____D C:\Users\NICOLE Engelchen\Documents\Amazon MP3
2013-08-19 14:16 - 2013-08-19 14:16 - 00000000 ____D C:\Users\NICOLE Engelchen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2013-08-19 14:16 - 2013-08-19 14:16 - 00000000 ____D C:\Users\NICOLE Engelchen\AppData\Roaming\Amazon
2013-08-19 14:15 - 2013-08-19 14:15 - 02328864 _____ C:\Users\NICOLE Engelchen\Downloads\AmazonMP3DownloaderInstall._V383688031_.exe
2013-08-19 07:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 23:27 - 2013-08-14 23:27 - 00000000 ____D C:\dad1e1ea442a997dd412de
2013-08-14 23:27 - 2013-07-11 20:06 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 23:27 - 2012-04-17 01:09 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 19:38 - 2013-03-27 21:17 - 00004096 _____ C:\Users\Public\Documents\00002DA6.LCS
2013-08-14 19:35 - 2013-03-11 22:43 - 00000000 ____D C:\ProgramData\mpDRM
2013-08-14 19:34 - 2013-03-10 11:50 - 00004096 _____ C:\Users\Public\Documents\00003553.LCS
2013-08-14 19:25 - 2013-03-27 20:58 - 00004096 _____ C:\Users\Public\Documents\00001859.LCS
2013-08-03 14:44 - 2013-08-03 14:44 - 00875072 _____ C:\Users\NICOLE Engelchen\Downloads\FLVPlayerSetup.exe
2013-08-02 22:42 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
Files to move or delete:
====================
C:\Users\NICOLE~1\AppData\Local\Temp\Quarantine.exe
C:\Users\NICOLE~1\AppData\Local\Temp\uninst1.exe
C:\Users\NICOLE~1\AppData\Local\Temp\jrt\erunt\ERUNT.EXE
C:\Users\NICOLE~1\AppData\Local\Temp\is357113909\18243987_Setup.EXE
C:\Users\NICOLE~1\AppData\Local\Temp\is357113909\DeltaTB.exe
C:\Users\NICOLE~1\AppData\Local\Temp\is357113909\OpenItSetup.exe
C:\Users\NICOLE~1\AppData\Local\Temp\is357113909\OptimizerPro.exe
C:\Users\NICOLE~1\AppData\Local\Temp\is357113909\uninstaller.exe
C:\Users\NICOLE~1\AppData\Local\Temp\is357113909\wajam_validate.exe
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\BabMaint.exe
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\BExternal.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\BUSolForMontiera.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\BUSolution.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\ccp.exe
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\ChromeToolbarSetup.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\CrxInstaller.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\DSearchLink.exe
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\enhancedNT.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\GUninstaller.exe
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\IEHelper.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\MntrDLLInstall.dll
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\Setup.exe
C:\Users\NICOLE~1\AppData\Local\Temp\F05871EB-BAB0-7891-92EF-EE6A21B4355D\Latest\sqlite3.dll
C:\Users\NICOLE~1\AppData\Local\Temp\18690292.Uninstall\uninstaller.exe
C:\Users\NICOLE~1\AppData\Local\Temp\18616160.Uninstall\uninstaller.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-08-25 11:20
==================== End Of Log ============================
--- --- ---
--- --- ---
--- --- ---
--- --- ---
--- --- ---
FRST Additions Logfile: Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013
Ran by NICOLE Engelchen at 2013-08-30 16:15:36
Running from C:\Users\NICOLE Engelchen\Downloads
Boot Mode: Normal
==========================================================
==================== Installed Programs =======================
ActiveX контрола на Windows Live Mesh за отдалечени връзки (x32 Version: 15.4.5722.2)
ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (x32 Version: 15.4.5722.2)
Adobe AIR (x32 Version: 2.5.1.17730)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X MUI (x32 Version: 10.0.0)
Alps Pointing-device for VAIO
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18)
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.142)
ArcSoft WebCam Companion 4 (x32 Version: 4.0.21.392)
Bing Bar (x32 Version: 7.0.610.0)
Bluetooth Win7 Suite (64) (Version: 7.3.0.100)
Control ActiveX Windows Live Mesh pentru conexiuni la distanță (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (x32 Version: 15.4.5722.2)
Corel WinDVD (x32 Version: 10.0.5.800)
D3DX10 (x32 Version: 15.4.2368.0902)
exant HD Audio (Version: 8.54.0.53)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
Free YouTube to MP3 Converter version 3.11.37.1212 (x32 Version: 3.11.37.1212)
Full Tilt Poker (x32 Version: 4.55.2.WIN.FullTilt.COM)
Full Tilt Poker.Eu (x32 Version: 4.61.0.WIN.FullTilt.EU)
FUSSBALL MANAGER 12 (x32 Version: 1.0.0.3)
FUSSBALL MANAGER 13 (x32 Version: 1.0.3.0)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Galerie foto Windows Live (x32 Version: 15.4.3502.0922)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.0.0.1046)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 31 (x32 Version: 6.0.310)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kaspersky Internet Security 2013 (x32 Version: 13.0.1.4190)
king.com (remove only) (x32)
McAfee Security Scan Plus (x32 Version: 3.0.318.3)
Media Gallery (Version: 1.5.0.16020)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
Netzmanager (x32 Version: 1.07)
NVIDIA 3D Vision Treiber 267.21 (Version: 267.21)
NVIDIA Grafiktreiber 267.21 (Version: 267.21)
NVIDIA HD-Audiotreiber 1.3.18.0 (Version: 1.3.18.0)
NVIDIA Install Application (Version: 2.1002.109.718)
NVIDIA PhysX (x32 Version: 9.10.0514)
NVIDIA PhysX-Systemsoftware 9.10.0514 (Version: 9.10.0514)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6721)
NVIDIA Systemsteuerung 267.21 (Version: 267.21)
OpenOffice.org 3.3 (x32 Version: 3.3.9567)
Origin (x32 Version: 9.1.3.2637)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (x32 Version: 15.4.5722.2)
PMB (x32 Version: 5.5.02.12220)
PMB VAIO Edition Plug-in (Version: 1.5.10.05300)
PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06010)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
PokerStars.eu (x32)
PokerStars.net (x32)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.14)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Realtek PCIE Card Reader (x32 Version: 6.1.7600.77)
Remote Keyboard (x32 Version: 1.1.1.03020)
Remote Play with PlayStation 3 (x32 Version: 1.1.0.15070)
Schlag den Raab - Das 2. Spiel (x32 Version: 1.0)
Schlag den Raab - Das 3. Spiel (x32 Version: 1.0)
Schlag den Raab (x32)
Skype™ 5.10 (x32 Version: 5.10.116)
Snap.Do Engine (HKCU Version: 1.104.1.11691)
Sony Corporation (Version: 1.0.0)
SSLx64 (Version: 1.0.0)
SSLx86 (x32 Version: 1.0.0)
Steuer 2012 (HKCU Version: 20.00.8137)
Unity Web Player (HKCU Version: )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (x32 Version: 15.4.5722.2)
VAIO - Media Gallery (x32 Version: 1.5.0.16020)
VAIO - PMB VAIO Edition Guide (x32 Version: 1.6.00.06030)
VAIO - PMB VAIO Edition Plug-in (x32 Version: 1.6.00.06140)
VAIO - Remote Play mit PlayStation®3 (x32 Version: 1.1.0.15070)
VAIO - Remote-Tastatur (x32 Version: 1.0.1.03020)
VAIO Care (x32 Version: 6.4.2.11150)
VAIO Control Center (x32 Version: 4.5.0.03040)
VAIO Data Restore Tool (x32 Version: 1.6.0.13140)
VAIO Easy Connect (x32 Version: 1.1.2.01120)
VAIO Event Service (x32 Version: 5.5.0.03040)
VAIO Gate (x32 Version: 2.3.0.11090)
VAIO Gate Default (x32 Version: 2.4.0.03240)
VAIO Hardware Diagnostics (x32 Version: 4.2.0.14280)
VAIO Hero Screensaver - Summer 2011 Screensaver (x32)
VAIO Improvement (x32 Version: 1.0.0.14150)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Quick Web Access (x32 Version: 1.4.5.3)
VAIO Sample Contents (x32 Version: 1.4.2.09010)
VAIO Smart Network (x32 Version: 3.5.0.02280)
VAIO Update (x32 Version: 6.2.1.03260)
VAIO-Handbuch (x32 Version: 2.0.0.02250)
VAIO-Support für Übertragungen (x32 Version: 1.4.0.14230)
VCCx86 (x32 Version: 1.0.0)
VESx64 (Version: 1.0.0)
VESx86 (x32 Version: 1.0.0)
VIx64 (Version: 1.0.0)
VIx86 (x32 Version: 1.0.0)
VSNx64 (Version: 1.0.0)
VU5x64 (Version: 1.1.0)
VU5x86 (x32 Version: 1.0.0)
VU5x86 (x32 Version: 1.1.0)
VWSTx86 (x32 Version: 1.0.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3508.1109)
Windows Live Fotogaléria (x32 Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922)
Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3508.1109)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922)
Windows Liven sähköposti (x32 Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922)
Yeti Bubbles (HKCU)
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (x32 Version: 15.4.5722.2)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922)
Елемент керування Windows Live Mesh ActiveX для віддалених підключень (x32 Version: 15.4.5722.2)
Основи Windows Live (x32 Version: 15.4.3502.0922)
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922)
Почта Windows Live (x32 Version: 15.4.3502.0922)
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922)
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922)
Фотоколекція Windows Live (x32 Version: 15.4.3502.0922)
Элемент управления Windows Live Mesh ActiveX для удаленных подключений (x32 Version: 15.4.5722.2)
==================== Restore Points =========================
26-08-2013 01:29:29 Windows Update
26-08-2013 12:59:30 Windows Update
27-08-2013 03:03:38 Windows Update
27-08-2013 10:33:32 Windows Update
27-08-2013 19:30:06 Windows Update
28-08-2013 19:59:50 Windows Update
29-08-2013 17:04:53 Windows Update
29-08-2013 19:53:20 Removed Java(TM) 6 Update 22 (64-bit)
29-08-2013 19:55:50 Removed Java 7 Update 25
29-08-2013 21:16:03 Windows Update
29-08-2013 22:25:52 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {0D730F6B-2DD4-4FD8-B70E-10DB52567882} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1868179258-2408729087-1254280792-1001 => C:\Windows\System32\portabledeviceapi.dll [2010-11-21] (Microsoft Corporation)
Task: {162B9ED5-F23E-44C9-A4F5-645CA3B31141} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {31C6A764-31CF-4091-BD27-666D6AEF5585} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-11-16] (Sony Corporation)
Task: {3C874EB8-1677-41B5-A3FB-42801723FD50} - \DSite No Task File
Task: {5A24C98D-FC6B-4B92-8C1D-F8797DA60AF8} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-03-26] (Sony Corporation)
Task: {654A1A67-1CC4-49DF-910F-8C800E50128F} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-03-26] (Sony Corporation)
Task: {6721C50D-267B-4EC6-A893-60F5188FEC47} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {7AFF2E4F-F96A-4B9C-9CAB-7D7295F3CF10} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Program Files\Sony\VAIO Smart Network\VSNClient No File
Task: {8971386E-479A-45B2-AA59-D3F972A23590} - System32\Tasks\User_Feed_Synchronization-{49D64A9A-1CDE-4A0A-8E14-900255DE8A69} => C:\Windows\system32\msfeedssync.exe [2013-03-24] (Microsoft Corporation)
Task: {90F50EEA-55F7-4D26-BD6D-5820E1A48834} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated)
Task: {92C87B20-1BA5-4B75-9A5B-C040B7229EC5} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2010-11-21] (Microsoft Corporation)
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2010-11-21] (Microsoft Corporation)
Task: {CEF16A45-2FEA-451B-A295-38D4C6AB3129} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-11-16] (Sony Corporation)
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation)
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2010-11-21] (Microsoft Corporation)
Task: {E475BF76-F567-46AB-8BEF-4A5F7C1E188F} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {E84E3C92-C1E8-4486-BE6E-19AAE9FF926A} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-02-15] (Sony Corporation)
Task: {F2714620-974A-48F0-BA8F-1B9BE6424EAD} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {FA508A2E-338E-4ECF-BD31-66D2B773B772} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==========
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2013-08-30 09:49:40.051
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-30 09:49:40.051
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-30 09:49:40.051
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-30 09:49:40.020
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-30 09:49:40.004
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-30 09:49:40.004
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-29 19:51:55.770
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-29 19:51:55.770
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-29 19:51:55.770
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2013-08-29 19:51:55.754
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 26%
Total physical RAM: 8173.86 MB
Available physical RAM: 6010.32 MB
Total Pagefile: 16345.9 MB
Available Pagefile: 13976.99 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:582.06 GB) (Free:456.76 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 9BBA2C1F)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=582 GB) - (Type=07 NTFS)
==================== End Of Log ============================
--- --- ---
So hier alle gewünschen Files. Wie gehts nun weiter?
Hallo muss ich jetzt noch was machen? |
Lesestoff:
AdwCleaner auf deinen Desktop.
FRST 32-Bit | FRST 64-Bit