Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Computer freezes and has possible virus [Closed]


  • This topic is locked This topic is locked

#16
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
It sounds familiar, what's it used for exactly?
  • 0

Advertisements


#17
blmadara

blmadara

    Trusted Helper

  • Malware Removal
  • 767 posts
It's a program that corrects spelling errors when you type in web addresses. It doesn't have much benefit, uses a lot of resources and causes a lot of problems. Mostly it is installed without the users knowledge by a third party program. If you didn't install it yourself we will get rid of it and if you did install it I recommend we get rid of it.
  • 0

#18
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
I didn't install that. At least I don't ever remember doing that.
Thank you for getting rid of it for me :)
So what do I have to do?
  • 0

#19
blmadara

blmadara

    Trusted Helper

  • Malware Removal
  • 767 posts
Hi Grobanish,

It's very important that you perform these steps in the order they are written. If you have any problems please stop and let me know.

Step One: Backup Registry with ERUNT
The steps that I am about to suggest involve modifying the registry. Modifying the registry can be dangerous so we will make a backup of the registry first.
Modification of the registry can be extremely dangerous if you do not know exactly what you are doing so follow the steps that are listed below exactly. If you cannot perform some of these steps or if you have any questions please ask before proceeding.

Backing Up Your Registry
  • Download ERUNT
    (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
  • Install ERUNT by following the prompts
    (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
  • Start ERUNT
    (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
  • Choose a location for the backup
    (the default location is C:\WINDOWS\ERDNT which is acceptable).
  • Make sure that at least the first two check boxes are ticked
  • Press OK
  • Press YES to create the folder.
Posted Image

Step Two: Add/Remove Programs

  • Click the Start Orb and select Control Panel.
  • In Control Panel, select Programs and Features.
  • Select the following one at a time
    • AVG2012
      Sendori
      Java™ 6 Update 6
      Adobe Reader 8.1.2
      InfoAtoms
  • Click Uninstall.

Step Three: Run AdwCleaner

Download AdwCleaner from here or here and save it to your desktop.
Run AdwCleaner and select Delete.

Posted Image

Once done it will ask to reboot, allow this.
On reboot a log will be produced, please post it in your next reply.

Step Four: OTL Fix
Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot


Note: If you are using the pro version or trial version of Malwarebytes 1.6 or higher please disable it for the duration of this fix as it may interfere with the successful execution of the script below. If it still hangs then please uninstall MalwareBytes' and run this fix again.

Run OTL
Posted Image
  • Under the Custom Scans/Fixes box at the bottom, paste in the following (do not copy the word "quote")

    :Commands
    [createrestorepoint]

    :OTL
    PRC - [2012/12/10 15:01:54 | 003,569,512 | ---- | M] (Sendori) -- C:\Program Files (x86)\Sendori\sndappv2.exe
    PRC - [2012/12/10 15:01:54 | 000,196,456 | ---- | M] (Sendori, Inc.) -- C:\Program Files (x86)\Sendori\SendoriUp.exe
    PRC - [2012/12/10 15:01:54 | 000,118,632 | ---- | M] (Sendori, Inc.) -- C:\Program Files (x86)\Sendori\SendoriSvc.exe
    PRC - [2012/12/10 15:01:54 | 000,014,696 | ---- | M] (sendori) -- C:\Program Files (x86)\Sendori\Sendori.Service.exe
    SRV - [2012/12/10 15:01:54 | 003,569,512 | ---- | M] (Sendori) [Auto | Running] -- C:\Program Files (x86)\Sendori\sndappv2.exe -- (sndappv2)
    SRV - [2012/12/10 15:01:54 | 000,118,632 | ---- | M] (Sendori, Inc.) [Auto | Running] -- C:\Program Files (x86)\Sendori\SendoriSvc.exe -- (Application Sendori)
    SRV - [2012/12/10 15:01:54 | 000,014,696 | ---- | M] (sendori) [Auto | Running] -- C:\Program Files (x86)\Sendori\Sendori.Service.exe -- (Service Sendori)
    IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2786678
    FF - prefs.js..extensions.enabledAddons: infoatoms%40infoatoms.com:1.3.0.0
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Mozilla FireFox\extensions\[email protected] [2013/02/16 17:45:32 | 000,000,000 | ---D | M]
    [2013/02/16 17:45:32 | 000,000,000 | ---D | M] (InfoAtoms) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
    O2 - BHO: (InfoAtoms) - {103089DA-0F31-4A8B-843F-7D24A7FE8345} - C:\Program Files (x86)\InfoAtoms\IE32\InfoAtomsClientIE.dll (InfoAtoms Inc.)
    O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
    O4:64bit: - HKLM..\Run: [] File not found
    O4 - HKU\S-1-5-21-3853534044-2821975639-671477131-1000..\Run: [PlayNC Launcher] File not found
    O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\Sendori.dll (Sendori)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\Sendori.dll (Sendori)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\Sendori.dll (Sendori)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\Sendori.dll (Sendori)
    O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWow64\Sendori.dll (Sendori)
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
    O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
    [2013/01/27 22:22:59 | 000,000,000 | -HSD | C] -- C:\found.002
    [2013/01/27 20:19:02 | 000,000,000 | -HSD | C] -- C:\found.001
    [3 C:\Users\Megan\Documents\*.tmp files -> C:\Users\Megan\Documents\*.tmp -> ]
    [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
    MsConfig:64bit - StartUpReg: Sendori Tray - hkey= - key= - C:\Program Files (x86)\Sendori\SendoriTray.exe (Sendori, Inc.)

    :Files
    C:\Program Files (x86)\Sendori
    ipconfig /flushdns /c
    netsh advfirewall reset /c
    netsh advfirewall set allprofiles state on /c

    :Commands
    [resethosts]
    [emptytemp]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done and post the log it produces in your next reply.
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Step Five: Remove Chrome Extensions

Please go to this website for instructions on how to remove extensions from Chrome.

Uninstall the following extensions:
InfoAtoms
uTorrentControl_v2
uTorrentControl


When you are finished, close Chrome.


Step Six: How is your computer running?

Please tell me how your computer is running and give me a list of problems that remain.


What I need in your next post:
1. The AdwCleaner log.
2. The log from the OTL fix and the new OTL.txt log.
3. Let me know how your computer is running.
  • 0

#20
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
Thank you! My friend is coming over on Monday to help me, since this whole thing confuses me and I don't want to mess up at all. (Knowing myself I probably would D: )
I hope its okay that she's coming on monday though! > . < If not just let me know!
  • 0

#21
blmadara

blmadara

    Trusted Helper

  • Malware Removal
  • 767 posts

Thank you! My friend is coming over on Monday to help me, since this whole thing confuses me and I don't want to mess up at all. (Knowing myself I probably would D: )
I hope its okay that she's coming on monday though! > . < If not just let me know!


You're welcome. Monday is fine, thanks for keeping me posted.
  • 0

#22
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
I tried downloading ERUNT on the url provided but it only gave me a .part file. I tried finding ERUNT offsite, and I found it, but the problem now is that it won't install, it keeps freezing in the middle and not allowing me to download the computer's file registry through other programs. After having to restart the computer three times, I noticed that AVG was acting up whenever I turned on the computer asking for re-verification, which it hasn't done the last time I was on the computer. I am starting to believe that the virus is interfering with my downloads now, but just in case it's my paranoia acting up, could you send me another download link to the ERUNT file?

It would be greatly appreciated, I will try and come back as soon as possible to help fix this. I'm dreadfully sorry for the delay and thank you for your patience.

-suizome

Edited by Grobanish, 25 February 2013 - 05:55 PM.

  • 0

#23
blmadara

blmadara

    Trusted Helper

  • Malware Removal
  • 767 posts

I tried downloading ERUNT on the url provided but it only gave me a .part file. I tried finding ERUNT offsite, and I found it, but the problem now is that it won't install, it keeps freezing in the middle and not allowing me to download the computer's file registry through other programs. After having to restart the computer three times, I noticed that AVG was acting up whenever I turned on the computer asking for re-verification, which it hasn't done the last time I was on the computer. I am starting to believe that the virus is interfering with my downloads now, but just in case it's my paranoia acting up, could you send me another download link to the ERUNT file?

It would be greatly appreciated, I will try and come back as soon as possible to help fix this. I'm dreadfully sorry for the delay and thank you for your patience.


Don't worry about the delay, there are delays on my end too. We'll get this sorted out. I'd like you to try to download and install ERUNT in Safe Mode with networking. If you get it successfully installed and backed up follow the rest of the steps in my previous post, in order. Stop and let me know if it wasn't successful.

If you don't know how to start your computer in Safe Mode with Networking, instructions can be found here.
  • 0

#24
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
Thank you! I'll let my friend know right away :)
  • 0

#25
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
Alright, she said that she would be able to help me on either Sunday or Monday C:
  • 0

Advertisements


#26
blmadara

blmadara

    Trusted Helper

  • Malware Removal
  • 767 posts
Great, thanks for letting me know!!
  • 0

#27
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
Sorry for getting back to you so late, my friend forgot she was supposed to come so her and I have to re-schedual D:
  • 0

#28
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
Alright she said she'd be coming over on Thursday (Tomorrow). :)
  • 0

#29
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
# AdwCleaner v2.114 - Logfile created 03/07/2013 at 15:05:52
# Updated 05/03/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Megan - MEGAN-PC
# Boot Mode : Safe mode with networking
# Running from : C:\Users\Megan\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
File Deleted : C:\Users\Megan\AppData\Local\Temp\Uninstall.exe
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Free Offers from Freeze.com
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\Users\Megan\AppData\Local\Conduit
Folder Deleted : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Folder Deleted : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Folder Deleted : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Deleted : C:\Users\Megan\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\ConduitCommon
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\CT2786678
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\CT3072253
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\FCTB
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\Smartbar
Folder Deleted : C:\Users\Megan\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Megan\Documents\DealRunner

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\BFlix
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\BFlix
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{28A88B70-D874-4F73-BBBA-9B2B222FB7D6}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\kt_bho_dll.dll
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\kt_bho.KettleBho.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Software

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.2 (en-US)

File : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\prefs.js

C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\user.js ... Deleted !

Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_130067977588633691", true);
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_1359634298000", true);
Deleted : user_pref("CT2786678.CTID", "CT2786678");
Deleted : user_pref("CT2786678.CurrentServerDate", "8-3-2013");
Deleted : user_pref("CT2786678.DSInstall", false);
Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Thu Mar 07 2013 14:32:12 GMT-0800 (Pacific Standa[...]
Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Wed Feb 01 2012 10:49:26 GMT-0800 (Pacific Standard Ti[...]
Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 367);
Deleted : user_pref("CT2786678.FeedPollDate2429156812186649977", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813040823546", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813130095866", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813224203613", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813230837251", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813454291735", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813729834876", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813860870021", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156814264681793", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156814863075366", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156815257761081", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
Deleted : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
Deleted : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
Deleted : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
Deleted : user_pref("CT2786678.FirstServerDate", "31-1-2012");
Deleted : user_pref("CT2786678.FirstTime", true);
Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Deleted : user_pref("CT2786678.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2786678.HPInstall", false);
Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Deleted : user_pref("CT2786678.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2786678.HomepageBeforeUnload", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CT2786678.Initialize", true);
Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2786678.InstallationId", "ConduitXPEIntegration");
Deleted : user_pref("CT2786678.InstallationType", "ConduitXPEIntegration");
Deleted : user_pref("CT2786678.InstalledDate", "Tue Jan 31 2012 11:58:49 GMT-0800 (Pacific Standard Time)");
Deleted : user_pref("CT2786678.IsAlertDBUpdated", true);
Deleted : user_pref("CT2786678.IsGrouping", false);
Deleted : user_pref("CT2786678.IsInitSetupIni", true);
Deleted : user_pref("CT2786678.IsMulticommunity", false);
Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Thu Mar 07 2013 14:32:11 GMT-0800 (Pacific Standar[...]
Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2786678.LastLogin_3.12.0.7", "Tue Apr 24 2012 17:03:39 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.12.2.3", "Sat May 26 2012 14:38:29 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.13.0.6", "Fri Jul 20 2012 17:50:28 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.14.1.0", "Sun Aug 26 2012 08:02:22 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.15.1.0", "Mon Nov 05 2012 19:29:50 GMT-0800 (Pacific Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.16.0.3", "Wed Feb 20 2013 15:38:27 GMT-0800 (Pacific Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.18.0.7", "Thu Mar 07 2013 14:32:03 GMT-0800 (Pacific Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.9.0.3", "Wed Feb 01 2012 07:35:26 GMT-0800 (Pacific Standard Time)"[...]
Deleted : user_pref("CT2786678.LatestVersion", "3.18.0.7");
Deleted : user_pref("CT2786678.Locale", "en");
Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@[email protected]/rank/tooltip/?version=1");
Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2786678.OriginalFirstVersion", "3.9.0.3");
Deleted : user_pref("CT2786678.SearchCaption", "uTorrentBar Customized Web Search");
Deleted : user_pref("CT2786678.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Thu Mar 07 2013 14:32:00 GMT-0800 (Pacific Stand[...]
Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2786678.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2786678.SearchProtectorEnabled", false);
Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2786678.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Thu Mar 07 2013 14:32:01 GMT-0800 (Pacific Standard [...]
Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Thu Mar 07 2013 14:31:52 GMT-0800 (Pacific Standard Ti[...]
Deleted : user_pref("CT2786678.SettingsLastUpdate", "1362663749");
Deleted : user_pref("CT2786678.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13");
Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Tue Jan 31 2012 11:58:48 GMT-0800 (Pacific Sta[...]
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1312887586");
Deleted : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Deleted : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2786678.UserID", "UN07253069780728916");
Deleted : user_pref("CT2786678.ValidationData_Toolbar", 0);
Deleted : user_pref("CT2786678.WeatherNetwork", "");
Deleted : user_pref("CT2786678.WeatherPollDate", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific Standard Time)");
Deleted : user_pref("CT2786678.WeatherUnit", "C");
Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Deleted : user_pref("CT2786678.autoDisableScopes", -1);
Deleted : user_pref("CT2786678.backendstorage.cbfirsttime", "547565204A616E20333120323031322031313A35383A35362[...]
Deleted : user_pref("CT2786678.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F67[...]
Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (Pacific [...]
Deleted : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2786678.initDone", true);
Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2786678.myStuffEnabled", true);
Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2786678.revertSettingsEnabled", false);
Deleted : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2786678.testingCtid", "");
Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Thu Mar 07 2013 14:32:11 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.usagesFlag", 2);
Deleted : user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3072253.FirstTime", "true");
Deleted : user_pref("CT3072253.FirstTimeFF3", "true");
Deleted : user_pref("CT3072253.LoginRevertSettingsEnabled", false);
Deleted : user_pref("CT3072253.RevertSettingsEnabled", false);
Deleted : user_pref("CT3072253.UserID", "UN61810879582616710");
Deleted : user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3072253.autoDisableScopes", -1);
Deleted : user_pref("CT3072253.cbcountry_001", "US");
Deleted : user_pref("CT3072253.cbfirsttime", "Sat Jul 28 2012 14:58:51 GMT-0700 (Pacific Daylight Time)");
Deleted : user_pref("CT3072253.defaultSearch", "FALSE");
Deleted : user_pref("CT3072253.embeddedsData", "[{\"appId\":\"129571859753931591\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT3072253.enableAlerts", "always");
Deleted : user_pref("CT3072253.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT3072253.enableSearchFromAddressBar", "FALSE");
Deleted : user_pref("CT3072253.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3072253.fixPageNotFoundError", "true");
Deleted : user_pref("CT3072253.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3072253.fixUrls", true);
Deleted : user_pref("CT3072253.installId", "fft981D.tmp.exe");
Deleted : user_pref("CT3072253.installType", "XPE");
Deleted : user_pref("CT3072253.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3072253.isNewTabEnabled", true);
Deleted : user_pref("CT3072253.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3072253.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.lastVersion", "10.14.65.43");
Deleted : user_pref("CT3072253.migrateAppsAndComponents", true);
Deleted : user_pref("CT3072253.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Deleted : user_pref("CT3072253.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.openThankYouPage", "true");
Deleted : user_pref("CT3072253.openUninstallPage", "FALSE");
Deleted : user_pref("CT3072253.search.searchAppId", "129571859753931591");
Deleted : user_pref("CT3072253.search.searchCount", "0");
Deleted : user_pref("CT3072253.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3072253.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1343512730299");
Deleted : user_pref("CT3072253.serviceLayer_services_appTracking_lastUpdate", "1343512731505");
Deleted : user_pref("CT3072253.serviceLayer_services_appsMetadata_lastUpdate", "1343530639103");
Deleted : user_pref("CT3072253.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1343512730743");
Deleted : user_pref("CT3072253.serviceLayer_services_login_10.10.20.14_lastUpdate", "1346130364593");
Deleted : user_pref("CT3072253.serviceLayer_services_login_10.10.27.6_lastUpdate", "1353307245561");
Deleted : user_pref("CT3072253.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359081154524");
Deleted : user_pref("CT3072253.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1343512730839");
Deleted : user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1343512729408");
Deleted : user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1362697059209");
Deleted : user_pref("CT3072253.serviceLayer_services_toolbarContextMenu_lastUpdate", "1343512730550");
Deleted : user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1362697059283");
Deleted : user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1362697059275");
Deleted : user_pref("CT3072253.settingsINI", true);
Deleted : user_pref("CT3072253.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3072253.smartbar.CTID", "CT3072253");
Deleted : user_pref("CT3072253.smartbar.Uninstall", "0");
Deleted : user_pref("CT3072253.smartbar.isHidden", true);
Deleted : user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");
Deleted : user_pref("CT3072253.toolbarBornServerTime", "29-7-2012");
Deleted : user_pref("CT3072253.toolbarCurrentServerTime", "25-12-2012");
Deleted : user_pref("CT3072253.upgradeFromClearSBVersion", true);
Deleted : user_pref("CT3072253.url_history0001", "hxxp://www.gaiaonline.com/friends/?list=friend&status=online[...]
Deleted : user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3220468.autoDisableScopes", -1);
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/US", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"4eb[...]
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Megan\\AppData\\Roaming\\Mozilla\\F[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2786678");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (Pac[...]
Deleted : user_pref("CommunityToolbar.globalUserId", "0e061d27-7798-4535-8aaf-5295d7c6fd54");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678");
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Jan 31 2012 11:58:5[...]
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Jan 31 2012 12:59:02 GMT-080[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (P[...]
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "b25e0861-33de-4eec-991e-08f583b46dde");
Deleted : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]
Deleted : user_pref("extentions.y2layers.installId", "14e73c3f-5b2e-475d-afb1-211dd28c4e49");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.DNSCatch", false);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.FirstLaunchShown", true);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.LastDate", 31);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.customNewTab", false);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.processAddrBar", false);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.session", "1171967B9F66081CD1E3F555F2BD2C2EEA50[...]
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.tb_lang", "en");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.user_id", "41026687");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.vars.disablecuidinject", "1");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.vars.lastcheck", "Sun%20Jul%2031%202011%2010%3A[...]
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.yahooSearch", false);
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=2&q=[...]

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.1] : icon_url ={"apps_promo_counter":11,"backup":{"_signature":"lQAVL6aIeIKja+6l1KZ+aiKiEZh9J/elxK1V3Yqju90=","_ver[...]

*************************

AdwCleaner[R1].txt - [100913 octets] - [07/03/2013 15:05:35]
AdwCleaner[S1].txt - [29387 octets] - [07/03/2013 15:05:52]

########## EOF - C:\AdwCleaner[S1].txt - [29448 octets] ##########
  • 0

#30
Grobanish

Grobanish

    Member

  • Topic Starter
  • Member
  • PipPip
  • 24 posts
All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
No active process named sndappv2.exe was found!
No active process named SendoriUp.exe was found!
No active process named SendoriSvc.exe was found!
No active process named Sendori.Service.exe was found!
Error: No service named sndappv2 was found to stop!
Service\Driver key sndappv2 not found.
File C:\Program Files (x86)\Sendori\sndappv2.exe not found.
Error: No service named Application Sendori was found to stop!
Service\Driver key Application Sendori not found.
File C:\Program Files (x86)\Sendori\SendoriSvc.exe not found.
Error: No service named Service Sendori was found to stop!
Service\Driver key Service Sendori not found.
File C:\Program Files (x86)\Sendori\Sendori.Service.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Prefs.js: infoatoms%40infoatoms.com:1.3.0.0 removed from extensions.enabledAddons
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected] not found.
File C:\Program Files (x86)\Mozilla FireFox\extensions\[email protected] not found.
Folder C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{103089DA-0F31-4A8B-843F-7D24A7FE8345}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{103089DA-0F31-4A8B-843F-7D24A7FE8345}\ not found.
File C:\Program Files (x86)\InfoAtoms\IE32\InfoAtomsClientIE.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
File C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3853534044-2821975639-671477131-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PlayNC Launcher deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully.
File C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\ not found.
File C:\Windows\SysWow64\Sendori.dll not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
C:\found.002 folder moved successfully.
C:\found.001 folder moved successfully.
C:\Users\Megan\Documents\~WRL0003.tmp deleted successfully.
C:\Users\Megan\Documents\~WRL0004.tmp deleted successfully.
C:\Users\Megan\Documents\~WRL0005.tmp deleted successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\Sendori Tray\ not found.
========== FILES ==========
File\Folder C:\Program Files (x86)\Sendori not found.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Megan\Desktop\cmd.bat deleted successfully.
C:\Users\Megan\Desktop\cmd.txt deleted successfully.
< netsh advfirewall reset /c >
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 10107
Ok.
C:\Users\Megan\Desktop\cmd.bat deleted successfully.
C:\Users\Megan\Desktop\cmd.txt deleted successfully.
< netsh advfirewall set allprofiles state on /c >
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 10107
Ok.
C:\Users\Megan\Desktop\cmd.bat deleted successfully.
C:\Users\Megan\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Megan
->Temp folder emptied: 115636696 bytes
->Temporary Internet Files folder emptied: 449915031 bytes
->Java cache emptied: 5056243 bytes
->FireFox cache emptied: 50855523 bytes
->Google Chrome cache emptied: 91145210 bytes
->Apple Safari cache emptied: 35792896 bytes
->Flash cache emptied: 5529364 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 928654279 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36079725 bytes
RecycleBin emptied: 240726073 bytes

Total Files Cleaned = 1,869.00 mb

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\: LSP stack updated.

OTL by OldTimer - Version 3.2.69.0 log created on 03072013_152141

Files\Folders moved on Reboot...
C:\Users\Megan\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP