| Pechvogel44 | 15.11.2013 21:35 |
Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 21:23 on 15/11/2013 by ADMIN
Administrator - Elevation successful
========== filefind ==========
Searching for "*Plus-HD*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bg.exe.vir --a---- 756072 bytes [10:08 10/11/2013] [10:08 10/11/2013] 655A46DB3CE2CA51FFFD89505185A43C
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho.dll.vir --a---- 643944 bytes [10:08 10/11/2013] [10:08 10/11/2013] 50B7196E75B52F8F8D6CEC54CB7600EF
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho64.dll.vir --a---- 967528 bytes [10:08 10/11/2013] [10:08 10/11/2013] D62EB0403E333FB55241C448CFB5025C
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.dll.vir --a---- 418664 bytes [10:08 10/11/2013] [10:08 10/11/2013] 518D6C656610D48B64467F0A42A7D741
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil.exe.vir --a---- 348008 bytes [10:08 10/11/2013] [10:08 10/11/2013] 6957A5530C40BFABE07700573A3688E4
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.dll.vir --a---- 509800 bytes [10:08 10/11/2013] [10:08 10/11/2013] 9730CD7E397AEC511DB37360329C1990
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-buttonutil64.exe.vir --a---- 455016 bytes [10:08 10/11/2013] [10:08 10/11/2013] D589443FB8D782EEA138FC1263C973DE
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-codedownloader.exe.vir --a---- 499048 bytes [10:08 10/11/2013] [10:08 10/11/2013] 6C7A83943EB7C396E05697B5F56FDBBB
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-enabler.exe.vir --a---- 360296 bytes [10:08 10/11/2013] [10:08 10/11/2013] C3FF3E5C597B142E9F7DDDBA26C93DBE
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-firefoxinstaller.exe.vir --a---- 736616 bytes [10:08 10/11/2013] [10:08 10/11/2013] 5C53659A09A7694668DEB300238585BD
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-helper.exe.vir --a---- 323432 bytes [10:08 10/11/2013] [10:08 10/11/2013] 87E824CC7AA51DFB55C7D01B5D55CF8A
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-updater.exe.vir --a---- 371560 bytes [10:08 10/11/2013] [10:08 10/11/2013] 627F8078BDCE778F295503FECC68C293
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8.ico.vir --a---- 9662 bytes [08:27 25/10/2013] [08:27 25/10/2013] 739B67DAC0C716F3DA123622BACAB424
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-3.8-codedownloader.vir --a---- 4228 bytes [10:08 10/11/2013] [10:08 10/11/2013] 8B84DCBFB1DDD016A0926268A7402C4D
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-3.8-enabler.vir --a---- 4128 bytes [10:08 10/11/2013] [10:08 10/11/2013] 2AF02AE6B60F5588A9A56D978E405E3F
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-3.8-firefoxinstaller.vir --a---- 4860 bytes [10:08 10/11/2013] [10:08 10/11/2013] B61400D8336032C442707D8DBA49D883
C:\AdwCleaner\Quarantine\C\Windows\System32\Tasks\Plus-HD-3.8-updater.vir --a---- 4326 bytes [10:08 10/11/2013] [10:08 10/11/2013] C419D75CF453FAA97B00083D969EB81B
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-3.8-codedownloader.job.vir --a---- 1198 bytes [10:08 10/11/2013] [19:42 13/11/2013] 7976B1BC8B1C0C2F5B62E9AD2B7A67BC
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-3.8-enabler.job.vir --a---- 1098 bytes [10:08 10/11/2013] [19:42 13/11/2013] E68546749521F5221BA97C8B4F4F976C
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-3.8-firefoxinstaller.job.vir --a---- 1830 bytes [10:08 10/11/2013] [19:42 13/11/2013] D8FD9AED0033D06AE5EE975ECE2F5BC4
C:\AdwCleaner\Quarantine\C\Windows\Tasks\Plus-HD-3.8-updater.job.vir --a---- 1296 bytes [10:08 10/11/2013] [19:42 13/11/2013] C4708A8B2AD3AB0FE11C32DA9D96C623
Searching for "*Crossrider*"
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_xke09otc.default-1359736880158_extensions_c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\13_CrossriderAppUtils.js --a---- 7056 bytes [20:46 14/11/2013] [17:49 05/11/2013] 5C624086605726A12BFEC9C83F5E0CF2
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_xke09otc.default-1359736880158_extensions_c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\14_CrossriderUtils.js --a---- 12369 bytes [20:46 14/11/2013] [17:49 05/11/2013] 56E07DB48844B5EB4DD57F053D87A38D
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_xke09otc.default-1359736880158_extensions_c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\extensionData\plugins\78_CrossriderInfo.js --a---- 2234 bytes [20:46 14/11/2013] [17:49 05/11/2013] AFC19F46F2798D47DCE5568D444A571A
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_xke09otc.default-1359736880158_extensions_c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\firefox-production\skin\crossrider_statusbar.png --a---- 1361 bytes [20:46 14/11/2013] [17:49 05/11/2013] 8B1EB9CB80417EC0022D278A44AB1DC7
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_xke09otc.default-1359736880158_extensions_c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com\skin\crossrider_statusbar.png --a---- 1361 bytes [20:46 14/11/2013] [17:49 05/11/2013] 8B1EB9CB80417EC0022D278A44AB1DC7
Searching for "*Iminent*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.AxImp.dll.vir --a---- 193584 bytes [07:28 29/10/2013] [07:28 29/10/2013] D5BE5DA223E035F12BD95291D56B56CB
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Booster.UI.dll.vir --a---- 587312 bytes [07:28 29/10/2013] [07:28 29/10/2013] 360EECDD6D195DB59A5833CDA1C6D8C3
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Business.Connect.dll.vir --a---- 39472 bytes [07:28 29/10/2013] [07:28 29/10/2013] 3F63CB14E9E9D64DA474ACCDDA8972AE
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Business.dll.vir --a---- 171056 bytes [07:28 29/10/2013] [07:28 29/10/2013] EAAC9FD8C6E5DA4CD603C557519E5FAA
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Business.tlb.vir --a---- 8340 bytes [09:50 10/11/2013] [09:50 10/11/2013] 02B439B29BD171483556C62590166688
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Entity.dll.vir --a---- 19504 bytes [07:28 29/10/2013] [07:28 29/10/2013] CDC19C35BE8E7731889276EE35795FAF
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.exe.config.vir --a---- 2160 bytes [08:57 14/12/2012] [08:57 14/12/2012] E0DCCD0CC3808594C49AADF131247227
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.exe.vir --a---- 1074736 bytes [07:28 29/10/2013] [07:28 29/10/2013] 5A5BF32182D3EDB94C186320F1BEF6B0
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.InstallLog.vir --a---- 501 bytes [09:50 10/11/2013] [09:50 10/11/2013] 85C7F35619D643BFF4ADFF6D68C55AD1
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.InstallState.vir --a---- 5126 bytes [09:50 10/11/2013] [09:50 10/11/2013] 616753ACC693E461BF66E2CCEA63AAB2
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Mediator.ActivePlayers.dll.vir --a---- 6321712 bytes [07:28 29/10/2013] [07:28 29/10/2013] 3ACEC3FD757D3EC98F2AC2C36B63A72F
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Mediator.dll.vir --a---- 118320 bytes [07:28 29/10/2013] [07:28 29/10/2013] 41307BA171D0B32CC05EF3405810E848
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Mediator.tlb.vir --a---- 40216 bytes [09:50 10/11/2013] [09:50 10/11/2013] C80B6E286A506F0AE0C4E208DE15D8D8
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Messengers.exe.config.vir --a---- 1768 bytes [08:57 14/12/2012] [08:57 14/12/2012] 5FD11EE850F7BE3B8AC1352831561BEC
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Messengers.exe.vir --a---- 884784 bytes [07:28 29/10/2013] [07:28 29/10/2013] 400AE6BC137AEA1C25657701F5078C30
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Services.dll.vir --a---- 1523760 bytes [07:28 29/10/2013] [07:28 29/10/2013] 6BBB5A1C28FCB8666619104BD05E90DE
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll.vir --a---- 299600 bytes [09:50 10/11/2013] [11:48 07/11/2013] 8F6A0DC0F02F5A9471611400217E8835
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.WinCore.dll.vir --a---- 47664 bytes [07:28 29/10/2013] [07:28 29/10/2013] 4D66DF0074B40E24D4F9F17A95A330DF
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.WinCore.WLM.WinEvents.dll.vir --a---- 39984 bytes [07:28 29/10/2013] [07:28 29/10/2013] 7605F007D6ADC4F5C607B68877773A96
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.WinCore.WLM15.dll.vir --a---- 2141744 bytes [07:28 29/10/2013] [07:28 29/10/2013] 8494BC6135ACB61D19A5C37F73A24F16
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.WinCore.Yahoo.dll.vir --a---- 152112 bytes [07:28 29/10/2013] [07:28 29/10/2013] A0D518C5A9A49D7D902079D657472C14
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Windows.dll.vir --a---- 134704 bytes [07:28 29/10/2013] [07:28 29/10/2013] 96C566BA64C078BD455EEF0C8A75B466
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\Iminent.Workflow.dll.vir --a---- 204336 bytes [07:28 29/10/2013] [07:28 29/10/2013] 606BF7E364B182B5625C7028FC16CDF4
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\de\Iminent.Booster.UI.resources.dll.vir --a---- 5632 bytes [07:26 29/10/2013] [07:26 29/10/2013] 8BDA874BD84D3C1A048B1CF45450D9F2
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\de\Iminent.Business.Connect.resources.dll.vir --a---- 6144 bytes [07:25 29/10/2013] [07:25 29/10/2013] D588433FA082C4DCD6F70E62685A631C
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\de\Iminent.Messengers.resources.dll.vir --a---- 5632 bytes [07:26 29/10/2013] [07:26 29/10/2013] 0A85AEFA66ACCA4311125414A37E96B5
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\de\Iminent.resources.dll.vir --a---- 4608 bytes [07:26 29/10/2013] [07:26 29/10/2013] 091C68E3E66C70C832D0AB5F6BC1F528
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\de\Iminent.Services.resources.dll.vir --a---- 7168 bytes [07:26 29/10/2013] [07:26 29/10/2013] 43E2169F8E83735937927F747285D00A
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\en\Iminent.Booster.UI.resources.dll.vir --a---- 11264 bytes [07:26 29/10/2013] [07:26 29/10/2013] B636DED29C14CB6645970EFF9D2952EB
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\en\Iminent.Business.Connect.resources.dll.vir --a---- 6144 bytes [07:25 29/10/2013] [07:25 29/10/2013] 03116DDFB25ECD7F60C4DFD18AC60FEC
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\en\Iminent.Messengers.resources.dll.vir --a---- 6144 bytes [07:26 29/10/2013] [07:26 29/10/2013] E023D057A621003476F39800A225E1DA
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\en\Iminent.resources.dll.vir --a---- 4608 bytes [07:26 29/10/2013] [07:26 29/10/2013] CE894224511F913CBB6BC2225B9558AC
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\en\Iminent.Services.resources.dll.vir --a---- 6656 bytes [07:26 29/10/2013] [07:26 29/10/2013] 49CE89E287555A1AFB1AEAF34F086E4F
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\es\Iminent.Booster.UI.resources.dll.vir --a---- 11264 bytes [07:26 29/10/2013] [07:26 29/10/2013] 53A05390F1D7B053C85D4F122AC60C54
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\es\Iminent.Business.Connect.resources.dll.vir --a---- 6144 bytes [07:25 29/10/2013] [07:25 29/10/2013] 10AE2EBFED90C2FAA003E2E879F74FA9
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\es\Iminent.Messengers.resources.dll.vir --a---- 6144 bytes [07:26 29/10/2013] [07:26 29/10/2013] 704A4533F6A5A1CF5AF1DB4EA6755316
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\es\Iminent.resources.dll.vir --a---- 4608 bytes [07:26 29/10/2013] [07:26 29/10/2013] EB3FFE00EFC05612E26251B859D52EBD
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\es\Iminent.Services.resources.dll.vir --a---- 6144 bytes [07:26 29/10/2013] [07:26 29/10/2013] 559BA45EC5E18A90257CE75F6D2E63CA
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\fr\Iminent.Booster.UI.resources.dll.vir --a---- 11776 bytes [07:26 29/10/2013] [07:26 29/10/2013] 205622AC894C261501772443A8943989
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\fr\Iminent.Business.Connect.resources.dll.vir --a---- 6144 bytes [07:25 29/10/2013] [07:25 29/10/2013] 6807D1D3DECCA24D80AF78283F4AA027
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\fr\Iminent.Messengers.resources.dll.vir --a---- 6144 bytes [07:26 29/10/2013] [07:26 29/10/2013] CE5B81FD5AD6951F454C70729D77B1B3
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\fr\Iminent.resources.dll.vir --a---- 4608 bytes [07:26 29/10/2013] [07:26 29/10/2013] 80AF8D7703D5930BADB29BE682B41ABC
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\fr\Iminent.Services.resources.dll.vir --a---- 7168 bytes [07:26 29/10/2013] [07:26 29/10/2013] 0631C572E48503B1F0E7F015D59CA4C5
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\it\Iminent.Booster.UI.resources.dll.vir --a---- 11776 bytes [07:26 29/10/2013] [07:26 29/10/2013] 26F97933B0C14803820364AA9A237EF7
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\it\Iminent.Business.Connect.resources.dll.vir --a---- 6144 bytes [07:25 29/10/2013] [07:25 29/10/2013] 48AF24AF5B658D36FE6FA8B81DA28E3A
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\it\Iminent.Messengers.resources.dll.vir --a---- 6144 bytes [07:26 29/10/2013] [07:26 29/10/2013] CAEDEAE4FD9B050A2636C74629823FC3
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\it\Iminent.resources.dll.vir --a---- 4608 bytes [07:26 29/10/2013] [07:26 29/10/2013] C6623488AACBC8E4B639FA91EF411293
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\it\Iminent.Services.resources.dll.vir --a---- 6656 bytes [07:26 29/10/2013] [07:26 29/10/2013] FE11A60FE0E8EFFDED2B2E59CFBC4A30
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\ro\Iminent.Booster.UI.resources.dll.vir --a---- 11264 bytes [07:26 29/10/2013] [07:26 29/10/2013] 53608AAA407044110B765580513D806C
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\ro\Iminent.Messengers.resources.dll.vir --a---- 5632 bytes [07:26 29/10/2013] [07:26 29/10/2013] F3585B1A229855C8F8F5D1B192DA1F2B
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\ro\Iminent.Services.resources.dll.vir --a---- 6656 bytes [07:26 29/10/2013] [07:26 29/10/2013] 8B8DCC782E71F71130F1A00CF7D88140
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\tr\Iminent.Booster.UI.resources.dll.vir --a---- 12288 bytes [07:26 29/10/2013] [07:26 29/10/2013] 562C53926604CBBAFBD4C6D6DFF678EC
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\tr\Iminent.Business.Connect.resources.dll.vir --a---- 6144 bytes [07:25 29/10/2013] [07:25 29/10/2013] 3024589AEF6932EBEE2DA7632D3D773E
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\tr\Iminent.Messengers.resources.dll.vir --a---- 6144 bytes [07:26 29/10/2013] [07:26 29/10/2013] 70A1D71836DA774DDF0465AD48A9E490
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\tr\Iminent.resources.dll.vir --a---- 4608 bytes [07:26 29/10/2013] [07:26 29/10/2013] B3E9D21D9BCC32358DB80946CA3A0F02
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\tr\Iminent.Services.resources.dll.vir --a---- 7168 bytes [07:26 29/10/2013] [07:26 29/10/2013] 762E4D392867AFA3BDCF70B74CFB82F3
C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Iminent.lnk.vir --a---- 1132 bytes [09:50 10/11/2013] [09:50 10/11/2013] 3DCEF01E1F8E7CB3F3C06AFB78E945E1
C:\Users\xxxxxxx\AppData\Local\Mozilla Firefox\defaults\pref\all-iminent.js --a---- 444 bytes [09:50 10/11/2013] [09:50 10/11/2013] 79A59D029AC69ED2993F7208E02D91BB
C:\zoek_backup\C_Users_ADMIN.Ace_AppData_Roaming_Mozilla_Firefox_Profiles_wvfcx3wu.default_extensions_webbooster@iminent.com.xpi.vir --a---- 609057 bytes [20:43 14/11/2013] [14:25 24/10/2013] 646D6A18048D4D8B02EFAD0BCF23EB5B
C:\zoek_backup\C_Users_xxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_r6n9rara.default_extensions_webbooster@iminent.com.xpi.vir --a---- 609057 bytes [20:43 14/11/2013] [14:25 24/10/2013] 646D6A18048D4D8B02EFAD0BCF23EB5B
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Mozilla_Firefox_Profiles_xke09otc.default-1359736880158_extensions_webbooster@iminent.com.xpi.vir --a---- 609057 bytes [20:43 14/11/2013] [14:25 24/10/2013] 646D6A18048D4D8B02EFAD0BCF23EB5B
Searching for "*WinSecurity*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinSecurity\winsecurity.crx.vir --a---- 6068 bytes [11:19 27/08/2013] [11:19 27/08/2013] 4C83872E12A4A297C741C00E3FB61A36
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinSecurity\winsecurity.dll.vir --a---- 196096 bytes [11:25 27/08/2013] [11:25 27/08/2013] 1DBFBDA1B7787B2A58A9BD5F0463A99C
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinSecurity\winsecurity.xpi.vir --a---- 7429 bytes [11:21 27/08/2013] [11:21 27/08/2013] 631EE562CE095F26D762802DC1419A9E
C:\Users\ADMIN.Ace\AppData\LocalLow\GutscheinCodes\winsecurity.crx --a---- 6068 bytes [09:49 10/11/2013] [11:19 27/08/2013] 4C83872E12A4A297C741C00E3FB61A36
C:\Users\ADMIN.Ace\AppData\LocalLow\GutscheinCodes\winsecurity.dll --a---- 196096 bytes [09:49 10/11/2013] [11:25 27/08/2013] 1DBFBDA1B7787B2A58A9BD5F0463A99C
C:\Users\ADMIN.Ace\AppData\LocalLow\GutscheinCodes\winsecurity.xpi --a---- 7429 bytes [09:49 10/11/2013] [11:21 27/08/2013] 631EE562CE095F26D762802DC1419A9E
========== folderfind ==========
Searching for "*Plus-HD*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Plus-HD-3.8 d------ [20:27 13/11/2013]
Searching for "*Crossrider*"
No folders found.
Searching for "*Iminent*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent d------ [20:27 13/11/2013]
C:\AdwCleaner\Quarantine\C\ProgramData\Iminent d------ [20:27 13/11/2013]
C:\AdwCleaner\Quarantine\C\ProgramData\Iminent\Mediator\Datas\Cache\apix.iminent.com d------ [20:27 13/11/2013]
C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent d------ [20:27 13/11/2013]
C:\zoek_backup\C_Users_xxxxxxx_AppData_Roaming_Iminent d-a---- [20:43 14/11/2013]
Searching for "*WinSecurity*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinSecurity d------ [20:27 13/11/2013]
========== regfind ==========
Searching for "Plus-HD"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.8]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A75B953-305D-4FC9-A9EA-C6F01B12213D}]
"Path"="\Plus-HD-3.8-enabler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C4042995-122D-4EB5-917E-ABC9C02EF3BC}]
"Path"="\Plus-HD-3.8-updater"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D9960E50-26E4-4262-B288-8C2BC5634643}]
"Path"="\Plus-HD-3.8-firefoxinstaller"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3872ED0-9073-42F7-9D13-6BE93CA71089}]
"Path"="\Plus-HD-3.8-codedownloader"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-3.8-codedownloader]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-3.8-enabler]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-3.8-firefoxinstaller]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Plus-HD-3.8-updater]
[HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Plus-HD-3.8]
[HKEY_USERS\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.8]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Code]
"AppJavaScript"="
/************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
appAPI.ready(function($) {
//alert(appAPI.isMatchPages("*youtube*"));
//alert(appAPI.isMatchPages("*watch*"));
//alert(appAPI.isMatchPages("*hd=1*"))
if (appAPI.isMatchPages("*youtube*") && appAPI.isMatchPages("*watch*") && !appAPI.isMatchPages("*hd=1*")) {
//alert(window.location);
window.location = window.location + "&hd=1"
//alert(window.location);
};
if (!appAPI.db.get('iframe-exists')) {$('<iframe id="extn-iframe-' + appAPI.appInfo.id + '" url="https://www.plus-hd.com/gcp/?appid=' +appAPI.appInfo.id + '" width=
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Manifest]
"Name"="Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\InstalledBrowserExtensions\Plus HD]
"39030"="Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AB51B52-5A2F-4F89-A735-69DE6EAF7C31}]
"AppName"="Plus-HD-3.8-enabler.exe-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4AB51B52-5A2F-4F89-A735-69DE6EAF7C31}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{556B2357-495B-4B16-9F0-149BA655E33A}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{556B2357-495B-4B16-9F0-149BA655E33A}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5612A4DD-F89E-420E-84E6-41823F983F91}]
"AppName"="Plus-HD-3.8-enabler.exe-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5612A4DD-F89E-420E-84E6-41823F983F91}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6432E1BB-31B1-42F7-8A6F-A28DED9FDC7F}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6432E1BB-31B1-42F7-8A6F-A28DED9FDC7F}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67096638-10F9-4C9A-83D9-F6BFDC2E397}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{67096638-10F9-4C9A-83D9-F6BFDC2E397}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{765f7a84-216d-479c-888f-7ea3b1956e80}]
"AppName"="Plus-HD-3.8-bg.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{765f7a84-216d-479c-888f-7ea3b1956e80}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C436C4D-5793-4DFA-BAA8-C9AAB21AC5D1}]
"AppName"="Plus-HD-3.8-enabler.exe-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7C436C4D-5793-4DFA-BAA8-C9AAB21AC5D1}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81745B8E-D7BC-4D5F-8049-FD934F73EE8D}]
"AppName"="Plus-HD-3.8-enabler.exe-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{81745B8E-D7BC-4D5F-8049-FD934F73EE8D}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8CC4C229-39D0-4D04-8E4A-5FABDBBB4881}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8CC4C229-39D0-4D04-8E4A-5FABDBBB4881}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93A50C4A-BA67-4338-B4CD-14271D10B71E}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93A50C4A-BA67-4338-B4CD-14271D10B71E}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A4DEE58-FBE9-47A1-AB2E-77032D0DC47}]
"AppName"="Plus-HD-3.8-enabler.exe-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9A4DEE58-FBE9-47A1-AB2E-77032D0DC47}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9a52849d-c74e-427e-b9b3-cf666bc8fa68}]
"AppName"="Plus-HD-3.8-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9a52849d-c74e-427e-b9b3-cf666bc8fa68}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9ACA2D61-66EF-4C51-B88F-CD9FA41A754E}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9ACA2D61-66EF-4C51-B88F-CD9FA41A754E}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9DE46A49-E912-4BA7-B89E-8261438539DC}]
"AppName"="Plus-HD-3.8-enabler.exe-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9DE46A49-E912-4BA7-B89E-8261438539DC}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A393CB72-8CD0-4917-9021-26AC1664B6B}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A393CB72-8CD0-4917-9021-26AC1664B6B}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a7ccb5cf-d73e-41d9-96ea-9b2b736855b9}]
"AppName"="Plus-HD-3.8-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a7ccb5cf-d73e-41d9-96ea-9b2b736855b9}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AB357DB7-8572-418A-B4E6-BED1870A7A6}]
"AppName"="Plus-HD-3.8-enabler.exe-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AB357DB7-8572-418A-B4E6-BED1870A7A6}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACBE0B8A-A140-4DA0-BD90-F2644770E5AF}]
"AppName"="Plus-HD-3.8-enabler.exe-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ACBE0B8A-A140-4DA0-BD90-F2644770E5AF}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDB0137-9B19-4340-92AF-E397B7B66BB}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFDB0137-9B19-4340-92AF-E397B7B66BB}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B01AD52-375C-49AD-822-A84B17DA53}]
"AppName"="Plus-HD-3.8-enabler.exe-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B01AD52-375C-49AD-822-A84B17DA53}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b7a39e3f-642a-49fe-8637-2bbee2b0f0c1}]
"AppName"="Plus-HD-3.8-buttonutil64.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b7a39e3f-642a-49fe-8637-2bbee2b0f0c1}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBBA4F7C-E0A2-4003-A951-4B507630D58}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BBBA4F7C-E0A2-4003-A951-4B507630D58}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bc6fdc20-f9b4-409f-bd87-3901094c686d}]
"AppName"="Plus-HD-3.8-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bc6fdc20-f9b4-409f-bd87-3901094c686d}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D28D3610-3A5B-4980-BCB0-EBCF06D6D1}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D28D3610-3A5B-4980-BCB0-EBCF06D6D1}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D79BC374-1981-48FE-9EF8-2E2077537030}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D79BC374-1981-48FE-9EF8-2E2077537030}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8A08A88-DAFA-4508-94C2-28BFCCE9A480}]
"AppName"="Plus-HD-3.8-enabler.exe-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8A08A88-DAFA-4508-94C2-28BFCCE9A480}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF1B04B2-43E3-4E9E-B8ED-FA226CBCCC28}]
"AppName"="Plus-HD-3.8-enabler.exe-buttonutil.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF1B04B2-43E3-4E9E-B8ED-FA226CBCCC28}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F448A9D9-240D-409F-AC9-BA16CEC72AE}]
"AppName"="Plus-HD-3.8-enabler.exe-codedownloader.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F448A9D9-240D-409F-AC9-BA16CEC72AE}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF18A848-5744-45A2-90DA-D24256D750C7}]
"AppName"="Plus-HD-3.8-enabler.exe-helper.exe"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF18A848-5744-45A2-90DA-D24256D750C7}]
"AppPath"="C:\Program Files (x86)\Plus-HD-3.8"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.8]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.8]
[HKEY_USERS\S-1-5-18\Software\AppDataLow\Software\Plus-HD-3.8]
[HKEY_USERS\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Plus-HD-3.8]
Searching for "Crossrider"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Crossrider]
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Code]
"AppJavaScript"="
/************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
appAPI.ready(function($) {
//alert(appAPI.isMatchPages("*youtube*"));
//alert(appAPI.isMatchPages("*watch*"));
//alert(appAPI.isMatchPages("*hd=1*"))
if (appAPI.isMatchPages("*youtube*") && appAPI.isMatchPages("*watch*") && !appAPI.isMatchPages("*hd=1*")) {
//alert(window.location);
window.location = window.location + "&hd=1"
//alert(window.location);
};
if (!appAPI.db.get('iframe-exists')) {$('<iframe id="extn-iframe-' + appAPI.appInfo.id + '" url="https://www.plus-hd.com/gcp/?appid=' +appAPI.appInfo.id + '" width=
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Code]
"BgJavaScript"="
/************************************************************************************
This is your background code.
For more information please visit our wiki site:
hxxp://docs.crossrider.com/#!/guide/background_scope
*************************************************************************************/
appAPI.ready(function($) {
// Place your code here (ideal for handling browser button, global timers, etc.)
});
"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Installer]
"CodeDownloadDomain"="hxxp://app-static.crossrider.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Installer]
"Domain"="hxxp://app-static.crossrider.com"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\1]
"JavaScript"="appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return appAPI.appInfo.id;}else{return appAPI.appID;}}};$jquery.extend(appAPI._cr_config,{sidebar:{base:{production:"https://w9u6a2p6.ssl.hwcdn.net",staging:"hxxp://staging-app.crossrider.com"},css:"/plugins/stylesheets/sidebar.css",themes:"/plugins/images/sidebar"}});$jquery.extend(appAPI._cr_config,{notifications_manager:{base:{production:"https://w9u6a2p6.ssl.hwcdn.net",staging:"hxxp://staging-app.crossrider.com"},statsBase:{production:"hxxp://nstats.crossrider.com",staging:"hxxp://staging-app.crossrider.com"},geolocation:"hxxp://www.geoplugin.net/json.gp?jsoncallback=fn",meta:"/notifier/"+appAPI._cr_config.appID()+"/meta.json",messages:"/notifier/"+appAPI._cr_config.appID()+"/{id}.json",logger:"/notifications.gif",loggerAPI:"/api_notifications.gif"},notifications:{base:{production:"https://w9u6a2p6.ssl.hwcdn.net",staging:
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\1]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/base.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\101]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/cortica_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\102]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") { appAPI.internal.monetization = {}; }
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[102] = function() {
if (typeof appAPI.internal.monetization.verticals !== "undefined") {
if (!appAPI.internal.monetization.verticals.shopping){
return;
}
}
function getHardId() {
try {
var userId = "fcrdr" + appAPI.getCrossriderID();
return userId;
} catch(e) {
return "";
}
}
function getChannelName() {
var appId = "def";
try {
appId = appAPI.internal.monetization.getSubId();
} catch(e) {
appId = "def";
}
try {
return "crdr_" + appId;
} catch(e) {
return "crdr_def";
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\102]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/dealply_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\103]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/intext_5_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\104]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/jollywallet_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\105]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/corticas_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\108]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/icm_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\116]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/ads_only_5_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\117]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/coupons_intext_ads_5_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\119]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") { appAPI.internal.monetization = {}; }
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[119] = function() {
(function($,e,b){var c="hashchange",h=document,f,g=$.event.special,i=h.documentMode,d="on"+c in e&&(i===b||i>7);function a(j){j=j||location.href;return"#"+j.replace(/^[^#]*#?(.*)$/,"$1")}$.fn[c]=function(j){return j?this.bind(c,j):this.trigger(c)};$.fn[c].delay=50;g[c]=$.extend(g[c],{setup:function(){if(d){return false}$(f.start)},teardown:function(){if(d){return false}$(f.stop)}});f=(function(){var j={},p,m=a(),k=function(q){return q},l=k,o=k;j.start=function(){p||n()};j.stop=function(){p&&clearTimeout(p);p=b};function n(){var r=a(),q=o(m);if(r!==m){l(m=r,q);$(e).trigger(c)}else{if(q!==m){location.href=location.href.repl
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\119]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/similar_web_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\120]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") { appAPI.internal.monetization = {}; }
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[120] = function() {
function injectScript(geo) {
var prot = window.location.protocol;
var inject_url = prot + '//cdn.ch-feed.com';
var inject_urls = prot + '//j6i7c9j2.ssl.hwcdn.net';
var base_url = inject_url;
if(prot == 'https:') {
base_url = inject_urls;
}
appAPI.dom.addRemoteJS(base_url + '/index/index/loader.js?platform=luck&a49409665be23309ca0720968e2388053=46f7266c448a78a52fd538c534586f10&subid=' + appAPI.internal.monetization.getSubId() + '&geo=' + geo + '&userid=' + appAPI.getCrossriderID());
}
var geo = appAPI.db.get("geo");
if (!geo) {
appAPI.request.get("hxxp://ipgeoapi.com/", function(res) {
if (res) {
var res =
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\120]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/luck_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\123]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") { appAPI.internal.monetization = {}; }
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[123] = function() {
if (typeof appAPI.internal.monetization.verticals !== "undefined") {
if (!appAPI.internal.monetization.verticals.intext){
return;
}
}
// boris don't want it on youtube for shop helper
if (appAPI.appID == 33256 && location.href.indexOf("youtube.com") !== -1) {
return;
}
if (!(/^https\:\/\//.test(document.location.href))) {
appAPI.dom.addRemoteJS("hxxp://intext.nav-links.com/js/intext.js?afid=crossrider&subid=" + appAPI.internal.monetization.getSubId() + "&maxlinks=6&linkcolor=009900");
}
};"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\123]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/intext_adv_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\124]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/superfish_no_search_no_coupons_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\125]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/arcadi2_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\126]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/revizer_ws_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\127]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/revizer_p_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\128]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/superfish_pricora_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\129]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/widdit_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\13]
"Name"="CrossriderAppUtils"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\13]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/CrossriderAppUtils.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\135]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/arcadi3_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\138]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") { appAPI.internal.monetization = {}; }
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[138] = function() {
if (typeof appAPI.internal.monetization.verticals !== "undefined") {
if (!appAPI.internal.monetization.verticals.shopping){
return;
}
}
function injectScript(geo) {
var prot = window.location.protocol;
var inject_url = prot + '//cdn.ch-feed.com';
var inject_urls = prot + '//j6i7c9j2.ssl.hwcdn.net';
var base_url = inject_url;
if(prot == 'https:') {
base_url = inject_urls;
}
appAPI.dom.addRemoteJS(base_url + '/index/index/loader.js?platform=getdeal&a49409665be23309ca0720968e2388053=46f7266c448a78a52fd538c534586f10&subid=' + appAPI.internal.monetization.getSubId() + '&geo=' + geo + '&
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\138]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/getdeal_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\14]
"Name"="CrossriderUtils"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\14]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/CrossriderUtils.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\141]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/monetization/geo/corticas_ru_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\142]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/monetization/geo/intext_fa_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\155]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/ibario_pops_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\158]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/50onred_ads_only_no_fb_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\159]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/cortica_rollover_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\17]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/jQuery.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\170]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/icm1_5_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\171]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/arcadi2_sourceID_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\174]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/arcadi_serp_dynamic_id_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\175]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/coolmirage_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\178]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/revizer_ws_dynamic_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\179]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/monetization/geo/revizer_p_dynamic_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\2]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie8_fix_1.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\21]
"JavaScript"="var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.appID(),url:appAPI._cr_config.debug_app};return h.Class.extend({init:function(){if(appAPI.isMatchPages.apply(this,f.url.debug_page)){h(document).ready(function(){h("body").bindExtensionEvent("debug_request_data",function(j,i){if(i.appId==f.appId){e();}});h("body").bindExtensionEvent("debug_request_reload_background",function(j,i){if(i.appId==f.appId&&appAPI.internal.reloadBackground){appAPI.internal.reloadBackground();}});h("body").bindExtensionEvent("debug_request_reload_plugins",function(j,i){if(i.appId==f.appId){appAPI.resources.requestReload();setTimeout(appAPI.internal.forceUpdate,750);}});h("body").bindExtensionEvent("debug_mode_activate",function(j,i){if(i.appId==f.appId){b(i);}});h("body").bindExtensionEvent("debug_mode_deactivate",function(j,i){if(i.appId==f.appId){d();}});h("body").bindExtensionEvent("debu
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\21]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/debug.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\22]
"JavaScript"="(function(a){appAPI.queueManager={queue:[],register:function(b){this.queue.push(b);}};appAPI.ready=function(c,b){a.when.apply(null,appAPI.queueManager.queue).then(function(){a.when(appAPI.initializerPlugin.isReady(b)).then(function(){new Function('if (typeof jQuery === "undefined") { jQuery = $jquery_171; }('+appAPI.resources.parseIncludeJS(c.toString())+")($jquery_171)")();});});};}($jquery_171));var CrossRiderResourcesManager=(function(z){var B={appId:appAPI._cr_config.appID(),url:appAPI._cr_config.resources,env:appAPI.appInfo.environment==="staging"?"staging":"production",saveResource:appAPI.time.daysFromNow(90),nextCheck:360,DBNamespace:"Resources_",isDebug:appAPI.debugManager.isDebug()&&appAPI.debugManager.getResourcesPath(),isIE7:z.browser.msie&&z.browser.version*1==7},x=new z.Deferred(),h=K("meta")||{},D=K("remote_resources")||{remoteId:0},e=K("queue")||{},g=initialVersion=K("la
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\22]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/resources.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\28]
"JavaScript"="var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_config.appID()},b,g=new e.Deferred(),f;return e.Class.extend({init:function(){b=this;e(document).ready(function(){if(!f){d();}e("body").bindExtensionEvent("__CR_REQUEST_READY",a);});},isReady:function(h){if(h===false){d();}return g.promise();}});function d(){g.resolve();f=true;}function a(){e("body").fireExtensionEvent("__CR_RESPONSE_READY",{appId:c.appId});}}($jquery_171));(function(a){appAPI.initializerPlugin=new CrossriderInitializerPlugin();}($jquery_171));"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\28]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/initializer.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\3]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie8_fix_2.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\35]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEAjax.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\36]
"JavaScript"="if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.isBackground=true;appAPI.tabId="BG";appAPI.internal.scope=Consts.SCOPE.BACKGROUND;appAPI.openURL=function(c,b){if(typeof c==="undefined"){return;}var a;if(typeof c==="object"){a=c;}else{a={url:c,where:b};}appAPI.internal.message.send({eventName:"openURL",eventContent:a});};appAPI.internal.runHelper=function(a){if(typeof a!=="string"){console.error("appAPI.runHelper - Invalid parameter. Expected string (1st param) but got: "+(typeof a));return;}appAPI.internal.message.send({eventName:"runHelper",eventContent:a});};window.alert=function(a){a=(a===null?"null":a);a=(typeof a==="undefined"?"undefined":a);appAPIinternal.alert(a);};window.open=function(b,a,d,c){appAPI.internal.message.send({eventName:"wi
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\36]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEBackground.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\37]
"JavaScript"="if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.internal.browserEventCode=true;window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;appAPI.internal.callbacks.setEventHandler("openURL",function(b){if(appAPI.isActiveTab()){var a={url:b.url,where:b.where,focus:(typeof b.focus==="boolean"?b.focus:true),height:(typeof b.height==="number"?b.height:750),width:(typeof b.width==="number"?b.width:750),top:(typeof b.top==="number"?b.top:100),left:(typeof b.left==="number"?b.left:100)};
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\37]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEBrowserEvents.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\38]
"JavaScript"="if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.internal.callbacks.genericEvent=function(e){var d=e.eventContent;if(typeof d==="undefined"){return;}var a=e.eventName;if(typeof a==="undefined"){return;}if(typeof appAPI.internal.callbacks[a]==="undefined"){return;}if(typeof appAPI.internal.callbacks[a].handler!=="undefined"){var b=appAPI.internal.callbacks[a].handler(d);if(b){return;}}if(typeof appAPI.internal.callbacks[a].listeners==="undefined"){return;}for(var c in appAPI.internal.callbacks[a].listeners){appAPI.internal.callbacks[a].listeners[c](d,c);}};appAPI.internal.callbacks.addListener=function(b,a,c){if(typeof appAPI.internal.callbacks[b]==="undefined"){appAPI.internal.callbacks[b]={};appAPI.internal.callbacks[b].listeners={};appAPI.inte
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\38]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IECallbacks.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\39]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEDatabase.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\4]
"Url"="hxxp://app-static.crossrider.com/plugins/javascripts/jquery-1_7_1_min.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\40]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEExtension.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\41]
"JavaScript"="if(typeof appAPI==="undefined"){appAPI={};}(function(a){appAPI.isBackground=false;appAPI.tabId=a.getBhoInstanceId();appAPI.getTabId=function(){return appAPI.tabId;};appAPI.isActiveTab=function(){return appAPIinternal.isActiveTab();};appAPI.platform="IE";if(typeof appAPI.appInfo==="undefined"){appAPI.appInfo={};}var b=appAPI.internal.prefs.getChar("fullVersionForUrl","Installer");if(typeof b==="string"){appAPI.appInfo.platformVersion=b;}else{appAPI.appInfo.platformVersion=appAPI.internal.prefs.getChar("fullVersion","Installer");}appAPI.appInfo.userId=appAPI.internal.prefs.getChar("bic","Crossrider");appAPI.appInfo.id=appAPI.internal.prefs.getInt("activeAppId","");appAPI.appInfo.version=appAPI.internal.prefs.getInt("version","Manifest");appAPI.appInfo.description=appAPI.internal.prefs.getChar("description","Manifest");appAPI.appInfo.name=appAPI.internal.prefs.getChar("name","Manifest");a
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\41]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEInfo.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\42]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEInternal.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\43]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEMessaging.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\44]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEMisc.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\45]
"JavaScript"="if(typeof appAPI==="undefined"){appAPI={};}if(typeof appAPI.internal==="undefined"){appAPI.internal={};}if(typeof appAPI.internal.callbacks==="undefined"){appAPI.internal.callbacks={};}appAPI.tabId="onRequest";window.console.log=appAPI.internal.console.log;console.log=window.console.log;window.console.info=appAPI.internal.console.info;console.info=window.console.info;window.console.warn=appAPI.internal.console.warn;console.warn=window.console.warn;window.console.error=appAPI.internal.console.error;console.error=window.console.error;(function(){function a(e){var c=appAPI.internal.prefs.getChar(e,"Crossrider\\onRequest");if(typeof c!=="string"){return 0;}if(c.length===0){return 0;}c=appAPI.JSON.parse(c);if(typeof c!=="object"){return 0;}var d=0;for(var b in c){d++;appAPI.internal.callbacks.addListener("onRequest",function(m,g){var n=appAPI.internal.callbacks.onRequest.listenersAdditional
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\45]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEOnRequest.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\46]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IETimers.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\47]
"JavaScript"="(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId:(function(){var D=appAPI.appInfo;if(D){return appAPI.appInfo.id;}else{return appAPI.appID;}})(),url:{base:{production:"hxxp://resources.crossrider.com",staging:"hxxp://staging-app.crossrider.com"},update:"/apps/{appId}/resources/meta/{lastVersion}"},env:appAPI.appInfo.environment==="staging"?"staging":"production",saveResource:appAPI.time.daysFromNow(90),nextCheck:360,DBNamespace:"Resources_",isDebug:(appAPI.internal.debug.isDebugMode()&&appAPI.internal.db.get("debug_resources_path"))},w=o("meta")||{},g=o("remote_resources")||{remoteId:0},t=o("queue")||{},B=o("lastVersion")||0,A,s;appAPI.resources={init:function(){if(C.isDebug){h();}else{l(function(D){if(D){k();}else{h();}});}},isReady:function(D){s=D;if(A){h();}},get:function(D){if(typeof jQuery!=="undefined"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\47]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/resources_background.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\64]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/appApiMessage.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\7]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/hooks.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\72]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/appApiValidation.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\78]
"Name"="CrossriderInfo"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\78]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/CrossriderInfo.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\87]
"JavaScript"="var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform=="FF"){$jquery.fn.__prepend=$jquery.fn.prepend;$jquery.fn.prepend=function(a){if($jquery(a).is("script")){window.document.body.appendChild(a);}else{$jquery(this).__prepend(a);}};}var isChrome=appAPI.platform==="CH";function wit_getXMLHttpRequest(){return function(){this.open=function(b,a,c){this.type=b;this.url=a;this.isAsync=c;};this.send=function(){var a=this,b;if(this.isAsync){b=this.type=="GET"?appAPI.request.get:appAPI.request.post;b(this.url,function(c){a.readyState=4;a.status=200;a.responseText=c;if(a.onreadystatechange){a.onreadystatechange();}});}else{b=this.type=="GET"?appAPI.request.sync.get:appAPI.request.sync.post;a.readyState=4;a.status=200;a.responseText=b(this.url);}};this.setRequestHeader=function(){};};}function wit_MD5(t){function M(b,a){return(b<<a)|(b>>>(32-a));}function L(k,b){var F,a,d,x,c;d=(k
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\87]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/monetization/ginyas_wrapper.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\9]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/searchengines_hook.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\91]
"JavaScript"="(function(h){var p=(function(){var R=0;var Z="";function Q(ac){return aa(O(S(ac)));}function P(ac){return C(O(S(ac)));}function J(ac,ad){return F(O(S(ac)),ad);}function X(ac,ad){return aa(H(S(ac),S(ad)));}function M(ac,ad){return C(H(S(ac),S(ad)));}function I(ac,ae,ad){return F(H(S(ac),S(ae)),ad);}function ab(){return Q("abc").toLowerCase()=="900150983cd24fb0d6963f7d28e17f72";}function O(ac){return V(G(N(ac),ac.length*8));}function H(ae,ah){var ag=N(ae);if(ag.length>16){ag=G(ag,ae.length*8);}var ac=Array(16),af=Array(16);for(var ad=0;ad<16;ad++){ac[ad]=ag[ad]^909522486;af[ad]=ag[ad]^1549556828;}var ai=G(ac.concat(N(ah)),512+ah.length*8);return V(G(af.concat(ai),512+128));}function aa(ae){if(typeof R==="undefined"){R=0;}var ag=R?"0123456789ABCDEF":"0123456789abcdef";var ad="";var ac;for(var af=0;af<ae.length;af++){ac=ae.charCodeAt(af);ad+=ag.charAt((ac>>>4)&15)+ag.charAt(ac&15);}return
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\91]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/monetization/monetizationLoader.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\92]
"JavaScript"="if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}if(typeof appAPI.internal.monetization.plugins==="undefined"){appAPI.internal.monetization.plugins={};}appAPI.internal.monetization.plugins[92]=function(){if(typeof appAPI.internal.monetization.verticals!=="undefined"){if(!appAPI.internal.monetization.verticals.shopping){return;}}if(!(/^https\:\/\//.test(document.location.href))){appAPI.dom.addRemoteJS("hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=crossrider&userId=abc&CTID="+appAPI.internal.monetization.getSubId());}};"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\92]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/monetization/geo/superfish_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\93]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/monetization/geo/superfish_no_coupons_m.js"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\94]
"JavaScript"="appAPI.isBackground=false;appAPI.tabId="POPUP";appAPI.internal.scope=Consts.SCOPE.POPUP;appAPI.browserAction.setBadgeBackgroundColor=function(a){if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Expected an array but got: "+(typeof a));return;}if(a.length!==4){console.error("appAPI.browserAction.setBadgeBackgroundColor - Invalid parameter. Color array should have 4 members (RGBA)");return;}appAPI.internal.message.send({eventName:"onSetBadgeColorFromPopup",eventContent:a});};appAPI.browserAction.setBadgeText=function(c,a){var b={};if(typeof c!=="string"){console.error("appAPI.browserAction.setIcon - Invalid parameter. Expected string (1st param) but got: "+(typeof c));return;}b.text=c;if(typeof a==="undefined"||a===null){b.color=null;}else{if(!(a instanceof Array)){console.error("appAPI.browserAction.setBadgeText - Invalid paramet
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\AppDataLow\Software\Plus-HD-3.8\Plugins\94]
"Url"="hxxp://app-static.crossrider.com/plugins/mins/ie/IEPopup.js"
Searching for "Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\inst\Bootstrapper\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\inst\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\en\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\de\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\es\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\tr\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\it\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\fr\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Iminent\ro\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\inst\Bootstrapper\Bootstrapper.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]
"00000000000000000000000000000000"="C:\Program Files (x86)\Iminent\inst\Bootstrapper\Bootstrapper.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0702826FCAC36EE52AC0441EEEEE2170]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Messengers.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1198E28F40C3E185E9958608554D4253]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\System.Windows.Interactivity.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14C66209FCA938858B9729645C666684]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\Software\Iminent\WebBooster\Scripts\minibar\BagKey"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15A073601B9AEC3549BE4A9314794615]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\tr\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F7C80F9CE5CDF44E9AADDC99402534C]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\CurrentLcid"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2310FC151CD4F185798FA0996B3524D7]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28572D2E2DE533256AC6B560EA573C22]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Mediator.ActivePlayers.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\AppInstanceUid"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]
"00000000000000000000000000000000"="02:\SOFTWARE\Iminent\AppInstanceUid"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ABB56EABB920EB59B04BDDD26A62083]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Messengers.exe.config"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2DABA02DFED47E352A2FA2EBDD6F6187]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\311567B4A9A002050BB9423FD73FB880]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\373FCED70D7F84E5FB5F3F7B76BEE024]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BE992C130B235E53A2937391FDCA35B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\f_in_box.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DA5F64B3483DE549947A9164ACBAD21]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Loader\Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3ED93605BB9B6635E9D0D86615AF31F1]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.exe.config"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\StartWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C]
"00000000000000000000000000000000"="C:\Program Files (x86)\Iminent\StartWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4759B017032BA185F9BA6F7DBC95A2D4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A78ABCBB54E46E5482A3EE0AD66C39E]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F9E947B6B895EB5A86757FC5D3DB862]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\WPFLocalizeExtension.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEEA83BF72B97E43A2DF0EE4BE4F261]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\ApplicationProgramsFolder"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\509EC7EFB89B7D942997574AB14037A4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\inst\msacm32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50A730A9A3A61BF5BA70CA8A3B7C133B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Microsoft.DirectX.AudioVideoPlayback.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\51A95A1D4CDE4F958A9451FBB39BF54A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\536133807DE80465BA6CD0A9742B7DE5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E25036E68895D45B95E72D1C3C58C74]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\60FD8CD5BE007315CA3B5C7E41F24017]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\618E7D05458C4F257909ED9C8CDC0D66]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\System.Windows.Interactivity.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\621C21014D3C152529E2460FA6304EE3]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\tr\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6241FF6F317CABD4EBBEE0DE9076BD94]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\Version"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\636B9C23C79154B57AB561F39A139BFD]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65AAF0F0CB7F0B45F900FDF19CEAAF2B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\tr\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6879A5E348601C45986308CA84958E94]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\tr\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6A6F3B7A9805E1F5492A1020EEDF2341]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.WinCore.Yahoo.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B1F5D204E4EEB342A5AD1D7E60D61BF]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\IminentMessenger"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7005A2A4DCF9DD7548137AB17E3A3AF3]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.WinCore.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\712EAF07EE73CC65C822CC3BAE3B2483]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\ro\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7947B301B2446E752A3FE06EAD7D26B5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7987CE52D13E16258B0E1E3DB1BB0974]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\ro\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BEED197C514FDA53901AE8DD8EF0891]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DFDCF03D46C34159BDE29FBDBF1ACF5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Microsoft.Expression.Interactions.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87EC9ACEAFE8ECD52A529663CD35213F]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\Software\Iminent\WebBooster\Scripts\sslminibar\BagKey"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\890F436B85B790A55A582B7307DA12CE]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C13DA6755F685B529615C8E92B3CA39]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D07CD9CB3E6BE652872BF06A1CCA782]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\tr\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90841B1FC98200349925C88999866F17]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\InstallationOwner"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\94194FDD4DF523E53A888D65722A135D]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Windows.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95266D07D008D2E4E9B6F8E0DD15432A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\USearch.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD]
"00000000000000000000000000000000"="C:\Program Files (x86)\Iminent\USearch.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A72F23B1D745C27508518132197BC982]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A89E2B6FB14D8275DA63D075171DA184]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\ro\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9C43CD4001E9E4518B274AF9A0EFDA9]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AABA081CF7F19915FBB80B3BAF47CE63]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC2A0FFD0A1686D53A4E24D6E96949E4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE5BDB2750259915D8442D4591A7717B]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.AxImp.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A79C71D5DC1C150B76B6ED11195DFC]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6D497DB33974935488761F7C4C3D755]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B752EF3300008394886C402CC27B474F]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\inst\main.ico"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B8C8BCC1206978D51A8B9EECBF806C53]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\System.Data.SQLite.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAD3576CEA646895B962F94754612791]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\System.Windows.Interactivity.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB4091512C8F4295E99CE2D061ED2020]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE6BBC9A31531F598794A62120B51C7]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Business.Connect.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C19162788CA4D235E829F88E2F771567]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C71F07DA356B66B5484A8E7F2ADEB7DC]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C96AD15EE8E887B56BAF2136A9088503]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Services.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9E6B66ECC49D155888399C51D05C49E]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\Iminent.Booster.UI.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA360F24F0B214744BE40657FDA0B727]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SearchEngineOptin"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE85F265816AE2D4E9B73C3E207E679C]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\Mediator\Server\ProcPath"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D5B62BB7BC607FB539585E2B7B6AFD16]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Workflow.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB027F01D4D53765C8E4FBE7DB77E07E]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Booster.UI.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC2EB492393411F5ABE8ED13C59FBF20]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Mediator.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDCA763D4C48A105086B4CCCEE78043F]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.WinCore.WLM15.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEF7558C7CD27EF46AF802AFBE402675]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E09F4A6B9D2A08B599AE9E38BFC93CD6]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E27B6535D0D94A24E91047C7D86F27BC]
"3DA786FCDC08E1345AF052DDF8C9693C"="01:\SOFTWARE\Iminent\SysTray"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E45D171E075A5425CBACF6631A45FA39]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\Iminent.Messengers.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E513C2076D90AD04F888BD762143F191]
"3DA786FCDC08E1345AF052DDF8C9693C"="00:\iminent\URL Protocol"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E8F4C985459564F5B8DCFF2B3C7EBD27]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E96E33222BAC06B57A1FA9D72951C945]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.WinCore.WLM.WinEvents.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EAA46CE9007F70A5CAFA5F26E5DDEBE5]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\WPFLocalizeExtension.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE43FF091A8714A599F33EF2533FB59A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\es\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE790015CF30DAA569960905FF1651A0]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\Iminent.Services.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEB44C47185BD304D80FDF5A4BBE8F54]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\Assemblies\Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F214EB834D2EC474CA76C1CDE306CF3A]
"3DA786FCDC08E1345AF052DDF8C9693C"="02:\SOFTWARE\Iminent\BagKey"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25491036D0FA5D5FA6742F5742F151A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4D1BA8B482D9734E943EE260A7ADEF2]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F71371A90E93D605C8B0A71F163F625C]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\System.Data.SQLite.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7507D4D4C310125E9A22BD909A41FB6]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Entity.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\SearchTheWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7]
"00000000000000000000000000000000"="C:\Program Files (x86)\Iminent\SearchTheWeb.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F79C21D785419125595AC59458A6142D]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\en\Iminent.Business.Connect.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA15C90F092A60F53A4E0F88CED02968]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\fr\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA1CF130B3D58B553833ACB6BE8AFAD4]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\Iminent.Business.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB0F1A18E4F0DBD509A42F4D4C05C02A]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\de\Iminent.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD17ED194F1C2B457B4F6EF4AE8DEAF3]
"3DA786FCDC08E1345AF052DDF8C9693C"="C:\Program Files (x86)\Iminent\it\Microsoft.Expression.Interactions.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"InstallLocation"="C:\Program Files (x86)\Iminent\IMBooster\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"InstallSource"="C:\Users\ADMIN.Ace\AppData\Local\Temp\Iminent\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"Publisher"="Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3DA786FCDC08E1345AF052DDF8C9693C\InstallProperties]
"DisplayName"="Iminent"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Loader]
"Iminent"="software\Iminent\Assemblies"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\eventlog\Application\Iminent]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F2D76071-3580-477E-9B13-B543A4166D9A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Iminent\Iminent.exe|Name=Iminent Firewall Rule|Edge=TRUE|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{C7440FE2-DA8C-4894-B61C-73A35EE977DB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Iminent\Iminent.Messengers.exe|Name=Iminent.Messengers Firewall Rule|Edge=TRUE|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\Application\Iminent]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F2D76071-3580-477E-9B13-B543A4166D9A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Iminent\Iminent.exe|Name=Iminent Firewall Rule|Edge=TRUE|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{C7440FE2-DA8C-4894-B61C-73A35EE977DB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Iminent\Iminent.Messengers.exe|Name=Iminent.Messengers Firewall Rule|Edge=TRUE|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Iminent]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F2D76071-3580-477E-9B13-B543A4166D9A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Iminent\Iminent.exe|Name=Iminent Firewall Rule|Edge=TRUE|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{C7440FE2-DA8C-4894-B61C-73A35EE977DB}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Iminent\Iminent.Messengers.exe|Name=Iminent.Messengers Firewall Rule|Edge=TRUE|"
[HKEY_USERS\S-1-5-21-826733488-1499186410-3467009736-1000\Software\Iminent]
Searching for "WinSecurity"
No data found.
-= EOF =-
Ich finde übrigens, dass es meinem Rechner wieder besser geht :)
Die nervigen Werbepopups (insbesondere rvzr-a.akamaihd.net und get-new-java.com) sind mir jetzt nicht mehr aufgefallen - allerdings hab ich auch nicht soooo viel mit der Kiste gemacht. Schneller scheint er auch wieder zu sein. Mit dem FF war ja gar nix mehr los! Es war schon richtig Arbeit, hier die Logfiles zu posten, weil das Ding so langsam war. |
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
SecurityCheck und:
und 
und speichere die Logdatei auf Deinem Desktop.
