| S.Jansen | 30.03.2015 18:36 |
Code:
# AdwCleaner v4.200 - Logfile created 30/03/2015 at 19:00:02
# Updated 29/03/2015 by Xplode
# Database : 2015-03-29.1 [Server]
# Operating system : Windows 7 Ultimate Service Pack 1 (x64)
# Username : FFF - FFF-PC
# Running from : C:\Users\FFF\Desktop\AdwCleaner_4.200.exe
# Option : Cleaning
***** [ Services ] *****
[#] Service Deleted : DlProtectSvc
[#] Service Deleted : OptjonalFeatures
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foxydeal
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverTuner
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\DriverTuner
Folder Deleted : C:\Program Files (x86)\{216E9AF5-26C5-4B94-89E0-1794F4C75D47}
Folder Deleted : C:\Program Files (x86)\{6E2BF820-1BD0-495A-ADF8-9BC84BAC968E}
Folder Deleted : C:\Program Files (x86)\{739528CE-ACD9-4E15-B49C-5D25598B105A}
Folder Deleted : C:\Program Files (x86)\{80ED1204-6BC9-46AC-9374-FDAA141D4D89}
Folder Deleted : C:\Program Files (x86)\{C32B5067-AB35-480C-B3D6-0A84D130D880}
Folder Deleted : C:\Program Files (x86)\{D2EBEB6C-5AC7-47D4-AC8D-74773654C12E}
Folder Deleted : C:\Program Files (x86)\{D8572A48-5E70-41BC-9EF8-ACCA74F3264F}
Folder Deleted : C:\Program Files (x86)\NewPlayer
Folder Deleted : C:\Windows\SysWOW64\SearchProtect
Folder Deleted : C:\Program Files\{091C3CC1-3B66-48F5-A754-F47F86EC7554}
Folder Deleted : C:\Program Files\{3F7D47BD-F6DC-4687-8CD1-F09D81BCB100}
Folder Deleted : C:\Program Files\{4A7891BE-C824-43A5-AE2C-B0070C1DCDD6}
Folder Deleted : C:\Program Files\{629779E2-FF5B-4315-8186-60E600EC5CDC}
Folder Deleted : C:\Program Files\{6B3AA844-0F24-4F8C-AB4C-E0B07F1E2C57}
Folder Deleted : C:\Program Files\{90FD7326-69ED-4AF2-8F83-CCF7FE3F82E0}
Folder Deleted : C:\Program Files\{B155DADB-3FDA-41AF-8821-735234E567B9}
Folder Deleted : C:\Users\FFF\AppData\Local\apn
Folder Deleted : C:\Users\FFF\AppData\Local\DealPlyLive
Folder Deleted : C:\Users\FFF\AppData\Local\DownloadGuide
Folder Deleted : C:\Users\FFF\AppData\Local\lollipop
Folder Deleted : C:\Users\FFF\AppData\Local\PirritSuggestor
Folder Deleted : C:\Users\FFF\AppData\Local\Tuguu_SL
Folder Deleted : C:\Users\FFF\AppData\Local\WinRST
Folder Deleted : C:\Users\FFF\AppData\Local\DriverTuner
Folder Deleted : C:\Users\FFF\AppData\Roaming\awesomehp
Folder Deleted : C:\Users\FFF\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\FFF\AppData\Roaming\Babylon
Folder Deleted : C:\Users\FFF\AppData\Roaming\DealPly
Folder Deleted : C:\Users\FFF\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\FFF\AppData\Roaming\Systweak
Folder Deleted : C:\Users\FFF\AppData\Roaming\UpdaterEX
Folder Deleted : C:\Users\FFF\AppData\Roaming\UpdateBonanza
Folder Deleted : C:\Users\FFF\AppData\Roaming\SmartPCFix
Folder Deleted : C:\Users\FFF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Folder Deleted : C:\Users\FFF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Folder Deleted : C:\Users\FFF\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
File Deleted : C:\ProgramData\dlprotect.exe
File Deleted : C:\Windows\System32\DlProtectSvc.exe
File Deleted : C:\Windows\System32\api.ms-win-core-util-l1-1-0.exe
File Deleted : C:\Users\FFF\AppData\Roaming\Mozilla\Firefox\Profiles\tndm3psf.default\bprotector_prefs.js
File Deleted : C:\Users\FFF\AppData\Roaming\Mozilla\Firefox\Profiles\tndm3psf.default\foxydeal.sqlite
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\awesomehp.xml
File Deleted : C:\Users\FFF\AppData\Roaming\Mozilla\Firefox\Profiles\h1sfn5fv.default-1412708552405\user.js
File Deleted : C:\Users\FFF\AppData\Roaming\Mozilla\Firefox\Profiles\tndm3psf.default\user.js
***** [ Scheduled tasks ] *****
Task Deleted : BitGuard
Task Deleted : Bonanza
Task Deleted : Dealply
Task Deleted : RegClean Pro_DEFAULT
Task Deleted : RegClean Pro_UPDATES
Task Deleted : Update Bonanza
Task Deleted : UpdaterEX
Task Deleted : HQ-Video-Profession-1.3-chromeinstaller
Task Deleted : HQ-Video-Profession-1.3-codedownloader
Task Deleted : HQ-Video-Profession-1.3-firefoxinstaller
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\Public\Desktop\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\FFF\Desktop\Internet Explorer.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\FFF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\FFF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\FFF\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\aipfmkinhleccnodemkoofnnofpbbpac
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect
Key Deleted : HKLM\SOFTWARE\CLASSES\DPBHO.DownloadProtect.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Download Protect]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9
Key Deleted : HKCU\Software\Mozilla\Extends
Key Deleted : HKCU\Software\5268bdfe26eba14
Key Deleted : HKLM\SOFTWARE\5268bdfe26eba14
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3317893
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4277F7CF-0000-46CF-BA49-D624465C4BAB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE48ED75-5A56-4C5F-BBCE-6F1AC3875F66}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CBAB673A-A480-4050-BD2B-5DE24A7A0282}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511151178}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522152278}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555155578}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566156678}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E7BF74EE-9106-4113-B216-2F980BA29141}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440544154478}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE48ED75-5A56-4C5F-BBCE-6F1AC3875F66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CBAB673A-A480-4050-BD2B-5DE24A7A0282}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE48ED75-5A56-4C5F-BBCE-6F1AC3875F66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CBAB673A-A480-4050-BD2B-5DE24A7A0282}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{61F0D019-B016-4D56-9DAE-7B7706CD6755}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F498FE2B-6CB2-4EE5-A384-D93B11091457}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2714711C-2F38-4569-9BAD-75C70A43528A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9344BF4B-7DC5-401F-8B5A-A988F3BA075D}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{61F0D019-B016-4D56-9DAE-7B7706CD6755}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110511151178}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522152278}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F2DB3739-77FB-41EB-9ED3-ABF34DF2DBF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555155578}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566156678}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A1A7AD0E-2CC4-4AA4-B28D-7C7083B731CD}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D0126195-F3FA-45A1-8CB4-0D761B1E070A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Value Deleted : HKLM\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist [1]
Key Deleted : HKCU\Software\BABSOLUTION
Key Deleted : HKCU\Software\BonanzaDealsLive
Key Deleted : HKCU\Software\Conduit
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\DealPly
Key Deleted : HKCU\Software\DealPlyLive
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Iminent
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\lollipop
Key Deleted : HKCU\Software\OCS
Key Deleted : HKCU\Software\ResultsAlpha
Key Deleted : HKCU\Software\searchgol LTD
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\UpdaterEX
Key Deleted : HKCU\Software\WEDLMNGR
Key Deleted : HKCU\Software\foxydeal
Key Deleted : HKCU\Software\DriverTuner_Init
Key Deleted : HKCU\Software\DriverTuner
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\foxydeal
Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\RadioTotal4
Key Deleted : HKLM\SOFTWARE\awesomehpSoftware
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Driver-Soft
Key Deleted : HKLM\SOFTWARE\qvo6Software
Key Deleted : HKLM\SOFTWARE\SearchProtect
Key Deleted : HKLM\SOFTWARE\Taronja
Key Deleted : HKLM\SOFTWARE\RadioTotal4
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.16428
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v36.0.4 (x86 de)
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.1000234.weatherData", "{\"icon\":\"29.png\",\"temperature\":\"-3°C\",\"temperatureClear\":\"-3°C\",\"highTemperature\":\"-3°C\",\"lowTemperature\":\"-5°C\",\"feelsLike\":\"-8°C\",[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2851647&octid=CT2851647&SearchSource=15&CUI=UN35163003884320357&SSPV=&Lay=1&UM=\"}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://uTorrentBarDE.OurToolbar.com/\",\"EB_T[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317893&SearchSource=2&CUI=UN11316025201422224&UM=2&q=");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentBarDE.OurToolbar.com//xpi\"}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentBar_DE \"}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.smartbar.CTID", "CT2851647");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.smartbar.Uninstall", "0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.smartbar.homepage", true);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.smartbar.isHidden", true);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT2851647.smartbar.toolbarName", "uTorrentBar_DE ");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317893&SearchSource=2&CUI=UN11316025201422224&UM=2&q=");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.embeddedsData", "[{\"appId\":\"130269805663268820\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.installType", "conduitnsisintegration");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3317893&octid=CT3317893&SearchSource=15&CUI=UN11316025201422224&SSPV=&Lay=1&UM=2\"}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.originalHomepage", "hxxp://www.searchgol.com/?babsrc=HP_ss&mntrId=90E6002421908C4D&affID=125035&tsp=5028");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.originalSearchEngine", "qvo6");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.smartbar.CTID", "CT3317893");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.smartbar.Uninstall", "0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.smartbar.homepage", "true");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("CT3317893.smartbar.toolbarName", "RadioTotal4 ");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3317893&octid=CT3317893&SearchSource=61&CUI=UN11316025201422224&UM=2&UP=SP339C7C4A-0986-421B-B9F5-8776A636615B");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Conduit Search");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com&CUI=UN11316025201422224");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3317893");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119828&babsrc=HP_ss&mntrId=90e6fbfe000000000000002421908c4c");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("avg.install.userSPSettings", "Delta Search");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("avira.safe_search.installed", "[\"safesearch\"]");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("avira.safe_search.prev_newtab", "chrome://quick_start/content/index.html");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultenginename", "Avira SafeSearch");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultthis.engineName", "RadioTotal4 Customized Web Search");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.hiddenOneOffs", "Yahoo,Amazon.de,awesomehp,Bing,DuckDuckGo,eBay,LEO Eng-Deu,OZON.ru,Price.ru,sweet-page,????????? (ru),?????@Mail.Ru,??????,??????.???????");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.alias", "mystartsearch");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.iconURL", "hxxp://www.mystartsearch.com/favicon.ico");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.name", "mystartsearch");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.url", "hxxp://www.mystartsearch.com/web/?type=ds&ts=1427059220&from=cor&uid=3219913727_67194_90E6FBFE&q={searchTerms}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-page-button\",\"print-but[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", true);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119828&babsrc=NT_ss&mntrId=90e6fbfe000000000000002421908c4c");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.admin", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.aflt", "babsst");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.bbDpng", "6");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.cntry", "DE");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.dfltLng", "en");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.excTlbr", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.hdrMd5", "485258D81782109B7CBC1DCD54986CB9");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.id", "90e6fbfe000000000000002421908c4c");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.instlDay", "15770");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.instlRef", "sst");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.10.016:28:39");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.newTab", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.prdct", "delta");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.rvrt", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.sg", "azb");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.smplGrp", "none");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.tlbrId", "base");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.vrsn", "1.8.10.0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.10.016:28:39");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.delta.vrsni", "1.8.10.0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.fuchs_v_1_10.data", "{\"shop\":{\"videobuster.de\":[\"10002\",\"Videobuster\",1,\"30 Tage kostenlos bei Video B...\"],\"quelle.de\":[\"10003\",\"Quelle\",6,\"20\\u20ac Rabatt\"][...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.ominent.srchPrvdr", "Search The Web(ominent)");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.enable_search1", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.MP_DISTINCT_ID", "\"14c501c413190-0f28332251dd8e8-45574136-0-14c501c413263\"");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.SAUTH_expires_at", "1427877970");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.SAUTH_rndsnr", "\"9715541d244e4e47b0cde2a7fcace6d0e6fc383e\"");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.SAUTH_userid", "5957425472");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.SAUTH_utoken", "\"e53615ed5889ba0d92591de51d95f1838e72ad37\"");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.install", "1427273171264");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.safesearch.search_offer_disabled", "true");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.admin", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.aflt", "babsst");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.appId", "{4277F7CF-0000-46CF-BA49-D624465C4BAB}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.autoRvrt", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.bbDpng", "14");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.cntry", "DE");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.dfltLng", "de");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.excTlbr", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.ffxUnstlRst", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.hdrMd5", "6D2F5DD0BB37C64A555E31514E61D2C9");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.id", "90e6fbfe000000000000002421908c4d");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.instlDay", "15985");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.instlRef", "sst");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.lastVrsnTs", "1.8.16.1916:04:50");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.newTab", false);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.prdct", "searchgol");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.prtnrId", "searchgol");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.rvrt", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.sg", "azb");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.smplGrp", "none");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.tlbrId", "base");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.tlbrSrchUrl", "");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.vrsn", "1.8.16.19");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.vrsnTs", "1.8.16.1916:04:50");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.searchgol.vrsni", "1.8.16.19");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.affiliate_id", "6447");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.firstrun", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.log_send_info", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.mappingListJsonString", "{\"version\":\"0.21087\",\"update_interval\":1227,\"base_url\":\"hxxp:\\/\\/www.wajam.com\\/\",\"update_url\":\"hxxp:\\/\\/www.wajam.com\\/addon\\/[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.no_trace", "false");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.server_current_mapping_version", "0.21087");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.trace_log", "1381154692817 - onFlagInfoReceived - Unique ID saved\n");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.unique_id", "6F23502DE278C54E37D390FC901A4616");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.user_current_mapping_version", "0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.wajam.version", "1.26");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("extensions.xpiState", "{\"app-profile\":{\"abs@avira.com\":{\"d\":\"C:\\\\Users\\\\FFF\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\tndm3psf.default\\\\extensions\\\\abs@avira[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.LayoutId", "28");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.ShowThankyouPixel", "0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.displayFavLinks", "0");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent102", "1380297744643");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent109", "1380381806634");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent110", "1379956143441");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent111", "1380381806648");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent112", "1380381806923");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent122", "1380381806662");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent140", "1380301860351");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.version", "7.36.1.1");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.33.3.1\",\"InstallEventCTime\":1376740506855,\"InstallEvent\":\"True\",\"UpdateEventCTime\":1380371776082}");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3317893");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3317893&CUI=UN11316025201422224&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3317893&octid=CT3317893&SearchSource[...]
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317893&SearchSource=2&CUI=UN11316025201422224&UM=2&q=");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT2851647");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT2851647");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.machineId", "RZZN45/QJNIRX8FXELACGDB5FMK5ZSEPZPJ6TZ+YRQP4F8MLBPP4KZXPF95LQU1MCT/8GK0/G/4ZL+AEGUTEMA");
[tndm3psf.default\prefs.js] - Line Deleted : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3317893&CUI=UN11316025201422224&UM=2&SearchSource=13");
-\\ Google Chrome v41.0.2272.101
[C:\Users\FFF\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : bopakagnckmlgajfccecajhnimjiiedh
[C:\Users\FFF\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Homepage] : hxxp://www.mystartsearch.com/?type=hp&ts=1427059220&from=cor&uid=3219913727_67194_90E6FBFE
[C:\Users\FFF\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Startup_URLs] : hxxp://www.mystartsearch.com/?type=hp&ts=1427059220&from=cor&uid=3219913727_67194_90E6FBFE
*************************
AdwCleaner[R0].txt - [43145 bytes] - [30/03/2015 18:57:55]
AdwCleaner[S0].txt - [41357 bytes] - [30/03/2015 19:00:02]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [41417 bytes] ##########
zu Schritt 2 Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.8 (03.30.2015:1)
OS: Windows 7 Ultimate x64
Ran by FFF on 30.03.2015 at 19:11:56,26
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
Successfully stopped: [Service] update resultsalpha
Successfully deleted: [Service] update resultsalpha
Successfully stopped: [Service] util resultsalpha
Successfully deleted: [Service] util resultsalpha
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update resultsalpha
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util resultsalpha
~~~ Files
Successfully deleted: [File] C:\Windows\Tasks\DriverUpdate Daily Scan.job
Successfully deleted: [File] C:\Windows\prefetch\DEALPLYLIVE.EXE-B469C63A.pf
Successfully deleted: [File] C:\Windows\prefetch\DEALPLYLIVEHANDLER.EXE-2529B0CB.pf
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\pc1data"
Successfully deleted: [Folder] "C:\Program Files (x86)\driver-soft"
Successfully deleted: [Folder] "C:\Users\FFF\AppData\Roaming\microsoft\windows\start menu\programs\driver genius"
~~~ FireFox
Successfully deleted: [File] C:\user.js
Successfully deleted: [File] C:\Users\FFF\AppData\Roaming\mozilla\firefox\profiles\tndm3psf.default\searchplugins\avira-safesearch.xml
Successfully deleted: [Folder] C:\Users\FFF\AppData\Roaming\mozilla\firefox\profiles\tndm3psf.default\extensions\safesearch@avira.com
Successfully deleted the following from C:\Users\FFF\AppData\Roaming\mozilla\firefox\profiles\tndm3psf.default\prefs.js
user_pref("CT2851647.1000234.TWC_TMP_city", "ZAVENTEM");
user_pref("CT2851647.1000234.TWC_TMP_country", "BE");
user_pref("CT2851647.1000234.TWC_country", "BELGIUM");
user_pref("CT2851647.1000234.TWC_locId", "BEXX0472");
user_pref("CT2851647.1000234.TWC_location", "Zaventem, Belgium");
user_pref("CT2851647.1000234.TWC_region", "OT");
user_pref("CT2851647.1000234.TWC_temp_dis", "c");
user_pref("CT2851647.1000234.TWC_wind_dis", "kmh");
user_pref("CT2851647.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2851647.FF19Solved", "true");
user_pref("CT2851647.FirstTime", "true");
user_pref("CT2851647.FirstTimeFF3", "true");
user_pref("CT2851647.PG_ENABLE.enc", "dHJ1ZQ==");
user_pref("CT2851647.UserID", "UN35163003884320357");
user_pref("CT2851647.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2851647.autoDisableScopes", -1);
user_pref("CT2851647.cbfirsttime.enc", "RnJpIEZlYiAyMiAyMDEzIDIzOjQ3OjU5IEdNVCswMTAw");
user_pref("CT2851647.countryCode", "DE");
user_pref("CT2851647.defaultSearch", "false");
user_pref("CT2851647.enableAlerts", "always");
user_pref("CT2851647.enableFix404ByUser", "FALSE");
user_pref("CT2851647.enableSearchFromAddressBar", "false");
user_pref("CT2851647.firstTimeDialogOpened", "true");
user_pref("CT2851647.fixPageNotFoundError", "true");
user_pref("CT2851647.fixPageNotFoundErrorByUser", "true");
user_pref("CT2851647.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2851647.fixUrls", true);
user_pref("CT2851647.fullUserID", "UN35163003884320357.UP.20130710141917");
user_pref("CT2851647.installDate", "22/2/2013 23:47:44");
user_pref("CT2851647.installType", "xpe");
user_pref("CT2851647.isCheckedStartAsHidden", true);
user_pref("CT2851647.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2851647.isFirstTimeToolbarLoading", "false");
user_pref("CT2851647.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2851647.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2851647.keyword", true);
user_pref("CT2851647.lastVersion", "10.23.0.822");
user_pref("CT2851647.mam_gk_CouponBuddy_appState.enc", "b24=");
user_pref("CT2851647.mam_gk_PriceGong_appState.enc", "b24=");
user_pref("CT2851647.mam_gk_appStateReportTime.enc", "MTM2MTU3MzI3ODk3MQ==");
user_pref("CT2851647.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9odG1sX2NvbXAuaHRtbCIsIm9wdGlvbnN
user_pref("CT2851647.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
user_pref("CT2851647.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImNyaXRlcmlhcyI6W3siY3JpdGVyaWFJZCI6IjQzZmVjMDg1LWNkMzktNGQyZi05MDZhLTAyNTdkZj
user_pref("CT2851647.mam_gk_currentVersion.enc", "MS40LjAuNA==");
user_pref("CT2851647.mam_gk_eventsCache.enc", "eyIxZjRlZjM1Mi1mYTRlLTQzMmEtYWE3My1hNGM4ZDYzMWVkZWIiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjpbIldlbGNvbWUiLCJWaWV3Il0sInVuaXF1ZUlk
user_pref("CT2851647.mam_gk_first_time.enc", "MQ==");
user_pref("CT2851647.mam_gk_gadgetOpen.enc", "MQ==");
user_pref("CT2851647.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
user_pref("CT2851647.mam_gk_lastLoginTime.enc", "MTM2MTU3MzI3ODc0Mg==");
user_pref("CT2851647.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnkiOnsiVGV4dCI6IlZhbHVlIEFwcHM
user_pref("CT2851647.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
user_pref("CT2851647.mam_gk_settings1.4.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiNjFfLTEiLCJpc1Rlc3QiOmZhbHNlLCJpc1dlbGNvbWVFeHBlcmll
user_pref("CT2851647.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
user_pref("CT2851647.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
user_pref("CT2851647.mam_gk_userId.enc", "YTAwNWNkY2MtNzdmNS00ZDFjLWE3MWQtNDc0ZTYzYjIwZTA3");
user_pref("CT2851647.mam_gk_user_apps_selection.enc", "");
user_pref("CT2851647.migrateAppsAndComponents", true);
user_pref("CT2851647.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2851647.openThankYouPage", "true");
user_pref("CT2851647.openUninstallPage", "false");
user_pref("CT2851647.originalHomepage", "hxxp://www.google.de?hl=de&gl=de");
user_pref("CT2851647.originalSearchEngine", "Google");
user_pref("CT2851647.originalSearchEngineName", "Google");
user_pref("CT2851647.price-gong.isManagedApp", "true");
user_pref("CT2851647.revertSettingsEnabled", "false");
user_pref("CT2851647.scriptSource.enc", "aHR0cDovLzEyNy4wLjAuMToxMDAwMC9ndWkv");
user_pref("CT2851647.search.searchAppId", "129351532245275780");
user_pref("CT2851647.search.searchCount", "0");
user_pref("CT2851647.searchInNewTabEnabledByUser", "false");
user_pref("CT2851647.searchInNewTabEnabledInHidden", "true");
user_pref("CT2851647.searchSuggestEnabledByUser", "false");
user_pref("CT2851647.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2851647.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2851647.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2851647.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2851647\"}");
user_pref("CT2851647.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2851647.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2851647.serviceLayer_services_Configuration_lastUpdate", "1393501825591");
user_pref("CT2851647.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1361573274819");
user_pref("CT2851647.serviceLayer_services_appsMetadata_lastUpdate", "1361573274585");
user_pref("CT2851647.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1361573274472");
user_pref("CT2851647.serviceLayer_services_location_lastUpdate", "1372964828074");
user_pref("CT2851647.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364150164039");
user_pref("CT2851647.serviceLayer_services_login_10.14.65.43_lastUpdate", "1373401286804");
user_pref("CT2851647.serviceLayer_services_login_10.15.0.562_lastUpdate", "1369168785300");
user_pref("CT2851647.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372964826802");
user_pref("CT2851647.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374953719265");
user_pref("CT2851647.serviceLayer_services_login_10.16.70.505_lastUpdate", "1379188779482");
user_pref("CT2851647.serviceLayer_services_login_10.20.0.513_lastUpdate", "1384608404976");
user_pref("CT2851647.serviceLayer_services_login_10.22.5.510_lastUpdate", "1387042949391");
user_pref("CT2851647.serviceLayer_services_login_10.23.0.822_lastUpdate", "1393501824860");
user_pref("CT2851647.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1361573274536");
user_pref("CT2851647.serviceLayer_services_searchAPI_lastUpdate", "1393501825505");
user_pref("CT2851647.serviceLayer_services_serviceMap_lastUpdate", "1393501824333");
user_pref("CT2851647.serviceLayer_services_setupAPI_lastUpdate", "1361573273602");
user_pref("CT2851647.serviceLayer_services_toolbarContextMenu_lastUpdate", "1361573274412");
user_pref("CT2851647.serviceLayer_services_toolbarSettings_lastUpdate", "1393509024537");
user_pref("CT2851647.serviceLayer_services_translation_lastUpdate", "1393501824344");
user_pref("CT2851647.settingsINI", true);
user_pref("CT2851647.shouldFirstTimeDialog", "false");
user_pref("CT2851647.showToolbarPermission", "false");
user_pref("CT2851647.startPage", "false");
user_pref("CT2851647.toolbarBornServerTime", "23-2-2013");
user_pref("CT2851647.toolbarCurrentServerTime", "27-2-2014");
user_pref("CT2851647.toolbarLoginClientTime", "Wed Mar 13 2013 21:48:42 GMT+0100");
user_pref("CT2851647_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1393505427238,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT3317893.1000082.isPlayDisplay", "true");
user_pref("CT3317893.1000082.muteState", "off");
user_pref("CT3317893.1000082.shrinkState", "expanded");
user_pref("CT3317893.1000082.state", "{\"state\":\"stopped\",\"text\":\"NDR 2 Ham...\",\"description\":\"germany ndr 2 hambur...\",\"url\":\"hxxp://www.surfmusik.de/media/ndr
user_pref("CT3317893.1000234.TWC_TMP_city", "NUREMBERG");
user_pref("CT3317893.1000234.TWC_TMP_country", "DE");
user_pref("CT3317893.1000234.TWC_country", "GERMANY");
user_pref("CT3317893.1000234.TWC_locId", "GMBY0250");
user_pref("CT3317893.1000234.TWC_location", "Nuremberg, MT, Germany");
user_pref("CT3317893.1000234.TWC_region", "DE");
user_pref("CT3317893.1000234.TWC_temp_dis", "c");
user_pref("CT3317893.1000234.TWC_wind_dis", "kmh");
user_pref("CT3317893.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317893.FF19Solved", "true");
user_pref("CT3317893.Facebook_Mode.enc", "Mg==");
user_pref("CT3317893.Facebook_User_Locale.enc", "ZGU=");
user_pref("CT3317893.FirstTime", "true");
user_pref("CT3317893.FirstTimeFF3", "true");
user_pref("CT3317893.UserID", "UN11316025201422224");
user_pref("CT3317893.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3317893.appOptions", "{}");
user_pref("CT3317893.browser.search.defaultthis.engineName", "true");
user_pref("CT3317893.countryCode", "DE");
user_pref("CT3317893.defaultSearch", "true");
user_pref("CT3317893.enableAlerts", "true");
user_pref("CT3317893.enableSearchFromAddressBar", "true");
user_pref("CT3317893.firstTimeDialogOpened", "true");
user_pref("CT3317893.fixPageNotFoundError", "true");
user_pref("CT3317893.fixPageNotFoundErrorByUser", "true");
user_pref("CT3317893.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3317893.fullUserID", "UN11316025201422224.IN.20140114105052");
user_pref("CT3317893.installDate", "14/01/2014 10:50:54");
user_pref("CT3317893.installSessionId", "{DBC9EC54-EE85-4177-9E77-92548A37DB56}");
user_pref("CT3317893.installSp", "TRUE");
user_pref("CT3317893.installUsage", "2014-01-14T12:51:33.387608+03:00");
user_pref("CT3317893.installUsageEarly", "2014-01-14T12:51:30.860408+03:00");
user_pref("CT3317893.installerVersion", "1.8.1.4");
user_pref("CT3317893.isCheckedStartAsHidden", true);
user_pref("CT3317893.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317893.isFirstTimeToolbarLoading", "false");
user_pref("CT3317893.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3317893.keyword", "true");
user_pref("CT3317893.lastVersion", "10.23.0.822");
user_pref("CT3317893.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
user_pref("CT3317893.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://RadioTotal4.O
user_pref("CT3317893.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3317893.openThankYouPage", "false");
user_pref("CT3317893.openUninstallPage", "true");
user_pref("CT3317893.originalSearchAddressUrl", "");
user_pref("CT3317893.originalSearchEngineName", "");
user_pref("CT3317893.revertSettingsEnabled", "true");
user_pref("CT3317893.search.searchAppId", "130269805663268820");
user_pref("CT3317893.search.searchCount", "0");
user_pref("CT3317893.searchFromAddressBarEnabledByUser", "true");
user_pref("CT3317893.searchInNewTabEnabledByUser", "true");
user_pref("CT3317893.searchInNewTabEnabledInHidden", "true");
user_pref("CT3317893.searchRevert", "true");
user_pref("CT3317893.searchSuggestEnabledByUser", "true");
user_pref("CT3317893.searchUninstallUserMode", "2");
user_pref("CT3317893.searchUserMode", "2");
user_pref("CT3317893.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317893.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3317893.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT3317893.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3317893\"}");
user_pref("CT3317893.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://RadioTotal4.OurToolbar.com//xpi\"}");
user_pref("CT3317893.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"RadioTotal4 \"}");
user_pref("CT3317893.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317893.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3317893.serviceLayer_services_Configuration_lastUpdate", "1391086243064");
user_pref("CT3317893.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1390564619713");
user_pref("CT3317893.serviceLayer_services_appsMetadata_lastUpdate", "1391086241101");
user_pref("CT3317893.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1390982465468");
user_pref("CT3317893.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1389693092396");
user_pref("CT3317893.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1389693094902");
user_pref("CT3317893.serviceLayer_services_login_10.23.0.722_lastUpdate", "1389782214212");
user_pref("CT3317893.serviceLayer_services_login_10.23.0.822_lastUpdate", "1391086240435");
user_pref("CT3317893.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1390982465771");
user_pref("CT3317893.serviceLayer_services_searchAPI_lastUpdate", "1391086242512");
user_pref("CT3317893.serviceLayer_services_serviceMap_lastUpdate", "1391086240033");
user_pref("CT3317893.serviceLayer_services_toolbarContextMenu_lastUpdate", "1391086240172");
user_pref("CT3317893.serviceLayer_services_toolbarSettings_lastUpdate", "1391086241061");
user_pref("CT3317893.serviceLayer_services_translation_lastUpdate", "1391086240953");
user_pref("CT3317893.settingsINI", true);
user_pref("CT3317893.shouldFirstTimeDialog", "false");
user_pref("CT3317893.showToolbarPermission", "false");
user_pref("CT3317893.startPage", "true");
user_pref("CT3317893.toolbarBornServerTime", "14-1-2014");
user_pref("CT3317893.toolbarCurrentServerTime", "30-1-2014");
user_pref("CT3317893.toolbarInstallDate", "14-01-2014 10:50:52");
user_pref("CT3317893.toolbarLoginClientTime", "Tue Jan 14 2014 10:51:35 GMT+0100");
user_pref("CT3317893.versionFromInstaller", "10.23.0.722");
user_pref("CT3317893.xpeMode", "0");
user_pref("CT3317893_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1391086231779,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("avira.safe_search.installed", "[\"safesearch\"]");
user_pref("avira.safe_search.search_was_active", "true");
user_pref("browser.search.defaultenginename", "Avira SafeSearch");
user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine");
user_pref("browser.search.searchengine.ptid", "cor");
user_pref("browser.search.searchengine.uid", "3219913727_67194_90E6FBFE");
user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"new-window-button\",\"privatebrowsing-button\",\"save-
user_pref("extensions.bootstrappedAddons", "{\"abs@avira.com\":{\"version\":\"1.4.5\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\FFF\\\\AppData\\\\Roaming\\\\Mozil
user_pref("extensions.ominent.newTabUrl", "chrome://tuvaro/content/new browser tab.html?source=9f1d0980&tbp=tab&u=90e6fbfe000000000000002421908c4c");
user_pref("extensions.safesearch.MP_DISTINCT_ID", "\"14c6ba3ad7d2d-01b7f68b120875-45574136-0-14c6ba3ad7ed0\"");
user_pref("extensions.safesearch.SAUTH_expires_at", "1428339833");
user_pref("extensions.safesearch.SAUTH_rndsnr", "\"2677434757336a00a3bc0377409463e08ea858ec\"");
user_pref("extensions.safesearch.SAUTH_userid", "5966549252");
user_pref("extensions.safesearch.SAUTH_utoken", "\"3ce7731125967fd748f2fba2cc595ab1a783d603\"");
user_pref("extensions.safesearch.install", "1427735031175");
user_pref("extensions.xpiState", "{\"app-profile\":{\"abs@avira.com\":{\"d\":\"C:\\\\Users\\\\FFF\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\tndm3psf.default\\
user_pref("valueApps.CT2851647.mam_gk_currentVersion", "312E31332E302E3137");
user_pref("valueApps.CT2851647.mam_gk_currentVersion.storedInFile", false);
user_pref("valueApps.CT2851647.mam_gk_migrated_from_ls", "31");
user_pref("valueApps.CT2851647.mam_gk_migrated_from_ls.storedInFile", false);
user_pref("valueApps.CT2851647.mam_gk_userBornDate", "4E2F41");
user_pref("valueApps.CT2851647.mam_gk_userBornDate.storedInFile", false);
user_pref("valueApps.CT3317893./9B+7E+x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E,x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E-x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E.:2z527.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E.x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E/x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E06CG5EL8:", "6E6D6871736C6F74746F");
user_pref("valueApps.CT3317893./9B+7E06CG5EL8:.storedInFile", false);
user_pref("valueApps.CT3317893./9B+7E06CG5EL;8I:K", "247E2D2F226A74736E777972757A7A75242F4B49474F42357D5D5C3D");
user_pref("valueApps.CT3317893./9B+7E06CG5EL;8I:K.storedInFile", false);
user_pref("valueApps.CT3317893./9B+7E0x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E1x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E2x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E31;CJ7FK;KG#NCEP@MC+VKN.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E31;CJB>~J?B.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E3x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E4x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E5x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E6x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E7x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E8x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E9x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E:x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E;x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E<x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E=x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E>x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E?x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7E@x305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7EAx305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
user_pref("valueApps.CT3317893./9B+7EBE3G=;D9N9=D.storedInFile", false);
user_pref("valueApps.CT3317893./9B+7EBx305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7ECx305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7EDx305.storedInFile", true);
user_pref("valueApps.CT3317893./9B+7Etx305.storedInFile", true);
user_pref("valueApps.CT3317893./9B-0?3G>D", "3E6B6F3C407271727A47794572207D487879257C237B252A7E28295824582D592F5F2E30");
user_pref("valueApps.CT3317893./9B-0?3G>D.storedInFile", false);
user_pref("valueApps.CT3317893./9B-0?3G@6:5;", "");
user_pref("valueApps.CT3317893./9B-0?3G@6:5;.storedInFile", false);
user_pref("valueApps.CT3317893./9B-0?3GFA7EF", "2B2E2C3D");
user_pref("valueApps.CT3317893./9B-0?3GFA7EF.storedInFile", false);
user_pref("valueApps.CT3317893./9B-3=3ECCJA=F>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A23282E2E3132333435363B466068576C5E6857705A6C60606B6668563F73796F697
user_pref("valueApps.CT3317893./9B-3=3ECCJA=F>.storedInFile", false);
user_pref("valueApps.CT3317893./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
user_pref("valueApps.CT3317893./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile", false);
user_pref("valueApps.CT3317893./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
user_pref("valueApps.CT3317893./9B3=>@44I48?.storedInFile", false);
user_pref("valueApps.CT3317893./9B5BA==9CJAG", "6F6C407073416E717A434777784B757977217D4C50");
user_pref("valueApps.CT3317893./9B5BA==9CJAG.storedInFile", false);
user_pref("valueApps.CT3317893./9B6B11G4C56B>F;P;ANR@P", "6E6D6871736C6F747275737773");
user_pref("valueApps.CT3317893./9B6B11G4C56B>F;P;ANR@P.storedInFile", false);
user_pref("valueApps.CT3317893./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
user_pref("valueApps.CT3317893./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false);
user_pref("valueApps.CT3317893./9B9643G3/9E", "6A");
user_pref("valueApps.CT3317893./9B9643G3/9E.storedInFile", false);
user_pref("valueApps.CT3317893./9B;45>:BI9I7IE", "2B2E2C3D");
user_pref("valueApps.CT3317893./9B;45>:BI9I7IE.storedInFile", false);
user_pref("valueApps.CT3317893./9B<:222H64<", "393F352F3E");
user_pref("valueApps.CT3317893./9B<:222H64<.storedInFile", false);
user_pref("valueApps.CT3317893./9B<:222H64<L8DAJ", "6D70706E7674747976742A7A7272787D757D7C");
user_pref("valueApps.CT3317893./9B<:222H64<L8DAJ.storedInFile", false);
user_pref("valueApps.CT3317893./9B=+03EH8H8J?:", "4443");
user_pref("valueApps.CT3317893./9B=+03EH8H8J?:.storedInFile", false);
user_pref("valueApps.CT3317893./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
user_pref("valueApps.CT3317893./9B?+E2A52D8.storedInFile", false);
user_pref("valueApps.CT3317893./9B?B0D:8AJ62<H", "6D");
user_pref("valueApps.CT3317893./9B?B0D:8AJ62<H.storedInFile", false);
user_pref("valueApps.CT3317893./9BA@0<0BI6A7GN:6@L?", "6C");
user_pref("valueApps.CT3317893./9BA@0<0BI6A7GN:6@L?.storedInFile", false);
user_pref("valueApps.CT3317893.PG_ENABLE", "74727565");
user_pref("valueApps.CT3317893.PG_ENABLE.storedInFile", false);
user_pref("valueApps.CT3317893.SF_JUST_INSTALLED", "46414C5345");
user_pref("valueApps.CT3317893.SF_JUST_INSTALLED.storedInFile", false);
user_pref("valueApps.CT3317893.SF_STATUS", "454E41424C4544");
user_pref("valueApps.CT3317893.SF_STATUS.storedInFile", false);
user_pref("valueApps.CT3317893.SF_USER_ID", "6369645F31343132303134313035313430363835383832");
user_pref("valueApps.CT3317893.SF_USER_ID.storedInFile", false);
user_pref("valueApps.CT3317893.cb_experience_000", "3235");
user_pref("valueApps.CT3317893.cb_experience_000.storedInFile", false);
user_pref("valueApps.CT3317893.cb_firstuse0100", "31");
user_pref("valueApps.CT3317893.cb_firstuse0100.storedInFile", false);
user_pref("valueApps.CT3317893.cb_user_id_000", "434234353134393232383738325F313338393830303733343030365F46697265666F78");
user_pref("valueApps.CT3317893.cb_user_id_000.storedInFile", false);
user_pref("valueApps.CT3317893.cbfirsttime", "547565204A616E20313420323031342031303A35313A343120474D542B30313030");
user_pref("valueApps.CT3317893.cbfirsttime.storedInFile", false);
user_pref("valueApps.CT3317893.discover-experiments-photopop", "7B226E616D65223A2270686F746F706F7031222C2276657273696F6E223A31307D");
user_pref("valueApps.CT3317893.discover-experiments-photopop.storedInFile", false);
user_pref("valueApps.CT3317893.discover-periodic-reports", "7B2270696E675F30223A5B313339303136303933303038362C31343430303030305D7D");
user_pref("valueApps.CT3317893.discover-periodic-reports.storedInFile", false);
user_pref("valueApps.CT3317893.discover-user-id", "2238363261626162392D373863652D343434632D396233622D61393638316434366437663122");
user_pref("valueApps.CT3317893.discover-user-id.storedInFile", false);
user_pref("valueApps.CT3317893.ground-country-code", "22444522");
user_pref("valueApps.CT3317893.ground-country-code.storedInFile", false);
user_pref("valueApps.CT3317893.impression_session_counter", "32");
user_pref("valueApps.CT3317893.impression_session_counter.storedInFile", false);
user_pref("valueApps.CT3317893.impression_session_id", "2235626364616462382D333738652D346463642D613633392D36623265396232393364363422");
user_pref("valueApps.CT3317893.impression_session_id.storedInFile", false);
user_pref("valueApps.CT3317893.impression_session_last_active", "31333930313633363335343637");
user_pref("valueApps.CT3317893.impression_session_last_active.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appStateReportTime", "31333931303836323439313830");
user_pref("valueApps.CT3317893.mam_gk_appStateReportTime.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appState_CouponBuddy", "6F6E");
user_pref("valueApps.CT3317893.mam_gk_appState_CouponBuddy.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appState_Discover", "6F6E");
user_pref("valueApps.CT3317893.mam_gk_appState_Discover.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appState_Easytobook", "6F6E");
user_pref("valueApps.CT3317893.mam_gk_appState_Easytobook.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appState_Easytobook_targeted", "6F6E");
user_pref("valueApps.CT3317893.mam_gk_appState_Easytobook_targeted.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appState_PriceGong", "6F6E");
user_pref("valueApps.CT3317893.mam_gk_appState_PriceGong.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appState_WindowShopper", "6F6E");
user_pref("valueApps.CT3317893.mam_gk_appState_WindowShopper.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_appsConfig.storedInFile", true);
user_pref("valueApps.CT3317893.mam_gk_appsDefaultEnabled", "6E756C6C");
user_pref("valueApps.CT3317893.mam_gk_appsDefaultEnabled.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_calledSetupService", "31");
user_pref("valueApps.CT3317893.mam_gk_calledSetupService.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_currentVersion", "312E31322E302E35");
user_pref("valueApps.CT3317893.mam_gk_currentVersion.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_eventsCache", "7B2261326332373666342D393339312D343062332D393734372D376537623735316434313766223A7B22746F706963223A2273656E645573616765222C
user_pref("valueApps.CT3317893.mam_gk_eventsCache.storedInFile", true);
user_pref("valueApps.CT3317893.mam_gk_existingUsersRecoveryDone", "31");
user_pref("valueApps.CT3317893.mam_gk_existingUsersRecoveryDone.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_first_time", "31");
user_pref("valueApps.CT3317893.mam_gk_first_time.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_gadgetOpen", "30");
user_pref("valueApps.CT3317893.mam_gk_gadgetOpen.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_lastLoginTime", "31333931303836323439373538");
user_pref("valueApps.CT3317893.mam_gk_lastLoginTime.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_localization.storedInFile", true);
user_pref("valueApps.CT3317893.mam_gk_mamEnabled", "74727565");
user_pref("valueApps.CT3317893.mam_gk_mamEnabled.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_migrated_from_ls", "31");
user_pref("valueApps.CT3317893.mam_gk_migrated_from_ls.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_new_welcome_experience", "31");
user_pref("valueApps.CT3317893.mam_gk_new_welcome_experience.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_settings1.12.0.5.storedInFile", true);
user_pref("valueApps.CT3317893.mam_gk_showWelcomeGadget", "66616C7365");
user_pref("valueApps.CT3317893.mam_gk_showWelcomeGadget.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_stamp", "313030395F30");
user_pref("valueApps.CT3317893.mam_gk_stamp.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_userId", "65653465646666322D376531352D343765652D393432612D353738356661643962623863");
user_pref("valueApps.CT3317893.mam_gk_userId.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_user_approval_interacted", "31");
user_pref("valueApps.CT3317893.mam_gk_user_approval_interacted.storedInFile", false);
user_pref("valueApps.CT3317893.mam_gk_welcomeDialogMode", "31");
user_pref("valueApps.CT3317893.mam_gk_welcomeDialogMode.storedInFile", false);
user_pref("valueApps.CT3317893.response_cache.storedInFile", true);
user_pref("valueApps.CT3317893.url_history0001", "73746172743A3A3A636C69636B68616E646C65723A3A3A313338393830303733343432392C2C2C687474703A2F2F7777772E686D2E636F6D2F64652F64657
user_pref("valueApps.CT3317893.url_history0001.storedInFile", true);
user_pref("valueApps.storage.mam_gk_userId", "65653465646666322D376531352D343765652D393432612D353738356661643962623863");
Emptied folder: C:\Users\FFF\AppData\Roaming\mozilla\firefox\profiles\tndm3psf.default\minidumps [19 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.03.2015 at 19:18:39,35
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
Lesestoff:
AdwCleaner auf deinen Desktop.
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
