Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

ok Im running windows 7 using chrome browser kept getting not respondi


  • This topic is locked This topic is locked

#16
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
Try and run adwcleaner, let me know..

Next

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the logfile button and the log will open in Notepad.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished and the PC has rebooted.
  • Please post the content of that log file with your next answer.
  • You can find the log file at "C"

  • 0

Advertisements


#17
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

Ok that worked here's the file 

 

 

 

# AdwCleaner v5.015 - Logfile created 29/10/2015 at 14:25:20
# Updated 26/10/2015 by Xplode
# Database : 2015-10-29.1 [Server]
# Operating system : Windows 7 Ultimate  (x86)
# Username : Jesus - OPTIPLEX
# Running from : C:\Users\Jesus\Desktop\jbj fix this [bleep]\adwcleaner_5.015.exe
# Option : Cleaning
 
***** [ Services ] *****
 
 
***** [ Folders ] *****
 
 
***** [ Files ] *****
 
[-] File Deleted : C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pbjikboenpfhbbejgkoklgkhjpfogcam
 
***** [ DLLs ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Scheduled tasks ] *****
 
[-] Task Deleted : RunAsStdUser Task for VeohWebPlayer
[-] Task Deleted : ShdUpdate
[-] Task Deleted : OpenCandyHelperRunOnce
[-] Task Deleted : SuperLyrics-16-firefoxinstaller
[-] Task Deleted : SuperLyrics-16-updater
[-] Task Deleted : c18b53c1-d7c3-48f9-96b5-786590d4f08f-2
[-] Task Deleted : SuperLyrics-16-firefoxinstaller
[-] Task Deleted : SuperLyrics-16-updater
 
***** [ Registry ] *****
 
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\f
[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd
[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
[-] Key Deleted : HKLM\SOFTWARE\Classes\PutLockerDownloader
[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject
[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\BackgroundHost.EXE
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Gameo]
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL
[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [CinPlus-2.5cdTube HDV03.10-bg.exe]
[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar
[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898
[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898.3
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2418376
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3184310
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3247201
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3279411
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3287805
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3292715
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295548
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295549
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298570
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3303005
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898
[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898.1
[-] Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{442718d9-475e-452a-b3e1-fb1ee16b8e9f}]
[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]
[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci
[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ACE0D5AB-50C8-4052-BD02-977569E56291}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0771C34F-730F-4535-AD4C-37B74D27188E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414462}
[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644324485}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D425283-D487-4337-BAB6-AB8354A81457}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00E71626-0BEF-11DC-8314-0800200C9A66}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93488930-185C-4CED-AFEB-0FD4930F8423}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D425283-D487-4337-BAB6-AB8354A81457}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A66261FC-B82E-4EC7-9F6D-C2F36B871DF0}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{AF5B5C22-498A-4239-9A51-82BDD99C6A44}]
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a123a7-068d-43fc-81fe-e3d3ccd24e0a}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1a0afa47-2463-4ed4-9f59-ae3fcee71d3d}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b9eb1fe-fe0c-4ad6-ad8a-4e1f5a6ef3f5}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4779d21f-daf2-489d-864f-f166cba2cb9f}
[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D425283-D487-4337-BAB6-AB8354A81457}]
[-] Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search
[-] Key Deleted : HKU\.DEFAULT\Software\IM
[-] Key Deleted : HKU\.DEFAULT\Software\ImInstaller
[-] Key Deleted : HKU\.DEFAULT\Software\SweetIM
[-] Key Deleted : HKU\.DEFAULT\Software\WNLT
[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab
[-] Key Deleted : HKCU\Software\Alexa Internet
[-] Key Deleted : HKCU\Software\AnyProtect
[-] Key Deleted : HKCU\Software\APN PIP
[-] Key Deleted : HKCU\Software\BABSOLUTION
[-] Key Deleted : HKCU\Software\BI
[-] Key Deleted : HKCU\Software\Bitberry
[-] Key Deleted : HKCU\Software\Conduit
[-] Key Deleted : HKCU\Software\Cr_Installer
[-] Key Deleted : HKCU\Software\delta LTD
[-] Key Deleted : HKCU\Software\distromatic
[-] Key Deleted : HKCU\Software\Funmoods
[-] Key Deleted : HKCU\Software\GoforFiles
[-] Key Deleted : HKCU\Software\IM
[-] Key Deleted : HKCU\Software\ImInstaller
[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions
[-] Key Deleted : HKCU\Software\InstalledThirdPartyPrograms
[-] Key Deleted : HKCU\Software\Softonic
[-] Key Deleted : HKCU\Software\SweetIM
[-] Key Deleted : HKCU\Software\visualbee
[-] Key Deleted : HKCU\Software\YahooPartnerToolbar
[-] Key Deleted : HKCU\Software\Zugo
[-] Key Deleted : HKCU\Software\CoinisRS
[-] Key Deleted : HKCU\Software\gameo
[-] Key Deleted : HKCU\Software\PRODUCTSETUP
[-] Key Deleted : HKCU\Software\PCCleaners
[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc
[-] Key Deleted : HKCU\Software\Yahoo\Companion
[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar
[-] Key Deleted : HKCU\Software\AppDataLow\SProtector
[-] Key Deleted : HKCU\Software\AppDataLow\Toolbar
[-] Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer
[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Mp3Tube
[-] Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
[-] Key Deleted : HKCU\Software\AppDataLow\Software\visualbee
[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Key Deleted : HKLM\SOFTWARE\Babylon
[-] Key Deleted : HKLM\SOFTWARE\BabylonToolbar
[-] Key Deleted : HKLM\SOFTWARE\Desksvc
[-] Key Deleted : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
[-] Key Deleted : HKLM\SOFTWARE\DomaIQ
[-] Key Deleted : HKLM\SOFTWARE\Driver-Soft
[-] Key Deleted : HKLM\SOFTWARE\Freeze.com
[-] Key Deleted : HKLM\SOFTWARE\GoforFiles
[-] Key Deleted : HKLM\SOFTWARE\hdcode
[-] Key Deleted : HKLM\SOFTWARE\IB Updater
[-] Key Deleted : HKLM\SOFTWARE\InfoAtoms
[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Key Deleted : HKLM\SOFTWARE\InstalledThirdPartyPrograms
[-] Key Deleted : HKLM\SOFTWARE\PIP
[-] Key Deleted : HKLM\SOFTWARE\SweetIM
[-] Key Deleted : HKLM\SOFTWARE\Tarma Installer
[-] Key Deleted : HKLM\SOFTWARE\V9
[-] Key Deleted : HKLM\SOFTWARE\VBMZ
[-] Key Deleted : HKLM\SOFTWARE\visualbee
[-] Key Deleted : HKLM\SOFTWARE\W3I
[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc
[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion
[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke_US Toolbar
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius Professional Edition_is1
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PokerStars.net
[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab
[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\BackgroundContainer
[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\ConduitSearchScopes
[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Mp3Tube
[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\PriceGong
[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\visualbee
[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Yahoo\Companion
[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\DefaultTab
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
 
***** [ Web browsers ] *****
 
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogIsEnabled", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CTID", "ct2418376");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CurrentServerDate", "6-8-2011");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsAlignMode", "LTR");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsGetterLastCheckTime", "Wed Aug 03 2011 15:14:35 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DownloadReferralCookieData", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ExternalComponentPollDate5694225620172914022", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstServerDate", "21-7-2011");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTime", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTimeFF3", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FixPageNotFoundErrors", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HasUserGlobalKeys", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HomePageProtectorEnabled", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Initialize", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InitializeCommonPrefs", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationAndCookieDataSentCount", 3);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationId", "ConduitStubGeneric");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationType", "ConduitStubIntegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstalledDate", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsAlertDBUpdated", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsGrouping", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsInitSetupIni", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsMulticommunity", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenThankYouPage", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenUninstallPage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsProtectorsInit", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LastLogin_3.5.0.12", "Fri Aug 05 2011 18:00:43 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LatestVersion", "3.3.5.1");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Locale", "en");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipHeight", "83");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipShow", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipUrl", "hxxp://@[email protected]/rank/tooltip/?version=1");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipWidth", "295");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.OriginalFirstVersion", "3.5.0.12");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchEngineBeforeUnload", "PageRage Customized Web Search");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorToolbarDisabled", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ServiceMapLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastCheckTime", "Thu Jul 21 2011 11:05:03 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastUpdate", "1311226770");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:02 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastUpdate", "1246786978");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2418376");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.UserID", "UN51694230990578799");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Search", 0);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Toolbar", 2);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.alertChannelId", "812740");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.approveUntrustedApps", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.counterAppsAdded", 1);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.DialogsAlignMode", "LTR");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.LanguagePackLastCheckTime", "Fri Aug 05 2011 08:52:26 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.Locale", "en");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SearchInNewTabLastCheckTime", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastCheckTime", "Fri Aug 05 2011 18:00:42 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastUpdate", "1311797275");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastUpdate", "1246786978");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.globalFirstTimeInfoLastCheckTime", "Sat Aug 06 2011 02:00:46 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarAppMetaDataLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarContextMenuLastCheckTime", "Thu Aug 04 2011 11:16:09 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.globalFirstTimeInfoLastCheckTime", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.homepageProtectorEnableByLogin", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.initDone", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.isAppTrackingManagerOn", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffPublihserMinWidth", 400);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.oldAppsList", "128994482097350312,128994482097506563,111,5694225620172914022,129017823262156499,7997623359991201723,7496640646864546743,1000034,1000080,1000082,1000234,1000515,100[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorEnableByLogin", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.testingCtid", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarAppMetaDataLastCheckTime", "Thu Jul 21 2011 11:05:05 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarContextMenuLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.usagesFlag", 2);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogIsEnabled", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogServiceUrl", "hxxp://clientlog.users.tbccint.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..uninstallLogServiceUrl", "hxxp://uninstall.users.tbccint.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.BrowserCompStateIsOpen_1367163180000", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CT2583727", "CT2583727");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CurrentServerDate", "23-12-2014");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsAlignMode", "LTR");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsGetterLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"8/4/2011 7:30:02 AM\",\"SourceId\":0,\"OriginSource\":0,\"Referr[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstServerDate", "4-8-2011");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTime", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTimeFF3", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FixPageNotFoundErrors", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServerCheckInterval", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServiceUrl", "hxxp://grouping.tbccint.com/");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HasUserGlobalKeys", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HomePageProtectorEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Initialize", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InitializeCommonPrefs", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationAndCookieDataSentCount", 3);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationType", "DirectDownload");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstalledDate", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InvalidateCache", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsGrouping", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsInitSetupIni", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsMulticommunity", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenThankYouPage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenUninstallPage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsProtectorsInit", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackLastCheckTime", "Mon Dec 22 2014 17:28:56 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackServiceUrl", "hxxp://translation.users.tbccint.com/Translation.ashx");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.15.1.0", "Mon Dec 22 2014 17:28:51 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.6.0.10", "Wed Aug 03 2011 21:29:52 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LatestVersion", "3.20.0.4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Locale", "en");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipHeight", "83");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipUrl", "hxxp://@[email protected]/rank/tooltip/?version=1");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipWidth", "295");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.OriginalFirstVersion", "3.6.0.10");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioIsPodcast", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateIPServer", "3");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateServer", "129175413658100000");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaID", "20556349");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaType", "Media Player");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMenuSelectedID", "EBRadioMenu_CT258372720556349");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioShrinkedFromSetup", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationName", "1.FM%2080s%20%26%2090s%20(USA)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationURL", "hxxp://1.fm/wm/energy80s32k.asx");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SavedHomepage", "hxxp://www.google.com/");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchEngineBeforeUnload", "Blackjack-Madness Customized Web Search");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarIsInit", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583727&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabLastCheckTime", "Mon Dec 22 2014 17:28:36 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorToolbarDisabled", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ServiceMapLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastCheckTime", "Tue Dec 23 2014 05:01:06 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastUpdate", "1419314435");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastCheck", "Wed Aug 03 2011 21:29:46 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastUpdate", "1246786978");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrusteLinkUrl", "hxxp://trust.cpccint.com");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,tbclient.tbccint.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,appstrm.com,OurToolbar.co[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.UserID", "UN09478397069999234");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherNetwork", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherPollDate", "Wed Aug 03 2011 21:29:50 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherUnit", "F");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.alertChannelId", "976547");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com;social.tbccint.com;apps.tbccint.com;services.a[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.globalFirstTimeInfoLastCheckTime", "Wed Aug 03 2011 21:29:49 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.homepageProtectorEnableByLogin", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.initDone", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isAppTrackingManagerOn", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isFirstRadioInstallation", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffPublihserMinWidth", 400);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffSearchUrl", "hxxp://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.revertSettingsEnabled", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorEnableByLogin", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.testingCtid", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarAppMetaDataLastCheckTime", "Mon Dec 22 2014 17:28:58 GMT-0800 (Pacific Standard Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarContextMenuLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.LoginRevertSettingsEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3184310&SearchSource=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.UserID", "UN17729284552852997");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.autoDisableScopes", -1);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableAlerts", "always");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixUrls", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installId", "ct3184310_little_fish_bar.exe");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isNewTabEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isPerformedSmartBarTransition", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.migrateAppsAndComponents", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3184310\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://LittleFishBar.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"LittleFishBar\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940030380");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_serviceMap_lastUpdate", "1445940029454");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_toolbarSettings_lastUpdate", "1445940030275");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_translation_lastUpdate", "1445940029469");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.CTID", "CT3184310");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.isHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.toolbarName", "LittleFishBar ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.startPage", "userChanged");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarBornServerTime", "2-12-2012");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarCurrentServerTime", "27-10-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891652,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM1ODM0MDMzMywidXVpZCI6MjEzMDQzNjc3MDY4NDY4LCJzZXFfaWQiOjMsInNzYiI6MTM1NzQ2MDA1Nn0=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.CBOpenMAMSettings.enc", "MA==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&q=&SearchSource=2");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.UserID", "UN29308809761562386");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.autoDisableScopes", -1);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbcountry_001.enc", "VVM=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbfirsttime.enc", "U3VuIEphbiAwNiAyMDEzIDAwOjE0OjE1IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixUrls", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.installType", "xpe");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isNewTabEnabled", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.google.com%2Fchrome%2Fbrowser%2Fthankyou.html%3Fplatform%3Dwin%26oneclickinstalled%3D1%[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openThankYouPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openUninstallPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940029221");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1445940027673");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1445940029339");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1445940028680");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.startPage", "userChanged");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarBornServerTime", "23-12-2014");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "27-10-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891637,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.UserID", "UN52294229241605980");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixUrls", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installId", "air52cc.exe");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isPerformedSmartBarTransition", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.migrateAppsAndComponents", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.CTID", "CT3247201");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.toolbarName", "InternetHelper1.5 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.startPage", "userChanged");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891626,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.UserID", "UN40166142081052929");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.countryCode", "US");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enlargeSearchBox", "{\"enabled\":true,\"maxWidth\":1000,\"minWidth\":250,\"width\":500}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fullUserID", "UN40166142081052929.IN.20130810193525");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.homepageuserchanged", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installId", "cid3975");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3279411&octid=CT3279411&ISID=ISID_ID&SearchSource=15&CUI=UN40166142081052929&SSPV=&[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastVersion", "10.20.0.13");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openUninstallPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngine", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngineName", "Google");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchFromAddressBarEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchSuggestEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3279411\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://appbario12.Toolbar.fm//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"appbario12 \"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.showToolbarPermission", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.CTID", "CT3279411");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.toolbarName", "appbario12 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.startPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarBornServerTime", "27-10-2014");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarCurrentServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:45 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891661,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.isPlayDisplay", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.PG_ENABLE", "dHJ1ZQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.UserID", "UN14837961194955167");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.countryCode", "US");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.embeddedsData", "[{\"appId\":\"130058504672798349\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fullUserID", "UN14837961194955167.IN.20130908002906");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.homepageuserchanged", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installId", "stub.exe");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3287805&octid=CT3287805&ISID=ISID_ID&SearchSource=15&CUI=UN14837961194955167&SSPV=&[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastVersion", "10.19.2.5");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B6%BF%B9%BB%BF");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAwOTM1OQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BA%B8%BB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMDQyNQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled", "%FA%F8%FB%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled.enc", "dHJ1ZQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjExOTlfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp", "%B7%B7%BF%BF%E5%B6");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp.enc", "MTE5OV8w");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate", "%D4%B5%C7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate.enc", "Ti9B");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId", "%BE%E9%EA%BC%B8%E7%BE%BC%B3%B6%E9%BF%BF%B3%BA%BA%B9%E7%B3%E8%EA%E8%B6%B3%B9%BB%B6%E8%E9%E8%EA%EB%EB%B8%BD%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId.enc", "OGNkNjJhODYtMGM5OS00NDNhLWJkYjAtMzUwYmNiZGVlMjdl");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2&SearchSource=13");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngine", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngineName", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchAppId", "130058504672798349");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchCount", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchFromAddressBarEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchSuggestEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3287805\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://VisualBeeV6.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"VisualBee V.6 \"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.showToolbarPermission", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.CTID", "CT3287805");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.isHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.toolbarName", "VisualBee V.6 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.startPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarBornServerTime", "27-10-2014");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarCurrentServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:47 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891693,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.UserID", "UN29861963635204956");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.countryCode", "US");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixUrls", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fullUserID", "UN29861963635204956.IN.20130805001614");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.homepageuserchanged", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installId", "wjanc528752iqc0riyba");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3292715&octid=CT3292715&ISID=ISID_ID&SearchSource=15&CUI=UN29861963635204956&SSPV=&[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastVersion", "10.16.70.5");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.migrateAppsAndComponents", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngine", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngineName", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.revertSettingsEnabled", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchFromAddressBarEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchSuggestEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3292715\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://SearchFlyBar2.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"SearchFlyBar2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.showToolbarPermission", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.CTID", "CT3292715");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.toolbarName", "SearchFlyBar2 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.startPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarBornServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarCurrentServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarLoginClientTime", "Tue Oct 27 2015 02:58:56 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891720,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.UserID", "UN18029757605143900");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableFix404ByUser", "TRUE");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixUrls", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.homepageuserchanged", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installId", "51946c08150ba0134800048e");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3295548&octid=CT3295548&SearchSource=15&CUI=UN18029757605143900&SSPV=EB_SSPV&Lay=1&UM=2[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastVersion", "10.16.2.9");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.migrateAppsAndComponents", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchAddressUrl", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchEngine", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchFromAddressBarEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295548\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly3.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly3\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.showToolbarPermission", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.CTID", "CT3295548");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.toolbarName", "xvidly3 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.startPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarBornServerTime", "18-5-2013");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarCurrentServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:40 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891683,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.UserID", "UN26692583332569832");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.countryCode", "US");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixUrls", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fullUserID", "UN26692583332569832.IN.20130810041100");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.homepageuserchanged", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installId", "cid1");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3295549&octid=CT3295549&ISID=ISID_ID&SearchSource=15&CUI=UN26692583332569832&SSPV=&[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastVersion", "10.16.9.6");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.migrateAppsAndComponents", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3287805&CUI=UN14837961194955167&UM=2&SearchSource=13");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngine", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngineName", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchFromAddressBarEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchSuggestEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295549\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly4.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly4\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.showToolbarPermission", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.CTID", "CT3295549");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.toolbarName", "xvidly4 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.startPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarBornServerTime", "27-10-2014");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarCurrentServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:48 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891704,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.isPlayDisplay", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTime", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTimeFF3", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.PG_ENABLE", "dHJ1ZQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3303005&SearchSource=2&CUI=UN37266934532419213&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.UserID", "UN37266934532419213");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickFavorites.enc", "W10=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickRecent.enc", "W10=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.browser.search.defaultthis.engineName", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000", "%C9%C8%B7%BE%B9%BB%BD%B8%B9%BF%BE%B7%B6%B8%E5%B7%BA%B7%B9%BC%BB%BD%BB%BA%BC%B8%BD%BD%E5%CC%EF%F8%EB%EC%F5%FE");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000.enc", "Q0IxODM1NzIzOTgxMDJfMTQxMzY1NzU0NjI3N19GaXJlZm94");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime", "%D3%F5%F4%A6%D0%E7%F4%A6%B7%B9%A6%B8%B6%B7%BA%A6%B6%B6%C0%B9%B7%C0%B9%BD%A6%CD%D3%DA%B3%B6%BE%B6%B6%A6%AE%D6%E7%E9%EF%EC%EF%E9%A6%D9%FA%E7%F4%EA%E7%F8%EA%A6%DA%EF%F[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime.enc", "TW9uIEphbiAxMyAyMDE0IDAwOjMxOjM3IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.countryCode", "US");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.defaultSearch", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.embeddedsData", "[{\"appId\":\"130136189134643350\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableAlerts", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableSearchFromAddressBar", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.firstTimeDialogOpened", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundError", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fullUserID", "UN37266934532419213.IN.20131027122926");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.homepageuserchanged", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installId", "stub.exe");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installType", "conduitnsisintegration");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isCheckedStartAsHidden", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.keyword", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3303005&octid=CT3303005&ISID=ISID_ID&SearchSource=15&CUI=UN37266934532419213&SSPV=&[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastVersion", "10.21.1.7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BD%BB%BC");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAxMDc1Ng==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper", "%F5%F4");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper.enc", "b24=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B7%B7%BA%B8");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMTE0Mg==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled", "%FA%F8%FB%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled.enc", "dHJ1ZQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps", "%E1%E3");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps.enc", "W10=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjEwNDNfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp", "%B7%B6%BA%B9%E5%B6");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp.enc", "MTA0M18w");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate", "%D4%B5%C7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate.enc", "Ti9B");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId", "%BE%B9%E7%E8%E9%BE%BC%EB%B3%BF%B7%EB%BE%B3%BA%E9%BD%BA%B3%E8%E8%B7%EB%B3%BD%BE%E8%BF%EC%B7%B9%EC%E7%BA%BE%BF");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId.enc", "ODNhYmM4NmUtOTFlOC00Yzc0LWJiMWUtNzhiOWYxM2ZhNDg5");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode", "%B7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode.enc", "MQ==");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid", "%F9%EE%EB%B7%B6%B7%BA%BE%B7%BA%BB%B7%B6%B7%BA%B7%B7%BF%B7%B7%B7%BD%BA%B7%B7%BE%BB%B9%BB%B7%B8%B7%BD%BB%BA%B7%B7%B6");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid.enc", "c2hlMTAxNDgxNDUxMDE0MTE5MTExNzQxMTg1MzUxMjE3NTQxMTA=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openThankYouPage", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openUninstallPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3292715&CUI=UN29861963635204956&UM=2&SearchSource=13");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngine", "SearchFlyBar2 Customized Web Search");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngineName", "Amazon");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site", "%EE%FA%FA%F6%C0%B5%B5%F8%EF%B4%F9%EB%E7%F8%E9%EE%B4%FF%E7%EE%F5%F5%B4%E9%F5%F3%B5%E5%FF%F2%FA%C3%C7%B6%D9%D5%BE%FE%FC%D5%DA%C9%BF%DD%CA%CB%BE%C7%BC%B7%F6%DE%D4%FF[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site.enc", "aHR0cDovL3JpLnNlYXJjaC55YWhvby5jb20vX3lsdD1BMFNPOHh2T1RDOVdERThBNjFwWE55b0E7X3lsdT1YM29ETVRFemJIQnlOMlF5QkdOdmJHOERaM0V4QkhCdmN3TXhCSFowYVdRRFFqRXhOakJHWHpFRW[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.revertSettingsEnabled", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchAppId", "130136189134643350");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchCount", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchFromAddressBarEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchSuggestEnabledByUser", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchUserMode", "8");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3303005\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Vafmusic12.OurToolbar.com//xpi\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Vafmusic12 \"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_Configuration_lastUpdate", "1445939999270");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1445939997807");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appsMetadata_lastUpdate", "1445939998876");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1445939998187");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_login_10.21.1.7_lastUpdate", "1445940779233");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1445939998843");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_searchAPI_lastUpdate", "1445940001213");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_serviceMap_lastUpdate", "1445939994023");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_setupAPI_lastUpdate", "1445939998836");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarContextMenu_lastUpdate", "1445939998882");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarSettings_lastUpdate", "1445939998343");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_translation_lastUpdate", "1445939997777");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.settingsINI", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.shouldFirstTimeDialog", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.showToolbarPermission", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.CTID", "CT3303005");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.Uninstall", "0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.homepage", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.toolbarName", "Vafmusic12 ");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.startPage", "true");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarBornServerTime", "28-8-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarCurrentServerTime", "27-10-2015");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarInstallDate", "27-10-2015 02:59:52");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarLoginClientTime", "Tue Oct 27 2015 02:59:51 GMT-0700 (Pacific Daylight Time)");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001", "%EE%FA%FA%F6%C0%B5%B5%FD%FD%FD%B4%F3%FF%EC%F8%EB%EB%F6%E7%FF%F9%EF%FA%EB%B4%E9%F5%F3%B5%F3%EB%F3%E8%EB%F8%F9%B5%EC%F2%F3%EC%F6%B4%EE%FA%F3%F2%C0%C0%C0%E9%F2%EF%[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001.enc", "aHR0cDovL3d3dy5teWZyZWVwYXlzaXRlLmNvbS9tZW1iZXJzL2ZsbWZwLmh0bWw6OjpjbGlja2hhbmRsZXI6OjoxNDEzNjU3NzYwNzczLCwsaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxl[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891672,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitHomepagesList", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3303005");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.backgroundjs", "\n\n/*****************************************************************************[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.description", "VisualBee Browser Extension");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_meta.value", "%7B%22images/emaze.png%22%3A%7B%22id%22%3A726444%2C%22ver%22%3A[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_resource_726445.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.js", "\n\n  /************************************************************************************\[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.name", "VisualBee");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_13.name", "CrossriderAppUtils");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_14.name", "CrossriderUtils");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"isBackground!==true)&&(typeof _[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_246.code", "var _0x8f59=[\"10\",\"11\",\"19\",\"20\",\"26\",\"27\",\"28\",\"29\",\"[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_32.code", "appAPI.hooks.addHook(\"images\",(function(a){return function(){var v={bg[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_376.code", "(function(){var a=(function(){var l=function(){return appAPI&&appAPI.in[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_5.code", "(function(f){f.ui=f.ui{};var e=/leftcenterright/,d=/topcenterbottom[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_78.name", "CrossriderInfo");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(a){return function(){var [...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.publisher", "VisualBee");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "14cef62c18e227b3097606a29c206a8c");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.dashlane.safesearchcapable", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.admin", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.aflt", "babsst");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.autoRvrt", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.dfltLng", "en");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.excTlbr", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.id", "4e620d530000000000000019b915d7d7");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlDay", "15843");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlRef", "sst");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.newTab", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prdct", "delta");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prtnrId", "delta");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.rvrt", "false");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.smplGrp", "none");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrId", "base");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsn", "1.8.21.0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsnTs", "1.8.21.021:43:28");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsni", "1.8.21.0");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babExt", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babTrack", "affID=121240&tt=gc_");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.srcExt", "ss");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.enabledAddons", "5kffxtbr%40iWon_5k.com:1.39.0.30675,ffxtlbr%40funmoods.com:1.5.1,links%40rivalgaming.com:1.0.0,smartlinks%40getsmartlinks.com:1.0.35,%7B1930e38a-deef-4cf4-9bfb-9[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cntry", "US");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cv", "cv5");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dfltSrch", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hdrMd5", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hmpg", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.lastVrsnTs", "");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.newTab", false);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.sg", "free");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.smplGrp", "free");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=D767A45E-2DF1-4316-8A13-78E0F179708C&n=781b1bc4&ptnrS=ZLxdm002YYus&si=CISx0-yw168CFakZQgodAx[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.hp.user.defined", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.initialized", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.installDate", "2015042500");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.partnerId", "ZLxdm002YYus");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.partnerSubId", "CISx0-yw168CFakZQgodAxShBw");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.success", true);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.toolbarId", "D767A45E-2DF1-4316-8A13-78E0F179708C");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.lastActivePing", "1445939887122");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.weather.location", "94540");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "[email protected]");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3303005");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3292715");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3292715");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.machineId", "KSECXPB5PI8KDEZTH8V81TMU2MHJDJ+X8NSHOBYFT4RHW6IICA3SZ6Y7UOGBECFWBXQMMUKAOQMEYHXLVZCSZA");
[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tag=bds-p18-serp-us-ff-20&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf31[...]
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/mb128
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com_
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : isearch.avg.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : r
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : funmoods.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.conduit.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : windows-live-photo-gallery.en.softonic.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : babylon.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : trovi.search
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : lasaoren.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : cassiopesa.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com_
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : apfdadfinodckpcehhdhjlgiphgnbfci
[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pbjikboenpfhbbejgkoklgkhjpfogcam
 
*************************
 
:: Winsock settings cleared
 
########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [197660 bytes] ##########

  • 0

#18
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
Next

thisisujrt.gif Please download Junkware Removal Tool to your Desktop.
Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.
  • 0

#19
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

ok it does same as previous program attempt comes up wiht box about changing computer when I click yes it makes a sound of 2 beeps and goes away & nothing happens


  • 0

#20
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
When you get time see if it will run in safemode,

To do that;

Restart the computer.
  • During restart
  • Keep pressing the F8 Key once every second
  • You should get a black screen with white letters, that's the advanced boot options menu.
  • Use the arrow key and select Safemode from the list, then hit enter on the keyboard.
  • Let the computer boot into SafeMode, things will look funny that's normal.

    Lets see if junkremoval tool will run from there.

    Thanks
    Joe :)

  • 0

#21
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

ok gonna try now


  • 0

#22
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

Again sorry for the delay 

 

I tried it in safe mode and got nothing 


  • 0

#23
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
Hello,

Don't worry about the delay, I've got busy myself.

Please run combofix. Don't fool around with this program follow the directions exactly.....

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there. Very important please save to desktop1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

Please post the Log from Combofix
  • 0

#24
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

ok ran combofix computer had unexpected error and was restarting and then the BLUE screen of DEATH came up so I restarted computer then a box came up saying windows has recovered from unexpected error then ran combofix and it ran all the way thru and printed the log below after I copied the log and was gonna paste it the BLUE screen of Death came up again so I restarted typed this b4 it came up again   here's the LOG I copied the log then got blue screen went to paste log and it's gone did a search for it and it wanted to run program again do you know where I can find the log from combofix ?


  • 0

#25
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
The log from Combofix is or should be on the "C'drive

Located at c:\combofix.txt

Don't run or try running combofix anymore.

See if you can find it.

Then
Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Make sure you checkmark Addition.txt box.
  • Press Scan button.
  • Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
I will be back later today around 4pm EST,

Thanks
Joe :)
  • 0

Advertisements


#26
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

ok found combofix txt heres that and Ill run farbar now

 

ComboFix 15-10-28.01 - Jesus 10/30/2015  23:40:42.2.2 - x86
Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.2302.1005 [GMT -7:00]
Running from: c:\users\Jesus\Desktop\jbj fix this [bleep]\ComboFix.exe
Command switches used :: log
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\programdata\2308189059
c:\users\Jesus\AppData\Local\ArcadeFrontier\ArCAdefrontier.dll
c:\users\Jesus\AppData\Roaming\inst.exe
c:\users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe
c:\users\Jesus\AppData\Roaming\vso_ts_preview.xml
c:\users\Public\sdelevURL.tmp
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((((   Files Created from 2015-09-28 to 2015-10-31  )))))))))))))))))))))))))))))))
.
.
2015-10-31 06:50 . 2015-10-31 06:50 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-10-30 13:38 . 2015-10-30 13:55 -------- d-----w- C:\jbj fix this [bleep]
2015-10-29 22:12 . 2015-10-31 06:50 -------- d-----w- c:\users\Jesus\AppData\Roaming\DMCache
2015-10-29 21:19 . 2015-10-29 21:25 -------- d-----w- C:\AdwCleaner
2015-10-28 12:46 . 2015-10-29 20:08 -------- d-----w- C:\FRST
2015-10-27 17:14 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe
2015-10-27 17:14 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll
2015-10-27 17:14 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll
2015-10-27 17:14 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll
2015-10-27 17:14 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll
2015-10-27 17:14 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll
2015-10-27 17:14 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll
2015-10-27 17:13 . 2012-06-02 22:19 171904 ----a-w- c:\windows\system32\wuwebv.dll
2015-10-27 17:13 . 2012-06-02 22:12 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-10-27 09:33 . 2015-10-27 10:32 3996360 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe
2015-10-27 08:03 . 2015-10-27 08:03 -------- d-----w- c:\users\Public\Speedup Sessions
2015-10-27 05:29 . 2015-10-27 06:06 -------- d-----w- c:\program files\pandasecuritytb
2015-10-27 04:32 . 2015-10-27 09:41 -------- d-----w- c:\programdata\panda_url_filtering
2015-10-27 04:27 . 2015-10-27 06:09 -------- d-----w- c:\program files\Panda Security
2015-10-27 04:22 . 2015-10-27 06:05 -------- d-----w- c:\programdata\Panda Security
2015-10-23 20:18 . 2015-10-23 20:18 -------- d-----w- c:\program files\Common Files\Microsoft
2015-10-23 20:04 . 2015-10-27 09:41 -------- d-----w- c:\programdata\Vafwat
2015-10-23 20:04 . 2015-10-27 09:41 -------- d--h--w- c:\programdata\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}
2015-10-15 16:50 . 2015-10-27 09:41 -------- d-----w- c:\program files\grabzilla pro V11
2015-10-14 08:09 . 2015-10-14 08:09 -------- d-----w- c:\program files\Infogrames
2015-10-14 08:09 . 2015-10-14 08:09 -------- d-----w- c:\program files\directx
2015-10-13 04:33 . 2015-10-13 19:21 -------- d-----w- c:\users\Jesus\AppData\Roaming\80l3ug2MOcd
2015-10-13 04:30 . 2015-10-13 20:17 -------- d-----w- c:\users\Jesus\AppData\Roaming\SoftAd
2015-10-12 13:53 . 2015-10-12 13:53 -------- d-----w- c:\users\Jesus\AppData\Local\cu
2015-10-11 10:51 . 2015-10-11 10:51 -------- d-----w- c:\users\Jesus\AppData\Roaming\c
2015-10-11 09:19 . 2015-10-11 09:19 -------- d-----w- c:\users\Jesus\AppData\Local\Opera Software
2015-10-11 09:09 . 2015-10-11 09:09 -------- d-----w- c:\users\Jesus\AppData\Roaming\Opera Software
2015-10-11 09:01 . 2015-10-11 09:01 -------- d-----w- c:\users\Jesus\AppData\Local\CEF
2015-10-11 08:45 . 2015-10-11 15:04 -------- d-----w- c:\program files\Opera
2015-10-11 08:18 . 2015-10-11 08:18 -------- d-----w- c:\users\Jesus\AppData\Roaming\Itibiti
2015-10-11 08:15 . 2015-10-13 20:19 -------- d-----w- c:\programdata\KeyStream
2015-10-11 07:57 . 2015-10-13 20:19 -------- d-----w- c:\program files\Faster Web
2015-10-11 07:43 . 2015-10-11 07:45 -------- d-----w- c:\program files\PCAPDownloader
2015-10-11 07:43 . 2015-10-11 07:45 -------- d-----w- c:\users\Jesus\AppData\Local\PlaythruPlayer
2015-10-11 07:39 . 2015-10-11 07:39 -------- d-----w- c:\programdata\{4BB8A37B-1B3A-72FD-AABC-027F7A3ED1F1}
2015-10-11 07:34 . 2015-10-13 20:17 -------- d-----w- c:\users\Jesus\AppData\Local\{7F6C4930-5BC4-2588-365C-00601234FCF8}
2015-10-11 07:30 . 2015-10-13 20:19 -------- d-----w- c:\program files\winnetmng
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-27 10:32 . 2012-04-05 09:18 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-10-27 10:32 . 2011-09-17 04:12 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-10-13 21:48 . 2013-05-08 05:12 55912 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2015-10-13 21:48 . 2013-03-03 03:57 108448 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2015-08-28 20:09 . 2015-08-28 20:09 6420480 ----a-w- c:\program files\GUTD05A.tmp
2013-04-14 08:48 . 2013-04-14 08:48 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2011-04-22 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7600.16385] . . c:\windows\System32\user32.dll
[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]
@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"
[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]
2011-03-02 15:23 68216 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2011-04-05 3278232]
"Spotify"="c:\users\Jesus\AppData\Roaming\Spotify\Spotify.exe" [2012-05-07 9478320]
"Spotify Web Helper"="c:\users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-07 932528]
"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2013-01-17 6860288]
"MobileAppSync"="c:\program files\Mobile App Sync\D2MClient.exe" [2013-10-31 332800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"="CTHELPER.EXE" [2007-04-09 19456]
"CTxfiHlp"="CTXFIHLP.EXE" [2007-04-09 19968]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2015-10-13 782520]
"Plantronics MyHeadset Updater"="c:\program files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe" [2013-04-04 78336]
"DivXMediaServer"="c:\program files\DivX\DivX Media Server\DivXMediaServer.exe" [2013-09-11 450560]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2013-08-29 1861968]
"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2015-07-16 286272]
"RealDownloader"="c:\program files\RealNetworks\RealDownloader\downloader2.exe" [2015-06-17 608320]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2015-06-09 334896]
"BlueStacks Agent"="c:\program files\BlueStacks\HD-Agent.exe" [2015-08-20 904824]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DevconDefaultDB"="c:\windows\system32\READREG" [X]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
AdFender.lnk - c:\program files\AdFender\AdFender.exe -autostart [2013-12-12 3228080]
PlutoTV.lnk - c:\program files\Pluto TV\PlutoTV.exe [2015-9-15 93077896]
RealTimes.lnk - c:\program files\Real\RealPlayer\RPDS\Bin\rpsystray.exe [2015-7-16 1132120]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux4"=wdmaud.drv
.
R2 AntiVirMailService;Avira Mail Protection;c:\program files\Avira\AntiVir Desktop\avmailc7.exe [2015-10-13 932912]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2015-10-13 461672]
R2 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2015-10-13 1148688]
R3 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 2012\DfsdkS.exe [2009-08-25 406016]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-05-02 83864]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-27 25088]
R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-05-02 181912]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-04-22 1343400]
S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF32.sys [2010-11-04 102728]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2015-05-05 37896]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2015-10-13 55912]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files\BlueStacks\HD-Hypervisor-x86.sys [2015-08-20 132216]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\BlueStacks\HD-LogRotatorService.exe [2015-08-20 413304]
S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files\BlueStacks\HD-UpdaterService.exe [2015-08-20 839288]
S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2011-03-28 86792]
S2 RealPlayerUpdateSvc;RealPlayer Update Service;c:\program files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856]
S2 RealTimes Desktop Service;RealTimes Desktop Service;c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-16 1115224]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-04-12 45464]
S3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-05-02 47360]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ   Pml Driver HPZ12 Net Driver HPZ12
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-10-27 10:17 997704 ----a-w- c:\program files\Google\Chrome\Application\46.0.2490.80\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-10-30 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job
- c:\users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 14:41]
.
2015-10-31 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job
- c:\users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 14:41]
.
.
------- Supplementary Scan -------
.
IE: Customize Menu
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download all with Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm
IE: Download selected with Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm
IE: Download video with Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm
IE: Download with FLV Blaster
IE: Download with FLV Blaster\Contexts
IE: Download with FLV Blaster\Flags
IE: Download with Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: Fill Forms
IE: RoboForm Toolbar
IE: Save Forms
TCP: DhcpNameServer = 192.168.1.254
FF - ProfilePath - c:\users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - ExtSQL: 2015-10-27 02:31; [email protected]; c:\programdata\Free Download Manager\Firefox\Extensions\2.0.17
FF - ExtSQL: !HIDDEN! 2011-09-15 03:44; [email protected]; c:\users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]
FF - ExtSQL: !HIDDEN! 2012-04-28 03:56; [email protected]_5k.com; c:\program files\iWon_5k\bar\1.bin
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-{9565115d-c7d6-46d3-bd63-b67b481a4368} - (no file)
Toolbar-10 - (no file)
HKCU-Run-Chrome - c:\progra~2\taskhost.exe
HKLM-Run-Chrome - c:\progra~2\taskhost.exe
HKU-Default-Run-Chrome - c:\progra~2\taskhost.exe
AddRemove-AdFender - c:\program files\AdFender\uninst.exe
AddRemove-Media Player - Codec Pack - c:\windows\system32\C2MP\Uninst.exe
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):61,d7,f3,31,28,78,bb,cf,12,ab,8b,6f,d3,cd,2a,5e,99,8b,41,ec,89,
   dc,17,c3,4d,20,42,a6,d8,6b,27,d0,5c,cb,f8,1c,d5,aa,5c,e4,00,00,00,00,00,00,\
.
[HKEY_USERS\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{80910355-ac15-4f7b-9ff4-88592fec7f59}]
@Denied: (Full) (Everyone)
@Allowed: (Read) (RestrictedCode)
"Model"=dword:000000f2
"Therad"=dword:0000001e
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,
   1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-10-30  23:55:32
ComboFix-quarantined-files.txt  2015-10-31 06:55
.
Pre-Run: 86,495,625,216 bytes free
Post-Run: 87,212,945,408 bytes free
.
- - End Of File - - F6F6A61A37C75B1503F95A4B2E62EC26
A36C5E4F47E84449FF07ED3517B43A31

  • 0

#27
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-10-2015
Ran by Jesus (administrator) on OPTIPLEX (31-10-2015 11:08:34)
Running from C:\Users\Jesus\Desktop\jbj fix this [bleep]
Loaded Profiles: Jesus (Available Profiles: Jesus)
Platform: Microsoft Windows 7 Ultimate  (X86) Language: English (United States)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(Creative Technology Ltd) C:\Windows\System32\CtHelper.exe
(Plantronics) C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-UpdaterService.exe
() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
() C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(FreeDownloadManager.ORG) C:\Program Files\Free Download Manager\fdm.exe
(Appcaster) C:\Program Files\Mobile App Sync\D2MClient.exe
(AdFender, Inc.) C:\Program Files\AdFender\AdFender.exe
() C:\Program Files\Pluto TV\PlutoTV.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe
(Dropbox, Inc.) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\Pluto TV\PlutoTV.exe
() C:\Program Files\Pluto TV\PlutoTV.exe
() C:\Program Files\Pluto TV\PlutoTV.exe
() C:\Program Files\Pluto TV\PlutoTV.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [CTHelper] => C:\Windows\system32\CTHELPER.EXE [19456 2007-04-09] (Creative Technology Ltd)
HKLM\...\Run: [CTxfiHlp] => C:\Windows\system32\CTXFIHLP.EXE [19968 2007-04-09] (Creative Technology Ltd)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [782520 2015-10-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Plantronics MyHeadset Updater] => C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [78336 2013-04-04] (Plantronics)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-10] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-28] ()
HKLM\...\Run: [TkBellExe] => c:\program files\real\realplayer\Update\realsched.exe [286272 2015-07-16] (RealNetworks, Inc.)
HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [608320 2015-06-17] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [904824 2015-08-19] (BlueStack Systems, Inc.)
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3278232 2011-04-05] (Tonec Inc.)
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Spotify] => C:\Users\Jesus\AppData\Roaming\Spotify\Spotify.exe [9478320 2012-05-06] (Spotify Ltd)
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Spotify Web Helper] => C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [932528 2012-05-06] ()
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Free Download Manager] => C:\Program Files\Free Download Manager\fdm.exe [6860288 2013-01-16] (FreeDownloadManager.ORG)
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [MobileAppSync] => C:\Program Files\Mobile App Sync\D2MClient.exe [332800 2013-10-30] (Appcaster)
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\DEERDR~1.SCR
HKU\S-1-5-18\...\Run: [DevconDefaultDB] => C:\Windows\system32\READREG /SILENT /FAIL=1
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2011-03-02] (Tonec Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk [2014-04-24]
ShortcutTarget: AdFender.lnk -> C:\Program Files\AdFender\AdFender.exe (AdFender, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PlutoTV.lnk [2015-09-15]
ShortcutTarget: PlutoTV.lnk -> C:\Program Files\Pluto TV\PlutoTV.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-07-16]
ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)
Startup: C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-27]
ShortcutTarget: Dropbox.lnk -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{0DB14313-E9FB-4965-B298-0F23C7833E27}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{3ED60023-FFC1-4A0C-9430-6DB5D36DD2C1}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{B29FC133-F3C8-42AE-8A78-9C5B5CAB1181}: [DhcpNameServer] 192.168.1.254
 
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-11595131-3550647590-3570146784-1001 -> OldDefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)
BHO: No Name -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2011-08-05] (Siber Systems Inc.)
BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-17] (Oracle Corporation)
Toolbar: HKLM - &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2011-08-05] (Siber Systems Inc.)
DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} 
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB
DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
 
FireFox:
========
FF ProfilePath: C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-27] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-16] (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2013-10-28] (DivX, LLC)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-07-19] (Foxit Corporation)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-17] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll [2009-08-17] ( Microsoft Corporation)
FF Plugin: @oberon-media.com/ONCAdapter -> C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll [2012-05-31] (Oberon-Media )
FF Plugin: @real.com/nppl3260;version=18.0.1.9 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-07-16] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=12.0.1.647 -> c:\program files\real\realplayer\Netscape6\nprpjplug.dll [2011-07-09] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=18.0.1.9 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-07-16] (RealTimes)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)
FF Plugin: npEpicPlayDisplayHost -> C:\Program Files\EpicPlay\npEpicHost.dll [2011-10-04] ( )
FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jesus\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2011-10-21] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: @yahoo.com/BrowserPlus,version=2.9.8 -> C:\Users\Jesus\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll [2010-08-04] (Yahoo! Inc.)
FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: www.exent.com/GameTreatWidget -> C:\Program Files\Free Ride Games\npGameTreatWidget.dll [No File]
FF Extension: RivalGaming  - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2012-01-02] [not signed]
FF Extension: EpicPlay Games - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2011-09-20] [not signed]
FF Extension: LivingPlay TextLinks - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2011-08-21] [not signed]
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected]_5k.com [2015-10-28] [not signed]
FF Extension: Avira Browser Safety - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]
FF Extension: flashbugcoursevectorcom - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]
FF Extension: TimeLineRemove.Com - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-02-19] [not signed]
FF Extension: jid1xUfzOsOFlzSOXgjetpack - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]
FF Extension: RivalGaming  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-01-02] [not signed]
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-09-16] [not signed]
FF Extension: ArcadeWeb - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-07-27] [not signed]
FF Extension: InternetHelper1.5  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} [2012-11-02] [not signed]
FF Extension: ArcadeFrontier - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{1a68cbde-3e4c-4fae-bf49-af5ab9868e53} [2013-08-15] [not signed]
FF Extension: Vafmusic12  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{38e3a123-98e8-46fc-8729-f4b49de90555} [2013-10-27] [not signed]
FF Extension: xvidly3  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{3c2adea7-a96a-4c26-adcb-9e939365b2ae} [2013-05-15] [not signed]
FF Extension: appbario12  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00} [2013-09-15] [not signed]
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00}.oldbackup [2013-09-15] [not signed]
FF Extension: MixiDJ V34  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{55b95864-3251-45e9-bb30-1a82589aaff1} [2013-05-02] [not signed]
FF Extension: ShopToWin4 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{6cbc25b0-0a52-11df-8a39-0800200c9a66} [2015-05-26] [not signed]
FF Extension: uTorrentControl_v2  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6} [2013-01-05] [not signed]
FF Extension: xvidly4  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{7dfe7f41-1b0b-48a7-b58c-5389f7746c33} [2013-08-10] [not signed]
FF Extension: HP Detect - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2012-07-11] [not signed]
FF Extension: LittleFishBar  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{c28f5072-1bfa-42f0-ba55-5a802d3490cb} [2012-11-28] [not signed]
FF Extension: Blackjack-Madness Community Toolbar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{ca9aeaa0-4588-4bbe-99af-8fb0a0a9e5e1} [2012-10-19] [not signed]
FF Extension: ShopToWin23 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{cea91efe-0f31-40f8-ab54-7b89290323fa} [2015-05-26] [not signed]
FF Extension: Greasemonkey - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-01-08] [not signed]
FF Extension: ShopToWin6 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{e68d0d96-5f18-496c-87f2-c0d521d78fbe} [2015-05-26] [not signed]
FF Extension: SearchFlyBar2  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{efc335aa-59ec-45b0-b287-739521153d5b} [2013-08-05] [not signed]
FF Extension: VisualBee V.6  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{f0af464e-5167-45cf-9cf0-66b396d1918c} [2013-09-08] [not signed]
FF Extension: FlyOrDie Quick Java Installer - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-04-28] [not signed]
FF Extension: PutLockerDownloader - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-11-06] [not signed]
FF Extension: BetterLinks - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-09-16] [not signed]
FF Extension: Casino Toolbar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\wagerlogic.xpi [2010-02-02] [not signed]
FF Extension: Mason - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{F632A5EA-F825-4AE7-94B5-233CFBA9F423}.xpi [2011-10-05] [not signed]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-04-14] [not signed]
FF Extension: Super Web Accelerator ! - C:\Program Files\Mozilla Firefox\distribution\bundles\firefox [2015-10-13] [not signed]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2015-10-27] [not signed]
FF HKLM\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox
FF Extension: Roboform Toolbar for Firefox - C:\Program Files\Siber Systems\AI RoboForm\Firefox [2011-08-05] [not signed]
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Firefox\Extensions: [[email protected]] - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3 [2012-03-23] [not signed]
FF HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\SeaMonkey\Extensions: [[email protected]] - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\[email protected] [not found]
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\[email protected] [not found]
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\{DE1C78C1-2762-47f6-A1D9-1B7866FE7EB4} [not found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{6311158d-1248-4c22-b80e-0fce899a0c7c} [not found]
FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [not found]
FF Extension: Dashlane - C:\Users\Jesus\AppData\Roaming\Dashlane\3.5.2.91395\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f} [2015-09-03] [not signed]
 
Chrome: 
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Chrome Web Store Payments) - C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-28]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [932912 2015-10-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [461672 2015-10-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [461672 2015-10-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1148688 2015-10-13] (Avira Operations GmbH & Co. KG)
S3 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [437880 2015-08-19] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [413304 2015-08-19] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [839288 2015-08-19] (BlueStack Systems, Inc.)
S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2012\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]
R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-06-17] ()
R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-16] (RealNetworks, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-10-13] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-07-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [55912 2015-10-13] (Avira Operations GmbH & Co. KG)
S3 AX88772; C:\Windows\System32\DRIVERS\ax88772.sys [69632 2013-12-03] (ASIX Electronics Corp.)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [132216 2015-08-19] (BlueStack Systems)
R3 COMMONFX.DLL; C:\Windows\System32\COMMONFX.DLL [98600 2007-04-18] (Creative Technology Ltd)
S3 CSRBC; C:\Windows\System32\Drivers\csrbcx86.sys [31744 2013-04-04] (CSR plc.)
S3 CT20XUT.DLL; C:\Windows\System32\CT20XUT.DLL [164608 2007-04-12] (Creative Technology Ltd.)
R3 CTAUDFX.DLL; C:\Windows\System32\CTAUDFX.DLL [546048 2007-04-12] (Creative Technology Ltd)
S3 ctdvda2k; C:\Windows\System32\drivers\ctdvda2k.sys [347128 2007-04-10] (Creative Technology Ltd)
S3 CTEAPSFX.DLL; C:\Windows\System32\CTEAPSFX.DLL [168192 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPFX.DLL; C:\Windows\System32\CTEDSPFX.DLL [280320 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPIO.DLL; C:\Windows\System32\CTEDSPIO.DLL [128768 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPSY.DLL; C:\Windows\System32\CTEDSPSY.DLL [323328 2007-04-12] (Creative Technology Ltd)
S3 CTERFXFX.DLL; C:\Windows\System32\CTERFXFX.DLL [94976 2007-04-12] (Creative Technology Ltd)
S3 CTEXFIFX.DLL; C:\Windows\System32\CTEXFIFX.DLL [1317632 2007-04-12] (Creative Technology Ltd.)
S3 CTHWIUT.DLL; C:\Windows\System32\CTHWIUT.DLL [66816 2007-04-12] (Creative Technology Ltd.)
R3 CTSBLFX.DLL; C:\Windows\System32\CTSBLFX.DLL [560384 2007-04-12] (Creative Technology Ltd)
R3 ha10kx2k; C:\Windows\System32\drivers\ha10kx2k.sys [797992 2007-04-10] (Creative Technology Ltd)
R3 hap16v2k; C:\Windows\System32\drivers\hap16v2k.sys [163112 2007-04-10] (Creative Technology Ltd)
S3 hap17v2k; C:\Windows\System32\drivers\hap17v2k.sys [189736 2007-04-10] (Creative Technology Ltd)
S3 HTCAND32; C:\Windows\System32\Drivers\ANDROIDUSB.sys [25088 2009-10-26] (HTC, Corporation) [File not signed]
S3 LVUSBSta; C:\Windows\System32\DRIVERS\LVUSBSta.sys [41888 2007-05-11] (Logitech Inc.)
R0 MxEFUF; C:\Windows\System32\DRIVERS\MxEFUF32.sys [102728 2010-11-04] (Matrox Graphics Inc.)
R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)
R3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [21792 2011-04-13] (Microsoft Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-09] (Avira Operations GmbH & Co. KG)
S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [104064 2006-02-23] (Microsoft Corporation) [File not signed]
S3 catchme; \??\C:\Users\Jesus\AppData\Local\Temp\catchme.sys [X]
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-10-31 00:01 - 2015-10-31 00:01 - 00161512 _____ C:\Windows\Minidump\103115-27409-01.dmp
2015-10-30 23:55 - 2015-10-30 23:55 - 00018049 _____ C:\ComboFix.txt
2015-10-30 23:33 - 2015-10-30 23:33 - 00153096 _____ C:\Windows\Minidump\103015-23587-01.dmp
2015-10-30 23:31 - 2015-10-30 23:31 - 00159608 _____ C:\Windows\Minidump\103015-21840-01.dmp
2015-10-30 23:23 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe
2015-10-30 23:23 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe
2015-10-30 23:23 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-10-30 23:23 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-10-30 23:23 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-10-30 23:23 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe
2015-10-30 23:23 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe
2015-10-30 23:23 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe
2015-10-30 23:22 - 2015-10-30 23:55 - 00000000 ____D C:\Qoobox
2015-10-30 23:22 - 2015-10-30 23:53 - 00000000 ____D C:\Windows\erdnt
2015-10-30 06:43 - 2015-10-30 06:43 - 00000000 ____D C:\Users\Jesus\Desktop\New folder
2015-10-30 06:38 - 2015-10-30 06:55 - 00000000 ____D C:\jbj fix this [bleep]
2015-10-29 15:12 - 2015-10-30 23:50 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\DMCache
2015-10-29 14:19 - 2015-10-29 14:25 - 00000000 ____D C:\AdwCleaner
2015-10-29 13:52 - 2015-10-29 13:54 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-28 05:46 - 2015-10-31 11:08 - 00000000 ____D C:\FRST
2015-10-28 05:32 - 2015-10-30 23:19 - 00000000 ____D C:\Users\Jesus\Desktop\jbj fix this [bleep]
2015-10-28 03:08 - 2015-10-28 03:08 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024 (2).exe
2015-10-28 03:04 - 2015-10-28 03:05 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024 (1).exe
2015-10-28 02:58 - 2015-10-28 02:58 - 00001590 _____ C:\Users\Jesus\Desktop\aswMBR - Shortcut.lnk
2015-10-28 02:12 - 2015-10-28 02:12 - 00001628 _____ C:\Users\Jesus\Desktop\AppRemover - Shortcut.lnk
2015-10-28 02:08 - 2015-10-28 02:10 - 13377536 _____ C:\Users\Jesus\Downloads\OPSWAT_GEARS_CLIENT_3445-7c867995737c1853977386e89a5560c5.msi
2015-10-27 23:32 - 2015-10-27 23:36 - 01190616 _____ (Adobe Systems Incorporated) C:\Users\Jesus\Downloads\flashplayer19_ga_install.exe
2015-10-27 10:24 - 2015-10-27 10:25 - 38319888 _____ (Microsoft Corporation) C:\Users\Jesus\Desktop\mpas-fe.exe
2015-10-27 10:14 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-27 10:14 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-27 10:14 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-27 10:14 - 2012-06-02 15:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-27 10:14 - 2012-06-02 15:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-27 10:14 - 2012-06-02 15:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-27 10:14 - 2012-06-02 15:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-27 10:13 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-27 10:13 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-27 03:19 - 2015-10-27 03:19 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-27 03:19 - 2015-10-27 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-10-27 02:56 - 2015-10-27 02:56 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-27 02:52 - 2015-10-30 09:25 - 03373292 _____ C:\Windows\system32\CFG1315048787
2015-10-27 02:33 - 2015-10-27 03:32 - 03996360 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
2015-10-27 01:03 - 2015-10-27 01:03 - 00000000 ____D C:\Users\Public\Speedup Sessions
2015-10-26 22:29 - 2015-10-26 23:06 - 00000000 ____D C:\Program Files\pandasecuritytb
2015-10-26 21:32 - 2015-10-27 02:41 - 00000000 ____D C:\ProgramData\panda_url_filtering
2015-10-26 21:27 - 2015-10-26 23:09 - 00000000 ____D C:\Program Files\Panda Security
2015-10-26 21:22 - 2015-10-26 23:05 - 00000000 ____D C:\ProgramData\Panda Security
2015-10-23 13:04 - 2015-10-27 02:41 - 00000000 ___HD C:\ProgramData\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}
2015-10-22 00:03 - 2015-10-22 00:03 - 00055341 _____ C:\Users\Jesus\Downloads\tattoo (1).html
2015-10-22 00:02 - 2015-10-22 00:02 - 00055341 _____ C:\Users\Jesus\Downloads\tattoo.html
2015-10-15 09:50 - 2015-10-27 02:41 - 00000000 ____D C:\Program Files\grabzilla pro V11
2015-10-14 01:09 - 2015-10-14 01:09 - 00000000 ____D C:\Program Files\Infogrames
2015-10-14 01:09 - 2015-10-14 01:09 - 00000000 ____D C:\Program Files\directx
2015-10-14 01:07 - 2015-10-14 01:07 - 00000000 _____ C:\Windows\PowerReg.dat
2015-10-12 21:33 - 2015-10-13 12:21 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\80l3ug2MOcd
2015-10-12 21:30 - 2015-10-13 13:17 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\SoftAd
2015-10-12 21:29 - 2015-10-12 21:29 - 00000066 _____ C:\Users\Jesus\AppData\Roaming\sn.txt
2015-10-12 06:53 - 2015-10-12 06:53 - 03531374 _____ C:\Users\Jesus\AppData\Local\curl.zip
2015-10-12 06:53 - 2015-10-12 06:53 - 00000000 ____D C:\Users\Jesus\AppData\Local\cu
2015-10-11 03:51 - 2015-10-11 03:51 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\c
2015-10-11 02:19 - 2015-10-11 02:19 - 00000000 ____D C:\Users\Jesus\AppData\Local\Opera Software
2015-10-11 02:09 - 2015-10-11 02:09 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Opera Software
2015-10-11 02:01 - 2015-10-11 02:01 - 00000000 ____D C:\Users\Jesus\AppData\Local\CEF
2015-10-11 01:45 - 2015-10-11 08:04 - 00000000 ____D C:\Program Files\Opera
2015-10-11 01:18 - 2015-10-11 01:18 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Itibiti
2015-10-11 01:15 - 2015-10-13 13:19 - 00000000 ____D C:\ProgramData\KeyStream
2015-10-11 00:57 - 2015-10-13 13:19 - 00000000 ____D C:\Program Files\Faster Web
2015-10-11 00:43 - 2015-10-11 00:45 - 00000000 ____D C:\Users\Jesus\AppData\Local\PlaythruPlayer
2015-10-11 00:43 - 2015-10-11 00:45 - 00000000 ____D C:\Program Files\PCAPDownloader
2015-10-11 00:39 - 2015-10-11 00:39 - 00000000 ____D C:\ProgramData\{4BB8A37B-1B3A-72FD-AABC-027F7A3ED1F1}
2015-10-11 00:34 - 2015-10-13 13:17 - 00000000 ____D C:\Users\Jesus\AppData\Local\{7F6C4930-5BC4-2588-365C-00601234FCF8}
2015-10-11 00:30 - 2015-10-13 13:19 - 00000000 ____D C:\Program Files\winnetmng
2015-10-07 22:04 - 2015-10-28 07:28 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\uTorrent
2015-10-05 15:22 - 2015-10-05 15:24 - 00000091 _____ C:\Users\Jesus\Downloads\ecare.xls
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-10-31 10:52 - 2015-06-19 07:41 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job
2015-10-31 05:00 - 2015-06-19 07:41 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job
2015-10-31 04:51 - 2011-04-22 00:45 - 01659454 _____ C:\Windows\WindowsUpdate.log
2015-10-31 00:53 - 2011-10-25 15:08 - 03936768 ___SH C:\Users\Jesus\Downloads\Thumbs.db
2015-10-31 00:05 - 2015-09-15 23:01 - 00000000 ____D C:\Users\Jesus\AppData\Local\PlutoTV
2015-10-31 00:03 - 2012-09-08 20:26 - 00000000 ___RD C:\Users\Jesus\Dropbox
2015-10-31 00:03 - 2012-09-08 20:18 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Dropbox
2015-10-31 00:01 - 2013-10-19 01:52 - 377033551 _____ C:\Windows\MEMORY.DMP
2015-10-31 00:01 - 2013-03-07 12:32 - 00020657 _____ C:\Windows\setupact.log
2015-10-31 00:01 - 2013-03-07 12:31 - 00323986 _____ C:\Windows\PFRO.log
2015-10-31 00:01 - 2012-10-28 12:36 - 00000000 ____D C:\Windows\Minidump
2015-10-31 00:01 - 2012-02-20 00:29 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Spotify
2015-10-31 00:01 - 2009-07-13 21:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-30 23:55 - 2009-07-13 19:37 - 00000000 ___RD C:\Users\Public
2015-10-30 23:50 - 2009-07-13 19:04 - 00000215 _____ C:\Windows\system.ini
2015-10-30 23:48 - 2013-08-15 04:30 - 00000000 ____D C:\Users\Jesus\AppData\Local\ArcadeFrontier
2015-10-30 02:12 - 2012-10-12 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-10-29 16:59 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\rescache
2015-10-29 14:23 - 2012-11-23 06:57 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Yahoo!
2015-10-29 14:23 - 2011-05-15 15:29 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\Yahoo!
2015-10-29 14:22 - 2013-02-22 01:11 - 00000000 ____D C:\Program Files\Amazon
2015-10-29 14:22 - 2011-09-25 09:32 - 00000000 ____D C:\Program Files\Yahoo!
2015-10-28 20:18 - 2011-07-02 07:09 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy
2015-10-28 20:18 - 2011-06-03 12:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-10-28 19:51 - 2011-07-21 11:04 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\Temp
2015-10-28 19:49 - 2013-04-14 01:48 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-10-28 19:49 - 2011-04-22 00:47 - 00000000 ____D C:\Users\Jesus
2015-10-28 15:03 - 2013-05-02 20:49 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\player
2015-10-28 14:55 - 2013-05-02 20:59 - 00000000 ____D C:\Windows\system32\appmgmt
2015-10-28 14:48 - 2011-07-02 07:09 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2015-10-28 12:54 - 2011-05-01 23:01 - 00000000 ____D C:\ProgramData\TEMP
2015-10-28 07:21 - 2009-07-13 21:34 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-28 07:21 - 2009-07-13 21:34 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-28 02:40 - 2012-02-09 19:17 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2015-10-28 00:37 - 2013-04-04 21:46 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\ProgramData\Avira
2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\Program Files\Avira
2015-10-27 03:32 - 2012-04-05 02:18 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-10-27 03:32 - 2011-09-16 21:12 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-10-27 02:32 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-10-27 02:27 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\wfp
2015-10-27 02:25 - 2011-10-30 18:32 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\FreeFileViewer
2015-10-27 02:25 - 2011-04-28 16:59 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\VTExtra
2015-10-27 02:25 - 2011-04-28 16:56 - 00000000 ____D C:\Users\Jesus\AppData\Local\VTShared
2015-10-27 02:25 - 2009-07-14 00:48 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-10-27 02:25 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\NDF
2015-10-27 02:24 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\registration
2015-10-27 02:22 - 2011-06-10 17:35 - 00000000 ____D C:\ProgramData\Real
2015-10-27 01:54 - 2013-05-02 22:56 - 00057952 _____ C:\Users\Jesus\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-14 01:05 - 2011-06-03 12:36 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2015-10-13 14:48 - 2013-05-07 22:12 - 00055912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-10-13 14:48 - 2013-03-02 20:57 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-10-13 14:09 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-10-13 13:23 - 2015-09-23 10:38 - 00000000 ____D C:\ProgramData\BlueStacks
2015-10-13 13:23 - 2015-09-23 10:38 - 00000000 ____D C:\Program Files\BlueStacks
2015-10-13 13:22 - 2014-10-01 21:03 - 00000000 ____D C:\Users\Jesus\Documents\Fax
2015-10-13 13:21 - 2009-07-13 19:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-10-13 13:20 - 2015-09-23 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-10-13 13:20 - 2013-10-20 22:18 - 00000000 ____D C:\Program Files\AdFender
 
==================== Files in the root of some directories =======
 
2015-08-28 13:09 - 2015-08-28 13:09 - 6420480 _____ () C:\Program Files\GUTD05A.tmp
2011-05-01 22:55 - 2011-05-01 23:09 - 0007887 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.cat
2011-05-01 22:55 - 2011-05-01 23:09 - 0001144 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.inf
2011-05-01 22:56 - 2011-05-01 23:09 - 0000034 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.log
2011-05-01 22:55 - 2011-05-01 23:09 - 0047360 _____ (VSO Software) C:\Users\Jesus\AppData\Roaming\pcouffin.sys
2015-10-12 21:29 - 2015-10-12 21:29 - 0000066 _____ () C:\Users\Jesus\AppData\Roaming\sn.txt
2015-10-12 06:53 - 2015-10-12 06:53 - 3531374 _____ () C:\Users\Jesus\AppData\Local\curl.zip
2012-04-21 14:09 - 2012-04-21 14:17 - 0001667 _____ () C:\Users\Jesus\AppData\Local\Temp1.html
2012-04-21 14:09 - 2012-04-21 14:17 - 0002419 _____ () C:\Users\Jesus\AppData\Local\Temp2.html
2012-07-11 06:04 - 2013-05-02 23:18 - 0023066 _____ () C:\ProgramData\hpzinstall.log
 
Some files in TEMP:
====================
C:\Users\Jesus\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxkmj8w.dll
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-10-29 16:48
 
==================== End of FRST.txt ============================
 
 
 
Additional scan result of Farbar Recovery Scan Tool (x86) Version:29-10-2015
Ran by Jesus (2015-10-31 11:09:32)
Running from C:\Users\Jesus\Desktop\jbj fix this [bleep]
Microsoft Windows 7 Ultimate  (X86) (2011-04-22 07:40:54)
Boot Mode: Normal
==========================================================
 
 
==================== Accounts: =============================
 
Administrator (S-1-5-21-11595131-3550647590-3570146784-500 - Administrator - Disabled)
Guest (S-1-5-21-11595131-3550647590-3570146784-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-11595131-3550647590-3570146784-1003 - Limited - Enabled)
Jesus (S-1-5-21-11595131-3550647590-3570146784-1001 - Administrator - Enabled) => C:\Users\Jesus
 
==================== Security Center ========================
 
(If an entry is included in the fixlist, it will be removed.)
 
AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 
==================== Installed Programs ======================
 
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
 
32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden
3-D Ultra Minigolf Adventures Deluxe (HKLM\...\114075133) (Version:  - Oberon Media)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)
Adobe Reader X (10.1.6) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.6 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Amazon Kindle (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Amazon Kindle) (Version:  - Amazon)
Angry Birds (HKLM\...\{AC30CF7C-2D62-4910-9147-3EC8EA5EB6D1}) (Version: 1.5.1 - Rovio)
ArcadeFrontier (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\{4AFCAFDC-D870-41FA-B9FB-1442B9DAFE76}) (Version:  - ArcadeFrontier)
Ashampoo WinOptimizer 2012 v.8.1.4 (HKLM\...\Ashampoo WinOptimizer 2012_is1) (Version: 8.1.4 - Ashampoo GmbH & Co. KG)
Backspin Billiards (HKLM\...\111543617) (Version:  - Oberon Media)
Bejeweled 3 (HKLM\...\Bejeweled 31.0) (Version: 1.0 - AllSmartGames)
Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 3.0.1.60 - )
BlueStacks App Player (HKLM\...\BlueStacks App Player) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM\...\{473E82D7-79E2-43DF-8FA0-025407C93191}) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)
ConvertXtoDVD 3.3.4.106e (HKLM\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.3.4.106e - )
Dashlane (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Dashlane) (Version: 3.5.2.91395 - Dashlane SAS)
Dell Driver Download Manager (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\f031ef6ac137efc5) (Version: 2.1.0.0 - Dell Inc.)
DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC)
DriverUpdate (HKLM\...\{04F46566-A95C-46FF-9CA1-F3FDBAB61283}) (Version: 2.2.16918 - SlimWare Utilities, Inc.)
Dropbox (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Foxit Reader 5.1 (HKLM\...\Foxit Reader_is1) (Version: 5.1.4.104 - Foxit Corporation)
Free Download Manager 3.9.2 (HKLM\...\Free Download Manager_is1) (Version:  - FreeDownloadManager.ORG)
GOM Player (HKLM\...\GOM Player) (Version: 2.1.37.5085 - Gretech Corporation)
Google Chrome (HKLM\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden
Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )
HP Product Detection (HKLM\...\{3C22981C-5C14-4176-B0E8-C2BE71174C41}) (Version: 11.14.0003 - HP)
HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)
Intel AppUp(SM) center (HKLM\...\Intel AppUp(SM) center 18988) (Version: 18988 - Intel)
Internet Download Manager (HKLM\...\Internet Download Manager) (Version:  - )
Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Kingo ROOT version 1.3.1.2217 (HKLM\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.3.1.2217 - Kingosoft Technology Ltd.)
K-Lite Codec Pack 7.0.0 (Standard) (HKLM\...\KLiteCodecPack_is1) (Version: 7.0.0 - )
Kodi (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Kodi) (Version:  - XBMC-Foundation)
Liberty Slots Casino (HKLM\...\{FE8C9237-59BF-45A4-A179-EF24C882C03D}) (Version: 1.00.0000 - LibertySlots)
Mahjong Match (HKLM\...\111177437) (Version:  - Oberon Media)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft IntelliType Pro 8.1 (HKLM\...\Microsoft IntelliType Pro 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Midnight Mysteries: Haunted Houdini Deluxe (HKLM\...\BFG-Midnight Mysteries - Haunted Houdini Deluxe) (Version:  - )
Mobile App Sync (HKLM\...\Mobile App Sync) (Version:  - Mobile App Sync)
Mozilla Firefox 20.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 20.0.1 (x86 en-US)) (Version: 20.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 20.0.1 - Mozilla)
MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version:  - )
Mplayer 0.6.9 (HKLM\...\Mplayer) (Version: 0.6.9 - )
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
NOOK for PC (HKLM\...\{05B59BD3-1B29-4DFA-99B8-0EC8CF88A60C}) (Version: 2.5.2 - Barnes & Noble)
PageRage Toolbar (HKLM\...\PageRage Toolbar) (Version: 6.5.0.202 - PageRage)
Plantronics MyHeadset Updater (x86) (HKLM\...\{BAE54DD5-2727-4F6F-9577-2B83BD450BF4}) (Version: 2.8.26503.0 - Plantronics, Inc.)
Pluto TV version 0.1.5 (HKLM\...\Pluto TV_is1) (Version: 0.1.5 - Pluto TV)
RealDownloader (Version: 18.0.1.10 - RealNetworks, Inc.) Hidden
RealDownloader (Version: 18.0.1.9 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealTimes (RealPlayer) (HKLM\...\RealPlayer 18.0) (Version: 18.0.1 - RealNetworks)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
Reel Deal Slots: Fishin' Fortune (HKLM\...\BFG-Reel Deal Slots - Fishin' Fortune) (Version:  - )
RoboForm 7-4-1 (All Users) (HKLM\...\AI RoboForm) (Version: 7-4-1 - Siber Systems)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)
SlimCleaner (HKLM\...\{A95F1368-38A4-4E02-99B7-96F0DC2779C7}) (Version: 4.0.28412 - SlimWare Utilities, Inc.)
Socialbox (HKLM\...\com.socialbox.socialbox) (Version: 2.109.1 - Zoosk, Inc.)
Socialbox (Version: 2.109.1 - Zoosk, Inc.) Hidden
Spotify (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Spotify) (Version: 0.8.3.222.g317ab79d - Spotify AB)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden
Usenet.nl (HKLM\...\Usenet.nl_is1) (Version:  - )
Vacation Quest - The Hawaiian Islands (HKLM\...\Vacation Quest - The Hawaiian Islands) (Version:  - PopCap Games)
VC 9.0 Runtime (Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VegasVip (HKLM\...\VegasVip_is1) (Version:  - Kingsbury)
Veoh Web Player (HKLM\...\Veoh Web Player Beta) (Version: 1.1.2.0000 - Veoh Networks, Inc.)
Video Downloader (Version: 1.0.0 - RealNetworks) Hidden
VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)
WhoCrashed 3.00 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)
Windows Driver Package - Cambridge Silicon Radio (CSRBC) USB  (10/26/2012 2.4.0.0) (HKLM\...\20C7EDA3129B3FF8F72F9BF59252B718B554FBDC) (Version: 10/26/2012 2.4.0.0 - Cambridge Silicon Radio)
WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team)
Yahoo! BrowserPlus 2.9.8 (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Yahoo! BrowserPlus) (Version:  - Yahoo! Inc.)
Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version:  - )
Your Uninstaller! 2010 (HKLM\...\YU2010_is1) (Version: 7.0 - URSoft, Inc.)
Zuma's Revenge! (HKLM\...\Zuma's Revenge!) (Version:  - PopCap Games)
 
==================== Custom CLSID (Whitelisted): ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{052253BF-F1FF-4686-B231-8D1904DEED68}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{0F81C552-68AD-4AAB-99D2-26F7F72A423C}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Commmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1B72D1C3-A1B3-4C87-9552-894CFF74051F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1BC0C7E7-0ADF-4FCE-9FBD-70B2DBC3BD48}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameMdl.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1E1C74D3-EF64-4F13-B631-DFDCEE4572FD}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Loginmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1FD9E587-43E1-4F1F-A41F-A6E8B93A5546}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{2D0235FC-1701-4F1C-B36C-84CD8813EDB5}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{31DC369C-75C3-4D8B-9C2D-0B10BF77BA0F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{343ADE39-3C61-421B-93CB-19C44D33ED9B}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Jesus\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{47231DCA-F7A4-4696-B836-B2430D451226}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Imagemgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{4AC4E235-EB53-4942-B113-931D66A470B8}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameSelectorMdl.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{50021F2A-9C64-4766-A697-84E366A407B1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{50632C37-EDD8-4B8F-A32B-8E280D942A8E}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{51B894AD-B2D5-48F6-B1D1-C1F0CF849587}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{52FE3F2E-A71F-4EC7-BCA4-08D5C9FA57C4}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{553E32D1-AAF3-406A-B19E-E575829EC651}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{58456121-F6E2-4E74-96D5-521EBE19E124}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{58F0E5CC-C1B3-453A-B1EB-A1B40A6DAEF9}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{59715A3F-0AF7-427E-99AF-757668C8576E}\localserver32 -> c:\program files\palace of chance\casino.exe %1 => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{5C5F7442-9ADC-4BD8-89CC-7C3615C26546}\localserver32 -> c:\program files\palace of chance\casino.exe %1 => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.145\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{648326CD-6F37-4A8F-BF14-E2BAD67AAAA8}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6BB1EAF0-7572-4166-9DF4-2A817F5FCD83}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6CE4B8A6-4DB5-4F63-8013-1197503692EF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\YBPAddon_2.9.8.dll (Yahoo! Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.153\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6F80F85C-FC5C-4C7E-B7ED-9ECCECC7CF57}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Configmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{72A62965-EF25-42E0-97CE-7A2D69BF28C0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8A0F754D-9636-4771-A1A6-8A1126E03345}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8A73CF97-446B-46AD-964C-2C3400CAA60F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8B48847D-052F-4153-93B8-7223BFF1C406}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Commmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8B5F91E9-0032-4560-93B0-4539497C5366}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.149\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{941D2E9A-D724-4FB5-94D5-775B70E8C408}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{97637B78-01D0-4A40-A842-68774AA416BB}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{987585FA-DD0C-4E8B-8FC2-89B1181CA701}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9A5A84A0-2E60-47D1-8C75-278A8D0F41FF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9E8F05AF-C18E-4A72-8743-A479EFD255E6}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A16CA865-CD74-46EC-9432-74579FD657A0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A2DF38B5-93D0-44D6-8130-AA80F351F852}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Timemgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A70E086C-1477-4B0C-808A-94EF8271ED39}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Resourcemgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A7674421-DB75-4081-B0FE-2B378F1FFAEB}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameMdl.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ACAB158F-423F-4D59-BEDD-15C9E0CC2DD1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B10A3751-CC13-4A25-875B-EEC84674C6C0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Soundmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B1267A8A-D143-41F7-A655-5765A8464796}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B6C64A50-7BB8-441B-AE31-C4366C84BF00}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B8217B92-8FDD-4A74-9417-B77BD74F62B7}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{BD75936F-2B69-477E-9E9A-218FFAF35F49}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{BE742811-02F4-4D7E-87C1-886909462A16}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Modulemgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => No File
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D2E87C0B-C06A-4E69-8A41-0AC3117505B4}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D4A86438-A95B-487D-8B1D-1E67B2A0F379}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\DownloadMgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D7B3EAC0-36D9-459E-AC96-3A88309FDDCC}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E65E6AAE-9169-4625-B98D-EB903E707116}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E6BFA606-59F2-4CD6-89C8-DAED6D789027}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E9AC37A2-E79C-4CA3-A6A8-1884BF9A7852}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{EAD67B06-459C-48B9-90C1-5F2F34D4F83F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ECA7C134-E84B-4E6B-A3E2-355FCB853766}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ED0BD0F4-ECAC-41D2-BD28-0ABFB129F40C}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\VersionMgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{F0349E13-BD03-4073-BA25-6B2610C0750D}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{F53E4C9E-703C-41f3-8F69-C7E3D277594B}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FD995983-DC2B-4B97-B3FE-E9534AA1A769}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FE0AA82B-B32A-4D54-BA97-918D2A9F6E70}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()
CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)
 
==================== Restore Points =========================
 
27-10-2015 02:13:45 Restore Operation
27-10-2015 10:12:42 Windows Update
28-10-2015 14:51:31 Quitado VAFPlayer
28-10-2015 14:59:35 Quitado VAFPlayer
28-10-2015 19:46:11 Restore Point Created by FRST
 
==================== Hosts content: ===============================
 
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
 
2009-07-13 19:04 - 2015-10-30 23:50 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
 
127.0.0.1       localhost
 
==================== Scheduled Tasks (Whitelisted) =============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
Task: {0BBD681C-7304-41A0-B869-688657E40A9F} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
Task: {0DF8152A-D272-4BDB-9F51-1721D7FE3452} - System32\Tasks\FCBfan => C:\Users\Jesus\AppData\Roaming\FCBfan\fcbfan.exe
Task: {21E511F1-54F9-417B-B428-CB47E06E30ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-27] (Adobe Systems Incorporated)
Task: {2DE646AB-A4FC-47BB-B49A-E30A184AF633} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {3110396D-9536-4D0B-BAFA-6EB5D0DD9DC7} - System32\Tasks\{D28D4A94-5DFA-4081-BFAE-D98440EFDCA4} => pcalua.exe -a C:\Users\Jesus\Downloads\Programs\SlotMadnessCasinoInstaller.exe -d C:\Users\Jesus\AppData\Roaming\IDM
Task: {3DA3D8CB-B969-4A98-A4C1-B8C5E74FCD7F} - System32\Tasks\{45B4BE60-DFC5-4343-A749-E33917113EA3} => pcalua.exe -a C:\Users\Jesus\Downloads\Programs\setup.exe -d C:\Users\Jesus\AppData\Roaming\IDM
Task: {475D8051-7C74-4EFB-8D2F-B87EB6AC0EBA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2011-08-05] (Siber Systems)
Task: {5D56AE02-A011-4D32-86B7-035674FDA02F} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
Task: {60E6A20E-6629-414A-9C27-7246C2DBA88C} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)
Task: {61C18BFF-7684-4957-9EF0-1F0C353A27EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {7755AC6D-FF88-483C-9C2B-9BBCEC55718A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
Task: {7CC318B5-0679-467C-8FD1-713512DA51B1} - System32\Tasks\ArcadeFrontier => C:\Users\Jesus\AppData\Local\ArcadeFrontier\veragent.exe [2014-06-28] ()
Task: {A41A3A8C-2CC2-4102-9065-C8525D9A24A9} - System32\Tasks\{B4489070-50F4-459A-A65F-49CE70E4110C} => pcalua.exe -a "C:\Users\Jesus\Desktop\deer dr\SCS Software\makeDesktopIcon.exe" -d "C:\Users\Jesus\Desktop\deer dr\SCS Software"
Task: {A5E24E6E-099B-42F9-9956-79182B2C8CA9} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {A922BCA2-5CD6-4531-94AB-6879F23868DC} - System32\Tasks\{6BBEED7F-C68C-41D3-9751-E85EFC186AAD} => pcalua.exe -a E:\install\setup.exe -d E:\install
Task: {BF4A1A15-21AE-4584-BA88-95321E8C8D2C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {CC98A113-7FCC-4478-B481-4F50ACE95E37} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
Task: {DDB7E82D-017D-410C-867A-E5CB41874779} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNJOMMJLMNJKMJJOMCNJJKJJMPMCNLMOJNJJJCNOJLJJMNJCNNMMMMMKMNJJJOMNJKMJMJMPMJNJICMIMCNMMCNPMFMGMCNPMCNHMOMOMNMFMJMCNOMCNIMJMPMPMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMFLKJMIKIMIJNKJCMJNNICMJNDJCMKJBJ"
Task: {E16F6A82-7107-4BF2-BCD3-26AC698877F1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)
Task: {E6BCEEE9-A25A-432F-B170-9F2008F7E743} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNJOMMJLMNJKMJJOMCNJJKJJMPMCNLMOJNJJJCNOJLJJMNJCNNMMMMMKMNJJJOMNJKMJMJMPMJNJICMIMCNLMCNOMFMGMCNPMCNHMOMOMNMFMJMCNOMCNIMJMPMPMCNNMJNPICMPMFMMJBJKJLIMJFMIMNMJNHICMMJBJKJLIMJJNBJCMFLKJMIKIMIJNKJCMJNNICMJNDJCMKJBJ"
Task: {E81EFEAD-4F21-4CB4-86D1-BE7B2F7B1E94} - System32\Tasks\{5398D605-AC1F-4226-8D0A-92360D246A95} => pcalua.exe -a "C:\Users\Jesus\Desktop\Magellan roadmate\Magellan_Roadmate_1412_NA_3_12_Rel2.exe" -d "C:\Users\Jesus\Desktop\Magellan roadmate"
Task: {ED7AA6B2-7FC7-4609-A5C3-C0C995F91388} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
Task: {EE7D1483-02C0-41A3-B9DD-0C9AE2E6062B} - System32\Tasks\{5C942655-003B-42ED-89AD-1303AF7A188A} => pcalua.exe -a C:\Users\Jesus\AppData\Local\Temp\{FAED904B-E73C-4F5B-80C6-725A05BCD83D}\adobeshockwavextrabundle.exe -d "C:\Program Files\Mozilla Firefox" -c /xtrabundle=Shockwave_3D_Asset
Task: {F6D0A09A-D6D0-4CD0-B887-11B6AF6799AF} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2015-06-17] ()
Task: {F9ADBE9E-46B4-4F0D-8A2F-B90CA81EF8BB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)
 
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
 
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe
 
==================== Loaded Modules (Whitelisted) ==============
 
2011-10-30 18:23 - 2007-08-21 13:32 - 00098304 _____ () C:\Windows\System32\redmonnt.dll
2013-04-04 03:10 - 2013-04-04 03:10 - 00032768 _____ () C:\Program Files\Plantronics\MyHeadsetUpdater\NativeUsbLib.dll
2015-06-17 03:25 - 2015-06-17 03:25 - 00031856 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-06-17 03:24 - 2015-06-17 03:24 - 00035976 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll
2015-06-17 03:24 - 2015-06-17 03:24 - 00039560 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2015-06-17 03:24 - 2015-06-17 03:24 - 00037528 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll
2013-08-28 17:23 - 2013-08-28 17:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe
2013-08-28 17:25 - 2013-08-28 17:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2012-05-06 20:10 - 2012-05-06 20:10 - 00932528 _____ () C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
2015-09-15 23:01 - 2015-09-10 11:12 - 93077896 _____ () C:\Program Files\Pluto TV\PlutoTV.exe
2015-07-16 00:11 - 2015-07-16 00:11 - 00088640 _____ () c:\program files\real\realplayer\CrashRpt\CrashRpt1402.dll
2015-10-31 00:01 - 2015-10-31 00:01 - 00071168 _____ () c:\users\jesus\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxkmj8w.dll
2015-10-13 13:58 - 2015-09-23 16:07 - 00012800 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-10-13 13:58 - 2015-09-23 16:07 - 00779776 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-10-13 13:58 - 2015-09-23 16:07 - 00056320 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-10-13 13:58 - 2015-09-23 16:07 - 00012288 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-06-17 00:07 - 2015-06-17 00:07 - 00066112 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll
2015-10-27 03:19 - 2015-10-20 07:08 - 01532744 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-27 03:19 - 2015-10-20 07:08 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\libegl.dll
2015-09-15 23:01 - 2015-09-10 11:12 - 01481728 _____ () C:\Program Files\Pluto TV\libglesv2.dll
2015-09-15 23:01 - 2015-09-10 11:12 - 00073728 _____ () C:\Program Files\Pluto TV\libegl.dll
2015-10-31 00:04 - 2015-09-10 11:12 - 17482952 _____ () C:\Users\Jesus\AppData\Local\Temp\nw3280_11740\plugins\NPSWF32_18_0_0_232.dll
2015-10-27 03:19 - 2015-10-20 07:08 - 16493384 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll
2015-06-17 00:06 - 2015-06-17 00:06 - 00608320 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe
2015-06-16 23:47 - 2015-06-16 23:47 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll
 
==================== Alternate Data Streams (Whitelisted) =========
 
(If an entry is included in the fixlist, only the ADS will be removed.)
 
 
==================== Safe Mode (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
 
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
 
==================== EXE Association (Whitelisted) ===============
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
 
 
==================== Internet Explorer trusted/restricted ===============
 
(If an entry is included in the fixlist, it will be removed from the registry.)
 
 
==================== Other Areas ============================
 
(Currently there is no automatic fix for this section.)
 
HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.
 
==================== MSCONFIG/TASK MANAGER disabled items ==
 
(Currently there is no automatic fix for this section.)
 
 
==================== FirewallRules (Whitelisted) ===============
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
FirewallRules: [{7A784CDB-971B-466A-B80A-02EA7C5EA6D8}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [{36907D82-DD55-407A-A399-14D8447B1A99}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
FirewallRules: [TCP Query User{6185CFB9-2B43-44A9-9708-BE96442DE65A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{B3FA4339-CF70-4ACB-A307-BA1C0F593D83}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{C8161B9B-794D-46D8-B386-B7F810D09474}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe] => (Block) C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
FirewallRules: [UDP Query User{47373C8B-A82C-42EA-90EB-B536AEF61E46}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe] => (Block) C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
FirewallRules: [TCP Query User{2384371E-C20C-472E-A6C9-86FBC9ABA9B8}C:\program files\relevantknowledge\rlvknlg.exe] => (Allow) C:\program files\relevantknowledge\rlvknlg.exe
FirewallRules: [UDP Query User{189B13DB-5C16-41EE-B369-8D92723BE549}C:\program files\relevantknowledge\rlvknlg.exe] => (Allow) C:\program files\relevantknowledge\rlvknlg.exe
FirewallRules: [{FA2B9148-2E97-423B-819B-384C8407CE4E}] => (Allow) C:\Windows\System32\ZoneLabs\vsmon.exe
FirewallRules: [{9247F2EF-BDF4-4FC9-AA42-AF28FDCF52B0}] => (Allow) C:\Windows\System32\ZoneLabs\vsmon.exe
FirewallRules: [{A4B594B4-2323-40A0-B653-D4C2760D3985}] => (Allow) C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe
FirewallRules: [TCP Query User{001CCCAB-7132-4B73-AD67-F0284C03EED3}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jesus\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{6498C408-AAE1-4FF5-A358-A9DDB19AE8C1}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jesus\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{2CCE0A00-00E7-4191-9B07-A89BD2429BC4}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jesus\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{61B1D9FA-5EB0-4B23-96DB-7862D9FB9789}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jesus\appdata\roaming\spotify\spotify.exe
FirewallRules: [{63A19801-6617-4B24-BB4F-09FB5A252A8D}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS3E09\setup\hpznui01.exe
FirewallRules: [{4BB71658-1C30-4799-98CE-D4113AACD9DD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{D1D27524-56B1-4DD1-BB15-2FB8A83904B2}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{DA355BAE-3339-4D24-81E5-62D7CDF7227C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [TCP Query User{280F7616-C78A-4375-8C04-AD8100A13873}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{CDFCF1FB-3F53-4396-BFAE-B63C9F0F2A45}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe
FirewallRules: [{8D5E4A02-DE83-45C0-8A7F-7B1E8E408454}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS07D1\HPDiagnosticCoreUI.exe
FirewallRules: [{0F4FFF26-E501-4ED7-8717-5AF4D1DEDD1A}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS07D1\HPDiagnosticCoreUI.exe
FirewallRules: [{39E9B839-3733-4D1E-B2EB-DD561A640B0C}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS0823\HPDiagnosticCoreUI.exe
FirewallRules: [{51F11CCA-4D0D-42AE-B2CA-FF382027B652}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS0823\HPDiagnosticCoreUI.exe
FirewallRules: [{9C14D8C9-8E04-49EE-A1DA-D7C12AD8AA91}] => (Allow) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{462548CB-2CBB-44FE-B52B-30169D6AB79F}] => (Allow) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{A498AA84-357C-4042-A0D7-DD29F71DC8C3}C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{9EE64CE1-C1A4-49CC-B574-3CDE2AABCE7E}C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{6DF886A4-EF95-466E-BED5-0A77B93D0442}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS2360\hppiw.exe
FirewallRules: [{1359EFB4-9AC3-428C-9BCE-BB63BE90605C}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS2360\hppiw.exe
FirewallRules: [{62C44071-D444-44A7-B04E-7F0313350016}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{B4ACDEBE-717D-4DCA-AE9C-83C3A7BF171E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{775E0A6B-9C35-4DB1-92C9-75849AFB37B6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{3A0DEB72-085D-40F2-AA94-387270A2D616}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{B145BE92-97A8-48D7-B69C-DB012C969356}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{BCAC67A4-17FD-4958-AD9B-D8A225694F2A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{3DDA7105-AAD6-4B21-B2F3-2C2B9019BF15}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{077BD633-ABF0-4379-BB79-BD8E969A6D4C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{910725D0-9380-4AE6-A729-62F0D0B2553C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{2DE9157D-6C55-4BAE-8EEA-5A666F8E9309}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{05D1AFB7-AFC7-4E55-B793-02A4BDDDC95F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{049C44B8-6761-42EB-9580-A7476499C501}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{6570AF2F-8E48-493E-AF1F-EAD48B743F12}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{2F27F3DB-39EC-48C7-B66D-0435420D7180}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{BC9CA938-53C0-472C-A487-D61482C27229}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{DBB333BC-12D5-4C33-99B3-DEA67A3BFCDA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{E0A59DB0-7659-488E-AA21-3D1A7370FB8B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{9A413204-FCC1-4DD8-9AB8-842F65B292EB}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{5A553DF0-D456-4868-ACF8-620F04FA01EA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{03130421-AC6C-4C4B-BCE4-0708001A6D44}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe
FirewallRules: [{6D568F24-4CB9-4A91-BEC3-2B02275092D8}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [TCP Query User{60F9B6C2-504E-482E-AC63-87FA5FBF3830}C:\program files\frostwire\frostwire.exe] => (Block) C:\program files\frostwire\frostwire.exe
FirewallRules: [UDP Query User{F82D9D03-A1C9-4DE4-8B9D-D8D0D1B2A57E}C:\program files\frostwire\frostwire.exe] => (Block) C:\program files\frostwire\frostwire.exe
FirewallRules: [{56A0F0DC-5831-4652-9028-0CE4B651C494}] => (Allow) C:\Windows\System32\dmwu.exe
FirewallRules: [{78C22347-E375-4D37-9C48-D442EBB42B63}] => (Allow) C:\Windows\System32\dmwu.exe
FirewallRules: [{7D67DAE3-D439-4B08-BBD1-CD7A36AE0BD0}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{50F1AB90-37C0-427A-A066-2C76DB8F70D5}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{EC4CAA6D-0CDA-40AA-95E1-23B9F2C6B00F}] => (Allow) C:\Windows\System32\dmwu.exe
FirewallRules: [{63419E58-E4A5-476A-B4D0-F8B2D6259190}] => (Allow) C:\Windows\System32\dmwu.exe
FirewallRules: [{D7E2B0F6-24E5-42C4-B8AC-8F174D6F8770}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{FE66C115-BA96-4DB4-8F88-2F1DB64A57CA}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe
FirewallRules: [{8D5503CA-9E8B-4AD3-993F-0386871AD56A}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS51EA\hppiw.exe
FirewallRules: [{AC07A8C7-A8C6-46B4-9FFA-A597F909D1E5}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS51EA\hppiw.exe
FirewallRules: [{3F7D9768-5300-49FC-B6EF-7512D2C7142B}] => (Allow) C:\Program Files\GoforFiles\goforfilesdl.exe
FirewallRules: [{EB3805E1-5F5E-4C92-A4E7-EB8B6A16397A}] => (Allow) C:\Program Files\GoforFiles\goforfilesdl.exe
FirewallRules: [{BDFF1364-B566-40E2-AEE9-F85AA6936DB9}] => (Allow) C:\Program Files\GoforFiles\GoforFiles.exe
FirewallRules: [{D38FE597-5248-423F-BB9C-BA4A593D99F0}] => (Allow) C:\Program Files\GoforFiles\GoforFiles.exe
FirewallRules: [{0B6DED41-BCAB-4D85-B813-35201C35D15E}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{1E4A3D69-F0E1-43B2-A4DE-11CDAB985A05}] => (Allow) C:\Users\Jesus\Downloads\Programs\ChainzGalaxy_SoftangoDownloader.exe
FirewallRules: [{F860C8E9-3336-4DC0-A367-2189BACCF19F}] => (Allow) C:\Users\Jesus\Downloads\Programs\ChainzGalaxy_SoftangoDownloader.exe
FirewallRules: [{49D2D9D8-A038-4673-866A-A77F182CDD10}] => (Allow) C:\ProgramData\eSafe\eGdpSvc.exe
FirewallRules: [{93C948C7-481F-463B-9A9A-69CFDFC3254C}] => (Allow) c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [TCP Query User{B354850D-609B-4822-B042-C519A9D57FB8}C:\program files\frostwire 6\frostwire.exe] => (Block) C:\program files\frostwire 6\frostwire.exe
FirewallRules: [UDP Query User{793F822F-0A1D-4A48-B80B-ACD9CD865C40}C:\program files\frostwire 6\frostwire.exe] => (Block) C:\program files\frostwire 6\frostwire.exe
FirewallRules: [TCP Query User{F1E93E4E-F071-48A3-8442-0E8B748A04ED}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [UDP Query User{E65A6A87-B614-4B9E-A73D-AFBD9614C3D6}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [{159BDD8D-44D4-4396-AFD8-F3724F75FDF9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
 
==================== Faulty Device Manager Devices =============
 
 
==================== Event log errors: =========================
 
Application errors:
==================
Error: (10/31/2015 05:19:45 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (10/31/2015 05:19:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (10/31/2015 12:01:13 AM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (10/30/2015 11:43:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8
Faulting module name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8
Exception code: 0x40000015
Fault offset: 0x0008d1c0
Faulting process id: 0xbe8
Faulting application start time: 0xPEV.exe0
Faulting application path: PEV.exe1
Faulting module path: PEV.exe2
Report Id: PEV.exe3
 
Error: (10/30/2015 11:33:16 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (10/30/2015 06:57:02 AM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (10/30/2015 06:31:08 AM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
Error: (10/29/2015 04:49:59 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (10/29/2015 04:49:49 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".
Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.
Please use sxstrace.exe for detailed diagnosis.
 
Error: (10/29/2015 03:18:30 PM) (Source: Winlogon) (EventID: 4103) (User: )
Description: Windows license activation failed. Error 0x80070005.
 
 
System errors:
=============
Error: (10/31/2015 04:50:50 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 
Error: (10/31/2015 12:01:23 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Avira Mail Protection service depends on the Avira Real-Time Protection service which failed to start because of the following error: 
%%1053
 
Error: (10/31/2015 12:01:18 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000050 (0xe0000000, 0x00000000, 0x832c7cea, 0x00000002)C:\Windows\MEMORY.DMP103115-27409-01
 
Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Avira Web Protection service depends on the Avira Real-Time Protection service which failed to start because of the following error: 
%%1053
 
Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Avira Real-Time Protection service failed to start due to the following error: 
%%1053
 
Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Avira Real-Time Protection service to connect.
 
Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Avira Scheduler service failed to start due to the following error: 
%%1053
 
Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Avira Scheduler service to connect.
 
Error: (10/31/2015 12:01:10 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: The previous system shutdown at 11:59:00 PM on ‎10/‎30/‎2015 was unexpected.
 
Error: (10/30/2015 11:50:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: The PEVSystemStart service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.
 
 
==================== Memory info =========================== 
 
Processor: Intel® Core™2 CPU 6700 @ 2.66GHz
Percentage of memory in use: 47%
Total physical RAM: 2301.51 MB
Available physical RAM: 1207.45 MB
Total Virtual: 4601.3 MB
Available Virtual: 2123.86 MB
 
==================== Drives ================================
 
Drive c: () (Fixed) (Total:186.21 GB) (Free:80.99 GB) NTFS
Drive d: (Oper.Blockade) (CDROM) (Total:0.13 GB) (Free:0 GB) UDF
 
==================== MBR & Partition Table ==================
 
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 186.3 GB) (Disk ID: 2A61B455)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=186.2 GB) - (Type=07 NTFS)
 
==================== End of Addition.txt ============================

  • 0

#28
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
Nice work, good timing just got in from work.

Need time to look things over and feed the cat. I'm curious after the running of combofix will Malwarebytes run or Junkremoval tool. Try them, and I'll be back with you in about an hour or so.

Thanks
Joe :)
  • 0

#29
jbj1162

jbj1162

    Member

  • Topic Starter
  • Member
  • PipPip
  • 22 posts

Dont trip I gotta take off for a couple hours anyway so enjoy whats left of your saturday and Ill try running those programs b4 I take off talk to ya in a couple hrs 

 

Tried them both and no luck I gotta run c-ya in a bit


Edited by jbj1162, 31 October 2015 - 02:19 PM.

  • 0

#30
zep516

zep516

    Trusted Helper

  • Malware Removal
  • 6,797 posts
Hello,
Few things to do, no hurry...
Uninstall this program.
  • Ashampoo WinOptimizer-------These programs can create issues.

    Next Clean up Malwarebytes
    Please visit this Link. Scroll down to Free Version. and Run the clean tool. Do not reinstall Malwarebytes yet.

    Replace Anti Virus Avira looks broken.
    Download Microsoft security Essentials from Here. Do not install it just yet! Just download it.

    Then
    Visit this Link. to remove Anti Virus programs.
    Run the Anti virus removal tools for following Anti Virus programs
  • Panda
  • Avira
    Once you have run the uninstaller for panda and Avira, go back to the desktop, double click on the Microsoft Security Essentials Icon that you downloaded, install it, and run a scan with it.
     

    Let me know if you can scan with Microsoft Security Essentials.
    Thanks
    Joe

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP