Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

ok Im running windows 7 using chrome browser kept getting not respondi

Started by jbj1162 , Oct 28 2015 08:04 AM

This topic is locked

#16
zep516

Posted 29 October 2015 - 03:07 PM

Trusted Helper

Malware Removal
7,018 posts

Try and run adwcleaner, let me know..

Next

Please download AdwCleaner by Xplode onto your Desktop.

Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click the Scan button and wait for the process to complete.
Click the logfile button and the log will open in Notepad.
Click on the Clean button follow the prompts.
A log file will automatically open after the scan has finished and the PC has rebooted.
Please post the content of that log file with your next answer.
You can find the log file at "C"

#17
jbj1162

Posted 29 October 2015 - 03:36 PM

Member

Topic Starter
Member
22 posts

Ok that worked here's the file

# AdwCleaner v5.015 - Logfile created 29/10/2015 at 14:25:20

# Updated 26/10/2015 by Xplode

# Database : 2015-10-29.1 [Server]

# Operating system : Windows 7 Ultimate (x86)

# Username : Jesus - OPTIPLEX

# Running from : C:\Users\Jesus\Desktop\jbj fix this [bleep]\adwcleaner_5.015.exe

# Option : Cleaning

# Support : http://toolslib.net/forum

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

[-] File Deleted : C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pbjikboenpfhbbejgkoklgkhjpfogcam

***** [ DLLs ] *****

***** [ Shortcuts ] *****

***** [ Scheduled tasks ] *****

[-] Task Deleted : RunAsStdUser Task for VeohWebPlayer

[-] Task Deleted : ShdUpdate

[-] Task Deleted : OpenCandyHelperRunOnce

[-] Task Deleted : SuperLyrics-16-firefoxinstaller

[-] Task Deleted : SuperLyrics-16-updater

[-] Task Deleted : c18b53c1-d7c3-48f9-96b5-786590d4f08f-2

[-] Task Deleted : SuperLyrics-16-firefoxinstaller

[-] Task Deleted : SuperLyrics-16-updater

***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler

[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\f

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

[-] Key Deleted : HKLM\SOFTWARE\Classes\PutLockerDownloader

[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject

[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook

[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\BackgroundHost.EXE

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Gameo]

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [CinPlus-2.5cdTube HDV03.10-bg.exe]

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898.3

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2418376

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3184310

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3247201

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3279411

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3287805

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3292715

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295548

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295549

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298570

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3303005

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898.1

[-] Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{442718d9-475e-452a-b3e1-fb1ee16b8e9f}]

[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]

[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci

[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ACE0D5AB-50C8-4052-BD02-977569E56291}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0771C34F-730F-4535-AD4C-37B74D27188E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414462}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644324485}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D425283-D487-4337-BAB6-AB8354A81457}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00E71626-0BEF-11DC-8314-0800200C9A66}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93488930-185C-4CED-AFEB-0FD4930F8423}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D425283-D487-4337-BAB6-AB8354A81457}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A66261FC-B82E-4EC7-9F6D-C2F36B871DF0}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{AF5B5C22-498A-4239-9A51-82BDD99C6A44}]

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a123a7-068d-43fc-81fe-e3d3ccd24e0a}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1a0afa47-2463-4ed4-9f59-ae3fcee71d3d}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b9eb1fe-fe0c-4ad6-ad8a-4e1f5a6ef3f5}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4779d21f-daf2-489d-864f-f166cba2cb9f}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D425283-D487-4337-BAB6-AB8354A81457}]

[-] Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search

[-] Key Deleted : HKU\.DEFAULT\Software\IM

[-] Key Deleted : HKU\.DEFAULT\Software\ImInstaller

[-] Key Deleted : HKU\.DEFAULT\Software\SweetIM

[-] Key Deleted : HKU\.DEFAULT\Software\WNLT

[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab

[-] Key Deleted : HKCU\Software\Alexa Internet

[-] Key Deleted : HKCU\Software\AnyProtect

[-] Key Deleted : HKCU\Software\APN PIP

[-] Key Deleted : HKCU\Software\BABSOLUTION

[-] Key Deleted : HKCU\Software\BI

[-] Key Deleted : HKCU\Software\Bitberry

[-] Key Deleted : HKCU\Software\Conduit

[-] Key Deleted : HKCU\Software\Cr_Installer

[-] Key Deleted : HKCU\Software\delta LTD

[-] Key Deleted : HKCU\Software\distromatic

[-] Key Deleted : HKCU\Software\Funmoods

[-] Key Deleted : HKCU\Software\GoforFiles

[-] Key Deleted : HKCU\Software\IM

[-] Key Deleted : HKCU\Software\ImInstaller

[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions

[-] Key Deleted : HKCU\Software\InstalledThirdPartyPrograms

[-] Key Deleted : HKCU\Software\Softonic

[-] Key Deleted : HKCU\Software\SweetIM

[-] Key Deleted : HKCU\Software\visualbee

[-] Key Deleted : HKCU\Software\YahooPartnerToolbar

[-] Key Deleted : HKCU\Software\Zugo

[-] Key Deleted : HKCU\Software\CoinisRS

[-] Key Deleted : HKCU\Software\gameo

[-] Key Deleted : HKCU\Software\PRODUCTSETUP

[-] Key Deleted : HKCU\Software\PCCleaners

[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc

[-] Key Deleted : HKCU\Software\Yahoo\Companion

[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar

[-] Key Deleted : HKCU\Software\AppDataLow\SProtector

[-] Key Deleted : HKCU\Software\AppDataLow\Toolbar

[-] Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer

[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

[-] Key Deleted : HKCU\Software\AppDataLow\Software\Mp3Tube

[-] Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong

[-] Key Deleted : HKCU\Software\AppDataLow\Software\visualbee

[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion

[-] Key Deleted : HKLM\SOFTWARE\Babylon

[-] Key Deleted : HKLM\SOFTWARE\BabylonToolbar

[-] Key Deleted : HKLM\SOFTWARE\Desksvc

[-] Key Deleted : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

[-] Key Deleted : HKLM\SOFTWARE\DomaIQ

[-] Key Deleted : HKLM\SOFTWARE\Driver-Soft

[-] Key Deleted : HKLM\SOFTWARE\Freeze.com

[-] Key Deleted : HKLM\SOFTWARE\GoforFiles

[-] Key Deleted : HKLM\SOFTWARE\hdcode

[-] Key Deleted : HKLM\SOFTWARE\IB Updater

[-] Key Deleted : HKLM\SOFTWARE\InfoAtoms

[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions

[-] Key Deleted : HKLM\SOFTWARE\InstalledThirdPartyPrograms

[-] Key Deleted : HKLM\SOFTWARE\PIP

[-] Key Deleted : HKLM\SOFTWARE\SweetIM

[-] Key Deleted : HKLM\SOFTWARE\Tarma Installer

[-] Key Deleted : HKLM\SOFTWARE\V9

[-] Key Deleted : HKLM\SOFTWARE\VBMZ

[-] Key Deleted : HKLM\SOFTWARE\visualbee

[-] Key Deleted : HKLM\SOFTWARE\W3I

[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc

[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion

[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke_US Toolbar

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius Professional Edition_is1

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PokerStars.net

[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\BackgroundContainer

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\ConduitSearchScopes

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Mp3Tube

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\PriceGong

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\visualbee

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Yahoo\Companion

[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\DefaultTab

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

***** [ Web browsers ] *****

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogIsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CTID", "ct2418376");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CurrentServerDate", "6-8-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsGetterLastCheckTime", "Wed Aug 03 2011 15:14:35 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DownloadReferralCookieData", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ExternalComponentPollDate5694225620172914022", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstServerDate", "21-7-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTime", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTimeFF3", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FixPageNotFoundErrors", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServerCheckInterval", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HasUserGlobalKeys", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HomePageProtectorEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Initialize", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InitializeCommonPrefs", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationAndCookieDataSentCount", 3);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationId", "ConduitStubGeneric");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationType", "ConduitStubIntegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstalledDate", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsAlertDBUpdated", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsGrouping", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsInitSetupIni", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsMulticommunity", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenThankYouPage", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenUninstallPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsProtectorsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackReloadIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LastLogin_3.5.0.12", "Fri Aug 05 2011 18:00:43 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LatestVersion", "3.3.5.1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipHeight", "83");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipShow", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipUrl", "hxxp://@[email protected]/rank/tooltip/?version=1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipWidth", "295");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MyStuffEnabledAtInstallation", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.OriginalFirstVersion", "3.5.0.12");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchEngineBeforeUnload", "PageRage Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarIsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorToolbarDisabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ServiceMapLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastCheckTime", "Thu Jul 21 2011 11:05:03 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastUpdate", "1311226770");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsInterval", 504);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:02 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ToolbarShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2418376");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.UserID", "UN51694230990578799");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Search", 0);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Toolbar", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.alertChannelId", "812740");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.approveUntrustedApps", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.counterAppsAdded", 1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.LanguagePackLastCheckTime", "Fri Aug 05 2011 08:52:26 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SearchInNewTabLastCheckTime", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastCheckTime", "Fri Aug 05 2011 18:00:42 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastUpdate", "1311797275");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.globalFirstTimeInfoLastCheckTime", "Sat Aug 06 2011 02:00:46 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarAppMetaDataLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarContextMenuLastCheckTime", "Thu Aug 04 2011 11:16:09 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.globalFirstTimeInfoLastCheckTime", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.homepageProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.initDone", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.isAppTrackingManagerOn", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffPublihserMinWidth", 400);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.oldAppsList", "128994482097350312,128994482097506563,111,5694225620172914022,129017823262156499,7997623359991201723,7496640646864546743,1000034,1000080,1000082,1000234,1000515,100[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorDialogDelayInSec", 10);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.testingCtid", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarAppMetaDataLastCheckTime", "Thu Jul 21 2011 11:05:05 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarContextMenuLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.usagesFlag", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogIsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogServiceUrl", "hxxp://clientlog.users.tbccint.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..uninstallLogServiceUrl", "hxxp://uninstall.users.tbccint.com/Uninstall.asmx/RegisterToolbarUninstallation");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.BrowserCompStateIsOpen_1367163180000", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CT2583727", "CT2583727");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CurrentServerDate", "23-12-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsGetterLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"8/4/2011 7:30:02 AM\",\"SourceId\":0,\"OriginSource\":0,\"Referr[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstServerDate", "4-8-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTime", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTimeFF3", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FixPageNotFoundErrors", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServerCheckInterval", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServiceUrl", "hxxp://grouping.tbccint.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HasUserGlobalKeys", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HomePageProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Initialize", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InitializeCommonPrefs", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationAndCookieDataSentCount", 3);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationType", "DirectDownload");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstalledDate", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InvalidateCache", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsGrouping", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsInitSetupIni", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsMulticommunity", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenThankYouPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenUninstallPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsProtectorsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackLastCheckTime", "Mon Dec 22 2014 17:28:56 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackReloadIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackServiceUrl", "hxxp://translation.users.tbccint.com/Translation.ashx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.15.1.0", "Mon Dec 22 2014 17:28:51 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.6.0.10", "Wed Aug 03 2011 21:29:52 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LatestVersion", "3.20.0.4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipHeight", "83");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipUrl", "hxxp://@[email protected]/rank/tooltip/?version=1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipWidth", "295");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MyStuffEnabledAtInstallation", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.OriginalFirstVersion", "3.6.0.10");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioIsPodcast", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateIPServer", "3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateServer", "129175413658100000");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaID", "20556349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaType", "Media Player");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMenuSelectedID", "EBRadioMenu_CT258372720556349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationName", "1.FM%2080s%20%26%2090s%20(USA)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationURL", "hxxp://1.fm/wm/energy80s32k.asx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SavedHomepage", "hxxp://www.google.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchEngineBeforeUnload", "Blackjack-Madness Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarIsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583727&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabLastCheckTime", "Mon Dec 22 2014 17:28:36 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorToolbarDisabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ServiceMapLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastCheckTime", "Tue Dec 23 2014 05:01:06 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastUpdate", "1419314435");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsInterval", 504);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastCheck", "Wed Aug 03 2011 21:29:46 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ToolbarShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrusteLinkUrl", "hxxp://trust.cpccint.com");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,tbclient.tbccint.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,appstrm.com,OurToolbar.co[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.UserID", "UN09478397069999234");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherNetwork", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherPollDate", "Wed Aug 03 2011 21:29:50 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherUnit", "F");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.alertChannelId", "976547");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com;social.tbccint.com;apps.tbccint.com;services.a[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.globalFirstTimeInfoLastCheckTime", "Wed Aug 03 2011 21:29:49 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.homepageProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.initDone", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isAppTrackingManagerOn", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isFirstRadioInstallation", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffPublihserMinWidth", 400);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffSearchUrl", "hxxp://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.revertSettingsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorDialogDelayInSec", 10);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.testingCtid", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarAppMetaDataLastCheckTime", "Mon Dec 22 2014 17:28:58 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarContextMenuLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.LoginRevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3184310&SearchSource=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.UserID", "UN17729284552852997");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.autoDisableScopes", -1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableAlerts", "always");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installId", "ct3184310_little_fish_bar.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3184310\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://LittleFishBar.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"LittleFishBar\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940030380");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_serviceMap_lastUpdate", "1445940029454");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_toolbarSettings_lastUpdate", "1445940030275");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_translation_lastUpdate", "1445940029469");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.CTID", "CT3184310");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.isHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.toolbarName", "LittleFishBar ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarBornServerTime", "2-12-2012");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891652,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM1ODM0MDMzMywidXVpZCI6MjEzMDQzNjc3MDY4NDY4LCJzZXFfaWQiOjMsInNzYiI6MTM1NzQ2MDA1Nn0=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.CBOpenMAMSettings.enc", "MA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&q=&SearchSource=2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.UserID", "UN29308809761562386");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.autoDisableScopes", -1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbcountry_001.enc", "VVM=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbfirsttime.enc", "U3VuIEphbiAwNiAyMDEzIDAwOjE0OjE1IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.installType", "xpe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.google.com%2Fchrome%2Fbrowser%2Fthankyou.html%3Fplatform%3Dwin%26oneclickinstalled%3D1%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openThankYouPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openUninstallPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940029221");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1445940027673");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1445940029339");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1445940028680");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarBornServerTime", "23-12-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891637,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.UserID", "UN52294229241605980");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installId", "air52cc.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.CTID", "CT3247201");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.toolbarName", "InternetHelper1.5 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891626,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.UserID", "UN40166142081052929");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enlargeSearchBox", "{\"enabled\":true,\"maxWidth\":1000,\"minWidth\":250,\"width\":500}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fullUserID", "UN40166142081052929.IN.20130810193525");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installId", "cid3975");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3279411&octid=CT3279411&ISID=ISID_ID&SearchSource=15&CUI=UN40166142081052929&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastVersion", "10.20.0.13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openUninstallPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngineName", "Google");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3279411\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://appbario12.Toolbar.fm//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"appbario12 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.CTID", "CT3279411");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.toolbarName", "appbario12 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:45 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891661,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.isPlayDisplay", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.PG_ENABLE", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.UserID", "UN14837961194955167");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.embeddedsData", "[{\"appId\":\"130058504672798349\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fullUserID", "UN14837961194955167.IN.20130908002906");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installId", "stub.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3287805&octid=CT3287805&ISID=ISID_ID&SearchSource=15&CUI=UN14837961194955167&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastVersion", "10.19.2.5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B6%BF%B9%BB%BF");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAwOTM1OQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BA%B8%BB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMDQyNQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjExOTlfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp", "%B7%B7%BF%BF%E5%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp.enc", "MTE5OV8w");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate", "%D4%B5%C7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate.enc", "Ti9B");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId", "%BE%E9%EA%BC%B8%E7%BE%BC%B3%B6%E9%BF%BF%B3%BA%BA%B9%E7%B3%E8%EA%E8%B6%B3%B9%BB%B6%E8%E9%E8%EA%EB%EB%B8%BD%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId.enc", "OGNkNjJhODYtMGM5OS00NDNhLWJkYjAtMzUwYmNiZGVlMjdl");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchAppId", "130058504672798349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchCount", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3287805\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://VisualBeeV6.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"VisualBee V.6 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.CTID", "CT3287805");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.isHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.toolbarName", "VisualBee V.6 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:47 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891693,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.UserID", "UN29861963635204956");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fullUserID", "UN29861963635204956.IN.20130805001614");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installId", "wjanc528752iqc0riyba");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3292715&octid=CT3292715&ISID=ISID_ID&SearchSource=15&CUI=UN29861963635204956&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastVersion", "10.16.70.5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.revertSettingsEnabled", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3292715\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://SearchFlyBar2.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"SearchFlyBar2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.CTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.toolbarName", "SearchFlyBar2 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarBornServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarLoginClientTime", "Tue Oct 27 2015 02:58:56 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891720,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.UserID", "UN18029757605143900");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableFix404ByUser", "TRUE");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installId", "51946c08150ba0134800048e");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3295548&octid=CT3295548&SearchSource=15&CUI=UN18029757605143900&SSPV=EB_SSPV&Lay=1&UM=2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastVersion", "10.16.2.9");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchAddressUrl", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295548\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly3.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.CTID", "CT3295548");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.toolbarName", "xvidly3 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarBornServerTime", "18-5-2013");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:40 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891683,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.UserID", "UN26692583332569832");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fullUserID", "UN26692583332569832.IN.20130810041100");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installId", "cid1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3295549&octid=CT3295549&ISID=ISID_ID&SearchSource=15&CUI=UN26692583332569832&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastVersion", "10.16.9.6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3287805&CUI=UN14837961194955167&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295549\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly4.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.CTID", "CT3295549");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.toolbarName", "xvidly4 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:48 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891704,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.isPlayDisplay", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.PG_ENABLE", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3303005&SearchSource=2&CUI=UN37266934532419213&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.UserID", "UN37266934532419213");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickFavorites.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickRecent.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000", "%C9%C8%B7%BE%B9%BB%BD%B8%B9%BF%BE%B7%B6%B8%E5%B7%BA%B7%B9%BC%BB%BD%BB%BA%BC%B8%BD%BD%E5%CC%EF%F8%EB%EC%F5%FE");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000.enc", "Q0IxODM1NzIzOTgxMDJfMTQxMzY1NzU0NjI3N19GaXJlZm94");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime", "%D3%F5%F4%A6%D0%E7%F4%A6%B7%B9%A6%B8%B6%B7%BA%A6%B6%B6%C0%B9%B7%C0%B9%BD%A6%CD%D3%DA%B3%B6%BE%B6%B6%A6%AE%D6%E7%E9%EF%EC%EF%E9%A6%D9%FA%E7%F4%EA%E7%F8%EA%A6%DA%EF%F[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime.enc", "TW9uIEphbiAxMyAyMDE0IDAwOjMxOjM3IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.embeddedsData", "[{\"appId\":\"130136189134643350\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fullUserID", "UN37266934532419213.IN.20131027122926");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installId", "stub.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3303005&octid=CT3303005&ISID=ISID_ID&SearchSource=15&CUI=UN37266934532419213&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastVersion", "10.21.1.7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BD%BB%BC");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAxMDc1Ng==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B7%B7%BA%B8");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMTE0Mg==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps", "%E1%E3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjEwNDNfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp", "%B7%B6%BA%B9%E5%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp.enc", "MTA0M18w");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate", "%D4%B5%C7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate.enc", "Ti9B");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId", "%BE%B9%E7%E8%E9%BE%BC%EB%B3%BF%B7%EB%BE%B3%BA%E9%BD%BA%B3%E8%E8%B7%EB%B3%BD%BE%E8%BF%EC%B7%B9%EC%E7%BA%BE%BF");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId.enc", "ODNhYmM4NmUtOTFlOC00Yzc0LWJiMWUtNzhiOWYxM2ZhNDg5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid", "%F9%EE%EB%B7%B6%B7%BA%BE%B7%BA%BB%B7%B6%B7%BA%B7%B7%BF%B7%B7%B7%BD%BA%B7%B7%BE%BB%B9%BB%B7%B8%B7%BD%BB%BA%B7%B7%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid.enc", "c2hlMTAxNDgxNDUxMDE0MTE5MTExNzQxMTg1MzUxMjE3NTQxMTA=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3292715&CUI=UN29861963635204956&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngine", "SearchFlyBar2 Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site", "%EE%FA%FA%F6%C0%B5%B5%F8%EF%B4%F9%EB%E7%F8%E9%EE%B4%FF%E7%EE%F5%F5%B4%E9%F5%F3%B5%E5%FF%F2%FA%C3%C7%B6%D9%D5%BE%FE%FC%D5%DA%C9%BF%DD%CA%CB%BE%C7%BC%B7%F6%DE%D4%FF[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site.enc", "aHR0cDovL3JpLnNlYXJjaC55YWhvby5jb20vX3lsdD1BMFNPOHh2T1RDOVdERThBNjFwWE55b0E7X3lsdT1YM29ETVRFemJIQnlOMlF5QkdOdmJHOERaM0V4QkhCdmN3TXhCSFowYVdRRFFqRXhOakJHWHpFRW[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchAppId", "130136189134643350");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchCount", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchUserMode", "8");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3303005\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Vafmusic12.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Vafmusic12 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_Configuration_lastUpdate", "1445939999270");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1445939997807");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appsMetadata_lastUpdate", "1445939998876");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1445939998187");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_login_10.21.1.7_lastUpdate", "1445940779233");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1445939998843");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_searchAPI_lastUpdate", "1445940001213");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_serviceMap_lastUpdate", "1445939994023");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_setupAPI_lastUpdate", "1445939998836");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarContextMenu_lastUpdate", "1445939998882");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_translation_lastUpdate", "1445939997777");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.CTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.toolbarName", "Vafmusic12 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarBornServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarInstallDate", "27-10-2015 02:59:52");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarLoginClientTime", "Tue Oct 27 2015 02:59:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001", "%EE%FA%FA%F6%C0%B5%B5%FD%FD%FD%B4%F3%FF%EC%F8%EB%EB%F6%E7%FF%F9%EF%FA%EB%B4%E9%F5%F3%B5%F3%EB%F3%E8%EB%F8%F9%B5%EC%F2%F3%EC%F6%B4%EE%FA%F3%F2%C0%C0%C0%E9%F2%EF%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001.enc", "aHR0cDovL3d3dy5teWZyZWVwYXlzaXRlLmNvbS9tZW1iZXJzL2ZsbWZwLmh0bWw6OjpjbGlja2hhbmRsZXI6OjoxNDEzNjU3NzYwNzczLCwsaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxl[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891672,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitHomepagesList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.backgroundjs", "\n\n/*****************************************************************************[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_meta.value", "%7B%22images/emaze.png%22%3A%7B%22id%22%3A726444%2C%22ver%22%3A[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_resource_726445.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.js", "\n\n /************************************************************************************\[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"isBackground!==true)&&(typeof _[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_246.code", "var _0x8f59=[\"10\",\"11\",\"19\",\"20\",\"26\",\"27\",\"28\",\"29\",\"[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_32.code", "appAPI.hooks.addHook(\"images\",(function(a){return function(){var v={bg[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_376.code", "(function(){var a=(function(){var l=function(){return appAPI&&appAPI.in[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_5.code", "(function(f){f.ui=f.ui{};var e=/leftcenterright/,d=/topcenterbottom[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(a){return function(){var [...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "14cef62c18e227b3097606a29c206a8c");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.dashlane.safesearchcapable", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.admin", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.aflt", "babsst");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.autoRvrt", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.dfltLng", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.excTlbr", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.ffxUnstlRst", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.id", "4e620d530000000000000019b915d7d7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlDay", "15843");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlRef", "sst");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.newTab", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prdct", "delta");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prtnrId", "delta");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.rvrt", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.smplGrp", "none");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrId", "base");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsn", "1.8.21.0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsnTs", "1.8.21.021:43:28");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsni", "1.8.21.0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babExt", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babTrack", "affID=121240&tt=gc_");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.srcExt", "ss");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.enabledAddons", "5kffxtbr%40iWon_5k.com:1.39.0.30675,ffxtlbr%40funmoods.com:1.5.1,links%40rivalgaming.com:1.0.0,smartlinks%40getsmartlinks.com:1.0.35,%7B1930e38a-deef-4cf4-9bfb-9[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cntry", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cv", "cv5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dfltSrch", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hdrMd5", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hmpg", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.lastVrsnTs", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.newTab", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.sg", "free");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.smplGrp", "free");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=D767A45E-2DF1-4316-8A13-78E0F179708C&n=781b1bc4&ptnrS=ZLxdm002YYus&si=CISx0-yw168CFakZQgodAx[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.hp.user.defined", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.initialized", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.success", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.toolbarId", "D767A45E-2DF1-4316-8A13-78E0F179708C");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.lastActivePing", "1445939887122");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.weather.location", "94540");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "[email protected]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.machineId", "KSECXPB5PI8KDEZTH8V81TMU2MHJDJ+X8NSHOBYFT4RHW6IICA3SZ6Y7UOGBECFWBXQMMUKAOQMEYHXLVZCSZA");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tag=bds-p18-serp-us-ff-20&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf31[...]

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/mb128

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com_

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : isearch.avg.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : r

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : funmoods.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.conduit.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : windows-live-photo-gallery.en.softonic.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : babylon.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : trovi.search

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : lasaoren.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : cassiopesa.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com_

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : apfdadfinodckpcehhdhjlgiphgnbfci

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pbjikboenpfhbbejgkoklgkhjpfogcam

*************************

:: Winsock settings cleared

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [197660 bytes] ##########

#18
zep516

Posted 29 October 2015 - 03:37 PM

Trusted Helper

Malware Removal
7,018 posts

Next

Please download Junkware Removal Tool to your Desktop.
Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.

#19
jbj1162

Posted 29 October 2015 - 03:58 PM

Member

Topic Starter
Member
22 posts

ok it does same as previous program attempt comes up wiht box about changing computer when I click yes it makes a sound of 2 beeps and goes away & nothing happens

#20
zep516

Posted 29 October 2015 - 04:07 PM

Trusted Helper

Malware Removal
7,018 posts

When you get time see if it will run in safemode,

To do that;

Restart the computer.

During restart
Keep pressing the F8 Key once every second
You should get a black screen with white letters, that's the advanced boot options menu.
Use the arrow key and select Safemode from the list, then hit enter on the keyboard.
Let the computer boot into SafeMode, things will look funny that's normal.

Lets see if junkremoval tool will run from there.

Thanks
Joe

#21
jbj1162

Posted 29 October 2015 - 04:11 PM

Member

Topic Starter
Member
22 posts

ok gonna try now

#22
jbj1162

Posted 29 October 2015 - 10:40 PM

Member

Topic Starter
Member
22 posts

Again sorry for the delay

I tried it in safe mode and got nothing

#23
zep516

Posted 30 October 2015 - 04:09 PM

Trusted Helper

Malware Removal
7,018 posts

Hello,

Don't worry about the delay, I've got busy myself.

Please run combofix. Don't fool around with this program follow the directions exactly.....

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there. Very important please save to desktop

Link 1
Link 2
Link 3

1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

Please post the Log from Combofix

#24
jbj1162

Posted 31 October 2015 - 01:19 AM

Member

Topic Starter
Member
22 posts

ok ran combofix computer had unexpected error and was restarting and then the BLUE screen of DEATH came up so I restarted computer then a box came up saying windows has recovered from unexpected error then ran combofix and it ran all the way thru and printed the log below after I copied the log and was gonna paste it the BLUE screen of Death came up again so I restarted typed this b4 it came up again here's the LOG I copied the log then got blue screen went to paste log and it's gone did a search for it and it wanted to run program again do you know where I can find the log from combofix ?

#25
zep516

Posted 31 October 2015 - 06:16 AM

Trusted Helper

Malware Removal
7,018 posts

The log from Combofix is or should be on the "C'drive

Located at c:\combofix.txt

Don't run or try running combofix anymore.

See if you can find it.

Then
Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

Double-click to run it. When the tool opens click Yes to disclaimer.
Make sure you checkmark Addition.txt box.
Press Scan button.
Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.

I will be back later today around 4pm EST,

Thanks
Joe

#26
jbj1162

Posted 31 October 2015 - 12:04 PM

Member

Topic Starter
Member
22 posts

ok found combofix txt heres that and Ill run farbar now

ComboFix 15-10-28.01 - Jesus 10/30/2015 23:40:42.2.2 - x86

Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2302.1005 [GMT -7:00]

Running from: c:\users\Jesus\Desktop\jbj fix this [bleep]\ComboFix.exe

Command switches used :: log

AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}

SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\install.exe

c:\programdata\2308189059

c:\users\Jesus\AppData\Local\ArcadeFrontier\ArCAdefrontier.dll

c:\users\Jesus\AppData\Roaming\inst.exe

c:\users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe

c:\users\Jesus\AppData\Roaming\vso_ts_preview.xml

c:\users\Public\sdelevURL.tmp

c:\windows\wininit.ini

((((((((((((((((((((((((( Files Created from 2015-09-28 to 2015-10-31 )))))))))))))))))))))))))))))))

2015-10-31 06:50 . 2015-10-31 06:50 -------- d-----w- c:\users\Default\AppData\Local\temp

2015-10-30 13:38 . 2015-10-30 13:55 -------- d-----w- C:\jbj fix this [bleep]

2015-10-29 22:12 . 2015-10-31 06:50 -------- d-----w- c:\users\Jesus\AppData\Roaming\DMCache

2015-10-29 21:19 . 2015-10-29 21:25 -------- d-----w- C:\AdwCleaner

2015-10-28 12:46 . 2015-10-29 20:08 -------- d-----w- C:\FRST

2015-10-27 17:14 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

2015-10-27 17:14 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

2015-10-27 17:14 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

2015-10-27 17:14 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

2015-10-27 17:14 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

2015-10-27 17:14 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

2015-10-27 17:14 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

2015-10-27 17:13 . 2012-06-02 22:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

2015-10-27 17:13 . 2012-06-02 22:12 33792 ----a-w- c:\windows\system32\wuapp.exe

2015-10-27 09:33 . 2015-10-27 10:32 3996360 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe

2015-10-27 08:03 . 2015-10-27 08:03 -------- d-----w- c:\users\Public\Speedup Sessions

2015-10-27 05:29 . 2015-10-27 06:06 -------- d-----w- c:\program files\pandasecuritytb

2015-10-27 04:32 . 2015-10-27 09:41 -------- d-----w- c:\programdata\panda_url_filtering

2015-10-27 04:27 . 2015-10-27 06:09 -------- d-----w- c:\program files\Panda Security

2015-10-27 04:22 . 2015-10-27 06:05 -------- d-----w- c:\programdata\Panda Security

2015-10-23 20:18 . 2015-10-23 20:18 -------- d-----w- c:\program files\Common Files\Microsoft

2015-10-23 20:04 . 2015-10-27 09:41 -------- d-----w- c:\programdata\Vafwat

2015-10-23 20:04 . 2015-10-27 09:41 -------- d--h--w- c:\programdata\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}

2015-10-15 16:50 . 2015-10-27 09:41 -------- d-----w- c:\program files\grabzilla pro V11

2015-10-14 08:09 . 2015-10-14 08:09 -------- d-----w- c:\program files\Infogrames

2015-10-14 08:09 . 2015-10-14 08:09 -------- d-----w- c:\program files\directx

2015-10-13 04:33 . 2015-10-13 19:21 -------- d-----w- c:\users\Jesus\AppData\Roaming\80l3ug2MOcd

2015-10-13 04:30 . 2015-10-13 20:17 -------- d-----w- c:\users\Jesus\AppData\Roaming\SoftAd

2015-10-12 13:53 . 2015-10-12 13:53 -------- d-----w- c:\users\Jesus\AppData\Local\cu

2015-10-11 10:51 . 2015-10-11 10:51 -------- d-----w- c:\users\Jesus\AppData\Roaming\c

2015-10-11 09:19 . 2015-10-11 09:19 -------- d-----w- c:\users\Jesus\AppData\Local\Opera Software

2015-10-11 09:09 . 2015-10-11 09:09 -------- d-----w- c:\users\Jesus\AppData\Roaming\Opera Software

2015-10-11 09:01 . 2015-10-11 09:01 -------- d-----w- c:\users\Jesus\AppData\Local\CEF

2015-10-11 08:45 . 2015-10-11 15:04 -------- d-----w- c:\program files\Opera

2015-10-11 08:18 . 2015-10-11 08:18 -------- d-----w- c:\users\Jesus\AppData\Roaming\Itibiti

2015-10-11 08:15 . 2015-10-13 20:19 -------- d-----w- c:\programdata\KeyStream

2015-10-11 07:57 . 2015-10-13 20:19 -------- d-----w- c:\program files\Faster Web

2015-10-11 07:43 . 2015-10-11 07:45 -------- d-----w- c:\program files\PCAPDownloader

2015-10-11 07:43 . 2015-10-11 07:45 -------- d-----w- c:\users\Jesus\AppData\Local\PlaythruPlayer

2015-10-11 07:39 . 2015-10-11 07:39 -------- d-----w- c:\programdata\{4BB8A37B-1B3A-72FD-AABC-027F7A3ED1F1}

2015-10-11 07:34 . 2015-10-13 20:17 -------- d-----w- c:\users\Jesus\AppData\Local\{7F6C4930-5BC4-2588-365C-00601234FCF8}

2015-10-11 07:30 . 2015-10-13 20:19 -------- d-----w- c:\program files\winnetmng

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2015-10-27 10:32 . 2012-04-05 09:18 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2015-10-27 10:32 . 2011-09-17 04:12 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2015-10-13 21:48 . 2013-05-08 05:12 55912 ----a-w- c:\windows\system32\drivers\avnetflt.sys

2015-10-13 21:48 . 2013-03-03 03:57 108448 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2015-08-28 20:09 . 2015-08-28 20:09 6420480 ----a-w- c:\program files\GUTD05A.tmp

2013-04-14 08:48 . 2013-04-14 08:48 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

------- Sigcheck -------

Note: Unsigned files aren't necessarily malware.

[-] 2011-04-22 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7600.16385] . . c:\windows\System32\user32.dll

[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]

@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"

[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]

2011-03-02 15:23 68216 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2011-04-05 3278232]

"Spotify"="c:\users\Jesus\AppData\Roaming\Spotify\Spotify.exe" [2012-05-07 9478320]

"Spotify Web Helper"="c:\users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-07 932528]

"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2013-01-17 6860288]

"MobileAppSync"="c:\program files\Mobile App Sync\D2MClient.exe" [2013-10-31 332800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTHelper"="CTHELPER.EXE" [2007-04-09 19456]

"CTxfiHlp"="CTXFIHLP.EXE" [2007-04-09 19968]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2015-10-13 782520]

"Plantronics MyHeadset Updater"="c:\program files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe" [2013-04-04 78336]

"DivXMediaServer"="c:\program files\DivX\DivX Media Server\DivXMediaServer.exe" [2013-09-11 450560]

"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2013-08-29 1861968]

"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2015-07-16 286272]

"RealDownloader"="c:\program files\RealNetworks\RealDownloader\downloader2.exe" [2015-06-17 608320]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2015-06-09 334896]

"BlueStacks Agent"="c:\program files\BlueStacks\HD-Agent.exe" [2015-08-20 904824]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"DevconDefaultDB"="c:\windows\system32\READREG" [X]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

AdFender.lnk - c:\program files\AdFender\AdFender.exe -autostart [2013-12-12 3228080]

PlutoTV.lnk - c:\program files\Pluto TV\PlutoTV.exe [2015-9-15 93077896]

RealTimes.lnk - c:\program files\Real\RealPlayer\RPDS\Bin\rpsystray.exe [2015-7-16 1132120]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux4"=wdmaud.drv

R2 AntiVirMailService;Avira Mail Protection;c:\program files\Avira\AntiVir Desktop\avmailc7.exe [2015-10-13 932912]

R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2015-10-13 461672]

R2 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2015-10-13 1148688]

R3 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]

R3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 2012\DfsdkS.exe [2009-08-25 406016]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-05-02 83864]

R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-27 25088]

R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-05-02 181912]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-04-22 1343400]

S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF32.sys [2010-11-04 102728]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2015-05-05 37896]

S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2015-10-13 55912]

S2 BstHdDrv;BlueStacks Hypervisor;c:\program files\BlueStacks\HD-Hypervisor-x86.sys [2015-08-20 132216]

S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\BlueStacks\HD-LogRotatorService.exe [2015-08-20 413304]

S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files\BlueStacks\HD-UpdaterService.exe [2015-08-20 839288]

S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2011-03-28 86792]

S2 RealPlayerUpdateSvc;RealPlayer Update Service;c:\program files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856]

S2 RealTimes Desktop Service;RealTimes Desktop Service;c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-16 1115224]

S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-04-12 45464]

S3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]

S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-05-02 47360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2015-10-27 10:17 997704 ----a-w- c:\program files\Google\Chrome\Application\46.0.2490.80\Installer\chrmstp.exe

Contents of the 'Scheduled Tasks' folder

2015-10-30 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job

- c:\users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 14:41]

2015-10-31 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job

- c:\users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 14:41]

------- Supplementary Scan -------

IE: Customize Menu

IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm

IE: Download all with Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm

IE: Download selected with Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm

IE: Download video with Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm

IE: Download with FLV Blaster

IE: Download with FLV Blaster\Contexts

IE: Download with FLV Blaster\Flags

IE: Download with Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm

IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm

IE: Fill Forms

IE: RoboForm Toolbar

IE: Save Forms

TCP: DhcpNameServer = 192.168.1.254

FF - ProfilePath - c:\users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/

FF - ExtSQL: 2015-10-27 02:31; [email protected]; c:\programdata\Free Download Manager\Firefox\Extensions\2.0.17

FF - ExtSQL: !HIDDEN! 2011-09-15 03:44; [email protected]; c:\users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]

FF - ExtSQL: !HIDDEN! 2012-04-28 03:56; [email protected]_5k.com; c:\program files\iWon_5k\bar\1.bin

- - - - ORPHANS REMOVED - - - -

Toolbar-{9565115d-c7d6-46d3-bd63-b67b481a4368} - (no file)

Toolbar-10 - (no file)

HKCU-Run-Chrome - c:\progra~2\taskhost.exe

HKLM-Run-Chrome - c:\progra~2\taskhost.exe

HKU-Default-Run-Chrome - c:\progra~2\taskhost.exe

AddRemove-AdFender - c:\program files\AdFender\uninst.exe

AddRemove-Media Player - Codec Pack - c:\windows\system32\C2MP\Uninst.exe

AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe

AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe

AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe

AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe

AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe

AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe

AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe

AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe

AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe

AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe

AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe

--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]

@Denied: (Full) (Everyone)

"scansk"=hex(0):61,d7,f3,31,28,78,bb,cf,12,ab,8b,6f,d3,cd,2a,5e,99,8b,41,ec,89,

dc,17,c3,4d,20,42,a6,d8,6b,27,d0,5c,cb,f8,1c,d5,aa,5c,e4,00,00,00,00,00,00,\

[HKEY_USERS\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{80910355-ac15-4f7b-9ff4-88592fec7f59}]

@Denied: (Full) (Everyone)

@Allowed: (Read) (RestrictedCode)

"Model"=dword:000000f2

"Therad"=dword:0000001e

"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,

1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

Completion time: 2015-10-30 23:55:32

ComboFix-quarantined-files.txt 2015-10-31 06:55

Pre-Run: 86,495,625,216 bytes free

Post-Run: 87,212,945,408 bytes free

- - End Of File - - F6F6A61A37C75B1503F95A4B2E62EC26

A36C5E4F47E84449FF07ED3517B43A31

#27
jbj1162

Posted 31 October 2015 - 12:14 PM

Member

Topic Starter
Member
22 posts

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-10-2015

Ran by Jesus (administrator) on OPTIPLEX (31-10-2015 11:08:34)

Running from C:\Users\Jesus\Desktop\jbj fix this [bleep]

Loaded Profiles: Jesus (Available Profiles: Jesus)

Platform: Microsoft Windows 7 Ultimate (X86) Language: English (United States)

Internet Explorer Version 9 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe

(Creative Technology Ltd) C:\Windows\System32\CtHelper.exe

(Plantronics) C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe

(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-UpdaterService.exe

() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe

() C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(FreeDownloadManager.ORG) C:\Program Files\Free Download Manager\fdm.exe

(Appcaster) C:\Program Files\Mobile App Sync\D2MClient.exe

(AdFender, Inc.) C:\Program Files\AdFender\AdFender.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe

(Dropbox, Inc.) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CTHelper] => C:\Windows\system32\CTHELPER.EXE [19456 2007-04-09] (Creative Technology Ltd)

HKLM\...\Run: [CTxfiHlp] => C:\Windows\system32\CTXFIHLP.EXE [19968 2007-04-09] (Creative Technology Ltd)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [782520 2015-10-13] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Plantronics MyHeadset Updater] => C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [78336 2013-04-04] (Plantronics)

HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-10] (DivX, LLC)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-28] ()

HKLM\...\Run: [TkBellExe] => c:\program files\real\realplayer\Update\realsched.exe [286272 2015-07-16] (RealNetworks, Inc.)

HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [608320 2015-06-17] ()

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

HKLM\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [904824 2015-08-19] (BlueStack Systems, Inc.)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3278232 2011-04-05] (Tonec Inc.)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Spotify] => C:\Users\Jesus\AppData\Roaming\Spotify\Spotify.exe [9478320 2012-05-06] (Spotify Ltd)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Spotify Web Helper] => C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [932528 2012-05-06] ()

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Free Download Manager] => C:\Program Files\Free Download Manager\fdm.exe [6860288 2013-01-16] (FreeDownloadManager.ORG)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [MobileAppSync] => C:\Program Files\Mobile App Sync\D2MClient.exe [332800 2013-10-30] (Appcaster)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\DEERDR~1.SCR

HKU\S-1-5-18\...\Run: [DevconDefaultDB] => C:\Windows\system32\READREG /SILENT /FAIL=1

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2011-03-02] (Tonec Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk [2014-04-24]

ShortcutTarget: AdFender.lnk -> C:\Program Files\AdFender\AdFender.exe (AdFender, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PlutoTV.lnk [2015-09-15]

ShortcutTarget: PlutoTV.lnk -> C:\Program Files\Pluto TV\PlutoTV.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-07-16]

ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)

Startup: C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-27]

ShortcutTarget: Dropbox.lnk -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{0DB14313-E9FB-4965-B298-0F23C7833E27}: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{3ED60023-FFC1-4A0C-9430-6DB5D36DD2C1}: [DhcpNameServer] 192.168.42.129

Tcpip\..\Interfaces\{B29FC133-F3C8-42AE-8A78-9C5B5CAB1181}: [DhcpNameServer] 192.168.1.254

Internet Explorer:

==================

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-11595131-3550647590-3570146784-1001 -> OldDefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)

BHO: No Name -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2011-08-05] (Siber Systems Inc.)

BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-17] (Oracle Corporation)

Toolbar: HKLM - &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2011-08-05] (Siber Systems Inc.)

DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB

DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

FireFox:

========

FF ProfilePath: C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default

FF Homepage: hxxp://www.google.com/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-27] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-16] (DivX, LLC.)

FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2013-10-28] (DivX, LLC)

FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-07-19] (Foxit Corporation)

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-17] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-17] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll [2009-08-17] ( Microsoft Corporation)

FF Plugin: @oberon-media.com/ONCAdapter -> C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll [2012-05-31] (Oberon-Media )

FF Plugin: @real.com/nppl3260;version=18.0.1.9 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-07-16] (RealNetworks, Inc.)

FF Plugin: @real.com/nprpjplug;version=12.0.1.647 -> c:\program files\real\realplayer\Netscape6\nprpjplug.dll [2011-07-09] (RealNetworks, Inc.)

FF Plugin: @real.com/nprpplugin;version=18.0.1.9 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-07-16] (RealTimes)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)

FF Plugin: npEpicPlayDisplayHost -> C:\Program Files\EpicPlay\npEpicHost.dll [2011-10-04] ( )

FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jesus\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2011-10-21] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: @yahoo.com/BrowserPlus,version=2.9.8 -> C:\Users\Jesus\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll [2010-08-04] (Yahoo! Inc.)

FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: www.exent.com/GameTreatWidget -> C:\Program Files\Free Ride Games\npGameTreatWidget.dll [No File]

FF Extension: RivalGaming - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2012-01-02] [not signed]

FF Extension: EpicPlay Games - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2011-09-20] [not signed]

FF Extension: LivingPlay TextLinks - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2011-08-21] [not signed]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected]_5k.com [2015-10-28] [not signed]

FF Extension: Avira Browser Safety - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]

FF Extension: flashbugcoursevectorcom - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]

FF Extension: TimeLineRemove.Com - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-02-19] [not signed]

FF Extension: jid1xUfzOsOFlzSOXgjetpack - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]

FF Extension: RivalGaming - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-01-02] [not signed]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-09-16] [not signed]

FF Extension: ArcadeWeb - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-07-27] [not signed]

FF Extension: InternetHelper1.5 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} [2012-11-02] [not signed]

FF Extension: ArcadeFrontier - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{1a68cbde-3e4c-4fae-bf49-af5ab9868e53} [2013-08-15] [not signed]

FF Extension: Vafmusic12 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{38e3a123-98e8-46fc-8729-f4b49de90555} [2013-10-27] [not signed]

FF Extension: xvidly3 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{3c2adea7-a96a-4c26-adcb-9e939365b2ae} [2013-05-15] [not signed]

FF Extension: appbario12 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00} [2013-09-15] [not signed]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00}.oldbackup [2013-09-15] [not signed]

FF Extension: MixiDJ V34 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{55b95864-3251-45e9-bb30-1a82589aaff1} [2013-05-02] [not signed]

FF Extension: ShopToWin4 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{6cbc25b0-0a52-11df-8a39-0800200c9a66} [2015-05-26] [not signed]

FF Extension: uTorrentControl_v2 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6} [2013-01-05] [not signed]

FF Extension: xvidly4 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{7dfe7f41-1b0b-48a7-b58c-5389f7746c33} [2013-08-10] [not signed]

FF Extension: HP Detect - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2012-07-11] [not signed]

FF Extension: LittleFishBar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{c28f5072-1bfa-42f0-ba55-5a802d3490cb} [2012-11-28] [not signed]

FF Extension: Blackjack-Madness Community Toolbar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{ca9aeaa0-4588-4bbe-99af-8fb0a0a9e5e1} [2012-10-19] [not signed]

FF Extension: ShopToWin23 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{cea91efe-0f31-40f8-ab54-7b89290323fa} [2015-05-26] [not signed]

FF Extension: Greasemonkey - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-01-08] [not signed]

FF Extension: ShopToWin6 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{e68d0d96-5f18-496c-87f2-c0d521d78fbe} [2015-05-26] [not signed]

FF Extension: SearchFlyBar2 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{efc335aa-59ec-45b0-b287-739521153d5b} [2013-08-05] [not signed]

FF Extension: VisualBee V.6 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{f0af464e-5167-45cf-9cf0-66b396d1918c} [2013-09-08] [not signed]

FF Extension: FlyOrDie Quick Java Installer - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-04-28] [not signed]

FF Extension: PutLockerDownloader - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-11-06] [not signed]

FF Extension: BetterLinks - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-09-16] [not signed]

FF Extension: Casino Toolbar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\wagerlogic.xpi [2010-02-02] [not signed]

FF Extension: Mason - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{F632A5EA-F825-4AE7-94B5-233CFBA9F423}.xpi [2011-10-05] [not signed]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-04-14] [not signed]

FF Extension: Super Web Accelerator ! - C:\Program Files\Mozilla Firefox\distribution\bundles\firefox [2015-10-13] [not signed]

FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2015-10-27] [not signed]

FF HKLM\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox

FF Extension: Roboform Toolbar for Firefox - C:\Program Files\Siber Systems\AI RoboForm\Firefox [2011-08-05] [not signed]

FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Firefox\Extensions: [[email protected]] - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3 [2012-03-23] [not signed]

FF HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\SeaMonkey\Extensions: [[email protected]] - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\[email protected] [not found]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\{DE1C78C1-2762-47f6-A1D9-1B7866FE7EB4} [not found]

FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{6311158d-1248-4c22-b80e-0fce899a0c7c} [not found]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [not found]

FF Extension: Dashlane - C:\Users\Jesus\AppData\Roaming\Dashlane\3.5.2.91395\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f} [2015-09-03] [not signed]

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.com/

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll ()

CHR Profile: C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Chrome Web Store Payments) - C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-28]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [932912 2015-10-13] (Avira Operations GmbH & Co. KG)

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [461672 2015-10-13] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [461672 2015-10-13] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1148688 2015-10-13] (Avira Operations GmbH & Co. KG)

S3 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [437880 2015-08-19] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [413304 2015-08-19] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [839288 2015-08-19] (BlueStack Systems, Inc.)

S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2012\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]

S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]

R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-06-17] ()

R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-16] (RealNetworks, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-10-13] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-07-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [55912 2015-10-13] (Avira Operations GmbH & Co. KG)

S3 AX88772; C:\Windows\System32\DRIVERS\ax88772.sys [69632 2013-12-03] (ASIX Electronics Corp.)

R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [132216 2015-08-19] (BlueStack Systems)

R3 COMMONFX.DLL; C:\Windows\System32\COMMONFX.DLL [98600 2007-04-18] (Creative Technology Ltd)

S3 CSRBC; C:\Windows\System32\Drivers\csrbcx86.sys [31744 2013-04-04] (CSR plc.)

S3 CT20XUT.DLL; C:\Windows\System32\CT20XUT.DLL [164608 2007-04-12] (Creative Technology Ltd.)

R3 CTAUDFX.DLL; C:\Windows\System32\CTAUDFX.DLL [546048 2007-04-12] (Creative Technology Ltd)

S3 ctdvda2k; C:\Windows\System32\drivers\ctdvda2k.sys [347128 2007-04-10] (Creative Technology Ltd)

S3 CTEAPSFX.DLL; C:\Windows\System32\CTEAPSFX.DLL [168192 2007-04-12] (Creative Technology Ltd)

S3 CTEDSPFX.DLL; C:\Windows\System32\CTEDSPFX.DLL [280320 2007-04-12] (Creative Technology Ltd)

S3 CTEDSPIO.DLL; C:\Windows\System32\CTEDSPIO.DLL [128768 2007-04-12] (Creative Technology Ltd)

S3 CTEDSPSY.DLL; C:\Windows\System32\CTEDSPSY.DLL [323328 2007-04-12] (Creative Technology Ltd)

S3 CTERFXFX.DLL; C:\Windows\System32\CTERFXFX.DLL [94976 2007-04-12] (Creative Technology Ltd)

S3 CTEXFIFX.DLL; C:\Windows\System32\CTEXFIFX.DLL [1317632 2007-04-12] (Creative Technology Ltd.)

S3 CTHWIUT.DLL; C:\Windows\System32\CTHWIUT.DLL [66816 2007-04-12] (Creative Technology Ltd.)

R3 CTSBLFX.DLL; C:\Windows\System32\CTSBLFX.DLL [560384 2007-04-12] (Creative Technology Ltd)

R3 ha10kx2k; C:\Windows\System32\drivers\ha10kx2k.sys [797992 2007-04-10] (Creative Technology Ltd)

R3 hap16v2k; C:\Windows\System32\drivers\hap16v2k.sys [163112 2007-04-10] (Creative Technology Ltd)

S3 hap17v2k; C:\Windows\System32\drivers\hap17v2k.sys [189736 2007-04-10] (Creative Technology Ltd)

S3 HTCAND32; C:\Windows\System32\Drivers\ANDROIDUSB.sys [25088 2009-10-26] (HTC, Corporation) [File not signed]

S3 LVUSBSta; C:\Windows\System32\DRIVERS\LVUSBSta.sys [41888 2007-05-11] (Logitech Inc.)

R0 MxEFUF; C:\Windows\System32\DRIVERS\MxEFUF32.sys [102728 2010-11-04] (Matrox Graphics Inc.)

R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)

R3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [21792 2011-04-13] (Microsoft Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-09] (Avira Operations GmbH & Co. KG)

S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [104064 2006-02-23] (Microsoft Corporation) [File not signed]

S3 catchme; \??\C:\Users\Jesus\AppData\Local\Temp\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-31 00:01 - 2015-10-31 00:01 - 00161512 _____ C:\Windows\Minidump\103115-27409-01.dmp

2015-10-30 23:55 - 2015-10-30 23:55 - 00018049 _____ C:\ComboFix.txt

2015-10-30 23:33 - 2015-10-30 23:33 - 00153096 _____ C:\Windows\Minidump\103015-23587-01.dmp

2015-10-30 23:31 - 2015-10-30 23:31 - 00159608 _____ C:\Windows\Minidump\103015-21840-01.dmp

2015-10-30 23:23 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe

2015-10-30 23:23 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe

2015-10-30 23:23 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe

2015-10-30 23:22 - 2015-10-30 23:55 - 00000000 ____D C:\Qoobox

2015-10-30 23:22 - 2015-10-30 23:53 - 00000000 ____D C:\Windows\erdnt

2015-10-30 06:43 - 2015-10-30 06:43 - 00000000 ____D C:\Users\Jesus\Desktop\New folder

2015-10-30 06:38 - 2015-10-30 06:55 - 00000000 ____D C:\jbj fix this [bleep]

2015-10-29 15:12 - 2015-10-30 23:50 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\DMCache

2015-10-29 14:19 - 2015-10-29 14:25 - 00000000 ____D C:\AdwCleaner

2015-10-29 13:52 - 2015-10-29 13:54 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024.exe

2015-10-28 05:46 - 2015-10-31 11:08 - 00000000 ____D C:\FRST

2015-10-28 05:32 - 2015-10-30 23:19 - 00000000 ____D C:\Users\Jesus\Desktop\jbj fix this [bleep]

2015-10-28 03:08 - 2015-10-28 03:08 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024 (2).exe

2015-10-28 03:04 - 2015-10-28 03:05 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024 (1).exe

2015-10-28 02:58 - 2015-10-28 02:58 - 00001590 _____ C:\Users\Jesus\Desktop\aswMBR - Shortcut.lnk

2015-10-28 02:12 - 2015-10-28 02:12 - 00001628 _____ C:\Users\Jesus\Desktop\AppRemover - Shortcut.lnk

2015-10-28 02:08 - 2015-10-28 02:10 - 13377536 _____ C:\Users\Jesus\Downloads\OPSWAT_GEARS_CLIENT_3445-7c867995737c1853977386e89a5560c5.msi

2015-10-27 23:32 - 2015-10-27 23:36 - 01190616 _____ (Adobe Systems Incorporated) C:\Users\Jesus\Downloads\flashplayer19_ga_install.exe

2015-10-27 10:24 - 2015-10-27 10:25 - 38319888 _____ (Microsoft Corporation) C:\Users\Jesus\Desktop\mpas-fe.exe

2015-10-27 10:14 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-10-27 10:14 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-10-27 10:14 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-10-27 10:14 - 2012-06-02 15:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-10-27 10:14 - 2012-06-02 15:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-10-27 10:14 - 2012-06-02 15:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-10-27 10:14 - 2012-06-02 15:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-10-27 10:13 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-10-27 10:13 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-10-27 03:19 - 2015-10-27 03:19 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-10-27 03:19 - 2015-10-27 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-10-27 02:56 - 2015-10-27 02:56 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-10-27 02:52 - 2015-10-30 09:25 - 03373292 _____ C:\Windows\system32\CFG1315048787

2015-10-27 02:33 - 2015-10-27 03:32 - 03996360 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe

2015-10-27 01:03 - 2015-10-27 01:03 - 00000000 ____D C:\Users\Public\Speedup Sessions

2015-10-26 22:29 - 2015-10-26 23:06 - 00000000 ____D C:\Program Files\pandasecuritytb

2015-10-26 21:32 - 2015-10-27 02:41 - 00000000 ____D C:\ProgramData\panda_url_filtering

2015-10-26 21:27 - 2015-10-26 23:09 - 00000000 ____D C:\Program Files\Panda Security

2015-10-26 21:22 - 2015-10-26 23:05 - 00000000 ____D C:\ProgramData\Panda Security

2015-10-23 13:04 - 2015-10-27 02:41 - 00000000 ___HD C:\ProgramData\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}

2015-10-22 00:03 - 2015-10-22 00:03 - 00055341 _____ C:\Users\Jesus\Downloads\tattoo (1).html

2015-10-22 00:02 - 2015-10-22 00:02 - 00055341 _____ C:\Users\Jesus\Downloads\tattoo.html

2015-10-15 09:50 - 2015-10-27 02:41 - 00000000 ____D C:\Program Files\grabzilla pro V11

2015-10-14 01:09 - 2015-10-14 01:09 - 00000000 ____D C:\Program Files\Infogrames

2015-10-14 01:09 - 2015-10-14 01:09 - 00000000 ____D C:\Program Files\directx

2015-10-14 01:07 - 2015-10-14 01:07 - 00000000 _____ C:\Windows\PowerReg.dat

2015-10-12 21:33 - 2015-10-13 12:21 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\80l3ug2MOcd

2015-10-12 21:30 - 2015-10-13 13:17 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\SoftAd

2015-10-12 21:29 - 2015-10-12 21:29 - 00000066 _____ C:\Users\Jesus\AppData\Roaming\sn.txt

2015-10-12 06:53 - 2015-10-12 06:53 - 03531374 _____ C:\Users\Jesus\AppData\Local\curl.zip

2015-10-12 06:53 - 2015-10-12 06:53 - 00000000 ____D C:\Users\Jesus\AppData\Local\cu

2015-10-11 03:51 - 2015-10-11 03:51 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\c

2015-10-11 02:19 - 2015-10-11 02:19 - 00000000 ____D C:\Users\Jesus\AppData\Local\Opera Software

2015-10-11 02:09 - 2015-10-11 02:09 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Opera Software

2015-10-11 02:01 - 2015-10-11 02:01 - 00000000 ____D C:\Users\Jesus\AppData\Local\CEF

2015-10-11 01:45 - 2015-10-11 08:04 - 00000000 ____D C:\Program Files\Opera

2015-10-11 01:18 - 2015-10-11 01:18 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Itibiti

2015-10-11 01:15 - 2015-10-13 13:19 - 00000000 ____D C:\ProgramData\KeyStream

2015-10-11 00:57 - 2015-10-13 13:19 - 00000000 ____D C:\Program Files\Faster Web

2015-10-11 00:43 - 2015-10-11 00:45 - 00000000 ____D C:\Users\Jesus\AppData\Local\PlaythruPlayer

2015-10-11 00:43 - 2015-10-11 00:45 - 00000000 ____D C:\Program Files\PCAPDownloader

2015-10-11 00:39 - 2015-10-11 00:39 - 00000000 ____D C:\ProgramData\{4BB8A37B-1B3A-72FD-AABC-027F7A3ED1F1}

2015-10-11 00:34 - 2015-10-13 13:17 - 00000000 ____D C:\Users\Jesus\AppData\Local\{7F6C4930-5BC4-2588-365C-00601234FCF8}

2015-10-11 00:30 - 2015-10-13 13:19 - 00000000 ____D C:\Program Files\winnetmng

2015-10-07 22:04 - 2015-10-28 07:28 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\uTorrent

2015-10-05 15:22 - 2015-10-05 15:24 - 00000091 _____ C:\Users\Jesus\Downloads\ecare.xls

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-10-31 10:52 - 2015-06-19 07:41 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job

2015-10-31 05:00 - 2015-06-19 07:41 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job

2015-10-31 04:51 - 2011-04-22 00:45 - 01659454 _____ C:\Windows\WindowsUpdate.log

2015-10-31 00:53 - 2011-10-25 15:08 - 03936768 ___SH C:\Users\Jesus\Downloads\Thumbs.db

2015-10-31 00:05 - 2015-09-15 23:01 - 00000000 ____D C:\Users\Jesus\AppData\Local\PlutoTV

2015-10-31 00:03 - 2012-09-08 20:26 - 00000000 ___RD C:\Users\Jesus\Dropbox

2015-10-31 00:03 - 2012-09-08 20:18 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Dropbox

2015-10-31 00:01 - 2013-10-19 01:52 - 377033551 _____ C:\Windows\MEMORY.DMP

2015-10-31 00:01 - 2013-03-07 12:32 - 00020657 _____ C:\Windows\setupact.log

2015-10-31 00:01 - 2013-03-07 12:31 - 00323986 _____ C:\Windows\PFRO.log

2015-10-31 00:01 - 2012-10-28 12:36 - 00000000 ____D C:\Windows\Minidump

2015-10-31 00:01 - 2012-02-20 00:29 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Spotify

2015-10-31 00:01 - 2009-07-13 21:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-10-30 23:55 - 2009-07-13 19:37 - 00000000 ___RD C:\Users\Public

2015-10-30 23:50 - 2009-07-13 19:04 - 00000215 _____ C:\Windows\system.ini

2015-10-30 23:48 - 2013-08-15 04:30 - 00000000 ____D C:\Users\Jesus\AppData\Local\ArcadeFrontier

2015-10-30 02:12 - 2012-10-12 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2015-10-29 16:59 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\rescache

2015-10-29 14:23 - 2012-11-23 06:57 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Yahoo!

2015-10-29 14:23 - 2011-05-15 15:29 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\Yahoo!

2015-10-29 14:22 - 2013-02-22 01:11 - 00000000 ____D C:\Program Files\Amazon

2015-10-29 14:22 - 2011-09-25 09:32 - 00000000 ____D C:\Program Files\Yahoo!

2015-10-28 20:18 - 2011-07-02 07:09 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy

2015-10-28 20:18 - 2011-06-03 12:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2015-10-28 19:51 - 2011-07-21 11:04 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\Temp

2015-10-28 19:49 - 2013-04-14 01:48 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-10-28 19:49 - 2011-04-22 00:47 - 00000000 ____D C:\Users\Jesus

2015-10-28 15:03 - 2013-05-02 20:49 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\player

2015-10-28 14:55 - 2013-05-02 20:59 - 00000000 ____D C:\Windows\system32\appmgmt

2015-10-28 14:48 - 2011-07-02 07:09 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2015-10-28 12:54 - 2011-05-01 23:01 - 00000000 ____D C:\ProgramData\TEMP

2015-10-28 07:21 - 2009-07-13 21:34 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-10-28 07:21 - 2009-07-13 21:34 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-10-28 02:40 - 2012-02-09 19:17 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2015-10-28 00:37 - 2013-04-04 21:46 - 00000000 ____D C:\ProgramData\Package Cache

2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\ProgramData\Avira

2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\Program Files\Avira

2015-10-27 03:32 - 2012-04-05 02:18 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-10-27 03:32 - 2011-09-16 21:12 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-10-27 02:32 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\LogFiles

2015-10-27 02:27 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\wfp

2015-10-27 02:25 - 2011-10-30 18:32 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\FreeFileViewer

2015-10-27 02:25 - 2011-04-28 16:59 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\VTExtra

2015-10-27 02:25 - 2011-04-28 16:56 - 00000000 ____D C:\Users\Jesus\AppData\Local\VTShared

2015-10-27 02:25 - 2009-07-14 00:48 - 00000000 ___RD C:\Users\Public\Recorded TV

2015-10-27 02:25 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\NDF

2015-10-27 02:24 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\registration

2015-10-27 02:22 - 2011-06-10 17:35 - 00000000 ____D C:\ProgramData\Real

2015-10-27 01:54 - 2013-05-02 22:56 - 00057952 _____ C:\Users\Jesus\AppData\Local\GDIPFONTCACHEV1.DAT

2015-10-14 01:05 - 2011-06-03 12:36 - 00000000 ____D C:\Program Files\Common Files\InstallShield

2015-10-13 14:48 - 2013-05-07 22:12 - 00055912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-10-13 14:48 - 2013-03-02 20:57 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-10-13 14:09 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\Microsoft.NET

2015-10-13 13:23 - 2015-09-23 10:38 - 00000000 ____D C:\ProgramData\BlueStacks

2015-10-13 13:23 - 2015-09-23 10:38 - 00000000 ____D C:\Program Files\BlueStacks

2015-10-13 13:22 - 2014-10-01 21:03 - 00000000 ____D C:\Users\Jesus\Documents\Fax

2015-10-13 13:21 - 2009-07-13 19:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy

2015-10-13 13:20 - 2015-09-23 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2015-10-13 13:20 - 2013-10-20 22:18 - 00000000 ____D C:\Program Files\AdFender

==================== Files in the root of some directories =======

2015-08-28 13:09 - 2015-08-28 13:09 - 6420480 _____ () C:\Program Files\GUTD05A.tmp

2011-05-01 22:55 - 2011-05-01 23:09 - 0007887 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.cat

2011-05-01 22:55 - 2011-05-01 23:09 - 0001144 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.inf

2011-05-01 22:56 - 2011-05-01 23:09 - 0000034 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.log

2011-05-01 22:55 - 2011-05-01 23:09 - 0047360 _____ (VSO Software) C:\Users\Jesus\AppData\Roaming\pcouffin.sys

2015-10-12 21:29 - 2015-10-12 21:29 - 0000066 _____ () C:\Users\Jesus\AppData\Roaming\sn.txt

2015-10-12 06:53 - 2015-10-12 06:53 - 3531374 _____ () C:\Users\Jesus\AppData\Local\curl.zip

2012-04-21 14:09 - 2012-04-21 14:17 - 0001667 _____ () C:\Users\Jesus\AppData\Local\Temp1.html

2012-04-21 14:09 - 2012-04-21 14:17 - 0002419 _____ () C:\Users\Jesus\AppData\Local\Temp2.html

2012-07-11 06:04 - 2013-05-02 23:18 - 0023066 _____ () C:\ProgramData\hpzinstall.log

Some files in TEMP:

====================

C:\Users\Jesus\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxkmj8w.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => MD5 is legit

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-10-29 16:48

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x86) Version:29-10-2015

Ran by Jesus (2015-10-31 11:09:32)

Running from C:\Users\Jesus\Desktop\jbj fix this [bleep]

Microsoft Windows 7 Ultimate (X86) (2011-04-22 07:40:54)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-11595131-3550647590-3570146784-500 - Administrator - Disabled)

Guest (S-1-5-21-11595131-3550647590-3570146784-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-11595131-3550647590-3570146784-1003 - Limited - Enabled)

Jesus (S-1-5-21-11595131-3550647590-3570146784-1001 - Administrator - Enabled) => C:\Users\Jesus

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden

3-D Ultra Minigolf Adventures Deluxe (HKLM\...\114075133) (Version: - Oberon Media)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)

Adobe Reader X (10.1.6) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.6 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)

Amazon Kindle (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Amazon Kindle) (Version: - Amazon)

Angry Birds (HKLM\...\{AC30CF7C-2D62-4910-9147-3EC8EA5EB6D1}) (Version: 1.5.1 - Rovio)

ArcadeFrontier (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\{4AFCAFDC-D870-41FA-B9FB-1442B9DAFE76}) (Version: - ArcadeFrontier)

Ashampoo WinOptimizer 2012 v.8.1.4 (HKLM\...\Ashampoo WinOptimizer 2012_is1) (Version: 8.1.4 - Ashampoo GmbH & Co. KG)

Backspin Billiards (HKLM\...\111543617) (Version: - Oberon Media)

Bejeweled 3 (HKLM\...\Bejeweled 31.0) (Version: 1.0 - AllSmartGames)

Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 3.0.1.60 - )

BlueStacks App Player (HKLM\...\BlueStacks App Player) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM\...\{473E82D7-79E2-43DF-8FA0-025407C93191}) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)

ConvertXtoDVD 3.3.4.106e (HKLM\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.3.4.106e - )

Dashlane (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Dashlane) (Version: 3.5.2.91395 - Dashlane SAS)

Dell Driver Download Manager (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\f031ef6ac137efc5) (Version: 2.1.0.0 - Dell Inc.)

DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC)

DriverUpdate (HKLM\...\{04F46566-A95C-46FF-9CA1-F3FDBAB61283}) (Version: 2.2.16918 - SlimWare Utilities, Inc.)

Dropbox (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)

ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - )

Foxit Reader 5.1 (HKLM\...\Foxit Reader_is1) (Version: 5.1.4.104 - Foxit Corporation)

Free Download Manager 3.9.2 (HKLM\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG)

GOM Player (HKLM\...\GOM Player) (Version: 2.1.37.5085 - Gretech Corporation)

Google Chrome (HKLM\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)

Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden

Haali Media Splitter (HKLM\...\HaaliMkx) (Version: - )

HP Product Detection (HKLM\...\{3C22981C-5C14-4176-B0E8-C2BE71174C41}) (Version: 11.14.0003 - HP)

HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)

Intel AppUp(SM) center (HKLM\...\Intel AppUp(SM) center 18988) (Version: 18988 - Intel)

Internet Download Manager (HKLM\...\Internet Download Manager) (Version: - )

Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)

Kingo ROOT version 1.3.1.2217 (HKLM\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.3.1.2217 - Kingosoft Technology Ltd.)

K-Lite Codec Pack 7.0.0 (Standard) (HKLM\...\KLiteCodecPack_is1) (Version: 7.0.0 - )

Kodi (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Kodi) (Version: - XBMC-Foundation)

Liberty Slots Casino (HKLM\...\{FE8C9237-59BF-45A4-A179-EF24C882C03D}) (Version: 1.00.0000 - LibertySlots)

Mahjong Match (HKLM\...\111177437) (Version: - Oberon Media)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft)

Microsoft IntelliType Pro 8.1 (HKLM\...\Microsoft IntelliType Pro 8.1) (Version: 8.15.406.0 - Microsoft)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Midnight Mysteries: Haunted Houdini Deluxe (HKLM\...\BFG-Midnight Mysteries - Haunted Houdini Deluxe) (Version: - )

Mobile App Sync (HKLM\...\Mobile App Sync) (Version: - Mobile App Sync)

Mozilla Firefox 20.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 20.0.1 (x86 en-US)) (Version: 20.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 20.0.1 - Mozilla)

MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version: - )

Mplayer 0.6.9 (HKLM\...\Mplayer) (Version: 0.6.9 - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

NOOK for PC (HKLM\...\{05B59BD3-1B29-4DFA-99B8-0EC8CF88A60C}) (Version: 2.5.2 - Barnes & Noble)

PageRage Toolbar (HKLM\...\PageRage Toolbar) (Version: 6.5.0.202 - PageRage)

Plantronics MyHeadset Updater (x86) (HKLM\...\{BAE54DD5-2727-4F6F-9577-2B83BD450BF4}) (Version: 2.8.26503.0 - Plantronics, Inc.)

Pluto TV version 0.1.5 (HKLM\...\Pluto TV_is1) (Version: 0.1.5 - Pluto TV)

RealDownloader (Version: 18.0.1.10 - RealNetworks, Inc.) Hidden

RealDownloader (Version: 18.0.1.9 - RealNetworks) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden

RealTimes (RealPlayer) (HKLM\...\RealPlayer 18.0) (Version: 18.0.1 - RealNetworks)

RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden

Reel Deal Slots: Fishin' Fortune (HKLM\...\BFG-Reel Deal Slots - Fishin' Fortune) (Version: - )

RoboForm 7-4-1 (All Users) (HKLM\...\AI RoboForm) (Version: 7-4-1 - Siber Systems)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)

SlimCleaner (HKLM\...\{A95F1368-38A4-4E02-99B7-96F0DC2779C7}) (Version: 4.0.28412 - SlimWare Utilities, Inc.)

Socialbox (HKLM\...\com.socialbox.socialbox) (Version: 2.109.1 - Zoosk, Inc.)

Socialbox (Version: 2.109.1 - Zoosk, Inc.) Hidden

Spotify (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Spotify) (Version: 0.8.3.222.g317ab79d - Spotify AB)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden

Usenet.nl (HKLM\...\Usenet.nl_is1) (Version: - )

Vacation Quest - The Hawaiian Islands (HKLM\...\Vacation Quest - The Hawaiian Islands) (Version: - PopCap Games)

VC 9.0 Runtime (Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VegasVip (HKLM\...\VegasVip_is1) (Version: - Kingsbury)

Veoh Web Player (HKLM\...\Veoh Web Player Beta) (Version: 1.1.2.0000 - Veoh Networks, Inc.)

Video Downloader (Version: 1.0.0 - RealNetworks) Hidden

VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)

WhoCrashed 3.00 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)

Windows Driver Package - Cambridge Silicon Radio (CSRBC) USB (10/26/2012 2.4.0.0) (HKLM\...\20C7EDA3129B3FF8F72F9BF59252B718B554FBDC) (Version: 10/26/2012 2.4.0.0 - Cambridge Silicon Radio)

WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team)

Yahoo! BrowserPlus 2.9.8 (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Yahoo! BrowserPlus) (Version: - Yahoo! Inc.)

Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version: - )

Your Uninstaller! 2010 (HKLM\...\YU2010_is1) (Version: 7.0 - URSoft, Inc.)

Zuma's Revenge! (HKLM\...\Zuma's Revenge!) (Version: - PopCap Games)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{052253BF-F1FF-4686-B231-8D1904DEED68}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{0F81C552-68AD-4AAB-99D2-26F7F72A423C}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Commmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1B72D1C3-A1B3-4C87-9552-894CFF74051F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1BC0C7E7-0ADF-4FCE-9FBD-70B2DBC3BD48}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameMdl.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1E1C74D3-EF64-4F13-B631-DFDCEE4572FD}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Loginmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1FD9E587-43E1-4F1F-A41F-A6E8B93A5546}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{2D0235FC-1701-4F1C-B36C-84CD8813EDB5}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{31DC369C-75C3-4D8B-9C2D-0B10BF77BA0F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{343ADE39-3C61-421B-93CB-19C44D33ED9B}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Jesus\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{47231DCA-F7A4-4696-B836-B2430D451226}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Imagemgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{4AC4E235-EB53-4942-B113-931D66A470B8}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameSelectorMdl.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{50021F2A-9C64-4766-A697-84E366A407B1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{50632C37-EDD8-4B8F-A32B-8E280D942A8E}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{51B894AD-B2D5-48F6-B1D1-C1F0CF849587}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{52FE3F2E-A71F-4EC7-BCA4-08D5C9FA57C4}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{553E32D1-AAF3-406A-B19E-E575829EC651}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{58456121-F6E2-4E74-96D5-521EBE19E124}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{58F0E5CC-C1B3-453A-B1EB-A1B40A6DAEF9}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{59715A3F-0AF7-427E-99AF-757668C8576E}\localserver32 -> c:\program files\palace of chance\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{5C5F7442-9ADC-4BD8-89CC-7C3615C26546}\localserver32 -> c:\program files\palace of chance\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.145\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{648326CD-6F37-4A8F-BF14-E2BAD67AAAA8}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6BB1EAF0-7572-4166-9DF4-2A817F5FCD83}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6CE4B8A6-4DB5-4F63-8013-1197503692EF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\YBPAddon_2.9.8.dll (Yahoo! Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.153\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6F80F85C-FC5C-4C7E-B7ED-9ECCECC7CF57}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Configmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{72A62965-EF25-42E0-97CE-7A2D69BF28C0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8A0F754D-9636-4771-A1A6-8A1126E03345}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8A73CF97-446B-46AD-964C-2C3400CAA60F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8B48847D-052F-4153-93B8-7223BFF1C406}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Commmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8B5F91E9-0032-4560-93B0-4539497C5366}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.149\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{941D2E9A-D724-4FB5-94D5-775B70E8C408}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{97637B78-01D0-4A40-A842-68774AA416BB}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{987585FA-DD0C-4E8B-8FC2-89B1181CA701}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9A5A84A0-2E60-47D1-8C75-278A8D0F41FF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9E8F05AF-C18E-4A72-8743-A479EFD255E6}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A16CA865-CD74-46EC-9432-74579FD657A0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A2DF38B5-93D0-44D6-8130-AA80F351F852}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Timemgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A70E086C-1477-4B0C-808A-94EF8271ED39}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Resourcemgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A7674421-DB75-4081-B0FE-2B378F1FFAEB}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameMdl.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ACAB158F-423F-4D59-BEDD-15C9E0CC2DD1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B10A3751-CC13-4A25-875B-EEC84674C6C0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Soundmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B1267A8A-D143-41F7-A655-5765A8464796}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B6C64A50-7BB8-441B-AE31-C4366C84BF00}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B8217B92-8FDD-4A74-9417-B77BD74F62B7}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{BD75936F-2B69-477E-9E9A-218FFAF35F49}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{BE742811-02F4-4D7E-87C1-886909462A16}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Modulemgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D2E87C0B-C06A-4E69-8A41-0AC3117505B4}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D4A86438-A95B-487D-8B1D-1E67B2A0F379}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\DownloadMgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D7B3EAC0-36D9-459E-AC96-3A88309FDDCC}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E65E6AAE-9169-4625-B98D-EB903E707116}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E6BFA606-59F2-4CD6-89C8-DAED6D789027}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E9AC37A2-E79C-4CA3-A6A8-1884BF9A7852}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{EAD67B06-459C-48B9-90C1-5F2F34D4F83F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ECA7C134-E84B-4E6B-A3E2-355FCB853766}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ED0BD0F4-ECAC-41D2-BD28-0ABFB129F40C}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\VersionMgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{F0349E13-BD03-4073-BA25-6B2610C0750D}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{F53E4C9E-703C-41f3-8F69-C7E3D277594B}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FD995983-DC2B-4B97-B3FE-E9534AA1A769}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FE0AA82B-B32A-4D54-BA97-918D2A9F6E70}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)

==================== Restore Points =========================

27-10-2015 02:13:45 Restore Operation

27-10-2015 10:12:42 Windows Update

28-10-2015 14:51:31 Quitado VAFPlayer

28-10-2015 14:59:35 Quitado VAFPlayer

28-10-2015 19:46:11 Restore Point Created by FRST

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 19:04 - 2015-10-30 23:50 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0BBD681C-7304-41A0-B869-688657E40A9F} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {0DF8152A-D272-4BDB-9F51-1721D7FE3452} - System32\Tasks\FCBfan => C:\Users\Jesus\AppData\Roaming\FCBfan\fcbfan.exe

Task: {21E511F1-54F9-417B-B428-CB47E06E30ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-27] (Adobe Systems Incorporated)

Task: {2DE646AB-A4FC-47BB-B49A-E30A184AF633} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

Task: {3110396D-9536-4D0B-BAFA-6EB5D0DD9DC7} - System32\Tasks\{D28D4A94-5DFA-4081-BFAE-D98440EFDCA4} => pcalua.exe -a C:\Users\Jesus\Downloads\Programs\SlotMadnessCasinoInstaller.exe -d C:\Users\Jesus\AppData\Roaming\IDM

Task: {3DA3D8CB-B969-4A98-A4C1-B8C5E74FCD7F} - System32\Tasks\{45B4BE60-DFC5-4343-A749-E33917113EA3} => pcalua.exe -a C:\Users\Jesus\Downloads\Programs\setup.exe -d C:\Users\Jesus\AppData\Roaming\IDM

Task: {475D8051-7C74-4EFB-8D2F-B87EB6AC0EBA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2011-08-05] (Siber Systems)

Task: {5D56AE02-A011-4D32-86B7-035674FDA02F} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {60E6A20E-6629-414A-9C27-7246C2DBA88C} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)

Task: {61C18BFF-7684-4957-9EF0-1F0C353A27EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

Task: {7755AC6D-FF88-483C-9C2B-9BBCEC55718A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {7CC318B5-0679-467C-8FD1-713512DA51B1} - System32\Tasks\ArcadeFrontier => C:\Users\Jesus\AppData\Local\ArcadeFrontier\veragent.exe [2014-06-28] ()

Task: {A41A3A8C-2CC2-4102-9065-C8525D9A24A9} - System32\Tasks\{B4489070-50F4-459A-A65F-49CE70E4110C} => pcalua.exe -a "C:\Users\Jesus\Desktop\deer dr\SCS Software\makeDesktopIcon.exe" -d "C:\Users\Jesus\Desktop\deer dr\SCS Software"

Task: {A5E24E6E-099B-42F9-9956-79182B2C8CA9} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

Task: {A922BCA2-5CD6-4531-94AB-6879F23868DC} - System32\Tasks\{6BBEED7F-C68C-41D3-9751-E85EFC186AAD} => pcalua.exe -a E:\install\setup.exe -d E:\install

Task: {BF4A1A15-21AE-4584-BA88-95321E8C8D2C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

Task: {CC98A113-7FCC-4478-B481-4F50ACE95E37} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {DDB7E82D-017D-410C-867A-E5CB41874779} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNJOMMJLMNJKMJJOMCNJJKJJMPMCNLMOJNJJJCNOJLJJMNJCNNMMMMMKMNJJJOMNJKMJMJMPMJNJICMIMCNMMCNPMFMGMCNPMCNHMOMOMNMFMJMCNOMCNIMJMPMPMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMFLKJMIKIMIJNKJCMJNNICMJNDJCMKJBJ"

Task: {E16F6A82-7107-4BF2-BCD3-26AC698877F1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

Task: {E6BCEEE9-A25A-432F-B170-9F2008F7E743} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNJOMMJLMNJKMJJOMCNJJKJJMPMCNLMOJNJJJCNOJLJJMNJCNNMMMMMKMNJJJOMNJKMJMJMPMJNJICMIMCNLMCNOMFMGMCNPMCNHMOMOMNMFMJMCNOMCNIMJMPMPMCNNMJNPICMPMFMMJBJKJLIMJFMIMNMJNHICMMJBJKJLIMJJNBJCMFLKJMIKIMIJNKJCMJNNICMJNDJCMKJBJ"

Task: {E81EFEAD-4F21-4CB4-86D1-BE7B2F7B1E94} - System32\Tasks\{5398D605-AC1F-4226-8D0A-92360D246A95} => pcalua.exe -a "C:\Users\Jesus\Desktop\Magellan roadmate\Magellan_Roadmate_1412_NA_3_12_Rel2.exe" -d "C:\Users\Jesus\Desktop\Magellan roadmate"

Task: {ED7AA6B2-7FC7-4609-A5C3-C0C995F91388} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {EE7D1483-02C0-41A3-B9DD-0C9AE2E6062B} - System32\Tasks\{5C942655-003B-42ED-89AD-1303AF7A188A} => pcalua.exe -a C:\Users\Jesus\AppData\Local\Temp\{FAED904B-E73C-4F5B-80C6-725A05BCD83D}\adobeshockwavextrabundle.exe -d "C:\Program Files\Mozilla Firefox" -c /xtrabundle=Shockwave_3D_Asset

Task: {F6D0A09A-D6D0-4CD0-B887-11B6AF6799AF} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2015-06-17] ()

Task: {F9ADBE9E-46B4-4F0D-8A2F-B90CA81EF8BB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2011-10-30 18:23 - 2007-08-21 13:32 - 00098304 _____ () C:\Windows\System32\redmonnt.dll

2013-04-04 03:10 - 2013-04-04 03:10 - 00032768 _____ () C:\Program Files\Plantronics\MyHeadsetUpdater\NativeUsbLib.dll

2015-06-17 03:25 - 2015-06-17 03:25 - 00031856 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe

2015-06-17 03:24 - 2015-06-17 03:24 - 00035976 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll

2015-06-17 03:24 - 2015-06-17 03:24 - 00039560 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll

2015-06-17 03:24 - 2015-06-17 03:24 - 00037528 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll

2013-08-28 17:23 - 2013-08-28 17:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe

2013-08-28 17:25 - 2013-08-28 17:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll

2012-05-06 20:10 - 2012-05-06 20:10 - 00932528 _____ () C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

2015-09-15 23:01 - 2015-09-10 11:12 - 93077896 _____ () C:\Program Files\Pluto TV\PlutoTV.exe

2015-07-16 00:11 - 2015-07-16 00:11 - 00088640 _____ () c:\program files\real\realplayer\CrashRpt\CrashRpt1402.dll

2015-10-31 00:01 - 2015-10-31 00:01 - 00071168 _____ () c:\users\jesus\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxkmj8w.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00012800 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00779776 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00056320 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00012288 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll

2015-06-17 00:07 - 2015-06-17 00:07 - 00066112 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll

2015-10-27 03:19 - 2015-10-20 07:08 - 01532744 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\libglesv2.dll

2015-10-27 03:19 - 2015-10-20 07:08 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\libegl.dll

2015-09-15 23:01 - 2015-09-10 11:12 - 01481728 _____ () C:\Program Files\Pluto TV\libglesv2.dll

2015-09-15 23:01 - 2015-09-10 11:12 - 00073728 _____ () C:\Program Files\Pluto TV\libegl.dll

2015-10-31 00:04 - 2015-09-10 11:12 - 17482952 _____ () C:\Users\Jesus\AppData\Local\Temp\nw3280_11740\plugins\NPSWF32_18_0_0_232.dll

2015-10-27 03:19 - 2015-10-20 07:08 - 16493384 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll

2015-06-17 00:06 - 2015-06-17 00:06 - 00608320 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe

2015-06-16 23:47 - 2015-06-16 23:47 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{7A784CDB-971B-466A-B80A-02EA7C5EA6D8}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

FirewallRules: [{36907D82-DD55-407A-A399-14D8447B1A99}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

FirewallRules: [TCP Query User{6185CFB9-2B43-44A9-9708-BE96442DE65A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{B3FA4339-CF70-4ACB-A307-BA1C0F593D83}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{C8161B9B-794D-46D8-B386-B7F810D09474}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe] => (Block) C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe

FirewallRules: [UDP Query User{47373C8B-A82C-42EA-90EB-B536AEF61E46}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe] => (Block) C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe

FirewallRules: [TCP Query User{2384371E-C20C-472E-A6C9-86FBC9ABA9B8}C:\program files\relevantknowledge\rlvknlg.exe] => (Allow) C:\program files\relevantknowledge\rlvknlg.exe

FirewallRules: [UDP Query User{189B13DB-5C16-41EE-B369-8D92723BE549}C:\program files\relevantknowledge\rlvknlg.exe] => (Allow) C:\program files\relevantknowledge\rlvknlg.exe

FirewallRules: [{FA2B9148-2E97-423B-819B-384C8407CE4E}] => (Allow) C:\Windows\System32\ZoneLabs\vsmon.exe

FirewallRules: [{9247F2EF-BDF4-4FC9-AA42-AF28FDCF52B0}] => (Allow) C:\Windows\System32\ZoneLabs\vsmon.exe

FirewallRules: [{A4B594B4-2323-40A0-B653-D4C2760D3985}] => (Allow) C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe

FirewallRules: [TCP Query User{001CCCAB-7132-4B73-AD67-F0284C03EED3}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{6498C408-AAE1-4FF5-A358-A9DDB19AE8C1}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{2CCE0A00-00E7-4191-9B07-A89BD2429BC4}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{61B1D9FA-5EB0-4B23-96DB-7862D9FB9789}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [{63A19801-6617-4B24-BB4F-09FB5A252A8D}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS3E09\setup\hpznui01.exe

FirewallRules: [{4BB71658-1C30-4799-98CE-D4113AACD9DD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{D1D27524-56B1-4DD1-BB15-2FB8A83904B2}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{DA355BAE-3339-4D24-81E5-62D7CDF7227C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [TCP Query User{280F7616-C78A-4375-8C04-AD8100A13873}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{CDFCF1FB-3F53-4396-BFAE-B63C9F0F2A45}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe

FirewallRules: [{8D5E4A02-DE83-45C0-8A7F-7B1E8E408454}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS07D1\HPDiagnosticCoreUI.exe

FirewallRules: [{0F4FFF26-E501-4ED7-8717-5AF4D1DEDD1A}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS07D1\HPDiagnosticCoreUI.exe

FirewallRules: [{39E9B839-3733-4D1E-B2EB-DD561A640B0C}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS0823\HPDiagnosticCoreUI.exe

FirewallRules: [{51F11CCA-4D0D-42AE-B2CA-FF382027B652}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS0823\HPDiagnosticCoreUI.exe

FirewallRules: [{9C14D8C9-8E04-49EE-A1DA-D7C12AD8AA91}] => (Allow) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{462548CB-2CBB-44FE-B52B-30169D6AB79F}] => (Allow) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{A498AA84-357C-4042-A0D7-DD29F71DC8C3}C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{9EE64CE1-C1A4-49CC-B574-3CDE2AABCE7E}C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{6DF886A4-EF95-466E-BED5-0A77B93D0442}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS2360\hppiw.exe

FirewallRules: [{1359EFB4-9AC3-428C-9BCE-BB63BE90605C}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS2360\hppiw.exe

FirewallRules: [{62C44071-D444-44A7-B04E-7F0313350016}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{B4ACDEBE-717D-4DCA-AE9C-83C3A7BF171E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{775E0A6B-9C35-4DB1-92C9-75849AFB37B6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{3A0DEB72-085D-40F2-AA94-387270A2D616}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{B145BE92-97A8-48D7-B69C-DB012C969356}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{BCAC67A4-17FD-4958-AD9B-D8A225694F2A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe

FirewallRules: [{3DDA7105-AAD6-4B21-B2F3-2C2B9019BF15}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{077BD633-ABF0-4379-BB79-BD8E969A6D4C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{910725D0-9380-4AE6-A729-62F0D0B2553C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe

FirewallRules: [{2DE9157D-6C55-4BAE-8EEA-5A666F8E9309}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe

FirewallRules: [{05D1AFB7-AFC7-4E55-B793-02A4BDDDC95F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe

FirewallRules: [{049C44B8-6761-42EB-9580-A7476499C501}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe

FirewallRules: [{6570AF2F-8E48-493E-AF1F-EAD48B743F12}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{2F27F3DB-39EC-48C7-B66D-0435420D7180}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{BC9CA938-53C0-472C-A487-D61482C27229}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe

FirewallRules: [{DBB333BC-12D5-4C33-99B3-DEA67A3BFCDA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{E0A59DB0-7659-488E-AA21-3D1A7370FB8B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{9A413204-FCC1-4DD8-9AB8-842F65B292EB}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{5A553DF0-D456-4868-ACF8-620F04FA01EA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{03130421-AC6C-4C4B-BCE4-0708001A6D44}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{6D568F24-4CB9-4A91-BEC3-2B02275092D8}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [TCP Query User{60F9B6C2-504E-482E-AC63-87FA5FBF3830}C:\program files\frostwire\frostwire.exe] => (Block) C:\program files\frostwire\frostwire.exe

FirewallRules: [UDP Query User{F82D9D03-A1C9-4DE4-8B9D-D8D0D1B2A57E}C:\program files\frostwire\frostwire.exe] => (Block) C:\program files\frostwire\frostwire.exe

FirewallRules: [{56A0F0DC-5831-4652-9028-0CE4B651C494}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{78C22347-E375-4D37-9C48-D442EBB42B63}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7D67DAE3-D439-4B08-BBD1-CD7A36AE0BD0}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{50F1AB90-37C0-427A-A066-2C76DB8F70D5}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{EC4CAA6D-0CDA-40AA-95E1-23B9F2C6B00F}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{63419E58-E4A5-476A-B4D0-F8B2D6259190}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{D7E2B0F6-24E5-42C4-B8AC-8F174D6F8770}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{FE66C115-BA96-4DB4-8F88-2F1DB64A57CA}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{8D5503CA-9E8B-4AD3-993F-0386871AD56A}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS51EA\hppiw.exe

FirewallRules: [{AC07A8C7-A8C6-46B4-9FFA-A597F909D1E5}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS51EA\hppiw.exe

FirewallRules: [{3F7D9768-5300-49FC-B6EF-7512D2C7142B}] => (Allow) C:\Program Files\GoforFiles\goforfilesdl.exe

FirewallRules: [{EB3805E1-5F5E-4C92-A4E7-EB8B6A16397A}] => (Allow) C:\Program Files\GoforFiles\goforfilesdl.exe

FirewallRules: [{BDFF1364-B566-40E2-AEE9-F85AA6936DB9}] => (Allow) C:\Program Files\GoforFiles\GoforFiles.exe

FirewallRules: [{D38FE597-5248-423F-BB9C-BA4A593D99F0}] => (Allow) C:\Program Files\GoforFiles\GoforFiles.exe

FirewallRules: [{0B6DED41-BCAB-4D85-B813-35201C35D15E}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{1E4A3D69-F0E1-43B2-A4DE-11CDAB985A05}] => (Allow) C:\Users\Jesus\Downloads\Programs\ChainzGalaxy_SoftangoDownloader.exe

FirewallRules: [{F860C8E9-3336-4DC0-A367-2189BACCF19F}] => (Allow) C:\Users\Jesus\Downloads\Programs\ChainzGalaxy_SoftangoDownloader.exe

FirewallRules: [{49D2D9D8-A038-4673-866A-A77F182CDD10}] => (Allow) C:\ProgramData\eSafe\eGdpSvc.exe

FirewallRules: [{93C948C7-481F-463B-9A9A-69CFDFC3254C}] => (Allow) c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe

FirewallRules: [TCP Query User{B354850D-609B-4822-B042-C519A9D57FB8}C:\program files\frostwire 6\frostwire.exe] => (Block) C:\program files\frostwire 6\frostwire.exe

FirewallRules: [UDP Query User{793F822F-0A1D-4A48-B80B-ACD9CD865C40}C:\program files\frostwire 6\frostwire.exe] => (Block) C:\program files\frostwire 6\frostwire.exe

FirewallRules: [TCP Query User{F1E93E4E-F071-48A3-8442-0E8B748A04ED}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe

FirewallRules: [UDP Query User{E65A6A87-B614-4B9E-A73D-AFBD9614C3D6}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe

FirewallRules: [{159BDD8D-44D4-4396-AFD8-F3724F75FDF9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (10/31/2015 05:19:45 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (10/31/2015 05:19:34 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (10/31/2015 12:01:13 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

Error: (10/30/2015 11:43:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8

Faulting module name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8

Exception code: 0x40000015

Fault offset: 0x0008d1c0

Faulting process id: 0xbe8

Faulting application start time: 0xPEV.exe0

Faulting application path: PEV.exe1

Faulting module path: PEV.exe2

Report Id: PEV.exe3

Error: (10/30/2015 11:33:16 PM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

Error: (10/30/2015 06:57:02 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

Error: (10/30/2015 06:31:08 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

Error: (10/29/2015 04:49:59 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Dependent Assembly rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (10/29/2015 04:49:49 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

Error: (10/29/2015 03:18:30 PM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

System errors:

=============

Error: (10/31/2015 04:50:50 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (10/31/2015 12:01:23 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Avira Mail Protection service depends on the Avira Real-Time Protection service which failed to start because of the following error:

%%1053

Error: (10/31/2015 12:01:18 AM) (Source: BugCheck) (EventID: 1001) (User: )

Description: 0x00000050 (0xe0000000, 0x00000000, 0x832c7cea, 0x00000002)C:\Windows\MEMORY.DMP103115-27409-01

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Avira Web Protection service depends on the Avira Real-Time Protection service which failed to start because of the following error:

%%1053

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Avira Real-Time Protection service failed to start due to the following error:

%%1053

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: A timeout was reached (30000 milliseconds) while waiting for the Avira Real-Time Protection service to connect.

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Avira Scheduler service failed to start due to the following error:

%%1053

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: A timeout was reached (30000 milliseconds) while waiting for the Avira Scheduler service to connect.

Error: (10/31/2015 12:01:10 AM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 11:59:00 PM on ‎10/‎30/‎2015 was unexpected.

Error: (10/30/2015 11:50:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: The PEVSystemStart service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.

==================== Memory info ===========================

Processor: Intel® Core™2 CPU 6700 @ 2.66GHz

Percentage of memory in use: 47%

Total physical RAM: 2301.51 MB

Available physical RAM: 1207.45 MB

Total Virtual: 4601.3 MB

Available Virtual: 2123.86 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:186.21 GB) (Free:80.99 GB) NTFS

Drive d: (Oper.Blockade) (CDROM) (Total:0.13 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 186.3 GB) (Disk ID: 2A61B455)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=186.2 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

#28
zep516

Posted 31 October 2015 - 12:21 PM

Trusted Helper

Malware Removal
7,018 posts

Nice work, good timing just got in from work.

Need time to look things over and feed the cat. I'm curious after the running of combofix will Malwarebytes run or Junkremoval tool. Try them, and I'll be back with you in about an hour or so.

Thanks
Joe

#29
jbj1162

Posted 31 October 2015 - 02:14 PM

Member

Topic Starter
Member
22 posts

Dont trip I gotta take off for a couple hours anyway so enjoy whats left of your saturday and Ill try running those programs b4 I take off talk to ya in a couple hrs

Tried them both and no luck I gotta run c-ya in a bit

Edited by jbj1162, 31 October 2015 - 02:19 PM.

#30
zep516

Posted 31 October 2015 - 05:21 PM

Trusted Helper

Malware Removal
7,018 posts

Hello,
Few things to do, no hurry...
Uninstall this program.

Ashampoo WinOptimizer-------These programs can create issues.

Next Clean up Malwarebytes
Please visit this Link. Scroll down to Free Version. and Run the clean tool. Do not reinstall Malwarebytes yet.

Replace Anti Virus Avira looks broken.
Download Microsoft security Essentials from Here. Do not install it just yet! Just download it.

Then
Visit this Link. to remove Anti Virus programs.
Run the Anti virus removal tools for following Anti Virus programs
Panda
Avira
Once you have run the uninstaller for panda and Avira, go back to the desktop, double click on the Microsoft Security Essentials Icon that you downloaded, install it, and run a scan with it.

Let me know if you can scan with Microsoft Security Essentials.
Thanks
Joe