Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 7/9/2014 Scan Time: 7:42:43 PM Logfile: Malwarebytes.txt Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.07.09.13 Rootkit Database: v2014.07.09.01 License: Trial Malware Protection: Enabled Malicious Website Protection: Enabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Dad Scan Type: Threat Scan Result: Completed Objects Scanned: 283038 Time Elapsed: 26 min, 11 sec Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Enabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 1 PUP.Optional.Conduit.A, C:\Users\Dad\AppData\Local\Google\Chrome\User Data\Default\preferences, Good: (), Bad: ({ "media" : { "device_id_salt" : "WqKnBccakdQAybECIyFqvg==" }, "session" : { "restore_on_startup_migrated" : true, "restore_on_startup" : 4, "startup_urls_migration_time" : "13042762738359921" }, "default_apps_install_state" : 2, "default_search_provider" : { "alternate_urls" : [ ], "search_url_post_params" : "", "search_url" : "https://search.yahoo.com/yhs/search?hspart=w3i&hsimp=yhs-synd1&p={searchTerms}&type=W3i_DS,221,0_0,Search,20140626,0,0,0,8178", "enabled" : true, "name" : "Yahoo! Search", "image_url_post_params" : "", "image_url" : "", "id" : "8", "icon_url" : "http://search.yahoo.com/favicon.ico", "new_tab_url" : "", "keyword" : "yahoo", "suggest_url_post_params" : "", "suggest_url" : "http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms}", "instant_url_post_params" : "", "instant_url" : "", "search_terms_replacement_key" : "", "encodings" : "UTF-8", "prepopulate_id" : "0" }, "net" : { "http_server_properties" : { "servers" : { "cm.g.doubleclick.net:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "cm.g.doubleclick.net:443" : { "supports_spdy" : true, "alternate_protocol" : { "port" : 443, "protocol_str" : "quic" }, "settings" : { "4" : 100 } }, "s1.2mdn.net:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "s0.2mdn.net:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "ad.doubleclick.net:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "www.facebook.com:443" : { "supports_spdy" : true }, "pagead2.googlesyndication.com:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "clients2.googleusercontent.com:443" : { "supports_spdy" : true, "alternate_protocol" : { "port" : 443, "protocol_str" : "quic" }, "settings" : { "4" : 100 } }, "clients2.google.com:443" : { "supports_spdy" : true, "alternate_protocol" : { "port" : 443, "protocol_str" : "quic" }, "settings" : { "4" : 100 } }, "chrome.google.com:443" : { "supports_spdy" : true, "alternate_protocol" : { "port" : 443, "protocol_str" : "quic" }, "settings" : { "4" : 100 } }, "www.google-analytics.com:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "ajax.googleapis.com:80" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 80, "protocol_str" : "quic" } }, "clients1.google.com:443" : { "supports_spdy" : false, "alternate_protocol" : { "port" : 443, "protocol_str" : "quic" } } }, "version" : 2 } }, "apps" : { "shortcuts_have_been_created" : true }, "profile" : { "avatar_index" : 0, "per_host_zoom_levels" : { }, "exited_cleanly" : true, "exit_type" : "Normal", "name" : "First user", "icon_version" : 2, "managed_user_id" : "", "content_settings" : { "pref_version" : 1, "clear_on_exit_migrated" : true, "pattern_pairs" : { } } }, "invalidator" : { "client_id" : "QxhW1A0YuT/cxXlONAmQ7Q==" }, "intl" : { "accept_languages" : "en-US,en" }, "browser" : { "window_placement" : { "bottom" : 1011, "top" : 21, "right" : 1602, "maximized" : false, "left" : 777, "work_area_top" : 0, "work_area_right" : 1680, "work_area_left" : 0, "work_area_bottom" : 1010 }, "show_home_button" : true }, "homepage_is_newtabpage" : false, "plugins" : { "plugins_list" : [ ], "migrated_to_pepper_flash" : true, "removed_old_component_pepper_flash_settings" : true }, "homepage" : "https://search.yahoo.com/yhs/web?hspart=w3i&hsimp=yhs-synd1&type=W3i_SP,221,0_0,StartPage,20140626,0,0,0,8178", "dns_prefetching" : { "host_referral_list" : [ 2, [ "http://ad.doubleclick.net/", [ "http://a.dlqm.net/", 2.60370040, "http://amch.questionmarket.com/", 3.92498120, "http://cdn.doubleverify.com/", 2.27338020, "http://googleads4.g.doubleclick.net/", 2.27338020, "http://s0.2mdn.net/", 2.27338020, "http://tps10201.doubleverify.com/", 2.27338020, "http://tps10208.doubleverify.com/", 1.5004309320, "http://tps30.doubleverify.com/", 1.8307511320, "http://www.gstatic.com/", 2.0487624640, "https://cdn3.doubleverify.com/", 1.8307511320 ] ], [ "http://admin.brightcove.com/", [ "http://c.brightcove.com/", 3.26434080 ] ], [ "http://b.localpages.com/", [ "http://ak1.abmr.net/", 2.27338020, "http://cm.g.doubleclick.net/", 2.60370040, "http://cms.quantserve.com/", 2.27338020, "http://ib.adnxs.com/", 6.8978630, "http://image2.pubmatic.com/", 2.27338020, "http://l.betrad.com/", 2.27338020, "http://p.rfihub.com/", 2.27338020, "http://pixel.mathtag.com/", 2.60370040, "http://sync.mathtag.com/", 2.27338020, "http://t.pointroll.com/", 2.27338020 ] ], [ "http://b3.mookie1.com/", [ "http://ad.crwdcntrl.net/", 4.58562160, "http://adadvisor.net/", 3.26434080, "http://fei.pro-market.net/", 2.93402060, "http://ib.mookie1.com/", 2.93402060, "http://p.brilig.com/", 2.60370040, "http://t.mookie1.com/", 7.22818320, "http://uav.tidaltv.com/", 9.870744800000001, "https://ib.mookie1.com/", 2.27338020, "https://loadm.exelator.com/", 2.27338020, "https://t.mookie1.com/", 4.25530140 ] ], [ "http://c.betrad.com/", [ "http://c.betrad.com/", 0.65358771397920 ] ], [ "http://g.impclksrv.com/", [ "http://ib.adnxs.com/", 2.2086570657060, "http://up.adki.com/", 2.2086570657060 ] ], [ "http://ib.adnxs.com/", [ "http://adventori.com/", 2.27338020, "http://ib.adnxs.com/", 15.7859383058520, "http://l.betrad.com/", 2.27338020, "http://mookie.bncnt.com/", 2.27338020, "http://pix.bit.ly/", 2.27338020, "http://pixel.tapad.com/", 2.27338020, "http://rs.gwallet.com/", 2.27338020, "http://t.mookie1.com/", 2.27338020, "http://um.eqads.com/", 2.60370040, "http://www.burstnet.com/", 2.27338020 ] ], [ "http://jdn.monster.com/", [ "http://cdn.atdmt.com/", 2.27338020, "http://jdn.monster.com/", 3.92498120, "http://view.atdmt.com/", 2.27338020 ] ], [ "http://lax1.ib.adnxs.com/", [ "http://ad.doubleclick.net/", 2.27338020, "http://adserver-qcmtc.adtechus.com/", 2.27338020, "http://cdn.doubleverify.com/", 2.60370040, "http://idsync.rlcdn.com/", 2.27338020, "http://pixel.quantcount.com/", 1.07887365019840, "http://pixel.quantserve.com/", 2.27338020, "http://tps10215.doubleverify.com/", 2.27338020, "http://tps30.doubleverify.com/", 2.27338020, "http://www.outfox.tv/", 1.320604615120, "https://cdn3.doubleverify.com/", 2.27338020 ] ], [ "http://olm.monster.com/", [ "http://jdn.monster.com/", 3.5946610, "http://olm.monster.com/", 2.60370040 ] ], [ "http://pages.lotame.com/", [ "http://b2c-mlm.marketo.com/", 2.8504890335180, "http://bcp.crwdcntrl.net/", 2.2086570657060, "http://d2yeu2mwujl2s5.cloudfront.net/", 2.5295730496120, "http://p.typekit.net/", 2.2086570657060, "http://pages.lotame.com/", 3.1714050174240 ] ], [ "http://search.conduit.com/", [ "http://b.localpages.com/", 2.27338020, "http://colo.cachefly.net/", 2.60370040, "http://d1c299r1rms8s6.cloudfront.net/", 3.26434080, "http://d1gj2dxn9mcrlz.cloudfront.net/", 2.27338020, "http://pstatic.datafastguru.info/", 3.26434080, "http://resources.search.conduit.com/", 3.95653286087780, "http://trk.lqw.me/", 4.58562160, "http://us.quikdisplay.com/", 4.58562160, "https://in.perfectnavigator.com/", 2.27338020, "https://interyield.jmp9.com/", 3.26434080 ] ], [ "http://securepaths.com/", [ "http://securepaths.com/", 2.4913915320 ] ], [ "http://tracking.quisma.com/", [ "http://reports.quisma.com/", 5.096900920860 ] ], [ "http://us.quikdisplay.com/", [ "http://ib.adnxs.com/", 1.454165403908180, "http://trk.lqw.me/", 1.454165403908180 ] ], [ "http://view.atdmt.com/", [ "http://cdn.atdmt.com/", 1.292411217821530, "http://ib.adnxs.com/", 1.292411217821530 ] ], [ "http://www.lotame.com/", [ "http://026-fgm-032.mktoresp.com/", 2.2086570657060, "http://bcp.crwdcntrl.net/", 2.2086570657060, "http://lptag.liveperson.net/", 2.2086570657060, "http://p.typekit.net/", 2.2086570657060, "http://pages.lotame.com/", 2.2086570657060, "http://server.iad.liveperson.net/", 3.8132369852360, "http://tags.liveperson.net/", 2.2086570657060, "http://use.typekit.net/", 2.5295730496120, "http://www.google-analytics.com/", 2.5295730496120, "http://www.lotame.com/", 14.4034644541340 ] ], [ "http://www.outfox.tv/", [ "http://admin.brightcove.com/", 2.60370040, "http://goku.brightcove.com/", 3.92498120, "http://imasdk.googleapis.com/", 2.27338020, "http://metrics.brightcove.com/", 3.92498120, "http://pagead2.googlesyndication.com/", 2.27338020, "http://redir.adap.tv/", 2.27338020, "http://s0.2mdn.net/", 3.5946610, "http://securepaths.com/", 2.3790826640, "http://track.reelfeed.tv/", 2.60370040, "http://u-ads.adap.tv/", 2.60370040 ] ], [ "https://ad.doubleclick.net/", [ "https://static.doubleclick.net/", 2.27338020, "https://t.mookie1.com/", 2.27338020 ] ], [ "https://b3.mookie1.com/", [ "https://t.mookie1.com/", 2.93402060 ] ], [ "https://search.yahoo.com/", [ "https://ad.yieldmanager.com/", 2.27338020, "https://cdnk.interclick.com/", 2.27338020, "https://csync.yahooapis.com/", 2.27338020, "https://dpm.demdex.net/", 2.27338020, "https://s.yimg.com/", 2.93402060 ] ] ], "startup_list" : [ 1, "http://d.sitespeeds.com/", "http://resources.search.conduit.com/", "http://search.conduit.com/", "http://storage.stgbssint.com/", "https://ad.yieldmanager.com/", "https://cdnk.interclick.com/", "https://clients2.google.com/", "https://csync.yahooapis.com/", "https://s.yimg.com/", "https://search.yahoo.com/" ] }, "extensions" : { "chrome_url_overrides" : { "bookmarks" : [ "chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html" ] }, "known_disabled" : [ ], "alerts" : { "initialized" : true }, "last_chrome_version" : "35.0.1916.153", "settings" : { "nkeimhogjdpnpccoofpliimaahmaaome" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\hangout_services", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "alarms", "desktopCapture", "webConnectable", "webrtcAudioPrivate", "webrtcLoggingPrivate", "system.cpu" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738494921", "events" : [ ], "content_settings" : [ ], "manifest" : { "background" : { "page" : "background.html", "persistent" : false }, "permissions" : [ "alarms", "desktopCapture", "system.cpu", "webrtcAudioPrivate", "webrtcLoggingPrivate" ], "name" : "Hangout Services", "manifest_version" : 2, "externally_connectable" : { "matches" : [ "https://*.google.com/hangouts*", "*://localhost/*" ] }, "version" : "1.0", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAQt2ZDdPfoSe/JI6ID5bgLHRCnCu9T36aYczmhw/tnv6QZB2I6WnOCMZXJZlRdqWc7w9jo4BWhYS50Vb4weMfh/I0On7VcRwJUgfAxW2cHB+EkmtI1v4v/OU24OqIa1Nmv9uRVeX0GjhQukdLNhAE6ACWooaf5kqKlCeK+1GOkQIDAQAB" }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false }, "ahfgeienlihckogmohjhadlkjgocpleb" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\web_store", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "management", "webstorePrivate" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738493921", "events" : [ ], "content_settings" : [ ], "manifest" : { "icons" : { "128" : "webstore_icon_128.png", "16" : "webstore_icon_16.png" }, "app" : { "urls" : [ "https://chrome.google.com/webstore" ], "launch" : { "web_url" : "https://chrome.google.com/webstore" } }, "permissions" : [ "webstorePrivate", "management" ], "name" : "Store", "version" : "0.2", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB", "description" : "Chrome Web Store" }, "from_bookmark" : false, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false, "page_ordinal" : "n", "app_launcher_ordinal" : "t" }, "nmmhkkegccagdldgiimedpiccmgmieda" : { "regular_only_preferences" : { }, "path" : "nmmhkkegccagdldgiimedpiccmgmieda\\0.0.6.1_1", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "identity", "webRequestInternal", "webview" ], "explicit_host" : [ "https://checkout.google.com/*", "https://sandbox.google.com/*", "https://www.google.com/*", "https://www.googleapis.com/*" ] }, "creation_flags" : 137, "location" : 10, "preferences" : { }, "running" : false, "was_installed_by_default" : true, "install_time" : "13042762745722961", "state" : 1, "lastpingday" : "13048412415943992", "events" : [ "app.runtime.onLaunched" ], "content_settings" : [ ], "manifest" : { "current_locale" : "en_US", "icons" : { "128" : "images/icon_128.png", "16" : "images/icon_16.png" }, "app" : { "background" : { "scripts" : [ "craw_background.js" ] } }, "permissions" : [ "identity", "webview", "https://checkout.google.com/", "https://sandbox.google.com/checkout/", "https://www.google.com/", "https://www.googleapis.com/*" ], "name" : "Google Wallet", "manifest_version" : 2, "display_in_new_tab_page" : false, "display_in_launcher" : false, "oauth2" : { "client_id" : "203784468217.apps.googleusercontent.com", "auto_approve" : true, "scopes" : [ "https://www.googleapis.com/auth/sierra", "https://www.googleapis.com/auth/sierrasandbox", "https://www.googleapis.com/auth/chromewebstore", "https://www.googleapis.com/auth/chromewebstore.readonly" ] }, "default_locale" : "en", "update_url" : "https://clients2.google.com/service/update2/crx", "version" : "0.0.6.1", "minimum_chrome_version" : "29", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrKfMnLqViEyokd1wk57FxJtW2XXpGXzIHBzv9vQI/01UsuP0IV5/lj0wx7zJ/xcibUgDeIxobvv9XD+zO1MdjMWuqJFcKuSS4Suqkje6u+pMrTSGOSHq1bmBVh0kpToN8YoJs/P/yrRd7FEtAXTaFTGxQL4C385MeXSjaQfiRiQIDAQAB", "description" : "Google Wallet for digital goods" }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : true, "ack_external" : true }, "neajdppkdcdipfabeoofebfddakdcjhd" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\network_speech_synthesis", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "systemPrivate", "ttsEngine" ], "explicit_host" : [ "https://www.google.com/*" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738511921", "events" : [ "ttsEngine.onPause", "ttsEngine.onResume", "ttsEngine.onSpeak", "ttsEngine.onStop" ], "content_settings" : [ ], "manifest" : { "background" : { "persistent" : false, "scripts" : [ "tts_extension.js" ] }, "permissions" : [ "systemPrivate", "ttsEngine", "https://www.google.com/" ], "name" : "Google Network Speech", "manifest_version" : 2, "tts_engine" : { "voices" : [ { "gender" : "female", "voice_name" : "Google US English", "event_types" : [ "start", "end", "error" ], "lang" : "en-US", "remote" : true }, { "gender" : "male", "voice_name" : "Google UK English Male", "event_types" : [ "start", "end", "error" ], "lang" : "en-GB", "remote" : true }, { "gender" : "female", "voice_name" : "Google UK English Female", "event_types" : [ "start", "end", "error" ], "lang" : "en-GB", "remote" : true }, { "gender" : "female", "voice_name" : "Google Español", "event_types" : [ "start", "end", "error" ], "lang" : "es-ES", "remote" : true }, { "gender" : "female", "voice_name" : "Google Français", "event_types" : [ "start", "end", "error" ], "lang" : "fr-FR", "remote" : true }, { "gender" : "female", "voice_name" : "Google Italiano", "event_types" : [ "start", "end", "error" ], "lang" : "it-IT", "remote" : true }, { "gender" : "female", "voice_name" : "Google Deutsch", "event_types" : [ "start", "end", "error" ], "lang" : "de-DE", "remote" : true }, { "gender" : "female", "voice_name" : "Google ??人", "event_types" : [ "start", "end", "error" ], "lang" : "ja-JP", "remote" : true }, { "gender" : "female", "voice_name" : "Google ??국?", "event_types" : [ "start", "end", "error" ], "lang" : "ko-KR", "remote" : true }, { "gender" : "female", "voice_name" : "Google 中???", "event_types" : [ "start", "end", "error" ], "lang" : "zh-CN", "remote" : true } ] }, "version" : "1.0", "key" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GSbNUMGygqQTNDMFGIjZNcwXsHLzkNkHjWbuY37PbNdSDZ4VqlVjzbWqODSe+MjELdv5Keb51IdytnoGYXBMyqKmWpUrg+RnKvQ5ibWr4MW9pyIceOIdp9GrzC1WZGgTmZismYR3AjaIpufZ7xDdQQv+XrghPWCkdVqLN+qZDA1HU+DURznkMICiDDSH2sU0egm9UbWfS218bZqzKeQDiC3OnTPlaxcbJtKUuupIm5knjze3Wo9Ae9poTDMzKgchg0VlFCv3uqox+wlD8sjXBoyBCCK9HpImdVAF1a7jpdgiUHpPeV/26oYzM9/grltwNR3bzECQgSpyXp0eyoegwIDAQAB", "description" : "Component extension providing speech via the Google network text-to-speech service." }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false }, "mgndgikekgjfcpckkfioiadnlibdjbkf" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\chrome_app", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738494921", "events" : [ ], "content_settings" : [ ], "manifest" : { "icons" : { "128" : "product_logo_128.png", "16" : "product_logo_16.png" }, "app" : { "launch" : { "web_url" : "http://THIS-WILL-BE-REPLACED" } }, "name" : "Chrome", "display_in_new_tab_page" : false, "display_in_launcher" : true, "version" : "0.1", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB", "description" : "Chrome as an app" }, "from_bookmark" : false, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false, "page_ordinal" : "n", "app_launcher_ordinal" : "n" }, "eihhgekonheiliaidomffpplfhecmkag" : { "regular_only_preferences" : { }, "path" : "eihhgekonheiliaidomffpplfhecmkag\\1.0.1.115_0", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "contextMenus", "cookies", "management", "tabs", "webNavigation", "webRequest", "webRequestBlocking", "webRequestInternal" ], "explicit_host" : [ "http://*/*", "https://*/*" ] }, "creation_flags" : 9, "location" : 6, "preferences" : { }, "was_installed_by_oem" : false, "was_installed_by_default" : false, "install_time" : "13048466025129992", "state" : 2, "lastpingday" : "13048412415943992", "events" : [ ], "content_settings" : [ ], "manifest" : { "background" : { "scripts" : [ "background.js", "clickstream.js", "ylc_1.9.js" ] }, "web_accessible_resources" : [ "installer_defines.json", "chrome_bg_win.png", "chrome_bg_mac.png" ], "icons" : { "48" : "ynano_48.png", "128" : "ynano_128.png", "16" : "ynano.png" }, "permissions" : [ "contextMenus", "cookies", "tabs", "management", "webRequest", "webRequestBlocking", "webNavigation", "http://*/*", "https://*/*" ], "name" : "Yahoo Extension", "manifest_version" : 2, "content_security_policy" : "script-src 'self' 'unsafe-eval' http://localhost https://yui-s.yahooapis.com https://nano.data.toolbar.yahoo.com https://s.yimg.com https://s1.yimg.com https://sxp.yimg.com https://us.data.toolbar.yahoo.com; object-src 'self'", "update_url" : "https://clients2.google.com/service/update2/crx", "version" : "1.0.1.115", "minimum_chrome_version" : "23.0.0.0", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCj3diLYXbz+H4oG5BBWCHG5dHjcUUeEkQjmQoQlRC+JP5m9+lPY2ySUnpdG3SMzKhPFA2gmishkrrV9+jid+6KUiex6nQBD01HdU5+tNFaf9CDgRAtkm1624OG1NpT8lXCfzcBrF1dBJuG73ppT1YfZgVBCopJCAHGvkGcQYMbmQIDAQAB", "description" : "This extension optimizes your Yahoo browsing experience by setting your new tab page to Yahoo." }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : true, "ack_external" : true }, "eemcgdkfndhakfknompkggombfjjjeno" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\bookmark_manager", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ], "explicit_host" : [ "chrome://favicon/*", "chrome://resources/*" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738492921", "events" : [ ], "content_settings" : [ ], "manifest" : { "chrome_url_overrides" : { "bookmarks" : "main.html" }, "icons" : { }, "permissions" : [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ], "name" : "Bookmark Manager", "manifest_version" : 2, "content_security_policy" : "object-src 'none'; script-src chrome://resources 'self'", "incognito" : "split", "version" : "0.1", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB", "description" : "Bookmark Manager" }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false }, "bepbmhgboaologfdajaanbcjmnhjmhfn" : { "state" : 0, "disable_reasons" : 1 }, "pafkbggdmjlpgkdkcbjmhmfcdpncadgh" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\google_now", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "alarms", "identity", "metricsPrivate", "notifications", "pushMessaging", "storage", "tabs", "webstorePrivate" ], "explicit_host" : [ "", "chrome://favicon/*" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738496921", "events" : [ "alarms.onAlarm", "identity.onSignInChanged", "location.onLocationUpdate", "notifications.onButtonClicked", "notifications.onClicked", "notifications.onClosed", "notifications.onPermissionLevelChanged", "notifications.onShowSettings", "pushMessaging.onMessage", "runtime.onInstalled", "runtime.onStartup", "runtime.onSuspend", "types.private.ChromeDirectSetting.googlegeolocationaccess.enabled.onChange" ], "content_settings" : [ ], "manifest" : { "background" : { "persistent" : false, "scripts" : [ "utility.js", "cards.js", "background.js" ] }, "icons" : { "48" : "images/icon48.png", "128" : "images/icon128.png", "16" : "images/icon16.png" }, "optional_permissions" : [ "background" ], "permissions" : [ "alarms", "identity", "location", "metricsPrivate", "notifications", "preferencesPrivate", "pushMessaging", "storage", "tabs", "webstorePrivate", "" ], "name" : "Google Now", "manifest_version" : 2, "oauth2" : { "auto_approve" : true, "scopes" : [ "https://www.googleapis.com/auth/googlenow" ] }, "version" : "1.2.0.1", "key" : "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhqJr32OFD/bMXW4Md7jMfd7LbwHXVc6x5bBQG5U+dloofoxrICDR20yur/40mQ8O//0sS1b8srvbab1CRlSrxoNCr9T80NAkfzx0gHyVS+p1Zow+1FzLMu9PiGwwFyN80HIB7GI/dIa0wC9K/2OrrzcHEhVH96DacTtWQqjfDVtZPjT7Xwv23dgoWcpbkRC86jMJot3dmX9xnn0KzoVc9gDOHSIkBLbkkr6Sp3LGXCCM4L0DJgxdFwaLr5WBzgC3y5x0/wwPIwN4PtIaK3BhH6njlksfnKwwIJ9iRT41V4BqbWu4mszO/7VJ3HJyw2DBpIc2grU9ZRRxrV3fRQG4wIDAQAB", "description" : "Integrates Google Now into Chrome." }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false }, "mfehgcgbbipciphmccgaenjidiccnmng" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\cloud_print", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "cloudPrintPrivate" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "was_installed_by_default" : false, "install_time" : "13042762738493921", "events" : [ ], "content_settings" : [ ], "manifest" : { "icons" : { }, "app" : { "urls" : [ "https://www.google.com/cloudprint/enable_chrome_connector" ], "launch" : { "web_url" : "https://www.google.com/cloudprint" } }, "permissions" : [ "cloudPrintPrivate" ], "name" : "Cloud Print", "display_in_launcher" : false, "version" : "0.1", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB", "description" : "Cloud Print" }, "from_bookmark" : false, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false }, "gfdkimpbcpahaombhbimeihdjnejgicl" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\feedback", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ "feedbackPrivate" ], "explicit_host" : [ "chrome://resources/*" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "running" : false, "was_installed_by_default" : false, "install_time" : "13042762738496921", "events" : [ "feedbackPrivate.onFeedbackRequested" ], "content_settings" : [ ], "manifest" : { "icons" : { "64" : "images/icon64.png", "32" : "images/icon32.png" }, "app" : { "background" : { "scripts" : [ "js/event_handler.js" ] }, "content_security_policy" : "default-src 'none'; script-src 'self' chrome://resources; style-src 'unsafe-inline' *; img-src *; media-src 'self'" }, "permissions" : [ "feedbackPrivate", "chrome://resources/" ], "name" : "Feedback", "manifest_version" : 2, "display_in_new_tab_page" : false, "display_in_launcher" : false, "incognito" : "split", "version" : "1.0", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMZElzFX2J1g1nRQ/8S3rg/1CjFyDltWOxQg+9M8aVgNVxbutEWFQz+oQzIP9BB67mJifULgiv12ToFKsae4NpEUR8sPZjiKDIHumc6pUdixOm8SJ5Rs16SMR6+VYxFUjlVW+5CA3IILptmNBxgpfyqoK0qRpBDIhGk1KDEZ4zqQIDAQAB", "description" : "User feedback extension" }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false }, "ennkphjdgehloodpbhlhldgbnhmacadg" : { "regular_only_preferences" : { }, "path" : "C:\\Program Files (x86)\\Google\\Chrome\\Application\\34.0.1847.116\\resources\\settings_app", "active_permissions" : { "manifest_permissions" : [ ], "api" : [ ], "explicit_host" : [ "chrome://settings-frame/*" ] }, "creation_flags" : 1, "location" : 5, "preferences" : { }, "running" : false, "was_installed_by_default" : false, "install_time" : "13042762738495921", "events" : [ "app.runtime.onLaunched" ], "content_settings" : [ ], "manifest" : { "icons" : { "48" : "settings_app_icon_48.png", "128" : "settings_app_icon_128.png", "16" : "settings_app_icon_16.png", "32" : "settings_app_icon_32.png" }, "app" : { "background" : { "scripts" : [ "settings_app.js" ] } }, "permissions" : [ "chrome://settings-frame/" ], "name" : "Settings", "manifest_version" : 2, "display_in_launcher" : false, "version" : "0.2", "key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB", "description" : "Settings" }, "from_bookmark" : false, "initial_keybindings_set" : true, "incognito_preferences" : { }, "incognito_content_settings" : [ ], "from_webstore" : false } }, "commands" : { }, "autoupdate" : { "next_check" : "13048466472265702" } }, "countryid_at_install" : 21843, "translate_whitelists" : { }, "translate_blocked_languages" : [ "en" ], "pinned_tabs" : [ ] }), Replaced,[b5ca039a5c1fc86e7de37158857f32ce] Physical Sectors: 0 (No malicious items detected) (end)