~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.3.3 (08.04.2013:1) OS: Windows 7 Home Premium x64 Ran by Taylor on Mon 08/05/2013 at 7:24:47.99 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{6536801B-F50C-449B-9476-093DFD3789E3} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\babylonhelper.exe Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortlbr.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\yontooieclient.dll Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136} Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babylontoolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit Failed to delete: [Registry Key] HKEY_CURRENT_USER\Software\datamngr_toolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\defaulttab Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\qwiklinx Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\competeinc Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\funwebproducts Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\datamngr Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\default tab Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\defaulttab Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\freeze.com Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\defaulttabbho.defaulttabbrowseractivex Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\defaulttabbho.defaulttabbrowseractivex.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\yontooieclient.api Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\yontooieclient.api.1 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4623A8C4-150D-4983-8982-68C01E7D6541} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\datamngr Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3247201 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3289663 Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0D736930-2603-0DB7-7129-0859E3B6A9BE} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{13715973-98B0-4B64-A5C1-0055C0A67C20} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{37A8193B-DCCC-4928-9D0C-5CFF95B8DC35} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4CD97343-3243-48EC-897A-991EA7977995} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5aabc9ff-5729-4b10-8ce9-e6bcc6a701b6} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{A531D99C-5A22-449b-83DA-872725C6D0ED} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0D736930-2603-0DB7-7129-0859E3B6A9BE} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{5aabc9ff-5729-4b10-8ce9-e6bcc6a701b6} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3E7C8B5A-96AB-438F-BF9B-782400655440} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01} Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} ~~~ Files Successfully deleted: [File] "C:\Users\Taylor\appdata\local\funmoods-speeddial.crx" Successfully deleted: [File] "C:\end" Successfully deleted: [File] C:\eula.1049.txt Successfully deleted: [File] C:\install.res.1049.dll ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\apn" Successfully deleted: [Folder] "C:\ProgramData\babylon" Successfully deleted: [Folder] "C:\ProgramData\partner" Successfully deleted: [Folder] "C:\ProgramData\tarma installer" Successfully deleted: [Folder] "C:\ProgramData\w3i" Successfully deleted: [Folder] "C:\ProgramData\wecarereminder" Failed to delete: [Folder] "C:\Users\Taylor\AppData\Roaming\babsolution" Successfully deleted: [Folder] "C:\Users\Taylor\AppData\Roaming\babylon" Successfully deleted: [Folder] "C:\Users\Taylor\AppData\Roaming\defaulttab" Successfully deleted: [Folder] "C:\Users\Taylor\AppData\Roaming\dsite" Successfully deleted: [Folder] "C:\Users\Taylor\AppData\Roaming\qwiklinx" Successfully deleted: [Folder] "C:\Users\Taylor\AppData\Roaming\strongvault" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\local\apn" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\local\conduit" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\local\iac" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\local\stronghold_llc" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\local\televisionfanatic" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\local\wajam" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\locallow\babylontoolbar" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\locallow\conduit" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\locallow\delta" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\locallow\funwebproducts" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\locallow\televisionfanatic" Successfully deleted: [Folder] "C:\Users\Taylor\appdata\locallow\toolbar4" Successfully deleted: [Folder] "C:\Program Files (x86)\babylon" Successfully deleted: [Folder] "C:\Program Files (x86)\conduit" Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup" Successfully deleted: [Folder] "C:\Program Files (x86)\oapps" Successfully deleted: [Folder] "C:\Program Files (x86)\qwiklinx" Successfully deleted: [Folder] "C:\Program Files (x86)\registry mechanic" Successfully deleted: [Folder] "C:\Program Files (x86)\yontoo" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Folder] "C:\ProgramData\ask" ~~~ FireFox Failed to delete: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\user.js Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\extensions\addon@defaulttab.com.xpi Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\searchplugins\askcom.xml Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\searchplugins\conduit.xml Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\searchplugins\delta.xml Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\searchplugins\my-web-search.xml Successfully deleted: [File] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\searchplugins\search-here.xml Successfully deleted: [Folder] C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\smartbar Successfully deleted the following from C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\prefs.js user_pref("CT3247201.1000234.weatherData", "{\"icon\":\"31.png\",\"temperature\":\"82°F\",\"temperatureClear\":\"82°F\",\"highTemperature\":\"82°F\",\"lowTemperature\":\"71 user_pref("CT3247201.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3247201&SearchSource=2&q="); user_pref("CT3247201.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm user_pref("CT3247201.installType", "ConduitNSISIntegration"); user_pref("CT3247201.isPerformedSmartBarTransition", "true"); user_pref("CT3247201.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3247201&octid=CT3247201&SearchSource=15&CUI=UN909924870559094 user_pref("CT3247201.search.searchAppId", "10000002"); user_pref("CT3247201.search.searchCount", "2"); user_pref("CT3247201.smartbar.CTID", "CT3247201"); user_pref("CT3247201.smartbar.Uninstall", "0"); user_pref("CT3247201.smartbar.homepage", true); user_pref("CT3247201.smartbar.toolbarName", "InternetHelper1.5 "); user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3247201&SearchSource=13"); user_pref("Smartbar.ConduitSearchEngineList", "InternetHelper1.5 Customized Web Search"); user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3247201&SearchSource=2&q="); user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=53492F76-4A7E-4718-83A8-5211D6118438&n=77ee1547&ind=20120 user_pref("Smartbar.keywordURLSelectedCTID", "CT3247201"); user_pref("browser.search.defaultengine", "Ask.com"); user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\"); user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=D80DB6B9-2AC2-4DBC-9671-7D2EE51F8936&n=77ee416e&ind=20 user_pref("extensions.asktb.hxxp-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"www.playsushi.com\", \"WWW.google.com\", \"hxxp user_pref("extensions.asktb.search-plugin-suggestions-url", "hxxp://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}"); user_pref("extensions.defaulttab.active.affiliate", 2639); user_pref("extensions.defaulttab.active.overridechromesearch", false); user_pref("extensions.defaulttab.active.overridekeywordsearch", false); user_pref("extensions.defaulttab.active.yw3i", "W3i_IA,206,0_0,Search,20120939,18175,0,0,0"); user_pref("extensions.defaulttab.browserID", "204CBF23930774AE733015FD08533E0C"); user_pref("extensions.defaulttab.config", "{\"status\": \"ok\", \"config\": {\"dns_error_handling\": \"Scenario_1,Scenario_2\", \"set_default_search\": \"Search Here|Search He user_pref("extensions.defaulttab.firstrun", false); user_pref("extensions.defaulttab.installedVersion", "1.4.2"); user_pref("extensions.funmoods.aflt", "afterd"); user_pref("extensions.funmoods.autoRvrt", false); user_pref("extensions.funmoods.brwsrsrc", "ietlbr"); user_pref("extensions.funmoods.cntry", "US"); user_pref("extensions.funmoods.cv", "cv5"); user_pref("extensions.funmoods.dfltLng", ""); user_pref("extensions.funmoods.dfltSrch", true); user_pref("extensions.funmoods.dfltlng", "en"); user_pref("extensions.funmoods.dfltsrch", "false"); user_pref("extensions.funmoods.dnsErr", true); user_pref("extensions.funmoods.envrmnt", "production"); user_pref("extensions.funmoods.excTlbr", false); user_pref("extensions.funmoods.hdrMd5", "53D653EEEB639A22CE210A18407F16FB"); user_pref("extensions.funmoods.hmpg", true); user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=afterd&chnl=afterd&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyEyEzy0DtByByDyD0FtCyEtN0D0Tzu0StByEyEtN1L2XzutBtFtC user_pref("extensions.funmoods.hrdid", "701A0449D2755F14"); user_pref("extensions.funmoods.id", "701A0449D2755F14"); user_pref("extensions.funmoods.instlDay", "15584"); user_pref("extensions.funmoods.instlRef", "afterd"); user_pref("extensions.funmoods.instlday", "15584"); user_pref("extensions.funmoods.instlref", "afterd"); user_pref("extensions.funmoods.isdcmntcmplt", true); user_pref("extensions.funmoods.keywordurl", ""); user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2212:43:43"); user_pref("extensions.funmoods.mntrvrsn", "1.3.0"); user_pref("extensions.funmoods.newTab", true); user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=afterd&chnl=afterd&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyEyEzy0DtByByDyD0FtCyEtN0D0Tzu0StByEyEtN1L2XzutBtF user_pref("extensions.funmoods.newtab", true); user_pref("extensions.funmoods.newtaburl", "hxxp://start.funmoods.com/?f=2&a=afterd&chnl=afterd&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyEyEzy0DtByByDyD0FtCyEtN0D0Tzu0StByEyEtN1L2XzutBtF user_pref("extensions.funmoods.prdct", "funmoods"); user_pref("extensions.funmoods.prtnrId", "funmoods"); user_pref("extensions.funmoods.prtnrid", "funmoods"); user_pref("extensions.funmoods.savedVrsnTs", "1"); user_pref("extensions.funmoods.sg", "none"); user_pref("extensions.funmoods.similarsitesstorage-pid2", "ed037fb2db686e78"); user_pref("extensions.funmoods.smplGrp", "none"); user_pref("extensions.funmoods.smplgrp", "none"); user_pref("extensions.funmoods.srch", ""); user_pref("extensions.funmoods.srchPrvdr", "Search"); user_pref("extensions.funmoods.srchprvdr", "Search"); user_pref("extensions.funmoods.tlbrId", "base"); user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/?f=3&a=afterd&chnl=afterd&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyEyEzy0DtByByDyD0FtCyEtN0D0Tzu0StByEyEtN1L2XzutB user_pref("extensions.funmoods.tlbrid", "base"); user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://start.funmoods.com/?f=3&a=afterd&chnl=afterd&cd=2XzuyEtN2Y1L1QzuyBtDtC0AtDyEyEzy0DtByByDyD0FtCyEtN0D0Tzu0StByEyEtN1L2XzutB user_pref("extensions.funmoods.vrsn", "1.5.23.22"); user_pref("extensions.funmoods.vrsnTs", "1.5.23.2212:43:43"); user_pref("extensions.funmoods.vrsni", "1.5.23.22"); user_pref("extensions.funmoods.vrsnts", "1.5.23.2212:43:43"); user_pref("extensions.funmoods.xpestat\\xpereportdata", "21-8-2012"); user_pref("extensions.funmoods_i.newTab", true); user_pref("extensions.funmoods_i.smplGrp", "none"); user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2212:43:43"); user_pref("extensions.mywebsearch.prevDefaultEngine", "Yahoo"); user_pref("extensions.mywebsearch.prevKwdEnabled", true); user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=DB5C814D-A075-4A10-AACC-3D4ECF2324A1&n=77edc271&ind=201207051 user_pref("extensions.mywebsearch.prevSelectedEngine", "Search"); user_pref("extensions.toolbar.mindspark._2pMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=280C99A8-2C8F-430E-8CDB-DE4AC9BB1744&n=77edc271&p2=^CD^xdm014^S0102 user_pref("extensions.toolbar.mindspark._2pMembers_.initialized", true); user_pref("extensions.toolbar.mindspark._2pMembers_.installation.installDate", "2012070513"); user_pref("extensions.toolbar.mindspark._2pMembers_.installation.partnerId", "^CD^xdm014^S01025^us"); user_pref("extensions.toolbar.mindspark._2pMembers_.installation.partnerSubId", "233242"); user_pref("extensions.toolbar.mindspark._2pMembers_.installation.success", true); user_pref("extensions.toolbar.mindspark._2pMembers_.installation.toolbarId", "280C99A8-2C8F-430E-8CDB-DE4AC9BB1744"); user_pref("extensions.toolbar.mindspark._2pMembers_.lastActivePing", "1342105191810"); user_pref("extensions.toolbar.mindspark._2pMembers_.options.defaultSearch", true); user_pref("extensions.toolbar.mindspark._2pMembers_.options.homePageEnabled", false); user_pref("extensions.toolbar.mindspark._2pMembers_.options.keywordEnabled", true); user_pref("extensions.toolbar.mindspark._2pMembers_.options.tabEnabled", false); user_pref("extensions.toolbar.mindspark._2pMembers_.weather.location", "36101"); user_pref("extensions.toolbar.mindspark._4lMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=DB5C814D-A075-4A10-AACC-3D4ECF2324A1&n=77edc271&ptnrS=HIxdm002YYus& user_pref("extensions.toolbar.mindspark._4lMembers_.initialized", true); user_pref("extensions.toolbar.mindspark._4lMembers_.installation.installDate", "2012070513"); user_pref("extensions.toolbar.mindspark._4lMembers_.installation.partnerId", "HIxdm002YYus"); user_pref("extensions.toolbar.mindspark._4lMembers_.installation.partnerSubId", "CKS9zdist68CFUqQ7QodnnWBiA"); user_pref("extensions.toolbar.mindspark._4lMembers_.installation.success", true); user_pref("extensions.toolbar.mindspark._4lMembers_.installation.toolbarId", "DB5C814D-A075-4A10-AACC-3D4ECF2324A1"); user_pref("extensions.toolbar.mindspark._4lMembers_.lastActivePing", "1342105191799"); user_pref("extensions.toolbar.mindspark._4lMembers_.options.defaultSearch", true); user_pref("extensions.toolbar.mindspark._4lMembers_.options.homePageEnabled", false); user_pref("extensions.toolbar.mindspark._4lMembers_.options.keywordEnabled", true); user_pref("extensions.toolbar.mindspark._4lMembers_.options.tabEnabled", false); user_pref("extensions.toolbar.mindspark._4lMembers_.weather.location", "36101"); user_pref("extensions.toolbar.mindspark._64Members_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=D80DB6B9-2AC2-4DBC-9671-7D2EE51F8936&n=77ee416e&p2=^XP^xdm002^S0364 user_pref("extensions.toolbar.mindspark._64Members_.initialized", true); user_pref("extensions.toolbar.mindspark._64Members_.installation.contextKey", ""); user_pref("extensions.toolbar.mindspark._64Members_.installation.installDate", "2012103022"); user_pref("extensions.toolbar.mindspark._64Members_.installation.partnerId", "^XP^xdm002^S03644^us"); user_pref("extensions.toolbar.mindspark._64Members_.installation.partnerSubId", "CMKVw9z0p7MCFRR7nAodcwcAmQ"); user_pref("extensions.toolbar.mindspark._64Members_.installation.success", true); user_pref("extensions.toolbar.mindspark._64Members_.installation.toolbarId", "D80DB6B9-2AC2-4DBC-9671-7D2EE51F8936"); user_pref("extensions.toolbar.mindspark._64Members_.lastActivePing", "1353437768811"); user_pref("extensions.toolbar.mindspark._64Members_.options.defaultSearch", true); user_pref("extensions.toolbar.mindspark._64Members_.options.homePageEnabled", false); user_pref("extensions.toolbar.mindspark._64Members_.options.keywordEnabled", true); user_pref("extensions.toolbar.mindspark._64Members_.options.tabEnabled", false); user_pref("extensions.toolbar.mindspark._64Members_.searchHistory", "camp mac||mrc||mrc auburn||google||blank calendar||jan 2013 blank calendar||cabins for rent mentone||oovo" user_pref("extensions.toolbar.mindspark._64Members_.weather.location", "36101"); user_pref("extensions.toolbar.mindspark._gcMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=53492F76-4A7E-4718-83A8-5211D6118438&n=77ee1547&p2=^XN^xdm002^S0252 user_pref("extensions.toolbar.mindspark._gcMembers_.hp.enabled", false); user_pref("extensions.toolbar.mindspark._gcMembers_.initialized", true); user_pref("extensions.toolbar.mindspark._gcMembers_.installation.contextKey", ""); user_pref("extensions.toolbar.mindspark._gcMembers_.installation.installDate", "2012091719"); user_pref("extensions.toolbar.mindspark._gcMembers_.installation.partnerId", "^XN^xdm002^S02520^us"); user_pref("extensions.toolbar.mindspark._gcMembers_.installation.partnerSubId", "COOS0JDzvbICFQTznAodMHUA0w"); user_pref("extensions.toolbar.mindspark._gcMembers_.installation.success", true); user_pref("extensions.toolbar.mindspark._gcMembers_.installation.toolbarId", "53492F76-4A7E-4718-83A8-5211D6118438"); user_pref("extensions.toolbar.mindspark._gcMembers_.lastActivePing", "1350848440684"); user_pref("extensions.toolbar.mindspark._gcMembers_.options.defaultSearch", true); user_pref("extensions.toolbar.mindspark._gcMembers_.options.homePageEnabled", true); user_pref("extensions.toolbar.mindspark._gcMembers_.options.keywordEnabled", true); user_pref("extensions.toolbar.mindspark._gcMembers_.options.tabEnabled", true); user_pref("extensions.toolbar.mindspark._gcMembers_.searchHistory", "overstock.com||marietta ga"); user_pref("extensions.toolbar.mindspark._gcMembers_.weather.location", "36101"); user_pref("extensions.toolbar.mindspark.hp.enabled", false); user_pref("extensions.toolbar.mindspark.hp.enabled.guid", ""); user_pref("extensions.toolbar.mindspark.lastInstalled", "televisionfanatic@mindspark.com"); user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3247201&SearchSource=2&CUI=UN90992487055909402&UM=&q="); user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3247201&SearchSource=13"); user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3247201&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT user_pref("smartbar.machineId", "MTPX58+M8TDYODK5XUX6Q3J3QM6REBSZ2MAZ4YOBCOATNUNSLQJ6BMWQFHRZHKMQIFKVNRVZ+OYMOFP/UZSJ5Q"); user_pref("smartbar.originalHomepage", "hxxp://mysearch.avg.com?pid=safeguard&sg=1&cid=%7Baa4e7232-518c-4e46-9ba6-d2fa23a8c363%7D&mid=79b7b30db02c47d38697d16f6b87fe03-2d7f0d44 user_pref("smartbar.originalSearchAddressUrl", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=OVO2&o=2159&locale=en_US&apn_uid=67c7cdc1-f4be-4293-990c-f9f93115c5e1&apn Emptied folder: C:\Users\Taylor\AppData\Roaming\mozilla\firefox\profiles\3dgov41f.Bethanne\minidumps [5 files] ~~~ Chrome Successfully deleted: [Folder] C:\Users\Taylor\appdata\local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde Successfully deleted: [Folder] C:\Users\Taylor\appdata\local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp Successfully deleted: [Folder] C:\Users\Taylor\appdata\local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc Successfully deleted: [Folder] C:\Users\Taylor\appdata\local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Mon 08/05/2013 at 7:33:47.02 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~