| Ministerin | 14.07.2014 18:05 |
HILFE, über die Suchleiste des Explorer hat er den log nicht gefunden hab ich jetzt mit der Hand herausgesucht.Ist das ok?
logfile ESET Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=320c6eb97155914ea2f2d949725d5eb9
# engine=19166
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-14 03:45:46
# local_time=2014-07-14 05:45:46 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1291 16777214 100 98 41663 60122668 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 5250221 30234039 0 0
# scanned=631928
# found=50
# cleaned=0
# scan_time=16146
sh=9D6624A72CB6C6BF47881EEF179EA6ABB74B4515 ft=1 fh=59a5aee8e3c968c0 vn="Variante von Win32/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbici32.dll"
sh=EA517AFAC86339A5878C71B193C30A342BE3F971 ft=1 fh=9a904c7cffb78561 vn="Variante von MSIL/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbici64.dll"
sh=EEC6A1271515DE05D36147FB4F1002E81E5A098B ft=1 fh=0e9909c1839d8a74 vn="Variante von Win32/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbii32.exe"
sh=09CF6B9361C79C517A874FCDECF091F426E564B8 ft=1 fh=27d962bca0286ff0 vn="Variante von MSIL/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbii64.exe"
sh=5030C91EB4962B206504E2CFC1EC503120A2AE8A ft=1 fh=149815a121b07bbf vn="Variante von MSIL/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbiu.exe"
sh=9323AB95CF117791C57D9A436AD900F7E55E1948 ft=1 fh=5c95a40f878a5f29 vn="Variante von Win32/SpeedBit.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Helene\AppData\Local\Installer\Install_12039\setup.exe"
sh=571F38A34D64CCCBD914734C8BC01056A78BB5B5 ft=1 fh=d5332291ff13d174 vn="Variante von MSIL/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI64FA.tmp-\Smartbar.Resources.LanguageSettings.resources.dll"
sh=4FF4461EFC14F2B9EE8E54AD459DB3D3C0305017 ft=1 fh=72733531b3b70c5a vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\MSI64FA.tmp-\srbs.dll"
sh=106F591B2BD500597B72796DE6CF1882C4F19F0A ft=1 fh=4ffdf32f906db695 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\ClearHist.exe"
sh=A50D4E8729EC3B275F6AFD9EE573E2A28546F01D ft=1 fh=b0987145db4c1583 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgcommon.dll"
sh=851CA33721CF5E710133B4D36EAF921ACEB4CD50 ft=1 fh=15365fabb2edd5be vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgconfig.dll"
sh=8B5C441500E865FC80A55583FC68036FAF7DAD06 ft=1 fh=c81a85374d8cfdb7 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll"
sh=95581618E0DAA5F92543B429C7EB383C6D63B3AE ft=1 fh=0132ebbe85145cfb vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe"
sh=41C2EC5BB47E9A40E309ABAA048BA1F742E43574 ft=1 fh=f7ee8c0d578659e0 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mghooking.dll"
sh=E32CD33BD92D0676F8F81103174AF5E4E9E3F38E ft=1 fh=0e4e3ab2b3f109e4 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mglogger.dll"
sh=F5348CC7962B088ACCCD2F67138D43FB88DF67F2 ft=1 fh=5a321158315b5fe9 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll"
sh=26B6B3788EF0A2A83A43DFE5E13F51B3E491A6F4 ft=1 fh=073310618d11024b vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll"
sh=10B68A9C897C5854EA80624B01EE8BECF7017F01 ft=1 fh=6858221c6d206eb6 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll"
sh=B0C53EBE6A8C5B9B987F00F739D032767B291118 ft=1 fh=a07a814e5747bf62 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Program Files\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll"
sh=3AEF532A0211CE7869F0EB51E940D9E0C7CAE321 ft=1 fh=c7560653d3ee2314 vn="Variante von Win32/Adware.Yontoo.B Anwendung" ac=I fn="E:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll"
sh=94CCAAC63F0B9227B0667107919C7B8C3D9BD04F ft=1 fh=a62edfdd11e6c6ab vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="E:\Users\mocca\AppData\Roaming\OpenCandy\57E036AAB1FC4D40B97D62465E115FB7\Installer.exe"
sh=899846A13D609B412C855F80FE086438DDFFEAFB ft=1 fh=aa9df1b2adff28cb vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="E:\Users\mocca\AppData\Roaming\OpenCandy\61CC8D7FE6A748C48C5DDCE128B442F9\speedupmypcROE.exe"
sh=A1445110587CC891758AEBD7232896443E6C7E74 ft=1 fh=c71c0011b94160dc vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="E:\Users\mocca\AppData\Roaming\OpenCandy\FDBF7853DE2E47CDB1EA940189C48B66\Installer.exe"
sh=32811F92DAD8FB9217EFA2155EA6A88BAFB1D8B6 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\Installer\54d890.msi"
sh=CA5B7C7B7A6ED2CDD926005A2EA505A91A3048DB ft=1 fh=6b9165ab4c6abeaa vn="Variante von Win32/Toolbar.Perion.G evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\dmwu.exe"
sh=DEF60FE302E425147F0888F0DA34D646FE7D348D ft=1 fh=f334bd1e4085a8cf vn="Win32/SweetIM.E evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\ARFC\wrtc.exe"
sh=FA6B38AAAC213F1FBB6D46BC286C5AF66048C392 ft=1 fh=a5f88c48a94033ea vn="Variante von Win32/Toolbar.Perion.A evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\32GV4P7K\update[1]"
sh=E2C4DE5BF59758D2B8CD7982794FFF839A0F4FBA ft=1 fh=9106933fb306ef11 vn="Variante von Win32/Toolbar.Perion.G evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\32GV4P7K\WSSetup[1].exe"
sh=694A6C4A6C09151E896340FBD6597A3DF837CBAF ft=1 fh=439deba0b906930a vn="Variante von Win32/Toolbar.Perion.G evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6RJD1Z19\WSSetup[1].exe"
sh=F0B9C98931834EDF8D76DF0BDECDBCB0AFAB7814 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\jmdp\pnte.crx"
sh=3921B3425C5C561B5478A3ABBBD49C11775A0882 ft=0 fh=0000000000000000 vn="Variante von Win32/SweetIM.L evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\jmdp\SweetNT.crx"
sh=694A6C4A6C09151E896340FBD6597A3DF837CBAF ft=1 fh=439deba0b906930a vn="Variante von Win32/Toolbar.Perion.G evtl. unerwünschte Anwendung" ac=I fn="E:\Windows\System32\WNLT\Installation\WSSetup.exe"
sh=69F363BE2C7829B5543B33BD2F769FEB30F09964 ft=1 fh=6def9d322e2d28f8 vn="Variante von Win32/Toolbar.CrossRider.AE evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\AdwCleaner\Quarantine\C\Program Files (x86)\iWebar\iWebar-nova_IObitDel.exe.vir"
sh=C8AC25E329EC3377D6AADB22C300275C32C34D6F ft=1 fh=a147c0cb24a513b1 vn="Variante von Win32/ShopperPro.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\AdwCleaner\Quarantine\C\ProgramData\ShopperPro\ShopperPro.dll.vir"
sh=2B0947D4FB6931188A7D06121914F8C81F082A99 ft=1 fh=862c47460ed8a9c9 vn="Variante von Win64/ShopperPro.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\AdwCleaner\Quarantine\C\ProgramData\ShopperPro\ShopperPro64.dll.vir"
sh=1AB5FE7F5654ECBB42397AE222C0B8159081D6C6 ft=1 fh=2b551abc4ed949a7 vn="Mehrere Bedrohungen" ac=I fn="P:\_Genie Timeline\0\C\AdwCleaner\Quarantine\C\ProgramData\Updater\Uninstall.exe.vir"
sh=9D6624A72CB6C6BF47881EEF179EA6ABB74B4515 ft=1 fh=59a5aee8e3c968c0 vn="Variante von Win32/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbici32.dll"
sh=EA517AFAC86339A5878C71B193C30A342BE3F971 ft=1 fh=9a904c7cffb78561 vn="Variante von MSIL/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbici64.dll"
sh=EEC6A1271515DE05D36147FB4F1002E81E5A098B ft=1 fh=0e9909c1839d8a74 vn="Variante von Win32/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbii32.exe"
sh=09CF6B9361C79C517A874FCDECF091F426E564B8 ft=1 fh=27d962bca0286ff0 vn="Variante von MSIL/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbii64.exe"
sh=5030C91EB4962B206504E2CFC1EC503120A2AE8A ft=1 fh=149815a121b07bbf vn="Variante von MSIL/SBWatchman.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\FRST\Quarantine\C\Program Files\Common Files\ShopperPro\spbiu.exe"
sh=8535ED1AB74D7B9547C7D47E75B9159076527253 ft=1 fh=25a511c14236d929 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\Users\Helene\Downloads\asc-setup.exe"
sh=221210B19AC0B17F0F222443101B0099F7BD3E64 ft=1 fh=f5816da3f7c5bfd3 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\Users\Helene\Downloads\asc7-setup.exe"
sh=19876B0C21073CE7AC4725124851FC36B7EA7301 ft=1 fh=31b372839de59c7b vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\Users\Helene\Downloads\cbsidlm-cbsi188-Junkware_Removal_Tool-SEO-75910255.exe"
sh=9FDD153CDF84C469F8015A6114B078767DD1250C ft=1 fh=2852b270997e26d3 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\Users\Helene\Downloads\defragsetup_2.9.0.1225.exe"
sh=178C5AF3DCF1080F44D3DA24E72EE75923F1BB9C ft=1 fh=c71c0011cd16a041 vn="Variante von Win32/InstallCore.PO evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\Users\Helene\Downloads\FoxitReader620.0429_enu_Setup_CB-DL-Manager.exe"
sh=2669FA2E79091E7D095737303F60DA47744757FF ft=1 fh=d6dfc801efb99880 vn="Variante von Win32/DownloadGuide.A evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\C\Users\Helene\Downloads\soft32_TeamViewer_1.0.exe"
sh=94CCAAC63F0B9227B0667107919C7B8C3D9BD04F ft=1 fh=a62edfdd11e6c6ab vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\E\Users\mocca\AppData\Roaming\OpenCandy\57E036AAB1FC4D40B97D62465E115FB7\Installer.exe"
sh=899846A13D609B412C855F80FE086438DDFFEAFB ft=1 fh=aa9df1b2adff28cb vn="Win32/SpeedUpMyPC evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\E\Users\mocca\AppData\Roaming\OpenCandy\61CC8D7FE6A748C48C5DDCE128B442F9\speedupmypcROE.exe"
sh=A1445110587CC891758AEBD7232896443E6C7E74 ft=1 fh=c71c0011b94160dc vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwünschte Anwendung" ac=I fn="P:\_Genie Timeline\0\E\Users\mocca\AppData\Roaming\OpenCandy\FDBF7853DE2E47CDB1EA940189C48B66\Installer.exe"
checkup.txt Code:
Results of screen317's Security Check version 0.99.85
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Kaspersky Internet Security
Windows Defender
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java 7 Update 55
Java version out of Date!
Adobe Flash Player 14.0.0.145
Adobe Reader XI
Mozilla Firefox (26.0)
Mozilla Thunderbird (24.6.0)
Google Chrome 35.0.1916.153
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
Logdatei SystemLook Code:
SystemLook 30.07.11 by jpshortstuff
Log created at 19:00 on 14/07/2014 by Helene
Administrator - Elevation successful
========== filefind ==========
Searching for "*ShopperPro*"
No files found.
Searching for "*superfish.com*"
C:\AdwCleaner\Quarantine\C\Users\Helene\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal.vir --a---- 3608 bytes [07:38 13/07/2014] [07:38 13/07/2014] 38CBA334B93A07AF7D0B3E73D1B73C09
C:\AdwCleaner\Quarantine\C\Users\Helene\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage.vir --a---- 3072 bytes [07:38 13/07/2014] [07:38 13/07/2014] 0117A4C934B944CE65DDA5BE901CD965
C:\Users\Helene\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage --a---- 3072 bytes [19:15 11/07/2014] [19:15 11/07/2014] 994199552DFFC75CA366AA069BF6624A
C:\Users\Helene\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage --a---- 3072 bytes [09:42 13/07/2014] [09:42 13/07/2014] 8568A43550045D6E4D79962FDAC68721
========== folderfind ==========
Searching for "*ShopperPro*"
C:\AdwCleaner\Quarantine\C\ProgramData\ShopperPro d------ [09:36 13/07/2014]
C:\FRST\Quarantine\C\Program Files\Common Files\ShopperPro d------ [06:02 06/07/2014]
C:\FRST\Quarantine\C\ProgramData\ShopperPro d------ [09:38 13/07/2014]
Searching for "*superfish.com*"
No folders found.
========== regfind ==========
Searching for "ShopperPro"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\ShopperPro.DLL]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
@="ShopperPro"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\ShopperPro.DLL]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
@="ShopperPro"
[HKEY_LOCAL_MACHINE\SOFTWARE\ShopperPro]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\ShopperPro.DLL]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}]
@="ShopperPro"
Searching for "superfish.com"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\background]
"__onDocumentStart_script__"="if(window && document && document.location && document.location.href && !window.__injected_35510__) {window.__injected_35510__= function (){};
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_35510_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injec
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\background]
"__onDocumentStart_script_store__"="
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_35510_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injectedScript_35510_93__');if ((typeof document.location.protocol === 'string') && (document.location.protocol.indexOf('https') === 0)) {if
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Code]
"AppJavaScript"="
/************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
HOST = "hxxp://wt.iwebar.com";
TOOLBAR_URL = HOST + '/js/toolbar.js';
AFFILIATE_ID = 'NONE';
appAPI.ready(function($) {
/*
if (appAPI.db.get('user_id') === null) {
if (appAPI.db.get('installation') === null){
appAPI.db.set('installation', new Date().getTime());
return;
}
else {
if ((new Date().getTime() - appAPI.db.get('installation')) < 1000 * 60 * 60 * 48){
//No need to display toolbar... hasn't been 2 days yet.
return;
}
}
}*/
console.log("=======> Extension
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Db\Internal\monetization_plugin_bundledUrls]
"Value"="{"dealply_s":{"urls":["ssfiles.com"]},"dealply_p":{"urls":["i_crdrjs_info","i.crdrjs.info"]},"plushd_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"partner_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"50onred_s":{"urls":["giganticsavings-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"]},"50onred_v":{"urls":["beecoup-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"],"maxNotShowingTime":48},"revizer_s":{"urls":["gim.mapopti.net"]},"sterkly_s":{"urls":["wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74"]},"browse_burst_s":{"urls":["datafastguru.info"]},"wajam_s":{"urls":["wajam.com"],"regPaths":[{"hive":"HKEY_LOCAL_MACHINE","keyPath":"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wajam","valueName":"UninstallString"},{"hive":"HKEY_CURRENT_USER","keyP
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Plugins\91]
"JavaScript"="(function(u){var w="07-02";if(!appAPI.isBackground&&appAPI.dom&&appAPI.dom.isIframe()){return;}var H=appAPI.utils.MD5;if(!H||!H.encode){H={};H.encode=function(P){return P;};}if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}var M=appAPI.utils;var x={DBNamespace:"monetization_plugin_",RULS_JSON_NAMESPACE:" rules_",MONETIZATION_PLUGINS_IDS:"monetization_plugins_ids",IS_INSTALL_REPORTED:"is_install_reported_",STATS_NAMESPACE:"stats_",PLUGINS_VERSION:"plugins_version_",GEO_URL:"hxxp://ipgeoapi.com/",BASE_DATE:new Date(2013,0,1),updateInterval:1000*60*60*6,rulesJsonHostUrl:"hxxp://app.demogensrv.com/monetization_campaigns/",statsHostUrl:"hxxp://logs.demogensrv.com/monetization.gif?",errorHostUrl:"hxxp://errors.demogensrv.com/monetization-error.gif?",countryName:"",reportQueryString:"",subID:"00000000000000
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\background]
"__onDocumentStart_script__"="if(window && document && document.location && document.location.href && !window.__injected_32850__) {window.__injected_32850__= function (){};
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_32850_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\background]
"__onDocumentStart_script_store__"="
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_32850_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injectedScript_32850_93__');if ((typeof document.location.protocol === 'string') && (document.location.protocol.i
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\Db\Internal\monetization_plugin_bundledUrls]
"Value"="{"dealply_s":{"urls":["ssfiles.com"]},"dealply_p":{"urls":["i_crdrjs_info","i.crdrjs.info"]},"plushd_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"partner_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"50onred_s":{"urls":["giganticsavings-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"]},"50onred_v":{"urls":["beecoup-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"],"maxNotShowingTime":48},"revizer_s":{"urls":["gim.mapopti.net"]},"sterkly_s":{"urls":["wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74"]},"browse_burst_s":{"urls":["datafastguru.info"]},"wajam_s":{"urls":["wajam.com"],"regPaths":[{"hive":"HKEY_LOCAL_MACHINE","keyPath":"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wajam","valueName":"UninstallString"},{"hive":"HKEY_CURRENT_USE
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\Plugins\91]
"JavaScript"="
(function(u){var w="07-02";if(!appAPI.isBackground&&appAPI.dom&&appAPI.dom.isIframe()){return;}var H=appAPI.utils.MD5;if(!H||!H.encode){H={};H.encode=function(P){return P;};}if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}var M=appAPI.utils;var x={DBNamespace:"monetization_plugin_",RULS_JSON_NAMESPACE:" rules_",MONETIZATION_PLUGINS_IDS:"monetization_plugins_ids",IS_INSTALL_REPORTED:"is_install_reported_",STATS_NAMESPACE:"stats_",PLUGINS_VERSION:"plugins_version_",GEO_URL:"hxxp://ipgeoapi.com/",BASE_DATE:new Date(2013,0,1),updateInterval:1000*60*60*6,rulesJsonHostUrl:"hxxp://app.demogensrv.com/monetization_campaigns/",statsHostUrl:"hxxp://logs.demogensrv.com/monetization.gif?",errorHostUrl:"hxxp://errors.demogensrv.com/monetization-error.gif?",countryName:"",reportQueryString:"",subID:"00000
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\background]
"__onDocumentStart_script__"="if(window && document && document.location && document.location.href && !window.__injected_35510__) {window.__injected_35510__= function (){};
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_35510_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var K = document.createElement('script');K.setAttribute('type', 'text/ja
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\background]
"__onDocumentStart_script_store__"="
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_35510_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injectedScript_35510_93__');if ((typeof document.location.protocol === 'string') && (document.locatio
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Code]
"AppJavaScript"="
/************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
HOST = "hxxp://wt.iwebar.com";
TOOLBAR_URL = HOST + '/js/toolbar.js';
AFFILIATE_ID = 'NONE';
appAPI.ready(function($) {
/*
if (appAPI.db.get('user_id') === null) {
if (appAPI.db.get('installation') === null){
appAPI.db.set('installation', new Date().getTime());
return;
}
else {
if ((new Date().getTime() - appAPI.db.get('installation')) < 1000 * 60 * 60 * 48){
//No need to display toolbar... hasn't been 2 days yet.
return;
}
}
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Db\Internal\monetization_plugin_bundledUrls]
"Value"="{"dealply_s":{"urls":["ssfiles.com"]},"dealply_p":{"urls":["i_crdrjs_info","i.crdrjs.info"]},"plushd_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"partner_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"50onred_s":{"urls":["giganticsavings-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"]},"50onred_v":{"urls":["beecoup-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"],"maxNotShowingTime":48},"revizer_s":{"urls":["gim.mapopti.net"]},"sterkly_s":{"urls":["wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74"]},"browse_burst_s":{"urls":["datafastguru.info"]},"wajam_s":{"urls":["wajam.com"],"regPaths":[{"hive":"HKEY_LOCAL_MACHINE","keyPath":"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wajam","valueName":"UninstallSt
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Plugins\91]
"JavaScript"="(function(u){var w="07-02";if(!appAPI.isBackground&&appAPI.dom&&appAPI.dom.isIframe()){return;}var H=appAPI.utils.MD5;if(!H||!H.encode){H={};H.encode=function(P){return P;};}if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}var M=appAPI.utils;var x={DBNamespace:"monetization_plugin_",RULS_JSON_NAMESPACE:" rules_",MONETIZATION_PLUGINS_IDS:"monetization_plugins_ids",IS_INSTALL_REPORTED:"is_install_reported_",STATS_NAMESPACE:"stats_",PLUGINS_VERSION:"plugins_version_",GEO_URL:"hxxp://ipgeoapi.com/",BASE_DATE:new Date(2013,0,1),updateInterval:1000*60*60*6,rulesJsonHostUrl:"hxxp://app.demogensrv.com/monetization_campaigns/",statsHostUrl:"hxxp://logs.demogensrv.com/monetization.gif?",errorHostUrl:"hxxp://errors.demogensrv.com/monetization-error.gif?",countryName:"",re
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\background]
"__onDocumentStart_script__"="if(window && document && document.location && document.location.href && !window.__injected_32850__) {window.__injected_32850__= function (){};
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_32850_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var K = document.createElement('script');K.s
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\background]
"__onDocumentStart_script_store__"="
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_32850_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injectedScript_32850_93__');if ((typeof document.location.protocol === 's
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\Db\Internal\monetization_plugin_bundledUrls]
"Value"="{"dealply_s":{"urls":["ssfiles.com"]},"dealply_p":{"urls":["i_crdrjs_info","i.crdrjs.info"]},"plushd_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"partner_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"50onred_s":{"urls":["giganticsavings-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"]},"50onred_v":{"urls":["beecoup-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"],"maxNotShowingTime":48},"revizer_s":{"urls":["gim.mapopti.net"]},"sterkly_s":{"urls":["wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74"]},"browse_burst_s":{"urls":["datafastguru.info"]},"wajam_s":{"urls":["wajam.com"],"regPaths":[{"hive":"HKEY_LOCAL_MACHINE","keyPath":"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wajam","valueName":"Uni
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\Plugins\91]
"JavaScript"="
(function(u){var w="07-02";if(!appAPI.isBackground&&appAPI.dom&&appAPI.dom.isIframe()){return;}var H=appAPI.utils.MD5;if(!H||!H.encode){H={};H.encode=function(P){return P;};}if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}var M=appAPI.utils;var x={DBNamespace:"monetization_plugin_",RULS_JSON_NAMESPACE:" rules_",MONETIZATION_PLUGINS_IDS:"monetization_plugins_ids",IS_INSTALL_REPORTED:"is_install_reported_",STATS_NAMESPACE:"stats_",PLUGINS_VERSION:"plugins_version_",GEO_URL:"hxxp://ipgeoapi.com/",BASE_DATE:new Date(2013,0,1),updateInterval:1000*60*60*6,rulesJsonHostUrl:"hxxp://app.demogensrv.com/monetization_campaigns/",statsHostUrl:"hxxp://logs.demogensrv.com/monetization.gif?",errorHostUrl:"hxxp://errors.demogensrv.com/monetization-error.gif?",countryN
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\background]
"__onDocumentStart_script__"="if(window && document && document.location && document.location.href && !window.__injected_35510__) {window.__injected_35510__= function (){};
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_35510_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var K = document.createElement('script');K.setAttribute('type', 'text/javascript'
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\background]
"__onDocumentStart_script_store__"="
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_35510_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100016905619000000&partnername=iWebar';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injectedScript_35510_93__');if ((typeof document.location.protocol === 'string') && (document.location.protoco
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Code]
"AppJavaScript"="
/************************************************************************************
This is your Page Code. The appAPI.ready() code block will be executed on every page load.
For more information please visit our docs site: hxxp://docs.crossrider.com
*************************************************************************************/
HOST = "hxxp://wt.iwebar.com";
TOOLBAR_URL = HOST + '/js/toolbar.js';
AFFILIATE_ID = 'NONE';
appAPI.ready(function($) {
/*
if (appAPI.db.get('user_id') === null) {
if (appAPI.db.get('installation') === null){
appAPI.db.set('installation', new Date().getTime());
return;
}
else {
if ((new Date().getTime() - appAPI.db.get('installation')) < 1000 * 60 * 60 * 48){
//No need to display toolbar... hasn't been 2 days yet.
return;
}
}
}*/
c
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Db\Internal\monetization_plugin_bundledUrls]
"Value"="{"dealply_s":{"urls":["ssfiles.com"]},"dealply_p":{"urls":["i_crdrjs_info","i.crdrjs.info"]},"plushd_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"partner_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"50onred_s":{"urls":["giganticsavings-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"]},"50onred_v":{"urls":["beecoup-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"],"maxNotShowingTime":48},"revizer_s":{"urls":["gim.mapopti.net"]},"sterkly_s":{"urls":["wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74"]},"browse_burst_s":{"urls":["datafastguru.info"]},"wajam_s":{"urls":["wajam.com"],"regPaths":[{"hive":"HKEY_LOCAL_MACHINE","keyPath":"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wajam","valueName":"UninstallString"},{"
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar\Plugins\91]
"JavaScript"="(function(u){var w="07-02";if(!appAPI.isBackground&&appAPI.dom&&appAPI.dom.isIframe()){return;}var H=appAPI.utils.MD5;if(!H||!H.encode){H={};H.encode=function(P){return P;};}if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}var M=appAPI.utils;var x={DBNamespace:"monetization_plugin_",RULS_JSON_NAMESPACE:" rules_",MONETIZATION_PLUGINS_IDS:"monetization_plugins_ids",IS_INSTALL_REPORTED:"is_install_reported_",STATS_NAMESPACE:"stats_",PLUGINS_VERSION:"plugins_version_",GEO_URL:"hxxp://ipgeoapi.com/",BASE_DATE:new Date(2013,0,1),updateInterval:1000*60*60*6,rulesJsonHostUrl:"hxxp://app.demogensrv.com/monetization_campaigns/",statsHostUrl:"hxxp://logs.demogensrv.com/monetization.gif?",errorHostUrl:"hxxp://errors.demogensrv.com/monetization-error.gif?",countryName:"",reportQuery
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\background]
"__onDocumentStart_script__"="if(window && document && document.location && document.location.href && !window.__injected_32850__) {window.__injected_32850__= function (){};
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_32850_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var K = document.createElement('script');K.setAttribu
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\background]
"__onDocumentStart_script_store__"="
(function (){try {(function (){if (document && document.location && typeof document.location.host == 'string' && document.location.host.indexOf('facebook.com') >= 0 && (194 !== 93 || 287 !== 93 || 119 !== 93)){return;}function f(){return !!document.getElementById('__injectedScript_32850_93__');}try {if (f()) {return;}var httpUrl = 'hxxp://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var httpsUrl = 'https://www.superfish.com/ws/sf_main.jsp?dlsource=hhvzmikw&userId=abc&CTID=100004605619000000&partnername=Object%20Browser';var K = document.createElement('script');K.setAttribute('type', 'text/javascript');K.setAttribute('id', '__injectedScript_32850_93__');if ((typeof document.location.protocol === 'string') &
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\Db\Internal\monetization_plugin_bundledUrls]
"Value"="{"dealply_s":{"urls":["ssfiles.com"]},"dealply_p":{"urls":["i_crdrjs_info","i.crdrjs.info"]},"plushd_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"partner_v":{"urls":["i_crdrjs_info","i.crdrjs.info"],"maxNotShowingTime":48},"50onred_s":{"urls":["giganticsavings-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"]},"50onred_v":{"urls":["beecoup-a.akamaihd.net/loaders/[A-Z,a-z,0-9]+/l.js"],"maxNotShowingTime":48},"revizer_s":{"urls":["gim.mapopti.net"]},"sterkly_s":{"urls":["wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74"]},"browse_burst_s":{"urls":["datafastguru.info"]},"wajam_s":{"urls":["wajam.com"],"regPaths":[{"hive":"HKEY_LOCAL_MACHINE","keyPath":"SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wajam","valueName":"UninstallStr
[HKEY_USERS\S-1-5-21-1030656583-4166508464-2724445772-1003_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Object Browser\Plugins\91]
"JavaScript"="
(function(u){var w="07-02";if(!appAPI.isBackground&&appAPI.dom&&appAPI.dom.isIframe()){return;}var H=appAPI.utils.MD5;if(!H||!H.encode){H={};H.encode=function(P){return P;};}if(typeof appAPI.internal.monetization==="undefined"){appAPI.internal.monetization={};}var M=appAPI.utils;var x={DBNamespace:"monetization_plugin_",RULS_JSON_NAMESPACE:" rules_",MONETIZATION_PLUGINS_IDS:"monetization_plugins_ids",IS_INSTALL_REPORTED:"is_install_reported_",STATS_NAMESPACE:"stats_",PLUGINS_VERSION:"plugins_version_",GEO_URL:"hxxp://ipgeoapi.com/",BASE_DATE:new Date(2013,0,1),updateInterval:1000*60*60*6,rulesJsonHostUrl:"hxxp://app.demogensrv.com/monetization_campaigns/",statsHostUrl:"hxxp://logs.demogensrv.com/monetization.gif?",errorHostUrl:"hxxp://errors.demogensrv.com/monetization-error.gif?",countryName:"",re
-= EOF =-
|
So funktioniert es:
FRST 32-Bit | FRST 64-Bit
AdwCleaner auf deinen Desktop.
Malwarebytes Anti-Malware 
SecurityCheck und:
