[Grobanish]

It sounds familiar, what's it used for exactly?

[Advertisements]

It's a program that corrects spelling errors when you type in web addresses. It doesn't have much benefit, uses a lot of resources and causes a lot of problems. Mostly it is installed without the users knowledge by a third party program. If you didn't install it yourself we will get rid of it and if you did install it I recommend we get rid of it.

[blmadara]

It's a program that corrects spelling errors when you type in web addresses. It doesn't have much benefit, uses a lot of resources and causes a lot of problems. Mostly it is installed without the users knowledge by a third party program. If you didn't install it yourself we will get rid of it and if you did install it I recommend we get rid of it.

[Grobanish]

I didn't install that. At least I don't ever remember doing that.
Thank you for getting rid of it for me
So what do I have to do?

[blmadara]

Hi Grobanish,

It's very important that you perform these steps in the order they are written. If you have any problems please stop and let me know.

Step One: Backup Registry with ERUNT
The steps that I am about to suggest involve modifying the registry. Modifying the registry can be dangerous so we will make a backup of the registry first.
Modification of the registry can be extremely dangerous if you do not know exactly what you are doing so follow the steps that are listed below exactly. If you cannot perform some of these steps or if you have any questions please ask before proceeding.

Backing Up Your Registry

• Download ERUNT
  (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
• Install ERUNT by following the prompts
  (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
• Start ERUNT
  (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
• Choose a location for the backup
  (the default location is C:\WINDOWS\ERDNT which is acceptable).
• Make sure that at least the first two check boxes are ticked
• Press OK
• Press YES to create the folder.

Step Two: Add/Remove Programs

• Click the Start Orb and select Control Panel.
• In Control Panel, select Programs and Features.
• Select the following one at a time
  • AVG2012
    Sendori
    Java™ 6 Update 6
    Adobe Reader 8.1.2
    InfoAtoms
• Click Uninstall.

Step Three: Run AdwCleaner

Download AdwCleaner from here or here and save it to your desktop.
Run AdwCleaner and select Delete.



Once done it will ask to reboot, allow this.
On reboot a log will be produced, please post it in your next reply.

Step Four: OTL Fix
Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Note: If you are using the pro version or trial version of Malwarebytes 1.6 or higher please disable it for the duration of this fix as it may interfere with the successful execution of the script below. If it still hangs then please uninstall MalwareBytes' and run this fix again.

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following (do not copy the word "quote")
  
  

  :Commands
  [createrestorepoint]
  
  :OTL
  PRC - [2012/12/10 15:01:54 | 003,569,512 | ---- | M] (Sendori) -- C:\Program Files (x86)\Sendori\sndappv2.exe
  PRC - [2012/12/10 15:01:54 | 000,196,456 | ---- | M] (Sendori, Inc.) -- C:\Program Files (x86)\Sendori\SendoriUp.exe
  PRC - [2012/12/10 15:01:54 | 000,118,632 | ---- | M] (Sendori, Inc.) -- C:\Program Files (x86)\Sendori\SendoriSvc.exe
  PRC - [2012/12/10 15:01:54 | 000,014,696 | ---- | M] (sendori) -- C:\Program Files (x86)\Sendori\Sendori.Service.exe
  SRV - [2012/12/10 15:01:54 | 003,569,512 | ---- | M] (Sendori) [Auto | Running] -- C:\Program Files (x86)\Sendori\sndappv2.exe -- (sndappv2)
  SRV - [2012/12/10 15:01:54 | 000,118,632 | ---- | M] (Sendori, Inc.) [Auto | Running] -- C:\Program Files (x86)\Sendori\SendoriSvc.exe -- (Application Sendori)
  SRV - [2012/12/10 15:01:54 | 000,014,696 | ---- | M] (sendori) [Auto | Running] -- C:\Program Files (x86)\Sendori\Sendori.Service.exe -- (Service Sendori)
  IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2786678
  FF - prefs.js..extensions.enabledAddons: infoatoms%40infoatoms.com:1.3.0.0
  FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Mozilla FireFox\extensions\[email protected] [2013/02/16 17:45:32 | 000,000,000 | ---D | M]
  [2013/02/16 17:45:32 | 000,000,000 | ---D | M] (InfoAtoms) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
  O2 - BHO: (InfoAtoms) - {103089DA-0F31-4A8B-843F-7D24A7FE8345} - C:\Program Files (x86)\InfoAtoms\IE32\InfoAtomsClientIE.dll (InfoAtoms Inc.)
  O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
  O4:64bit: - HKLM..\Run: [] File not found
  O4 - HKU\S-1-5-21-3853534044-2821975639-671477131-1000..\Run: [PlayNC Launcher] File not found
  O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
  O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWow64\Sendori.dll (Sendori)
  O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWow64\Sendori.dll (Sendori)
  O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWow64\Sendori.dll (Sendori)
  O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWow64\Sendori.dll (Sendori)
  O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\SysWow64\Sendori.dll (Sendori)
  O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
  O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
  O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_06)
  [2013/01/27 22:22:59 | 000,000,000 | -HSD | C] -- C:\found.002
  [2013/01/27 20:19:02 | 000,000,000 | -HSD | C] -- C:\found.001
  [3 C:\Users\Megan\Documents\*.tmp files -> C:\Users\Megan\Documents\*.tmp -> ]
  [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
  MsConfig:64bit - StartUpReg: Sendori Tray - hkey= - key= - C:\Program Files (x86)\Sendori\SendoriTray.exe (Sendori, Inc.)
  
  :Files
  C:\Program Files (x86)\Sendori
  ipconfig /flushdns /c
  netsh advfirewall reset /c
  netsh advfirewall set allprofiles state on /c
  
  :Commands
  [resethosts]
  [emptytemp]
  

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done and post the log it produces in your next reply.
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

Step Five: Remove Chrome Extensions

Please go to this website for instructions on how to remove extensions from Chrome.

Uninstall the following extensions:
InfoAtoms
uTorrentControl_v2
uTorrentControl

When you are finished, close Chrome.


Step Six: How is your computer running?

Please tell me how your computer is running and give me a list of problems that remain.


What I need in your next post:
1. The AdwCleaner log.
2. The log from the OTL fix and the new OTL.txt log.
3. Let me know how your computer is running.

[Grobanish]

Thank you! My friend is coming over on Monday to help me, since this whole thing confuses me and I don't want to mess up at all. (Knowing myself I probably would D: )
I hope its okay that she's coming on monday though! > . < If not just let me know!

[blmadara]

Thank you! My friend is coming over on Monday to help me, since this whole thing confuses me and I don't want to mess up at all. (Knowing myself I probably would D: )
I hope its okay that she's coming on monday though! > . < If not just let me know!

You're welcome. Monday is fine, thanks for keeping me posted.

[Grobanish]

I tried downloading ERUNT on the url provided but it only gave me a .part file. I tried finding ERUNT offsite, and I found it, but the problem now is that it won't install, it keeps freezing in the middle and not allowing me to download the computer's file registry through other programs. After having to restart the computer three times, I noticed that AVG was acting up whenever I turned on the computer asking for re-verification, which it hasn't done the last time I was on the computer. I am starting to believe that the virus is interfering with my downloads now, but just in case it's my paranoia acting up, could you send me another download link to the ERUNT file?

It would be greatly appreciated, I will try and come back as soon as possible to help fix this. I'm dreadfully sorry for the delay and thank you for your patience.

-suizome

Edited by Grobanish, 25 February 2013 - 05:55 PM.

[blmadara]

I tried downloading ERUNT on the url provided but it only gave me a .part file. I tried finding ERUNT offsite, and I found it, but the problem now is that it won't install, it keeps freezing in the middle and not allowing me to download the computer's file registry through other programs. After having to restart the computer three times, I noticed that AVG was acting up whenever I turned on the computer asking for re-verification, which it hasn't done the last time I was on the computer. I am starting to believe that the virus is interfering with my downloads now, but just in case it's my paranoia acting up, could you send me another download link to the ERUNT file?

It would be greatly appreciated, I will try and come back as soon as possible to help fix this. I'm dreadfully sorry for the delay and thank you for your patience.

Don't worry about the delay, there are delays on my end too. We'll get this sorted out. I'd like you to try to download and install ERUNT in Safe Mode with networking. If you get it successfully installed and backed up follow the rest of the steps in my previous post, in order. Stop and let me know if it wasn't successful.

If you don't know how to start your computer in Safe Mode with Networking, instructions can be found here.

[Grobanish]

Thank you! I'll let my friend know right away

[Grobanish]

Alright, she said that she would be able to help me on either Sunday or Monday C:

[blmadara]

Great, thanks for letting me know!!

[Grobanish]

Sorry for getting back to you so late, my friend forgot she was supposed to come so her and I have to re-schedual D:

[Grobanish]

Alright she said she'd be coming over on Thursday (Tomorrow).

[Grobanish]

# AdwCleaner v2.114 - Logfile created 03/07/2013 at 15:05:52
# Updated 05/03/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Megan - MEGAN-PC
# Boot Mode : Safe mode with networking
# Running from : C:\Users\Megan\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll
File Deleted : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt
File Deleted : C:\Users\Megan\AppData\Local\Temp\Uninstall.exe
Folder Deleted : C:\Program Files (x86)\Common Files\Software Update Utility
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Free Offers from Freeze.com
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\Partner
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\Users\Megan\AppData\Local\Conduit
Folder Deleted : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Folder Deleted : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Folder Deleted : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Folder Deleted : C:\Users\Megan\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\ConduitCommon
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\CT2786678
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\CT3072253
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\FCTB
Folder Deleted : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\Smartbar
Folder Deleted : C:\Users\Megan\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Megan\Documents\DealRunner

***** [Registry] *****

Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\BFlix
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0C9F4179-6CE2-4C6A-A3E5-67FF3592A12E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\BFlix
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{28A88B70-D874-4F73-BBBA-9B2B222FB7D6}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\kt_bho_dll.dll
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Classes\kt_bho.KettleBho.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3072253
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Software

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16464

[OK] Registry is clean.

-\\ Mozilla Firefox v18.0.2 (en-US)

File : C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\prefs.js

C:\Users\Megan\AppData\Roaming\Mozilla\Firefox\Profiles\waaku70m.default\user.js ... Deleted !

Deleted : user_pref("CT2786678..clientLogIsEnabled", false);
Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Deleted : user_pref("CT2786678.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_129579220236217502", true);
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_130067977588633691", true);
Deleted : user_pref("CT2786678.BrowserCompStateIsOpen_1359634298000", true);
Deleted : user_pref("CT2786678.CTID", "CT2786678");
Deleted : user_pref("CT2786678.CurrentServerDate", "8-3-2013");
Deleted : user_pref("CT2786678.DSInstall", false);
Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Thu Mar 07 2013 14:32:12 GMT-0800 (Pacific Standa[...]
Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Wed Feb 01 2012 10:49:26 GMT-0800 (Pacific Standard Ti[...]
Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 367);
Deleted : user_pref("CT2786678.FeedPollDate2429156812186649977", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813040823546", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813130095866", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813224203613", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813230837251", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813454291735", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813729834876", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156813860870021", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156814264681793", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156814863075366", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedPollDate2429156815257761081", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
Deleted : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
Deleted : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
Deleted : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
Deleted : user_pref("CT2786678.FirstServerDate", "31-1-2012");
Deleted : user_pref("CT2786678.FirstTime", true);
Deleted : user_pref("CT2786678.FirstTimeFF3", true);
Deleted : user_pref("CT2786678.FixPageNotFoundErrors", true);
Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Deleted : user_pref("CT2786678.HPInstall", false);
Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
Deleted : user_pref("CT2786678.HomePageProtectorEnabled", false);
Deleted : user_pref("CT2786678.HomepageBeforeUnload", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CT2786678.Initialize", true);
Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 3);
Deleted : user_pref("CT2786678.InstallationId", "ConduitXPEIntegration");
Deleted : user_pref("CT2786678.InstallationType", "ConduitXPEIntegration");
Deleted : user_pref("CT2786678.InstalledDate", "Tue Jan 31 2012 11:58:49 GMT-0800 (Pacific Standard Time)");
Deleted : user_pref("CT2786678.IsAlertDBUpdated", true);
Deleted : user_pref("CT2786678.IsGrouping", false);
Deleted : user_pref("CT2786678.IsInitSetupIni", true);
Deleted : user_pref("CT2786678.IsMulticommunity", false);
Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
Deleted : user_pref("CT2786678.IsOpenUninstallPage", false);
Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Thu Mar 07 2013 14:32:11 GMT-0800 (Pacific Standar[...]
Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Deleted : user_pref("CT2786678.LastLogin_3.12.0.7", "Tue Apr 24 2012 17:03:39 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.12.2.3", "Sat May 26 2012 14:38:29 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.13.0.6", "Fri Jul 20 2012 17:50:28 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.14.1.0", "Sun Aug 26 2012 08:02:22 GMT-0700 (Pacific Daylight Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.15.1.0", "Mon Nov 05 2012 19:29:50 GMT-0800 (Pacific Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.16.0.3", "Wed Feb 20 2013 15:38:27 GMT-0800 (Pacific Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.18.0.7", "Thu Mar 07 2013 14:32:03 GMT-0800 (Pacific Standard Time)[...]
Deleted : user_pref("CT2786678.LastLogin_3.9.0.3", "Wed Feb 01 2012 07:35:26 GMT-0800 (Pacific Standard Time)"[...]
Deleted : user_pref("CT2786678.LatestVersion", "3.18.0.7");
Deleted : user_pref("CT2786678.Locale", "en");
Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
Deleted : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
Deleted : user_pref("CT2786678.OriginalFirstVersion", "3.9.0.3");
Deleted : user_pref("CT2786678.SearchCaption", "uTorrentBar Customized Web Search");
Deleted : user_pref("CT2786678.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties");
Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Thu Mar 07 2013 14:32:00 GMT-0800 (Pacific Stand[...]
Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Deleted : user_pref("CT2786678.SearchInNewTabUserEnabled", false);
Deleted : user_pref("CT2786678.SearchProtectorEnabled", false);
Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
Deleted : user_pref("CT2786678.SendProtectorDataViaLogin", true);
Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Thu Mar 07 2013 14:32:01 GMT-0800 (Pacific Standard [...]
Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Thu Mar 07 2013 14:31:52 GMT-0800 (Pacific Standard Ti[...]
Deleted : user_pref("CT2786678.SettingsLastUpdate", "1362663749");
Deleted : user_pref("CT2786678.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2786678&SearchSource=13");
Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Tue Jan 31 2012 11:58:48 GMT-0800 (Pacific Sta[...]
Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1312887586");
Deleted : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
Deleted : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Deleted : user_pref("CT2786678.UserID", "UN07253069780728916");
Deleted : user_pref("CT2786678.ValidationData_Toolbar", 0);
Deleted : user_pref("CT2786678.WeatherNetwork", "");
Deleted : user_pref("CT2786678.WeatherPollDate", "Wed Feb 01 2012 10:29:26 GMT-0800 (Pacific Standard Time)");
Deleted : user_pref("CT2786678.WeatherUnit", "C");
Deleted : user_pref("CT2786678.alertChannelId", "1178763");
Deleted : user_pref("CT2786678.autoDisableScopes", -1);
Deleted : user_pref("CT2786678.backendstorage.cbfirsttime", "547565204A616E20333120323031322031313A35383A35362[...]
Deleted : user_pref("CT2786678.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F67[...]
Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (Pacific [...]
Deleted : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
Deleted : user_pref("CT2786678.initDone", true);
Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
Deleted : user_pref("CT2786678.myStuffEnabled", true);
Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Deleted : user_pref("CT2786678.revertSettingsEnabled", false);
Deleted : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
Deleted : user_pref("CT2786678.searchProtectorEnableByLogin", true);
Deleted : user_pref("CT2786678.testingCtid", "");
Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Thu Mar 07 2013 14:32:11 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (Pacific S[...]
Deleted : user_pref("CT2786678.usagesFlag", 2);
Deleted : user_pref("CT3072253.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3072253.FirstTime", "true");
Deleted : user_pref("CT3072253.FirstTimeFF3", "true");
Deleted : user_pref("CT3072253.LoginRevertSettingsEnabled", false);
Deleted : user_pref("CT3072253.RevertSettingsEnabled", false);
Deleted : user_pref("CT3072253.UserID", "UN61810879582616710");
Deleted : user_pref("CT3072253.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3072253.autoDisableScopes", -1);
Deleted : user_pref("CT3072253.cbcountry_001", "US");
Deleted : user_pref("CT3072253.cbfirsttime", "Sat Jul 28 2012 14:58:51 GMT-0700 (Pacific Daylight Time)");
Deleted : user_pref("CT3072253.defaultSearch", "FALSE");
Deleted : user_pref("CT3072253.embeddedsData", "[{\"appId\":\"129571859753931591\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT3072253.enableAlerts", "always");
Deleted : user_pref("CT3072253.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT3072253.enableSearchFromAddressBar", "FALSE");
Deleted : user_pref("CT3072253.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3072253.fixPageNotFoundError", "true");
Deleted : user_pref("CT3072253.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3072253.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3072253.fixUrls", true);
Deleted : user_pref("CT3072253.installId", "fft981D.tmp.exe");
Deleted : user_pref("CT3072253.installType", "XPE");
Deleted : user_pref("CT3072253.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3072253.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3072253.isNewTabEnabled", true);
Deleted : user_pref("CT3072253.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT3072253.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3072253.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.lastVersion", "10.14.65.43");
Deleted : user_pref("CT3072253.migrateAppsAndComponents", true);
Deleted : user_pref("CT3072253.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Deleted : user_pref("CT3072253.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.openThankYouPage", "true");
Deleted : user_pref("CT3072253.openUninstallPage", "FALSE");
Deleted : user_pref("CT3072253.search.searchAppId", "129571859753931591");
Deleted : user_pref("CT3072253.search.searchCount", "0");
Deleted : user_pref("CT3072253.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3072253.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3072253.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3072253.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3072253.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3072253.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3072253.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1343512730299");
Deleted : user_pref("CT3072253.serviceLayer_services_appTracking_lastUpdate", "1343512731505");
Deleted : user_pref("CT3072253.serviceLayer_services_appsMetadata_lastUpdate", "1343530639103");
Deleted : user_pref("CT3072253.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1343512730743");
Deleted : user_pref("CT3072253.serviceLayer_services_login_10.10.20.14_lastUpdate", "1346130364593");
Deleted : user_pref("CT3072253.serviceLayer_services_login_10.10.27.6_lastUpdate", "1353307245561");
Deleted : user_pref("CT3072253.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359081154524");
Deleted : user_pref("CT3072253.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1343512730839");
Deleted : user_pref("CT3072253.serviceLayer_services_searchAPI_lastUpdate", "1343512729408");
Deleted : user_pref("CT3072253.serviceLayer_services_serviceMap_lastUpdate", "1362697059209");
Deleted : user_pref("CT3072253.serviceLayer_services_toolbarContextMenu_lastUpdate", "1343512730550");
Deleted : user_pref("CT3072253.serviceLayer_services_toolbarSettings_lastUpdate", "1362697059283");
Deleted : user_pref("CT3072253.serviceLayer_services_translation_lastUpdate", "1362697059275");
Deleted : user_pref("CT3072253.settingsINI", true);
Deleted : user_pref("CT3072253.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3072253.smartbar.CTID", "CT3072253");
Deleted : user_pref("CT3072253.smartbar.Uninstall", "0");
Deleted : user_pref("CT3072253.smartbar.isHidden", true);
Deleted : user_pref("CT3072253.smartbar.toolbarName", "uTorrentControl2 ");
Deleted : user_pref("CT3072253.toolbarBornServerTime", "29-7-2012");
Deleted : user_pref("CT3072253.toolbarCurrentServerTime", "25-12-2012");
Deleted : user_pref("CT3072253.upgradeFromClearSBVersion", true);
Deleted : user_pref("CT3072253.url_history0001", "hxxp://www.gaiaonline.com/friends/?list=friend&status=online[...]
Deleted : user_pref("CT3072253_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3220468.autoDisableScopes", -1);
Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/US", "\"0\"[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"4eb[...]
Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Megan\\AppData\\Roaming\\Mozilla\\F[...]
Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");
Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678");
Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2786678");
Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (Pac[...]
Deleted : user_pref("CommunityToolbar.globalUserId", "0e061d27-7798-4535-8aaf-5295d7c6fd54");
Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2786678");
Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Jan 31 2012 11:58:5[...]
Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Tue Jan 31 2012 12:59:02 GMT-080[...]
Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Tue Jan 31 2012 11:58:52 GMT-0800 (P[...]
Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Deleted : user_pref("CommunityToolbar.notifications.userId", "b25e0861-33de-4eec-991e-08f583b46dde");
Deleted : user_pref("CommunityToolbar.originalHomepage", "chrome://branding/locale/browserconfig.properties");
Deleted : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...]
Deleted : user_pref("extentions.y2layers.installId", "14e73c3f-5b2e-475d-afb1-211dd28c4e49");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.DNSCatch", false);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.FirstLaunchShown", true);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.LastDate", 31);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.customNewTab", false);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.processAddrBar", false);
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.session", "1171967B9F66081CD1E3F555F2BD2C2EEA50[...]
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.tb_lang", "en");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.user_id", "41026687");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.vars.disablecuidinject", "1");
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.vars.lastcheck", "Sun%20Jul%2031%202011%2010%3A[...]
Deleted : user_pref("freecauseb9dbe2c0031f4cad911af4a7381d79c0.yahooSearch", false);
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=2&q=[...]

-\\ Google Chrome v24.0.1312.57

File : C:\Users\Megan\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted [l.1] : icon_url ={"apps_promo_counter":11,"backup":{"_signature":"lQAVL6aIeIKja+6l1KZ+aiKiEZh9J/elxK1V3Yqju90=","_ver[...]

*************************

AdwCleaner[R1].txt - [100913 octets] - [07/03/2013 15:05:35]
AdwCleaner[S1].txt - [29387 octets] - [07/03/2013 15:05:52]

########## EOF - C:\AdwCleaner[S1].txt - [29448 octets] ##########

[Grobanish]

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
No active process named sndappv2.exe was found!
No active process named SendoriUp.exe was found!
No active process named SendoriSvc.exe was found!
No active process named Sendori.Service.exe was found!
Error: No service named sndappv2 was found to stop!
Service\Driver key sndappv2 not found.
File C:\Program Files (x86)\Sendori\sndappv2.exe not found.
Error: No service named Application Sendori was found to stop!
Service\Driver key Application Sendori not found.
File C:\Program Files (x86)\Sendori\SendoriSvc.exe not found.
Error: No service named Service Sendori was found to stop!
Service\Driver key Service Sendori not found.
File C:\Program Files (x86)\Sendori\Sendori.Service.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Prefs.js: infoatoms%40infoatoms.com:1.3.0.0 removed from extensions.enabledAddons
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected] not found.
File C:\Program Files (x86)\Mozilla FireFox\extensions\[email protected] not found.
Folder C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{103089DA-0F31-4A8B-843F-7D24A7FE8345}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{103089DA-0F31-4A8B-843F-7D24A7FE8345}\ not found.
File C:\Program Files (x86)\InfoAtoms\IE32\InfoAtomsClientIE.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
File C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-3853534044-2821975639-671477131-1000\Software\Microsoft\Windows\CurrentVersion\Run\\PlayNC Launcher deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully.
File C:\Program Files (x86)\Java\jre1.6.0_06\bin\ssv.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\ deleted successfully.
File C:\Windows\SysWow64\Sendori.dll not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\ not found.
File C:\Windows\SysWow64\Sendori.dll not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
C:\found.002 folder moved successfully.
C:\found.001 folder moved successfully.
C:\Users\Megan\Documents\~WRL0003.tmp deleted successfully.
C:\Users\Megan\Documents\~WRL0004.tmp deleted successfully.
C:\Users\Megan\Documents\~WRL0005.tmp deleted successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\Sendori Tray\ not found.
========== FILES ==========
File\Folder C:\Program Files (x86)\Sendori not found.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Megan\Desktop\cmd.bat deleted successfully.
C:\Users\Megan\Desktop\cmd.txt deleted successfully.
< netsh advfirewall reset /c >
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 10107
Ok.
C:\Users\Megan\Desktop\cmd.bat deleted successfully.
C:\Users\Megan\Desktop\cmd.txt deleted successfully.
< netsh advfirewall set allprofiles state on /c >
Initialization Function InitHelperDll in NSHHTTP.DLL failed to start with error code 10107
Ok.
C:\Users\Megan\Desktop\cmd.bat deleted successfully.
C:\Users\Megan\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Megan
->Temp folder emptied: 115636696 bytes
->Temporary Internet Files folder emptied: 449915031 bytes
->Java cache emptied: 5056243 bytes
->FireFox cache emptied: 50855523 bytes
->Google Chrome cache emptied: 91145210 bytes
->Apple Safari cache emptied: 35792896 bytes
->Flash cache emptied: 5529364 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 928654279 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36079725 bytes
RecycleBin emptied: 240726073 bytes

Total Files Cleaned = 1,869.00 mb

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\: LSP stack updated.

OTL by OldTimer - Version 3.2.69.0 log created on 03072013_152141

Files\Folders moved on Reboot...
C:\Users\Megan\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...