:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.condui...&ctid=CT3227975
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.condui...&ctid=CT3227975
IE - HKCU\..\SearchScopes,DefaultScope = {AE80EF95-4894-464D-8B22-54F2719F0C3D}
FF - prefs.js..browser.search.defaultenginename: "appbario2 Customized Web Search"
FF - prefs.js..browser.search.defaultthis.engineName: "appbario2 Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3227975&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "appbario2 Customized Web Search"
FF - prefs.js..browser.search.selectedEngine: "Secure Search"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT3227975&SearchSource=2&q="
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{b64982b1-d112-42b5-b1e4-d3867c4533f8}: C:\ProgramData\bProtectorForWindows\2.2.463.83\FirefoxExtension [2012/07/16 02:27:47 | 000,000,000 | ---D | M]
[2012/07/16 02:28:00 | 000,000,000 | ---D | M] (appbario2 Community Toolbar) -- C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\o6db83fi.default\extensions\{cdf97ee2-ded0-4369-835e-99dd08225fa5}
CHR - homepage: http://search.condui...SearchSource=48
CHR - homepage: http://search.condui...SearchSource=48
O33 - MountPoints2\{b2c25948-9faf-11e1-ad26-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{b2c25948-9faf-11e1-ad26-806e6f6e6963}\Shell\AutoRun\command - "" = D:\AirPortSetup.exe
[2012/08/12 00:13:37 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\bProtectorForWindows
[2012/07/16 02:27:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2012/07/16 02:27:56 | 000,000,000 | ---D | C] -- C:\Users\Nick\AppData\Local\Conduit
[2012/07/16 02:27:47 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\searchplugins
[2012/07/16 02:27:47 | 000,000,000 | ---D | C] -- C:\ProgramData\bProtectorForWindows
[2012/08/07 21:58:38 | 000,000,040 | ---- | M] ()(C:\Windows\SysNative\?Ï) -- C:\Windows\SysNative\토Ï
[2012/08/07 21:58:38 | 000,000,040 | ---- | C] ()(C:\Windows\SysNative\?Ï) -- C:\Windows\SysNative\토Ï

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[Reboot]