[zep516]

Try and run adwcleaner, let me know..

Next

Please download AdwCleaner by Xplode onto your Desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click the Scan button and wait for the process to complete.
• Click the logfile button and the log will open in Notepad.
• Click on the Clean button follow the prompts.
• A log file will automatically open after the scan has finished and the PC has rebooted.
• Please post the content of that log file with your next answer.
• You can find the log file at "C"

[Advertisements]

Ok that worked here's the file 

 

 

 

# AdwCleaner v5.015 - Logfile created 29/10/2015 at 14:25:20

# Updated 26/10/2015 by Xplode

# Database : 2015-10-29.1 [Server]

# Operating system : Windows 7 Ultimate  (x86)

# Username : Jesus - OPTIPLEX

# Running from : C:\Users\Jesus\Desktop\jbj fix this [bleep]\adwcleaner_5.015.exe

# Option : Cleaning

# Support : http://toolslib.net/forum

 

***** [ Services ] *****

 

 

***** [ Folders ] *****

 

 

***** [ Files ] *****

 

[-] File Deleted : C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pbjikboenpfhbbejgkoklgkhjpfogcam

 

***** [ DLLs ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Scheduled tasks ] *****

 

[-] Task Deleted : RunAsStdUser Task for VeohWebPlayer

[-] Task Deleted : ShdUpdate

[-] Task Deleted : OpenCandyHelperRunOnce

[-] Task Deleted : SuperLyrics-16-firefoxinstaller

[-] Task Deleted : SuperLyrics-16-updater

[-] Task Deleted : c18b53c1-d7c3-48f9-96b5-786590d4f08f-2

[-] Task Deleted : SuperLyrics-16-firefoxinstaller

[-] Task Deleted : SuperLyrics-16-updater

 

***** [ Registry ] *****

 

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler

[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\f

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

[-] Key Deleted : HKLM\SOFTWARE\Classes\PutLockerDownloader

[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject

[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook

[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\BackgroundHost.EXE

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Gameo]

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [CinPlus-2.5cdTube HDV03.10-bg.exe]

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898.3

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2418376

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3184310

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3247201

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3279411

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3287805

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3292715

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295548

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295549

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298570

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3303005

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898.1

[-] Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{442718d9-475e-452a-b3e1-fb1ee16b8e9f}]

[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]

[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci

[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ACE0D5AB-50C8-4052-BD02-977569E56291}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0771C34F-730F-4535-AD4C-37B74D27188E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414462}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644324485}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D425283-D487-4337-BAB6-AB8354A81457}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00E71626-0BEF-11DC-8314-0800200C9A66}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93488930-185C-4CED-AFEB-0FD4930F8423}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D425283-D487-4337-BAB6-AB8354A81457}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A66261FC-B82E-4EC7-9F6D-C2F36B871DF0}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{AF5B5C22-498A-4239-9A51-82BDD99C6A44}]

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a123a7-068d-43fc-81fe-e3d3ccd24e0a}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1a0afa47-2463-4ed4-9f59-ae3fcee71d3d}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b9eb1fe-fe0c-4ad6-ad8a-4e1f5a6ef3f5}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4779d21f-daf2-489d-864f-f166cba2cb9f}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D425283-D487-4337-BAB6-AB8354A81457}]

[-] Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search

[-] Key Deleted : HKU\.DEFAULT\Software\IM

[-] Key Deleted : HKU\.DEFAULT\Software\ImInstaller

[-] Key Deleted : HKU\.DEFAULT\Software\SweetIM

[-] Key Deleted : HKU\.DEFAULT\Software\WNLT

[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab

[-] Key Deleted : HKCU\Software\Alexa Internet

[-] Key Deleted : HKCU\Software\AnyProtect

[-] Key Deleted : HKCU\Software\APN PIP

[-] Key Deleted : HKCU\Software\BABSOLUTION

[-] Key Deleted : HKCU\Software\BI

[-] Key Deleted : HKCU\Software\Bitberry

[-] Key Deleted : HKCU\Software\Conduit

[-] Key Deleted : HKCU\Software\Cr_Installer

[-] Key Deleted : HKCU\Software\delta LTD

[-] Key Deleted : HKCU\Software\distromatic

[-] Key Deleted : HKCU\Software\Funmoods

[-] Key Deleted : HKCU\Software\GoforFiles

[-] Key Deleted : HKCU\Software\IM

[-] Key Deleted : HKCU\Software\ImInstaller

[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions

[-] Key Deleted : HKCU\Software\InstalledThirdPartyPrograms

[-] Key Deleted : HKCU\Software\Softonic

[-] Key Deleted : HKCU\Software\SweetIM

[-] Key Deleted : HKCU\Software\visualbee

[-] Key Deleted : HKCU\Software\YahooPartnerToolbar

[-] Key Deleted : HKCU\Software\Zugo

[-] Key Deleted : HKCU\Software\CoinisRS

[-] Key Deleted : HKCU\Software\gameo

[-] Key Deleted : HKCU\Software\PRODUCTSETUP

[-] Key Deleted : HKCU\Software\PCCleaners

[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc

[-] Key Deleted : HKCU\Software\Yahoo\Companion

[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar

[-] Key Deleted : HKCU\Software\AppDataLow\SProtector

[-] Key Deleted : HKCU\Software\AppDataLow\Toolbar

[-] Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer

[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

[-] Key Deleted : HKCU\Software\AppDataLow\Software\Mp3Tube

[-] Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong

[-] Key Deleted : HKCU\Software\AppDataLow\Software\visualbee

[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion

[-] Key Deleted : HKLM\SOFTWARE\Babylon

[-] Key Deleted : HKLM\SOFTWARE\BabylonToolbar

[-] Key Deleted : HKLM\SOFTWARE\Desksvc

[-] Key Deleted : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

[-] Key Deleted : HKLM\SOFTWARE\DomaIQ

[-] Key Deleted : HKLM\SOFTWARE\Driver-Soft

[-] Key Deleted : HKLM\SOFTWARE\Freeze.com

[-] Key Deleted : HKLM\SOFTWARE\GoforFiles

[-] Key Deleted : HKLM\SOFTWARE\hdcode

[-] Key Deleted : HKLM\SOFTWARE\IB Updater

[-] Key Deleted : HKLM\SOFTWARE\InfoAtoms

[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions

[-] Key Deleted : HKLM\SOFTWARE\InstalledThirdPartyPrograms

[-] Key Deleted : HKLM\SOFTWARE\PIP

[-] Key Deleted : HKLM\SOFTWARE\SweetIM

[-] Key Deleted : HKLM\SOFTWARE\Tarma Installer

[-] Key Deleted : HKLM\SOFTWARE\V9

[-] Key Deleted : HKLM\SOFTWARE\VBMZ

[-] Key Deleted : HKLM\SOFTWARE\visualbee

[-] Key Deleted : HKLM\SOFTWARE\W3I

[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc

[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion

[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke_US Toolbar

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius Professional Edition_is1

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PokerStars.net

[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\BackgroundContainer

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\ConduitSearchScopes

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Mp3Tube

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\PriceGong

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\visualbee

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Yahoo\Companion

[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\DefaultTab

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

 

***** [ Web browsers ] *****

 

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogIsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CTID", "ct2418376");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CurrentServerDate", "6-8-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsGetterLastCheckTime", "Wed Aug 03 2011 15:14:35 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DownloadReferralCookieData", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ExternalComponentPollDate5694225620172914022", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstServerDate", "21-7-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTime", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTimeFF3", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FixPageNotFoundErrors", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServerCheckInterval", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HasUserGlobalKeys", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HomePageProtectorEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Initialize", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InitializeCommonPrefs", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationAndCookieDataSentCount", 3);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationId", "ConduitStubGeneric");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationType", "ConduitStubIntegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstalledDate", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsAlertDBUpdated", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsGrouping", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsInitSetupIni", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsMulticommunity", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenThankYouPage", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenUninstallPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsProtectorsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackReloadIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LastLogin_3.5.0.12", "Fri Aug 05 2011 18:00:43 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LatestVersion", "3.3.5.1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipHeight", "83");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipShow", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipWidth", "295");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MyStuffEnabledAtInstallation", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.OriginalFirstVersion", "3.5.0.12");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchEngineBeforeUnload", "PageRage Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarIsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorToolbarDisabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ServiceMapLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastCheckTime", "Thu Jul 21 2011 11:05:03 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastUpdate", "1311226770");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsInterval", 504);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:02 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ToolbarShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2418376");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.UserID", "UN51694230990578799");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Search", 0);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Toolbar", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.alertChannelId", "812740");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.approveUntrustedApps", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.counterAppsAdded", 1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.LanguagePackLastCheckTime", "Fri Aug 05 2011 08:52:26 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SearchInNewTabLastCheckTime", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastCheckTime", "Fri Aug 05 2011 18:00:42 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastUpdate", "1311797275");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.globalFirstTimeInfoLastCheckTime", "Sat Aug 06 2011 02:00:46 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarAppMetaDataLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarContextMenuLastCheckTime", "Thu Aug 04 2011 11:16:09 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.globalFirstTimeInfoLastCheckTime", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.homepageProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.initDone", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.isAppTrackingManagerOn", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffPublihserMinWidth", 400);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.oldAppsList", "128994482097350312,128994482097506563,111,5694225620172914022,129017823262156499,7997623359991201723,7496640646864546743,1000034,1000080,1000082,1000234,1000515,100[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorDialogDelayInSec", 10);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.testingCtid", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarAppMetaDataLastCheckTime", "Thu Jul 21 2011 11:05:05 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarContextMenuLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.usagesFlag", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogIsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogServiceUrl", "hxxp://clientlog.users.tbccint.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..uninstallLogServiceUrl", "hxxp://uninstall.users.tbccint.com/Uninstall.asmx/RegisterToolbarUninstallation");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.BrowserCompStateIsOpen_1367163180000", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CT2583727", "CT2583727");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CurrentServerDate", "23-12-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsGetterLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"8/4/2011 7:30:02 AM\",\"SourceId\":0,\"OriginSource\":0,\"Referr[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstServerDate", "4-8-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTime", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTimeFF3", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FixPageNotFoundErrors", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServerCheckInterval", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServiceUrl", "hxxp://grouping.tbccint.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HasUserGlobalKeys", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HomePageProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Initialize", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InitializeCommonPrefs", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationAndCookieDataSentCount", 3);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationType", "DirectDownload");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstalledDate", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InvalidateCache", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsGrouping", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsInitSetupIni", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsMulticommunity", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenThankYouPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenUninstallPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsProtectorsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackLastCheckTime", "Mon Dec 22 2014 17:28:56 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackReloadIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackServiceUrl", "hxxp://translation.users.tbccint.com/Translation.ashx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.15.1.0", "Mon Dec 22 2014 17:28:51 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.6.0.10", "Wed Aug 03 2011 21:29:52 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LatestVersion", "3.20.0.4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipHeight", "83");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipWidth", "295");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MyStuffEnabledAtInstallation", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.OriginalFirstVersion", "3.6.0.10");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioIsPodcast", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateIPServer", "3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateServer", "129175413658100000");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaID", "20556349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaType", "Media Player");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMenuSelectedID", "EBRadioMenu_CT258372720556349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationName", "1.FM%2080s%20%26%2090s%20(USA)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationURL", "hxxp://1.fm/wm/energy80s32k.asx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SavedHomepage", "hxxp://www.google.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchEngineBeforeUnload", "Blackjack-Madness Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarIsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583727&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabLastCheckTime", "Mon Dec 22 2014 17:28:36 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorToolbarDisabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ServiceMapLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastCheckTime", "Tue Dec 23 2014 05:01:06 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastUpdate", "1419314435");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsInterval", 504);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastCheck", "Wed Aug 03 2011 21:29:46 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ToolbarShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrusteLinkUrl", "hxxp://trust.cpccint.com");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,tbclient.tbccint.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,appstrm.com,OurToolbar.co[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.UserID", "UN09478397069999234");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherNetwork", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherPollDate", "Wed Aug 03 2011 21:29:50 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherUnit", "F");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.alertChannelId", "976547");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com;social.tbccint.com;apps.tbccint.com;services.a[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.globalFirstTimeInfoLastCheckTime", "Wed Aug 03 2011 21:29:49 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.homepageProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.initDone", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isAppTrackingManagerOn", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isFirstRadioInstallation", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffPublihserMinWidth", 400);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffSearchUrl", "hxxp://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.revertSettingsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorDialogDelayInSec", 10);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.testingCtid", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarAppMetaDataLastCheckTime", "Mon Dec 22 2014 17:28:58 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarContextMenuLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.LoginRevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3184310&SearchSource=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.UserID", "UN17729284552852997");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.autoDisableScopes", -1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableAlerts", "always");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installId", "ct3184310_little_fish_bar.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3184310\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://LittleFishBar.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"LittleFishBar\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940030380");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_serviceMap_lastUpdate", "1445940029454");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_toolbarSettings_lastUpdate", "1445940030275");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_translation_lastUpdate", "1445940029469");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.CTID", "CT3184310");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.isHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.toolbarName", "LittleFishBar ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarBornServerTime", "2-12-2012");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891652,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM1ODM0MDMzMywidXVpZCI6MjEzMDQzNjc3MDY4NDY4LCJzZXFfaWQiOjMsInNzYiI6MTM1NzQ2MDA1Nn0=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.CBOpenMAMSettings.enc", "MA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&q=&SearchSource=2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.UserID", "UN29308809761562386");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.autoDisableScopes", -1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbcountry_001.enc", "VVM=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbfirsttime.enc", "U3VuIEphbiAwNiAyMDEzIDAwOjE0OjE1IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.installType", "xpe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.google.com%2Fchrome%2Fbrowser%2Fthankyou.html%3Fplatform%3Dwin%26oneclickinstalled%3D1%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openThankYouPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openUninstallPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940029221");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1445940027673");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1445940029339");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1445940028680");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarBornServerTime", "23-12-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891637,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.UserID", "UN52294229241605980");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installId", "air52cc.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.CTID", "CT3247201");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.toolbarName", "InternetHelper1.5 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891626,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.UserID", "UN40166142081052929");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enlargeSearchBox", "{\"enabled\":true,\"maxWidth\":1000,\"minWidth\":250,\"width\":500}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fullUserID", "UN40166142081052929.IN.20130810193525");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installId", "cid3975");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3279411&octid=CT3279411&ISID=ISID_ID&SearchSource=15&CUI=UN40166142081052929&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastVersion", "10.20.0.13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openUninstallPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngineName", "Google");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3279411\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://appbario12.Toolbar.fm//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"appbario12 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.CTID", "CT3279411");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.toolbarName", "appbario12 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:45 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891661,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.isPlayDisplay", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.PG_ENABLE", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.UserID", "UN14837961194955167");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.embeddedsData", "[{\"appId\":\"130058504672798349\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fullUserID", "UN14837961194955167.IN.20130908002906");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installId", "stub.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3287805&octid=CT3287805&ISID=ISID_ID&SearchSource=15&CUI=UN14837961194955167&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastVersion", "10.19.2.5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B6%BF%B9%BB%BF");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAwOTM1OQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BA%B8%BB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMDQyNQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjExOTlfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp", "%B7%B7%BF%BF%E5%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp.enc", "MTE5OV8w");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate", "%D4%B5%C7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate.enc", "Ti9B");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId", "%BE%E9%EA%BC%B8%E7%BE%BC%B3%B6%E9%BF%BF%B3%BA%BA%B9%E7%B3%E8%EA%E8%B6%B3%B9%BB%B6%E8%E9%E8%EA%EB%EB%B8%BD%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId.enc", "OGNkNjJhODYtMGM5OS00NDNhLWJkYjAtMzUwYmNiZGVlMjdl");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchAppId", "130058504672798349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchCount", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3287805\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://VisualBeeV6.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"VisualBee V.6 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.CTID", "CT3287805");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.isHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.toolbarName", "VisualBee V.6 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:47 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891693,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.UserID", "UN29861963635204956");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fullUserID", "UN29861963635204956.IN.20130805001614");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installId", "wjanc528752iqc0riyba");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3292715&octid=CT3292715&ISID=ISID_ID&SearchSource=15&CUI=UN29861963635204956&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastVersion", "10.16.70.5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.revertSettingsEnabled", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3292715\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://SearchFlyBar2.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"SearchFlyBar2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.CTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.toolbarName", "SearchFlyBar2 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarBornServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarLoginClientTime", "Tue Oct 27 2015 02:58:56 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891720,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.UserID", "UN18029757605143900");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableFix404ByUser", "TRUE");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installId", "51946c08150ba0134800048e");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3295548&octid=CT3295548&SearchSource=15&CUI=UN18029757605143900&SSPV=EB_SSPV&Lay=1&UM=2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastVersion", "10.16.2.9");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchAddressUrl", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295548\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly3.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.CTID", "CT3295548");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.toolbarName", "xvidly3 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarBornServerTime", "18-5-2013");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:40 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891683,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.UserID", "UN26692583332569832");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fullUserID", "UN26692583332569832.IN.20130810041100");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installId", "cid1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3295549&octid=CT3295549&ISID=ISID_ID&SearchSource=15&CUI=UN26692583332569832&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastVersion", "10.16.9.6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3287805&CUI=UN14837961194955167&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295549\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly4.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.CTID", "CT3295549");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.toolbarName", "xvidly4 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:48 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891704,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.isPlayDisplay", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.PG_ENABLE", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3303005&SearchSource=2&CUI=UN37266934532419213&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.UserID", "UN37266934532419213");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickFavorites.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickRecent.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000", "%C9%C8%B7%BE%B9%BB%BD%B8%B9%BF%BE%B7%B6%B8%E5%B7%BA%B7%B9%BC%BB%BD%BB%BA%BC%B8%BD%BD%E5%CC%EF%F8%EB%EC%F5%FE");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000.enc", "Q0IxODM1NzIzOTgxMDJfMTQxMzY1NzU0NjI3N19GaXJlZm94");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime", "%D3%F5%F4%A6%D0%E7%F4%A6%B7%B9%A6%B8%B6%B7%BA%A6%B6%B6%C0%B9%B7%C0%B9%BD%A6%CD%D3%DA%B3%B6%BE%B6%B6%A6%AE%D6%E7%E9%EF%EC%EF%E9%A6%D9%FA%E7%F4%EA%E7%F8%EA%A6%DA%EF%F[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime.enc", "TW9uIEphbiAxMyAyMDE0IDAwOjMxOjM3IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.embeddedsData", "[{\"appId\":\"130136189134643350\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fullUserID", "UN37266934532419213.IN.20131027122926");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installId", "stub.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3303005&octid=CT3303005&ISID=ISID_ID&SearchSource=15&CUI=UN37266934532419213&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastVersion", "10.21.1.7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BD%BB%BC");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAxMDc1Ng==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B7%B7%BA%B8");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMTE0Mg==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps", "%E1%E3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjEwNDNfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp", "%B7%B6%BA%B9%E5%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp.enc", "MTA0M18w");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate", "%D4%B5%C7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate.enc", "Ti9B");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId", "%BE%B9%E7%E8%E9%BE%BC%EB%B3%BF%B7%EB%BE%B3%BA%E9%BD%BA%B3%E8%E8%B7%EB%B3%BD%BE%E8%BF%EC%B7%B9%EC%E7%BA%BE%BF");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId.enc", "ODNhYmM4NmUtOTFlOC00Yzc0LWJiMWUtNzhiOWYxM2ZhNDg5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid", "%F9%EE%EB%B7%B6%B7%BA%BE%B7%BA%BB%B7%B6%B7%BA%B7%B7%BF%B7%B7%B7%BD%BA%B7%B7%BE%BB%B9%BB%B7%B8%B7%BD%BB%BA%B7%B7%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid.enc", "c2hlMTAxNDgxNDUxMDE0MTE5MTExNzQxMTg1MzUxMjE3NTQxMTA=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3292715&CUI=UN29861963635204956&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngine", "SearchFlyBar2 Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site", "%EE%FA%FA%F6%C0%B5%B5%F8%EF%B4%F9%EB%E7%F8%E9%EE%B4%FF%E7%EE%F5%F5%B4%E9%F5%F3%B5%E5%FF%F2%FA%C3%C7%B6%D9%D5%BE%FE%FC%D5%DA%C9%BF%DD%CA%CB%BE%C7%BC%B7%F6%DE%D4%FF[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site.enc", "aHR0cDovL3JpLnNlYXJjaC55YWhvby5jb20vX3lsdD1BMFNPOHh2T1RDOVdERThBNjFwWE55b0E7X3lsdT1YM29ETVRFemJIQnlOMlF5QkdOdmJHOERaM0V4QkhCdmN3TXhCSFowYVdRRFFqRXhOakJHWHpFRW[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchAppId", "130136189134643350");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchCount", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchUserMode", "8");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3303005\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Vafmusic12.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Vafmusic12 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_Configuration_lastUpdate", "1445939999270");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1445939997807");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appsMetadata_lastUpdate", "1445939998876");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1445939998187");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_login_10.21.1.7_lastUpdate", "1445940779233");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1445939998843");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_searchAPI_lastUpdate", "1445940001213");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_serviceMap_lastUpdate", "1445939994023");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_setupAPI_lastUpdate", "1445939998836");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarContextMenu_lastUpdate", "1445939998882");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarSettings_lastUpdate", "1445939998343");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_translation_lastUpdate", "1445939997777");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.CTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.toolbarName", "Vafmusic12 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarBornServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarInstallDate", "27-10-2015 02:59:52");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarLoginClientTime", "Tue Oct 27 2015 02:59:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001", "%EE%FA%FA%F6%C0%B5%B5%FD%FD%FD%B4%F3%FF%EC%F8%EB%EB%F6%E7%FF%F9%EF%FA%EB%B4%E9%F5%F3%B5%F3%EB%F3%E8%EB%F8%F9%B5%EC%F2%F3%EC%F6%B4%EE%FA%F3%F2%C0%C0%C0%E9%F2%EF%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001.enc", "aHR0cDovL3d3dy5teWZyZWVwYXlzaXRlLmNvbS9tZW1iZXJzL2ZsbWZwLmh0bWw6OjpjbGlja2hhbmRsZXI6OjoxNDEzNjU3NzYwNzczLCwsaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxl[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891672,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitHomepagesList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.backgroundjs", "\n\n/*****************************************************************************[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.description", "VisualBee Browser Extension");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_meta.value", "%7B%22images/emaze.png%22%3A%7B%22id%22%3A726444%2C%22ver%22%3A[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_resource_726445.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.js", "\n\n  /************************************************************************************\[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.name", "VisualBee");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_13.name", "CrossriderAppUtils");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_14.name", "CrossriderUtils");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"isBackground!==true)&&(typeof _[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_246.code", "var _0x8f59=[\"10\",\"11\",\"19\",\"20\",\"26\",\"27\",\"28\",\"29\",\"[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_32.code", "appAPI.hooks.addHook(\"images\",(function(a){return function(){var v={bg[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_376.code", "(function(){var a=(function(){var l=function(){return appAPI&&appAPI.in[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_5.code", "(function(f){f.ui=f.ui{};var e=/leftcenterright/,d=/topcenterbottom[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_78.name", "CrossriderInfo");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(a){return function(){var [...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.publisher", "VisualBee");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "14cef62c18e227b3097606a29c206a8c");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.dashlane.safesearchcapable", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.admin", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.aflt", "babsst");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.autoRvrt", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.dfltLng", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.excTlbr", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.ffxUnstlRst", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.id", "4e620d530000000000000019b915d7d7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlDay", "15843");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlRef", "sst");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.newTab", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prdct", "delta");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prtnrId", "delta");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.rvrt", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.smplGrp", "none");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrId", "base");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsn", "1.8.21.0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsnTs", "1.8.21.021:43:28");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsni", "1.8.21.0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babExt", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babTrack", "affID=121240&tt=gc_");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.srcExt", "ss");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.enabledAddons", "5kffxtbr%40iWon_5k.com:1.39.0.30675,ffxtlbr%40funmoods.com:1.5.1,links%40rivalgaming.com:1.0.0,smartlinks%40getsmartlinks.com:1.0.35,%7B1930e38a-deef-4cf4-9bfb-9[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cntry", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cv", "cv5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dfltSrch", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hdrMd5", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hmpg", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.lastVrsnTs", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.newTab", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.sg", "free");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.smplGrp", "free");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=D767A45E-2DF1-4316-8A13-78E0F179708C&n=781b1bc4&ptnrS=ZLxdm002YYus&si=CISx0-yw168CFakZQgodAx[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.hp.user.defined", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.initialized", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.installDate", "2015042500");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.partnerId", "ZLxdm002YYus");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.partnerSubId", "CISx0-yw168CFakZQgodAxShBw");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.success", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.toolbarId", "D767A45E-2DF1-4316-8A13-78E0F179708C");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.lastActivePing", "1445939887122");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.weather.location", "94540");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "[email protected]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.machineId", "KSECXPB5PI8KDEZTH8V81TMU2MHJDJ+X8NSHOBYFT4RHW6IICA3SZ6Y7UOGBECFWBXQMMUKAOQMEYHXLVZCSZA");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tag=bds-p18-serp-us-ff-20&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf31[...]

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/mb128

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com_

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : isearch.avg.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : r

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : funmoods.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.conduit.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : windows-live-photo-gallery.en.softonic.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : babylon.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : trovi.search

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : lasaoren.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : cassiopesa.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com_

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : apfdadfinodckpcehhdhjlgiphgnbfci

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pbjikboenpfhbbejgkoklgkhjpfogcam

 

*************************

 

:: Winsock settings cleared

 

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [197660 bytes] ##########

[jbj1162]

Ok that worked here's the file 

 

 

 

# AdwCleaner v5.015 - Logfile created 29/10/2015 at 14:25:20

# Updated 26/10/2015 by Xplode

# Database : 2015-10-29.1 [Server]

# Operating system : Windows 7 Ultimate  (x86)

# Username : Jesus - OPTIPLEX

# Running from : C:\Users\Jesus\Desktop\jbj fix this [bleep]\adwcleaner_5.015.exe

# Option : Cleaning

# Support : http://toolslib.net/forum

 

***** [ Services ] *****

 

 

***** [ Folders ] *****

 

 

***** [ Files ] *****

 

[-] File Deleted : C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pbjikboenpfhbbejgkoklgkhjpfogcam

 

***** [ DLLs ] *****

 

 

***** [ Shortcuts ] *****

 

 

***** [ Scheduled tasks ] *****

 

[-] Task Deleted : RunAsStdUser Task for VeohWebPlayer

[-] Task Deleted : ShdUpdate

[-] Task Deleted : OpenCandyHelperRunOnce

[-] Task Deleted : SuperLyrics-16-firefoxinstaller

[-] Task Deleted : SuperLyrics-16-updater

[-] Task Deleted : c18b53c1-d7c3-48f9-96b5-786590d4f08f-2

[-] Task Deleted : SuperLyrics-16-firefoxinstaller

[-] Task Deleted : SuperLyrics-16-updater

 

***** [ Registry ] *****

 

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\conduit.com

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler

[-] Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\f

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore

[-] Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

[-] Key Deleted : HKLM\SOFTWARE\Classes\PutLockerDownloader

[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject

[-] Key Deleted : HKLM\SOFTWARE\Classes\Speed Analysis 3.BackgroundHostObject.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper

[-] Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook

[-] Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers

[-] Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10

[-] Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4

[-] Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\BackgroundHost.EXE

[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com

[-] Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Gameo]

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL

[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [CinPlus-2.5cdTube HDV03.10-bg.exe]

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.IEToolbar.1

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898

[-] Key Deleted : HKLM\SOFTWARE\Classes\TBSB07898.TBSB07898.3

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2418376

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3184310

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3247201

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3279411

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3287805

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3292715

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295548

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295549

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298570

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3303005

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898

[-] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB07898.1

[-] Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{442718d9-475e-452a-b3e1-fb1ee16b8e9f}]

[-] Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}]

[-] Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinodckpcehhdhjlgiphgnbfci

[-] Key Deleted : HKCU\Software\Google\Chrome\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

[-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{059EACC2-1ABE-49E8-928D-DC8BD355B7A9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ACE0D5AB-50C8-4052-BD02-977569E56291}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D824F0DE-3D60-4F57-9EB1-66033ECD8ABB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}

[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E2B98EEA-EE55-4E9B-A8C1-6E5288DF785A}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DB507187-9746-458C-97DA-C458131EEDE7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}

[-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0771C34F-730F-4535-AD4C-37B74D27188E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}

[!] Key Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414462}

[-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644324485}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D425283-D487-4337-BAB6-AB8354A81457}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00E71626-0BEF-11DC-8314-0800200C9A66}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{93488930-185C-4CED-AFEB-0FD4930F8423}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D425283-D487-4337-BAB6-AB8354A81457}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A66261FC-B82E-4EC7-9F6D-C2F36B871DF0}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EA582743-9076-4178-9AA6-7393FDF4D5CE}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{44D07CAA-4FC4-5A84-9951-A485AD808D0E}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{08858AF6-42AD-4914-95D2-AC3AB0DC8E28}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{AF5B5C22-498A-4239-9A51-82BDD99C6A44}]

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{03a123a7-068d-43fc-81fe-e3d3ccd24e0a}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1a0afa47-2463-4ed4-9f59-ae3fcee71d3d}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1b9eb1fe-fe0c-4ad6-ad8a-4e1f5a6ef3f5}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4779d21f-daf2-489d-864f-f166cba2cb9f}

[-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D425283-D487-4337-BAB6-AB8354A81457}]

[-] Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search

[-] Key Deleted : HKU\.DEFAULT\Software\IM

[-] Key Deleted : HKU\.DEFAULT\Software\ImInstaller

[-] Key Deleted : HKU\.DEFAULT\Software\SweetIM

[-] Key Deleted : HKU\.DEFAULT\Software\WNLT

[-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab

[-] Key Deleted : HKCU\Software\Alexa Internet

[-] Key Deleted : HKCU\Software\AnyProtect

[-] Key Deleted : HKCU\Software\APN PIP

[-] Key Deleted : HKCU\Software\BABSOLUTION

[-] Key Deleted : HKCU\Software\BI

[-] Key Deleted : HKCU\Software\Bitberry

[-] Key Deleted : HKCU\Software\Conduit

[-] Key Deleted : HKCU\Software\Cr_Installer

[-] Key Deleted : HKCU\Software\delta LTD

[-] Key Deleted : HKCU\Software\distromatic

[-] Key Deleted : HKCU\Software\Funmoods

[-] Key Deleted : HKCU\Software\GoforFiles

[-] Key Deleted : HKCU\Software\IM

[-] Key Deleted : HKCU\Software\ImInstaller

[-] Key Deleted : HKCU\Software\InstalledBrowserExtensions

[-] Key Deleted : HKCU\Software\InstalledThirdPartyPrograms

[-] Key Deleted : HKCU\Software\Softonic

[-] Key Deleted : HKCU\Software\SweetIM

[-] Key Deleted : HKCU\Software\visualbee

[-] Key Deleted : HKCU\Software\YahooPartnerToolbar

[-] Key Deleted : HKCU\Software\Zugo

[-] Key Deleted : HKCU\Software\CoinisRS

[-] Key Deleted : HKCU\Software\gameo

[-] Key Deleted : HKCU\Software\PRODUCTSETUP

[-] Key Deleted : HKCU\Software\PCCleaners

[-] Key Deleted : HKCU\Software\SlimWare Utilities Inc

[-] Key Deleted : HKCU\Software\Yahoo\Companion

[-] Key Deleted : HKCU\Software\Yahoo\YFriendsBar

[-] Key Deleted : HKCU\Software\AppDataLow\SProtector

[-] Key Deleted : HKCU\Software\AppDataLow\Toolbar

[-] Key Deleted : HKCU\Software\AppDataLow\Software\BackgroundContainer

[-] Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

[-] Key Deleted : HKCU\Software\AppDataLow\Software\Mp3Tube

[-] Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong

[-] Key Deleted : HKCU\Software\AppDataLow\Software\visualbee

[-] Key Deleted : HKCU\Software\AppDataLow\Software\Yahoo\Companion

[-] Key Deleted : HKLM\SOFTWARE\Babylon

[-] Key Deleted : HKLM\SOFTWARE\BabylonToolbar

[-] Key Deleted : HKLM\SOFTWARE\Desksvc

[-] Key Deleted : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar

[-] Key Deleted : HKLM\SOFTWARE\DomaIQ

[-] Key Deleted : HKLM\SOFTWARE\Driver-Soft

[-] Key Deleted : HKLM\SOFTWARE\Freeze.com

[-] Key Deleted : HKLM\SOFTWARE\GoforFiles

[-] Key Deleted : HKLM\SOFTWARE\hdcode

[-] Key Deleted : HKLM\SOFTWARE\IB Updater

[-] Key Deleted : HKLM\SOFTWARE\InfoAtoms

[-] Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions

[-] Key Deleted : HKLM\SOFTWARE\InstalledThirdPartyPrograms

[-] Key Deleted : HKLM\SOFTWARE\PIP

[-] Key Deleted : HKLM\SOFTWARE\SweetIM

[-] Key Deleted : HKLM\SOFTWARE\Tarma Installer

[-] Key Deleted : HKLM\SOFTWARE\V9

[-] Key Deleted : HKLM\SOFTWARE\VBMZ

[-] Key Deleted : HKLM\SOFTWARE\visualbee

[-] Key Deleted : HKLM\SOFTWARE\W3I

[-] Key Deleted : HKLM\SOFTWARE\SlimWare Utilities Inc

[-] Key Deleted : HKLM\SOFTWARE\Yahoo\Companion

[-] Key Deleted : HKLM\SOFTWARE\SLIMWARE UTILITIES, INC.

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke_US Toolbar

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Driver Genius Professional Edition_is1

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PokerStars.net

[!] Key Not Deleted : HKU\.DEFAULT\Software\AppDataLow\Software\DefaultTab

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\BackgroundContainer

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\ConduitSearchScopes

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Mp3Tube

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\PriceGong

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\visualbee

[!] Key Not Deleted : HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\AppDataLow\Software\Yahoo\Companion

[!] Key Not Deleted : HKU\S-1-5-18\Software\AppDataLow\Software\DefaultTab

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964

[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

 

***** [ Web browsers ] *****

 

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogIsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CTID", "ct2418376");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.CurrentServerDate", "6-8-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DialogsGetterLastCheckTime", "Wed Aug 03 2011 15:14:35 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.DownloadReferralCookieData", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ExternalComponentPollDate5694225620172914022", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstServerDate", "21-7-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTime", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FirstTimeFF3", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.FixPageNotFoundErrors", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServerCheckInterval", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HasUserGlobalKeys", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.HomePageProtectorEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Initialize", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InitializeCommonPrefs", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationAndCookieDataSentCount", 3);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationId", "ConduitStubGeneric");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstallationType", "ConduitStubIntegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.InstalledDate", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsAlertDBUpdated", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsGrouping", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsInitSetupIni", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsMulticommunity", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenThankYouPage", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsOpenUninstallPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.IsProtectorsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackReloadIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LastLogin_3.5.0.12", "Fri Aug 05 2011 18:00:43 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.LatestVersion", "3.3.5.1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipHeight", "83");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipShow", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MCDetectTooltipWidth", "295");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.MyStuffEnabledAtInstallation", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.OriginalFirstVersion", "3.5.0.12");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchEngineBeforeUnload", "PageRage Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarIsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SearchProtectorToolbarDisabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ServiceMapLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastCheckTime", "Thu Jul 21 2011 11:05:03 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.SettingsLastUpdate", "1311226770");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsInterval", 504);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:02 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ToolbarShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2418376");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.UserID", "UN51694230990578799");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Search", 0);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ValidationData_Toolbar", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.alertChannelId", "812740");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.approveUntrustedApps", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.counterAppsAdded", 1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.LanguagePackLastCheckTime", "Fri Aug 05 2011 08:52:26 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SearchInNewTabLastCheckTime", "Fri Aug 05 2011 08:52:22 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastCheckTime", "Fri Aug 05 2011 18:00:42 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.SettingsLastUpdate", "1311797275");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastCheck", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.globalFirstTimeInfoLastCheckTime", "Sat Aug 06 2011 02:00:46 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarAppMetaDataLastCheckTime", "Fri Aug 05 2011 08:52:28 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.ct2418376.toolbarContextMenuLastCheckTime", "Thu Aug 04 2011 11:16:09 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.globalFirstTimeInfoLastCheckTime", "Thu Jul 21 2011 11:05:06 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.homepageProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.initDone", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.isAppTrackingManagerOn", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffPublihserMinWidth", 400);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.oldAppsList", "128994482097350312,128994482097506563,111,5694225620172914022,129017823262156499,7997623359991201723,7496640646864546743,1000034,1000080,1000082,1000234,1000515,100[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorDialogDelayInSec", 10);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.searchProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.testingCtid", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarAppMetaDataLastCheckTime", "Thu Jul 21 2011 11:05:05 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.toolbarContextMenuLastCheckTime", "Thu Jul 21 2011 11:05:10 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2418376.usagesFlag", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogIsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..clientLogServiceUrl", "hxxp://clientlog.users.tbccint.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727..uninstallLogServiceUrl", "hxxp://uninstall.users.tbccint.com/Uninstall.asmx/RegisterToolbarUninstallation");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/default.aspx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.BrowserCompStateIsOpen_1367163180000", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CT2583727", "CT2583727");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.CurrentServerDate", "23-12-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsAlignMode", "LTR");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DialogsGetterLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"8/4/2011 7:30:02 AM\",\"SourceId\":0,\"OriginSource\":0,\"Referr[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstServerDate", "4-8-2011");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTime", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FirstTimeFF3", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.FixPageNotFoundErrors", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServerCheckInterval", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.GroupingServiceUrl", "hxxp://grouping.tbccint.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HasUserGlobalKeys", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.HomePageProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Initialize", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InitializeCommonPrefs", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationAndCookieDataSentCount", 3);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstallationType", "DirectDownload");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InstalledDate", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.InvalidateCache", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsGrouping", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsInitSetupIni", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsMulticommunity", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenThankYouPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsOpenUninstallPage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.IsProtectorsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackLastCheckTime", "Mon Dec 22 2014 17:28:56 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackReloadIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LanguagePackServiceUrl", "hxxp://translation.users.tbccint.com/Translation.ashx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.15.1.0", "Mon Dec 22 2014 17:28:51 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LastLogin_3.6.0.10", "Wed Aug 03 2011 21:29:52 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.LatestVersion", "3.20.0.4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.Locale", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipHeight", "83");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MCDetectTooltipWidth", "295");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.MyStuffEnabledAtInstallation", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.OriginalFirstVersion", "3.6.0.10");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioIsPodcast", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateIPServer", "3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioLastUpdateServer", "129175413658100000");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaID", "20556349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMediaType", "Media Player");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioMenuSelectedID", "EBRadioMenu_CT258372720556349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationName", "1.FM%2080s%20%26%2090s%20(USA)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.RadioStationURL", "hxxp://1.fm/wm/energy80s32k.asx");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SavedHomepage", "hxxp://www.google.com/");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchEngineBeforeUnload", "Blackjack-Madness Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarIsInit", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583727&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabLastCheckTime", "Mon Dec 22 2014 17:28:36 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SearchProtectorToolbarDisabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ServiceMapLastCheckTime", "Mon Dec 22 2014 17:28:57 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastCheckTime", "Tue Dec 23 2014 05:01:06 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.SettingsLastUpdate", "1419314435");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsInterval", 504);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastCheck", "Wed Aug 03 2011 21:29:46 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ThirdPartyComponentsLastUpdate", "1246786978");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.ToolbarShrinkedFromSetup", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrusteLinkUrl", "hxxp://trust.cpccint.com");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,tbclient.tbccint.com,codefuel.com,tbccint.com,trovi.com,seccint.com,cpccint.com,appstrm.com,OurToolbar.co[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.UserID", "UN09478397069999234");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherNetwork", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherPollDate", "Wed Aug 03 2011 21:29:50 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.WeatherUnit", "F");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.alertChannelId", "976547");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com;social.tbccint.com;apps.tbccint.com;services.a[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.globalFirstTimeInfoLastCheckTime", "Wed Aug 03 2011 21:29:49 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.homepageProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.initDone", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isAppTrackingManagerOn", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.isFirstRadioInstallation", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffPublihserMinWidth", 400);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffSearchUrl", "hxxp://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceIntervalMM", 1440);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.revertSettingsEnabled", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorDialogDelayInSec", 10);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.searchProtectorEnableByLogin", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.testingCtid", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarAppMetaDataLastCheckTime", "Mon Dec 22 2014 17:28:58 GMT-0800 (Pacific Standard Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT2583727.toolbarContextMenuLastCheckTime", "Wed Aug 03 2011 21:29:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.LoginRevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3184310&SearchSource=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.UserID", "UN17729284552852997");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.autoDisableScopes", -1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableAlerts", "always");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installId", "ct3184310_little_fish_bar.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3184310\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://LittleFishBar.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"LittleFishBar\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940030380");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_serviceMap_lastUpdate", "1445940029454");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_toolbarSettings_lastUpdate", "1445940030275");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.serviceLayer_services_translation_lastUpdate", "1445940029469");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.CTID", "CT3184310");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.isHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.smartbar.toolbarName", "LittleFishBar ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarBornServerTime", "2-12-2012");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3184310_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891652,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM1ODM0MDMzMywidXVpZCI6MjEzMDQzNjc3MDY4NDY4LCJzZXFfaWQiOjMsInNzYiI6MTM1NzQ2MDA1Nn0=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.CBOpenMAMSettings.enc", "MA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3220468&q=&SearchSource=2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.UserID", "UN29308809761562386");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.autoDisableScopes", -1);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbcountry_001.enc", "VVM=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.cbfirsttime.enc", "U3VuIEphbiAwNiAyMDEzIDAwOjE0OjE1IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.installType", "xpe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isNewTabEnabled", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.google.com%2Fchrome%2Fbrowser%2Fthankyou.html%3Fplatform%3Dwin%26oneclickinstalled%3D1%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openThankYouPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.openUninstallPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3220468\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv2.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1445940029221");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1445940027673");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1445940029339");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1445940028680");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarBornServerTime", "23-12-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891637,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.UserID", "UN52294229241605980");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installId", "air52cc.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.isPerformedSmartBarTransition", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.CTID", "CT3247201");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.smartbar.toolbarName", "InternetHelper1.5 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201.startPage", "userChanged");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3247201_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891626,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.UserID", "UN40166142081052929");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.enlargeSearchBox", "{\"enabled\":true,\"maxWidth\":1000,\"minWidth\":250,\"width\":500}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.fullUserID", "UN40166142081052929.IN.20130810193525");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installId", "cid3975");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3279411&octid=CT3279411&ISID=ISID_ID&SearchSource=15&CUI=UN40166142081052929&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.lastVersion", "10.20.0.13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.openUninstallPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.originalSearchEngineName", "Google");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3279411\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://appbario12.Toolbar.fm//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"appbario12 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.CTID", "CT3279411");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.smartbar.toolbarName", "appbario12 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:45 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3279411_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891661,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.isPlayDisplay", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.PG_ENABLE", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.UserID", "UN14837961194955167");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.embeddedsData", "[{\"appId\":\"130058504672798349\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.fullUserID", "UN14837961194955167.IN.20130908002906");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installId", "stub.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3287805&octid=CT3287805&ISID=ISID_ID&SearchSource=15&CUI=UN14837961194955167&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.lastVersion", "10.19.2.5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B6%BF%B9%BB%BF");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAwOTM1OQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_CouponBuddy.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Easytobook_targeted.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_Find-a-Pro.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_PriceGong.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appState_WindowShopper.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_calledSetupService.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_first_time.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BA%B8%BB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMDQyNQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_mamEnabled.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_new_welcome_experience.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjExOTlfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp", "%B7%B7%BF%BF%E5%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_stamp.enc", "MTE5OV8w");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate", "%D4%B5%C7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userBornDate.enc", "Ti9B");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId", "%BE%E9%EA%BC%B8%E7%BE%BC%B3%B6%E9%BF%BF%B3%BA%BA%B9%E7%B3%E8%EA%E8%B6%B3%B9%BB%B6%E8%E9%E8%EA%EB%EB%B8%BD%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_userId.enc", "OGNkNjJhODYtMGM5OS00NDNhLWJkYjAtMzUwYmNiZGVlMjdl");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_user_approval_interacted.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.mam_gk_welcomeDialogMode.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279411&SearchSource=2&CUI=UN40166142081052929&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchAppId", "130058504672798349");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.search.searchCount", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3287805\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://VisualBeeV6.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"VisualBee V.6 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.CTID", "CT3287805");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.isHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.smartbar.toolbarName", "VisualBee V.6 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:47 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3287805_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891693,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.UserID", "UN29861963635204956");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.fullUserID", "UN29861963635204956.IN.20130805001614");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installId", "wjanc528752iqc0riyba");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3292715&octid=CT3292715&ISID=ISID_ID&SearchSource=15&CUI=UN29861963635204956&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.lastVersion", "10.16.70.5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.revertSettingsEnabled", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3292715\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://SearchFlyBar2.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"SearchFlyBar2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.CTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.smartbar.toolbarName", "SearchFlyBar2 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarBornServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715.toolbarLoginClientTime", "Tue Oct 27 2015 02:58:56 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3292715_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891720,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.UserID", "UN18029757605143900");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableFix404ByUser", "TRUE");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installId", "51946c08150ba0134800048e");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3295548&octid=CT3295548&SearchSource=15&CUI=UN18029757605143900&SSPV=EB_SSPV&Lay=1&UM=2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.lastVersion", "10.16.2.9");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalHomepage", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf317483ba84aa3bf29274106_18_38_20130[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchAddressUrl", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295548\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly3.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.CTID", "CT3295548");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.smartbar.toolbarName", "xvidly3 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarBornServerTime", "18-5-2013");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:40 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295548_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891683,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295549&SearchSource=2&CUI=UN26692583332569832&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.UserID", "UN26692583332569832");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fixUrls", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.fullUserID", "UN26692583332569832.IN.20130810041100");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installId", "cid1");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3295549&octid=CT3295549&ISID=ISID_ID&SearchSource=15&CUI=UN26692583332569832&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.lastVersion", "10.16.9.6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.migrateAppsAndComponents", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3287805&CUI=UN14837961194955167&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3287805&SearchSource=2&CUI=UN14837961194955167&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngine", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295549\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://xvidly4.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"xvidly4\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.CTID", "CT3295549");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.smartbar.toolbarName", "xvidly4 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarBornServerTime", "27-10-2014");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarCurrentServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549.toolbarLoginClientTime", "Fri Aug 07 2015 11:17:48 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3295549_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891704,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.isPlayDisplay", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTime", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.FirstTimeFF3", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.PG_ENABLE", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3303005&SearchSource=2&CUI=UN37266934532419213&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.UserID", "UN37266934532419213");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickFavorites.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.YTbyClickRecent.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.addressBarTakeOverEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.browser.search.defaultthis.engineName", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000", "%C9%C8%B7%BE%B9%BB%BD%B8%B9%BF%BE%B7%B6%B8%E5%B7%BA%B7%B9%BC%BB%BD%BB%BA%BC%B8%BD%BD%E5%CC%EF%F8%EB%EC%F5%FE");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cb_user_id_000.enc", "Q0IxODM1NzIzOTgxMDJfMTQxMzY1NzU0NjI3N19GaXJlZm94");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime", "%D3%F5%F4%A6%D0%E7%F4%A6%B7%B9%A6%B8%B6%B7%BA%A6%B6%B6%C0%B9%B7%C0%B9%BD%A6%CD%D3%DA%B3%B6%BE%B6%B6%A6%AE%D6%E7%E9%EF%EC%EF%E9%A6%D9%FA%E7%F4%EA%E7%F8%EA%A6%DA%EF%F[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.cbfirsttime.enc", "TW9uIEphbiAxMyAyMDE0IDAwOjMxOjM3IEdNVC0wODAwIChQYWNpZmljIFN0YW5kYXJkIFRpbWUp");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.countryCode", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.defaultSearch", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.embeddedsData", "[{\"appId\":\"130136189134643350\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableAlerts", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.enableSearchFromAddressBar", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.firstTimeDialogOpened", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundError", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fixPageNotFoundErrorInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.fullUserID", "UN37266934532419213.IN.20131027122926");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.homepageuserchanged", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installId", "stub.exe");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.installType", "conduitnsisintegration");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isCheckedStartAsHidden", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isFirstTimeToolbarLoading", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.keyword", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT3303005&octid=CT3303005&ISID=ISID_ID&SearchSource=15&CUI=UN37266934532419213&SSPV=&[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.lastVersion", "10.21.1.7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B6%BD%BB%BC");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appStateReportTime.enc", "MTQ0NTk0MDAxMDc1Ng==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_CouponBuddy.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Easytobook_targeted.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_Find-a-Pro.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_PriceGong.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper", "%F5%F4");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appState_WindowShopper.enc", "b24=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsConfig.enc", "eyJBcHBzQ29uZmlndXJhdGlvbiI6W3siaWQiOiJFYXN5dG9ib29rX3RhcmdldGVkIiwidXJsIjoiaHR0cDovL2NvbmQwMS5ldGJ4bWwuY29tL2NvbmR1aXRfYnVuZGxlL3dlYi9jaGVhcC5odG1sIiwic2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled", "%F4%FB%F2%F2");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_calledSetupService.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion", "%B7%B4%B7%B9%B4%B6%B4%B7%BD");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_currentVersion.enc", "MS4xMy4wLjE3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_existingUsersRecoveryDone.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_first_time.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime", "%B7%BA%BA%BB%BF%BA%B6%B6%B7%B7%B7%BA%B8");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_lastLoginTime.enc", "MTQ0NTk0MDAxMTE0Mg==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_localization.enc", "eyJkaWFsb2dPSyI6eyJUZXh0IjoiT0sifSwiZG1ib3gxIjp7IlRleHQiOiJEZWFsXHJcbm9mIHRoZSBkYXkifSwiZG1ib3gyIjp7IlRleHQiOiJGcmVlXHJcblNoaXBtZW50In0sImRtYnVsbGV0MSI6[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_mamEnabled.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps", "%E1%E3");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_newApps.enc", "W10=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_new_welcome_experience.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce", "%FA%F8%FB%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17", "ā%A8%D9%FA%E7%FA%FB%F9%A8%C0%A8%F9%FB%E9%E9%EB%EB%EA%EB%EA%A8%B2%A8%CA%E7%FA%E7%A8%C0ā%A8%E9%FB%F8%F8%EB%F4%FA%CA%E7%FA%EB%A8%C0%A8%B8%B6%B7%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_settings1.13.0.17.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImN1cnJlbnREYXRlIjoiMjAxNTEwMjciLCJpbnRlcnZhbCI6MjQwLCJzdGFtcCI6IjEwNDNfMCIsIlJUSyI6IiIsImlzVGVzdCI6dHJ1ZSw[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget", "%EC%E7%F2%F9%EB");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp", "%B7%B6%BA%B9%E5%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_stamp.enc", "MTA0M18w");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate", "%D4%B5%C7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userBornDate.enc", "Ti9B");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId", "%BE%B9%E7%E8%E9%BE%BC%EB%B3%BF%B7%EB%BE%B3%BA%E9%BD%BA%B3%E8%E8%B7%EB%B3%BD%BE%E8%BF%EC%B7%B9%EC%E7%BA%BE%BF");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_userId.enc", "ODNhYmM4NmUtOTFlOC00Yzc0LWJiMWUtNzhiOWYxM2ZhNDg5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_user_approval_interacted.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode", "%B7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.mam_gk_welcomeDialogMode.enc", "MQ==");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.amazon.com%2Fwebsearch%2Fref%3Dbit_bds-p18_serp_ff_us_display%3Fie%3DUTF8%26tagbase%3Dbd[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid", "%F9%EE%EB%B7%B6%B7%BA%BE%B7%BA%BB%B7%B6%B7%BA%B7%B7%BF%B7%B7%B7%BD%BA%B7%B7%BE%BB%B9%BB%B7%B8%B7%BD%BB%BA%B7%B7%B6");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.netseer_ext_vid.enc", "c2hlMTAxNDgxNDUxMDE0MTE5MTExNzQxMTg1MzUxMjE3NTQxMTA=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openThankYouPage", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.openUninstallPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3292715&CUI=UN29861963635204956&UM=2&SearchSource=13");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3292715&SearchSource=2&CUI=UN29861963635204956&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngine", "SearchFlyBar2 Customized Web Search");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.originalSearchEngineName", "Amazon");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site", "%EE%FA%FA%F6%C0%B5%B5%F8%EF%B4%F9%EB%E7%F8%E9%EE%B4%FF%E7%EE%F5%F5%B4%E9%F5%F3%B5%E5%FF%F2%FA%C3%C7%B6%D9%D5%BE%FE%FC%D5%DA%C9%BF%DD%CA%CB%BE%C7%BC%B7%F6%DE%D4%FF[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.refferer_site.enc", "aHR0cDovL3JpLnNlYXJjaC55YWhvby5jb20vX3lsdD1BMFNPOHh2T1RDOVdERThBNjFwWE55b0E7X3lsdT1YM29ETVRFemJIQnlOMlF5QkdOdmJHOERaM0V4QkhCdmN3TXhCSFowYVdRRFFqRXhOakJHWHpFRW[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.revertSettingsEnabled", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchAppId", "130136189134643350");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.search.searchCount", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchFromAddressBarEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchInNewTabEnabledInHidden", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchSuggestEnabledByUser", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.searchUserMode", "8");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3303005\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Vafmusic12.OurToolbar.com//xpi\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Vafmusic12 \"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_Configuration_lastUpdate", "1445939999270");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1445939997807");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_appsMetadata_lastUpdate", "1445939998876");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1445939998187");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_login_10.21.1.7_lastUpdate", "1445940779233");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1445939998843");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_searchAPI_lastUpdate", "1445940001213");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_serviceMap_lastUpdate", "1445939994023");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_setupAPI_lastUpdate", "1445939998836");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarContextMenu_lastUpdate", "1445939998882");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_toolbarSettings_lastUpdate", "1445939998343");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.serviceLayer_services_translation_lastUpdate", "1445939997777");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.settingsINI", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.shouldFirstTimeDialog", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.showToolbarPermission", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.CTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.Uninstall", "0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.homepage", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.smartbar.toolbarName", "Vafmusic12 ");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.startPage", "true");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarBornServerTime", "28-8-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarCurrentServerTime", "27-10-2015");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarInstallDate", "27-10-2015 02:59:52");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.toolbarLoginClientTime", "Tue Oct 27 2015 02:59:51 GMT-0700 (Pacific Daylight Time)");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001", "%EE%FA%FA%F6%C0%B5%B5%FD%FD%FD%B4%F3%FF%EC%F8%EB%EB%F6%E7%FF%F9%EF%FA%EB%B4%E9%F5%F3%B5%F3%EB%F3%E8%EB%F8%F9%B5%EC%F2%F3%EC%F6%B4%EE%FA%F3%F2%C0%C0%C0%E9%F2%EF%[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005.url_history0001.enc", "aHR0cDovL3d3dy5teWZyZWVwYXlzaXRlLmNvbS9tZW1iZXJzL2ZsbWZwLmh0bWw6OjpjbGlja2hhbmRsZXI6OjoxNDEzNjU3NzYwNzczLCwsaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxl[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("CT3303005_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1445939891672,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitHomepagesList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.backgroundjs", "\n\n/*****************************************************************************[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.description", "VisualBee Browser Extension");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_meta.value", "%7B%22images/emaze.png%22%3A%7B%22id%22%3A726444%2C%22ver%22%3A[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.Resources_resource_726445.value", "%22data%3Aimage/png%3Bbase64%2CiVBORw0KGgoAAAANSUhEU[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.js", "\n\n  /************************************************************************************\[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.name", "VisualBee");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_13.name", "CrossriderAppUtils");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_14.name", "CrossriderUtils");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"isBackground!==true)&&(typeof _[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_246.code", "var _0x8f59=[\"10\",\"11\",\"19\",\"20\",\"26\",\"27\",\"28\",\"29\",\"[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_32.code", "appAPI.hooks.addHook(\"images\",(function(a){return function(){var v={bg[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_376.code", "(function(){var a=(function(){var l=function(){return appAPI&&appAPI.in[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_5.code", "(function(f){f.ui=f.ui{};var e=/leftcenterright/,d=/topcenterbottom[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_78.name", "CrossriderInfo");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.plugins.plugin_9.code", "appAPI.hooks.addHook(\"searchEngine\",(function(a){return function(){var [...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.a67314b3924e64f0599f33f88c7cddd176c5fa56013a34d428e9053d9930111f9com33906.33906.publisher", "VisualBee");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.crossrider.bic", "14cef62c18e227b3097606a29c206a8c");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.dashlane.safesearchcapable", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.admin", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.aflt", "babsst");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.autoRvrt", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.dfltLng", "en");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.excTlbr", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.ffxUnstlRst", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.id", "4e620d530000000000000019b915d7d7");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlDay", "15843");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.instlRef", "sst");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.newTab", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prdct", "delta");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.prtnrId", "delta");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.rvrt", "false");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.smplGrp", "none");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrId", "base");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsn", "1.8.21.0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsnTs", "1.8.21.021:43:28");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta.vrsni", "1.8.21.0");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babExt", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.babTrack", "affID=121240&tt=gc_");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.delta_i.srcExt", "ss");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.enabledAddons", "5kffxtbr%40iWon_5k.com:1.39.0.30675,ffxtlbr%40funmoods.com:1.5.1,links%40rivalgaming.com:1.0.0,smartlinks%40getsmartlinks.com:1.0.35,%7B1930e38a-deef-4cf4-9bfb-9[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cntry", "US");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.cv", "cv5");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.dfltSrch", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hdrMd5", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.hmpg", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.lastVrsnTs", "");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.newTab", false);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.sg", "free");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.funmoods.smplGrp", "free");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("[email protected]", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=D767A45E-2DF1-4316-8A13-78E0F179708C&n=781b1bc4&ptnrS=ZLxdm002YYus&si=CISx0-yw168CFakZQgodAx[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.hp.user.defined", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.initialized", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.installDate", "2015042500");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.partnerId", "ZLxdm002YYus");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.partnerSubId", "CISx0-yw168CFakZQgodAxShBw");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.success", true);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.installation.toolbarId", "D767A45E-2DF1-4316-8A13-78E0F179708C");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.lastActivePing", "1445939887122");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark._5kMembers_.weather.location", "94540");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "[email protected]");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3303005");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3295548&CUI=UN18029757605143900&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3279411&CUI=UN40166142081052929&UM=2[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295548&SearchSource=2&CUI=UN18029757605143900&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3292715");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.machineId", "KSECXPB5PI8KDEZTH8V81TMU2MHJDJ+X8NSHOBYFT4RHW6IICA3SZ6Y7UOGBECFWBXQMMUKAOQMEYHXLVZCSZA");

[-] [C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\prefs.js] [Preference] Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://www.amazon.com/websearch/ref=bit_bds-p18_serp_ff_us_display?ie=UTF8&tag=bds-p18-serp-us-ff-20&tagbase=bds-p18&tbrId=v1_abb-channel-18_efcc836cf31[...]

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/mb128

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com_

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : isearch.avg.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : r

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : funmoods.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.conduit.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : windows-live-photo-gallery.en.softonic.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : babylon.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : amazon.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : trovi.search

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : lasaoren.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : cassiopesa.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com_

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : www-searching.com

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : apfdadfinodckpcehhdhjlgiphgnbfci

[-] [C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Deleted : pbjikboenpfhbbejgkoklgkhjpfogcam

 

*************************

 

:: Winsock settings cleared

 

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [197660 bytes] ##########

[zep516]

Next

Please download Junkware Removal Tool to your Desktop.
Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete, depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Please post the contents of JRT.txt into your reply.

[jbj1162]

ok it does same as previous program attempt comes up wiht box about changing computer when I click yes it makes a sound of 2 beeps and goes away & nothing happens

[zep516]

When you get time see if it will run in safemode,

To do that;

Restart the computer.

• During restart
• Keep pressing the F8 Key once every second
• You should get a black screen with white letters, that's the advanced boot options menu.
• Use the arrow key and select Safemode from the list, then hit enter on the keyboard.
• Let the computer boot into SafeMode, things will look funny that's normal.
  
  Lets see if junkremoval tool will run from there.
  
  Thanks
  Joe

[jbj1162]

ok gonna try now

[jbj1162]

Again sorry for the delay 

 

I tried it in safe mode and got nothing 

[zep516]

Hello,

Don't worry about the delay, I've got busy myself.

Please run combofix. Don't fool around with this program follow the directions exactly.....

You can download Combofix from one of these links. I want you to save it to the desktop and run it from there. Very important please save to desktop

• Link 1
  Link 2
  Link 3
• 
  

1. Close any open browsers or any other programs that are open.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Double click on combofix.exe & follow the prompts.
When finished, it will produce a report for you.

Note 1: Do not mouseclick combofix's window while it's running. That may cause it to stall

Note 2: If you receive an error "Illegal operation attempted on a registry key that has been marked for deletion." Please restart the computer

Please post the Log from Combofix

[jbj1162]

ok ran combofix computer had unexpected error and was restarting and then the BLUE screen of DEATH came up so I restarted computer then a box came up saying windows has recovered from unexpected error then ran combofix and it ran all the way thru and printed the log below after I copied the log and was gonna paste it the BLUE screen of Death came up again so I restarted typed this b4 it came up again   here's the LOG I copied the log then got blue screen went to paste log and it's gone did a search for it and it wanted to run program again do you know where I can find the log from combofix ?

[zep516]

The log from Combofix is or should be on the "C'drive

Located at c:\combofix.txt

Don't run or try running combofix anymore.

See if you can find it.

Then
Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Make sure you checkmark Addition.txt box.
• Press Scan button.
• Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.

I will be back later today around 4pm EST,

Thanks
Joe

[jbj1162]

ok found combofix txt heres that and Ill run farbar now

 

ComboFix 15-10-28.01 - Jesus 10/30/2015  23:40:42.2.2 - x86

Microsoft Windows 7 Ultimate   6.1.7600.0.1252.1.1033.18.2302.1005 [GMT -7:00]

Running from: c:\users\Jesus\Desktop\jbj fix this [bleep]\ComboFix.exe

Command switches used :: log

AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}

SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\install.exe

c:\programdata\2308189059

c:\users\Jesus\AppData\Local\ArcadeFrontier\ArCAdefrontier.dll

c:\users\Jesus\AppData\Roaming\inst.exe

c:\users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler V3.exe

c:\users\Jesus\AppData\Roaming\vso_ts_preview.xml

c:\users\Public\sdelevURL.tmp

c:\windows\wininit.ini

.

.

(((((((((((((((((((((((((   Files Created from 2015-09-28 to 2015-10-31  )))))))))))))))))))))))))))))))

.

.

2015-10-31 06:50 . 2015-10-31 06:50 -------- d-----w- c:\users\Default\AppData\Local\temp

2015-10-30 13:38 . 2015-10-30 13:55 -------- d-----w- C:\jbj fix this [bleep]

2015-10-29 22:12 . 2015-10-31 06:50 -------- d-----w- c:\users\Jesus\AppData\Roaming\DMCache

2015-10-29 21:19 . 2015-10-29 21:25 -------- d-----w- C:\AdwCleaner

2015-10-28 12:46 . 2015-10-29 20:08 -------- d-----w- C:\FRST

2015-10-27 17:14 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

2015-10-27 17:14 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

2015-10-27 17:14 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

2015-10-27 17:14 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

2015-10-27 17:14 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

2015-10-27 17:14 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

2015-10-27 17:14 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

2015-10-27 17:13 . 2012-06-02 22:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

2015-10-27 17:13 . 2012-06-02 22:12 33792 ----a-w- c:\windows\system32\wuapp.exe

2015-10-27 09:33 . 2015-10-27 10:32 3996360 ----a-w- c:\windows\system32\FlashPlayerInstaller.exe

2015-10-27 08:03 . 2015-10-27 08:03 -------- d-----w- c:\users\Public\Speedup Sessions

2015-10-27 05:29 . 2015-10-27 06:06 -------- d-----w- c:\program files\pandasecuritytb

2015-10-27 04:32 . 2015-10-27 09:41 -------- d-----w- c:\programdata\panda_url_filtering

2015-10-27 04:27 . 2015-10-27 06:09 -------- d-----w- c:\program files\Panda Security

2015-10-27 04:22 . 2015-10-27 06:05 -------- d-----w- c:\programdata\Panda Security

2015-10-23 20:18 . 2015-10-23 20:18 -------- d-----w- c:\program files\Common Files\Microsoft

2015-10-23 20:04 . 2015-10-27 09:41 -------- d-----w- c:\programdata\Vafwat

2015-10-23 20:04 . 2015-10-27 09:41 -------- d--h--w- c:\programdata\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}

2015-10-15 16:50 . 2015-10-27 09:41 -------- d-----w- c:\program files\grabzilla pro V11

2015-10-14 08:09 . 2015-10-14 08:09 -------- d-----w- c:\program files\Infogrames

2015-10-14 08:09 . 2015-10-14 08:09 -------- d-----w- c:\program files\directx

2015-10-13 04:33 . 2015-10-13 19:21 -------- d-----w- c:\users\Jesus\AppData\Roaming\80l3ug2MOcd

2015-10-13 04:30 . 2015-10-13 20:17 -------- d-----w- c:\users\Jesus\AppData\Roaming\SoftAd

2015-10-12 13:53 . 2015-10-12 13:53 -------- d-----w- c:\users\Jesus\AppData\Local\cu

2015-10-11 10:51 . 2015-10-11 10:51 -------- d-----w- c:\users\Jesus\AppData\Roaming\c

2015-10-11 09:19 . 2015-10-11 09:19 -------- d-----w- c:\users\Jesus\AppData\Local\Opera Software

2015-10-11 09:09 . 2015-10-11 09:09 -------- d-----w- c:\users\Jesus\AppData\Roaming\Opera Software

2015-10-11 09:01 . 2015-10-11 09:01 -------- d-----w- c:\users\Jesus\AppData\Local\CEF

2015-10-11 08:45 . 2015-10-11 15:04 -------- d-----w- c:\program files\Opera

2015-10-11 08:18 . 2015-10-11 08:18 -------- d-----w- c:\users\Jesus\AppData\Roaming\Itibiti

2015-10-11 08:15 . 2015-10-13 20:19 -------- d-----w- c:\programdata\KeyStream

2015-10-11 07:57 . 2015-10-13 20:19 -------- d-----w- c:\program files\Faster Web

2015-10-11 07:43 . 2015-10-11 07:45 -------- d-----w- c:\program files\PCAPDownloader

2015-10-11 07:43 . 2015-10-11 07:45 -------- d-----w- c:\users\Jesus\AppData\Local\PlaythruPlayer

2015-10-11 07:39 . 2015-10-11 07:39 -------- d-----w- c:\programdata\{4BB8A37B-1B3A-72FD-AABC-027F7A3ED1F1}

2015-10-11 07:34 . 2015-10-13 20:17 -------- d-----w- c:\users\Jesus\AppData\Local\{7F6C4930-5BC4-2588-365C-00601234FCF8}

2015-10-11 07:30 . 2015-10-13 20:19 -------- d-----w- c:\program files\winnetmng

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2015-10-27 10:32 . 2012-04-05 09:18 780488 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2015-10-27 10:32 . 2011-09-17 04:12 142536 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2015-10-13 21:48 . 2013-05-08 05:12 55912 ----a-w- c:\windows\system32\drivers\avnetflt.sys

2015-10-13 21:48 . 2013-03-03 03:57 108448 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2015-08-28 20:09 . 2015-08-28 20:09 6420480 ----a-w- c:\program files\GUTD05A.tmp

2013-04-14 08:48 . 2013-04-14 08:48 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

------- Sigcheck -------

Note: Unsigned files aren't necessarily malware.

.

[-] 2011-04-22 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7600.16385] . . c:\windows\System32\user32.dll

[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2015-10-12 23:34 194824 ----a-w- c:\users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\IDM Shell Extension]

@="{CDC95B92-E27C-4745-A8C5-64A52A78855D}"

[HKEY_CLASSES_ROOT\CLSID\{CDC95B92-E27C-4745-A8C5-64A52A78855D}]

2011-03-02 15:23 68216 ----a-w- c:\program files\Internet Download Manager\IDMShellExt.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2011-04-05 3278232]

"Spotify"="c:\users\Jesus\AppData\Roaming\Spotify\Spotify.exe" [2012-05-07 9478320]

"Spotify Web Helper"="c:\users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-05-07 932528]

"Free Download Manager"="c:\program files\Free Download Manager\fdm.exe" [2013-01-17 6860288]

"MobileAppSync"="c:\program files\Mobile App Sync\D2MClient.exe" [2013-10-31 332800]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTHelper"="CTHELPER.EXE" [2007-04-09 19456]

"CTxfiHlp"="CTXFIHLP.EXE" [2007-04-09 19968]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]

"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2015-10-13 782520]

"Plantronics MyHeadset Updater"="c:\program files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe" [2013-04-04 78336]

"DivXMediaServer"="c:\program files\DivX\DivX Media Server\DivXMediaServer.exe" [2013-09-11 450560]

"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2013-08-29 1861968]

"TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" [2015-07-16 286272]

"RealDownloader"="c:\program files\RealNetworks\RealDownloader\downloader2.exe" [2015-06-17 608320]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2015-06-09 334896]

"BlueStacks Agent"="c:\program files\BlueStacks\HD-Agent.exe" [2015-08-20 904824]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"DevconDefaultDB"="c:\windows\system32\READREG" [X]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

AdFender.lnk - c:\program files\AdFender\AdFender.exe -autostart [2013-12-12 3228080]

PlutoTV.lnk - c:\program files\Pluto TV\PlutoTV.exe [2015-9-15 93077896]

RealTimes.lnk - c:\program files\Real\RealPlayer\RPDS\Bin\rpsystray.exe [2015-7-16 1132120]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux4"=wdmaud.drv

.

R2 AntiVirMailService;Avira Mail Protection;c:\program files\Avira\AntiVir Desktop\avmailc7.exe [2015-10-13 932912]

R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2015-10-13 461672]

R2 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebg7.exe [2015-10-13 1148688]

R3 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]

R3 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 2012\DfsdkS.exe [2009-08-25 406016]

R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys [2013-05-02 83864]

R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-27 25088]

R3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys [2013-05-02 181912]

R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-04-22 1343400]

S0 MxEFUF;Matrox Extio Upper Function Filter;c:\windows\system32\DRIVERS\MxEFUF32.sys [2010-11-04 102728]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2015-05-05 37896]

S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys [2015-10-13 55912]

S2 BstHdDrv;BlueStacks Hypervisor;c:\program files\BlueStacks\HD-Hypervisor-x86.sys [2015-08-20 132216]

S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\BlueStacks\HD-LogRotatorService.exe [2015-08-20 413304]

S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files\BlueStacks\HD-UpdaterService.exe [2015-08-20 839288]

S2 IDMWFP;IDMWFP;c:\windows\system32\DRIVERS\idmwfp.sys [2011-03-28 86792]

S2 RealPlayerUpdateSvc;RealPlayer Update Service;c:\program files\Real\UpdateService\RealPlayerUpdateSvc.exe [2015-06-17 31856]

S2 RealTimes Desktop Service;RealTimes Desktop Service;c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [2015-07-16 1115224]

S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2011-04-12 45464]

S3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]

S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-05-02 47360]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ   Pml Driver HPZ12 Net Driver HPZ12

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2015-10-27 10:17 997704 ----a-w- c:\program files\Google\Chrome\Application\46.0.2490.80\Installer\chrmstp.exe

.

Contents of the 'Scheduled Tasks' folder

.

2015-10-30 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job

- c:\users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 14:41]

.

2015-10-31 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job

- c:\users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19 14:41]

.

.

------- Supplementary Scan -------

.

IE: Customize Menu

IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm

IE: Download all with Free Download Manager - file://c:\program files\Free Download Manager\dlall.htm

IE: Download selected with Free Download Manager - file://c:\program files\Free Download Manager\dlselected.htm

IE: Download video with Free Download Manager - file://c:\program files\Free Download Manager\dlfvideo.htm

IE: Download with FLV Blaster

IE: Download with FLV Blaster\Contexts

IE: Download with FLV Blaster\Flags

IE: Download with Free Download Manager - file://c:\program files\Free Download Manager\dllink.htm

IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm

IE: Fill Forms

IE: RoboForm Toolbar

IE: Save Forms

TCP: DhcpNameServer = 192.168.1.254

FF - ProfilePath - c:\users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/

FF - ExtSQL: 2015-10-27 02:31; [email protected]; c:\programdata\Free Download Manager\Firefox\Extensions\2.0.17

FF - ExtSQL: !HIDDEN! 2011-09-15 03:44; [email protected]; c:\users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]

FF - ExtSQL: !HIDDEN! 2012-04-28 03:56; 5kffxtbr@iWon_5k.com; c:\program files\iWon_5k\bar\1.bin

.

- - - - ORPHANS REMOVED - - - -

.

Toolbar-{9565115d-c7d6-46d3-bd63-b67b481a4368} - (no file)

Toolbar-10 - (no file)

HKCU-Run-Chrome - c:\progra~2\taskhost.exe

HKLM-Run-Chrome - c:\progra~2\taskhost.exe

HKU-Default-Run-Chrome - c:\progra~2\taskhost.exe

AddRemove-AdFender - c:\program files\AdFender\uninst.exe

AddRemove-Media Player - Codec Pack - c:\windows\system32\C2MP\Uninst.exe

AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe

AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe

AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe

AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe

AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe

AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe

AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe

AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe

AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe

AddRemove-24_flashusbdriver - c:\program files\SAMSUNG\USB Drivers\24_flashusbdriver\Uninstall.exe

AddRemove-25_escape - c:\program files\SAMSUNG\USB Drivers\25_escape\Uninstall.exe

.

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]

@Denied: (Full) (Everyone)

"scansk"=hex(0):61,d7,f3,31,28,78,bb,cf,12,ab,8b,6f,d3,cd,2a,5e,99,8b,41,ec,89,

   dc,17,c3,4d,20,42,a6,d8,6b,27,d0,5c,cb,f8,1c,d5,aa,5c,e4,00,00,00,00,00,00,\

.

[HKEY_USERS\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{80910355-ac15-4f7b-9ff4-88592fec7f59}]

@Denied: (Full) (Everyone)

@Allowed: (Read) (RestrictedCode)

"Model"=dword:000000f2

"Therad"=dword:0000001e

"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,b6,1f,81,1f,5a,

   1b,4d,36,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,ee,21,46,8f,3c,f2,5c,68,\

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_19_0_0_226_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]

@Denied: (A 2) (Everyone)

@="IFlashBroker6"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2015-10-30  23:55:32

ComboFix-quarantined-files.txt  2015-10-31 06:55

.

Pre-Run: 86,495,625,216 bytes free

Post-Run: 87,212,945,408 bytes free

.

- - End Of File - - F6F6A61A37C75B1503F95A4B2E62EC26

A36C5E4F47E84449FF07ED3517B43A31

[jbj1162]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:29-10-2015

Ran by Jesus (administrator) on OPTIPLEX (31-10-2015 11:08:34)

Running from C:\Users\Jesus\Desktop\jbj fix this [bleep]

Loaded Profiles: Jesus (Available Profiles: Jesus)

Platform: Microsoft Windows 7 Ultimate  (X86) Language: English (United States)

Internet Explorer Version 9 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe

(Creative Technology Ltd) C:\Windows\System32\CtHelper.exe

(Plantronics) C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe

(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-UpdaterService.exe

() C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpdsvc.exe

() C:\Program Files\DivX\DivX Update\DivXUpdate.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe

() C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

(FreeDownloadManager.ORG) C:\Program Files\Free Download Manager\fdm.exe

(Appcaster) C:\Program Files\Mobile App Sync\D2MClient.exe

(AdFender, Inc.) C:\Program Files\AdFender\AdFender.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe

(Dropbox, Inc.) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

() C:\Program Files\Pluto TV\PlutoTV.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

() C:\Program Files\RealNetworks\RealDownloader\downloader2.exe

 

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [CTHelper] => C:\Windows\system32\CTHELPER.EXE [19456 2007-04-09] (Creative Technology Ltd)

HKLM\...\Run: [CTxfiHlp] => C:\Windows\system32\CTXFIHLP.EXE [19968 2007-04-09] (Creative Technology Ltd)

HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated)

HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [782520 2015-10-13] (Avira Operations GmbH & Co. KG)

HKLM\...\Run: [Plantronics MyHeadset Updater] => C:\Program Files\Plantronics\MyHeadsetUpdater\MyHeadsetUpdater.exe [78336 2013-04-04] (Plantronics)

HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-09-10] (DivX, LLC)

HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-28] ()

HKLM\...\Run: [TkBellExe] => c:\program files\real\realplayer\Update\realsched.exe [286272 2015-07-16] (RealNetworks, Inc.)

HKLM\...\Run: [RealDownloader] => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [608320 2015-06-17] ()

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

HKLM\...\Run: [BlueStacks Agent] => C:\Program Files\BlueStacks\HD-Agent.exe [904824 2015-08-19] (BlueStack Systems, Inc.)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3278232 2011-04-05] (Tonec Inc.)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Spotify] => C:\Users\Jesus\AppData\Roaming\Spotify\Spotify.exe [9478320 2012-05-06] (Spotify Ltd)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Spotify Web Helper] => C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [932528 2012-05-06] ()

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [Free Download Manager] => C:\Program Files\Free Download Manager\fdm.exe [6860288 2013-01-16] (FreeDownloadManager.ORG)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Run: [MobileAppSync] => C:\Program Files\Mobile App Sync\D2MClient.exe [332800 2013-10-30] (Appcaster)

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\DEERDR~1.SCR

HKU\S-1-5-18\...\Run: [DevconDefaultDB] => C:\Windows\system32\READREG /SILENT /FAIL=1

ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-10-12] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2011-03-02] (Tonec Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdFender.lnk [2014-04-24]

ShortcutTarget: AdFender.lnk -> C:\Program Files\AdFender\AdFender.exe (AdFender, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PlutoTV.lnk [2015-09-15]

ShortcutTarget: PlutoTV.lnk -> C:\Program Files\Pluto TV\PlutoTV.exe ()

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2015-07-16]

ShortcutTarget: RealTimes.lnk -> C:\Program Files\Real\RealPlayer\RPDS\Bin\rpsystray.exe (RealNetworks, Inc.)

Startup: C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-27]

ShortcutTarget: Dropbox.lnk -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{0DB14313-E9FB-4965-B298-0F23C7833E27}: [DhcpNameServer] 192.168.1.254

Tcpip\..\Interfaces\{3ED60023-FFC1-4A0C-9430-6DB5D36DD2C1}: [DhcpNameServer] 192.168.42.129

Tcpip\..\Interfaces\{B29FC133-F3C8-42AE-8A78-9C5B5CAB1181}: [DhcpNameServer] 192.168.1.254

 

Internet Explorer:

==================

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-11595131-3550647590-3570146784-1001 -> OldDefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A}

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18] (Adobe Systems Incorporated)

BHO: No Name -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2011-08-05] (Siber Systems Inc.)

BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-17] (Oracle Corporation)

Toolbar: HKLM - &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2011-08-05] (Siber Systems Inc.)

DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab

DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} 

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} hxxp://support.dell.com/systemprofiler/DellSystemLite.CAB

DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab

 

FireFox:

========

FF ProfilePath: C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default

FF Homepage: hxxp://www.google.com/

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-10-27] ()

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll [2012-10-04] (Adobe Systems, Inc.)

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-16] (DivX, LLC.)

FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2013-10-28] (DivX, LLC)

FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-07-19] (Foxit Corporation)

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-17] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-17] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\3.0.40818.0\npctrl.dll [2009-08-17] ( Microsoft Corporation)

FF Plugin: @oberon-media.com/ONCAdapter -> C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll [2012-05-31] (Oberon-Media )

FF Plugin: @real.com/nppl3260;version=18.0.1.9 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-07-16] (RealNetworks, Inc.)

FF Plugin: @real.com/nprpjplug;version=12.0.1.647 -> c:\program files\real\realplayer\Netscape6\nprpjplug.dll [2011-07-09] (RealNetworks, Inc.)

FF Plugin: @real.com/nprpplugin;version=18.0.1.9 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-07-16] (RealTimes)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-02-15] (Adobe Systems Inc.)

FF Plugin: npEpicPlayDisplayHost -> C:\Program Files\EpicPlay\npEpicHost.dll [2011-10-04] ( )

FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jesus\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2011-10-21] (Unity Technologies ApS)

FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: @yahoo.com/BrowserPlus,version=2.9.8 -> C:\Users\Jesus\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\npybrowserplus_2.9.8.dll [2010-08-04] (Yahoo! Inc.)

FF Plugin HKU\S-1-5-21-11595131-3550647590-3570146784-1001: www.exent.com/GameTreatWidget -> C:\Program Files\Free Ride Games\npGameTreatWidget.dll [No File]

FF Extension: RivalGaming  - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2012-01-02] [not signed]

FF Extension: EpicPlay Games - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2011-09-20] [not signed]

FF Extension: LivingPlay TextLinks - C:\Users\Jesus\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2011-08-21] [not signed]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\5kffxtbr@iWon_5k.com [2015-10-28] [not signed]

FF Extension: Avira Browser Safety - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]

FF Extension: flashbugcoursevectorcom - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2014-10-26] [not signed]

FF Extension: TimeLineRemove.Com - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack [2012-02-19] [not signed]

FF Extension: jid1xUfzOsOFlzSOXgjetpack - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\jid1-xUfzOsOFlzSOXg@jetpack [2014-10-26] [not signed]

FF Extension: RivalGaming  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-01-02] [not signed]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-09-16] [not signed]

FF Extension: ArcadeWeb - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-07-27] [not signed]

FF Extension: InternetHelper1.5  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{1930e38a-deef-4cf4-9bfb-9c4ea3689a9d} [2012-11-02] [not signed]

FF Extension: ArcadeFrontier - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{1a68cbde-3e4c-4fae-bf49-af5ab9868e53} [2013-08-15] [not signed]

FF Extension: Vafmusic12  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{38e3a123-98e8-46fc-8729-f4b49de90555} [2013-10-27] [not signed]

FF Extension: xvidly3  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{3c2adea7-a96a-4c26-adcb-9e939365b2ae} [2013-05-15] [not signed]

FF Extension: appbario12  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00} [2013-09-15] [not signed]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{465fcfbb-47a4-4866-a5d5-d12f9a77da00}.oldbackup [2013-09-15] [not signed]

FF Extension: MixiDJ V34  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{55b95864-3251-45e9-bb30-1a82589aaff1} [2013-05-02] [not signed]

FF Extension: ShopToWin4 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{6cbc25b0-0a52-11df-8a39-0800200c9a66} [2015-05-26] [not signed]

FF Extension: uTorrentControl_v2  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6} [2013-01-05] [not signed]

FF Extension: xvidly4  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{7dfe7f41-1b0b-48a7-b58c-5389f7746c33} [2013-08-10] [not signed]

FF Extension: HP Detect - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2} [2012-07-11] [not signed]

FF Extension: LittleFishBar  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{c28f5072-1bfa-42f0-ba55-5a802d3490cb} [2012-11-28] [not signed]

FF Extension: Blackjack-Madness Community Toolbar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{ca9aeaa0-4588-4bbe-99af-8fb0a0a9e5e1} [2012-10-19] [not signed]

FF Extension: ShopToWin23 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{cea91efe-0f31-40f8-ab54-7b89290323fa} [2015-05-26] [not signed]

FF Extension: Greasemonkey - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012-01-08] [not signed]

FF Extension: ShopToWin6 - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{e68d0d96-5f18-496c-87f2-c0d521d78fbe} [2015-05-26] [not signed]

FF Extension: SearchFlyBar2  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{efc335aa-59ec-45b0-b287-739521153d5b} [2013-08-05] [not signed]

FF Extension: VisualBee V.6  - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{f0af464e-5167-45cf-9cf0-66b396d1918c} [2013-09-08] [not signed]

FF Extension: FlyOrDie Quick Java Installer - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-04-28] [not signed]

FF Extension: PutLockerDownloader - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2012-11-06] [not signed]

FF Extension: BetterLinks - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\[email protected] [2011-09-16] [not signed]

FF Extension: Casino Toolbar - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\wagerlogic.xpi [2010-02-02] [not signed]

FF Extension: Mason - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\Extensions\{F632A5EA-F825-4AE7-94B5-233CFBA9F423}.xpi [2011-10-05] [not signed]

FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-04-14] [not signed]

FF Extension: Super Web Accelerator ! - C:\Program Files\Mozilla Firefox\distribution\bundles\firefox [2015-10-13] [not signed]

FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2015-10-27] [not signed]

FF HKLM\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files\Siber Systems\AI RoboForm\Firefox

FF Extension: Roboform Toolbar for Firefox - C:\Program Files\Siber Systems\AI RoboForm\Firefox [2011-08-05] [not signed]

FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Firefox\Extensions: [[email protected]] - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3 [2012-03-23] [not signed]

FF HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\SeaMonkey\Extensions: [[email protected]] - C:\Users\Jesus\AppData\Roaming\IDM\idmmzcc3

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\[email protected] [not found]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\[email protected] [not found]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\{DE1C78C1-2762-47f6-A1D9-1B7866FE7EB4} [not found]

FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{6311158d-1248-4c22-b80e-0fce899a0c7c} [not found]

FF Extension: No Name - C:\Users\Jesus\AppData\Roaming\Mozilla\Firefox\Profiles\3z4ize6m.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [not found]

FF Extension: Dashlane - C:\Users\Jesus\AppData\Roaming\Dashlane\3.5.2.91395\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f} [2015-09-03] [not signed]

 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.com/

CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll ()

CHR Profile: C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Chrome Web Store Payments) - C:\Users\Jesus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-28]

 

==================== Services (Whitelisted) ========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [932912 2015-10-13] (Avira Operations GmbH & Co. KG)

S2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [461672 2015-10-13] (Avira Operations GmbH & Co. KG)

S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [461672 2015-10-13] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe [1148688 2015-10-13] (Avira Operations GmbH & Co. KG)

S3 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [437880 2015-08-19] (BlueStack Systems, Inc.)

R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [413304 2015-08-19] (BlueStack Systems, Inc.)

R2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [839288 2015-08-19] (BlueStack Systems, Inc.)

S3 DfSdkS; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 2012\DfsdkS.exe [406016 2009-08-24] (mst software GmbH, Germany) [File not signed]

S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2009-05-14] (Hewlett-Packard) [File not signed]

S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2009-05-14] (Hewlett-Packard) [File not signed]

R2 RealPlayerUpdateSvc; C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2015-06-17] ()

R2 RealTimes Desktop Service; c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe [1115224 2015-07-16] (RealNetworks, Inc.)

S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-13] (Microsoft Corporation)

 

===================== Drivers (Whitelisted) ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108448 2015-10-13] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136728 2015-07-24] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2015-05-05] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [55912 2015-10-13] (Avira Operations GmbH & Co. KG)

S3 AX88772; C:\Windows\System32\DRIVERS\ax88772.sys [69632 2013-12-03] (ASIX Electronics Corp.)

R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [132216 2015-08-19] (BlueStack Systems)

R3 COMMONFX.DLL; C:\Windows\System32\COMMONFX.DLL [98600 2007-04-18] (Creative Technology Ltd)

S3 CSRBC; C:\Windows\System32\Drivers\csrbcx86.sys [31744 2013-04-04] (CSR plc.)

S3 CT20XUT.DLL; C:\Windows\System32\CT20XUT.DLL [164608 2007-04-12] (Creative Technology Ltd.)

R3 CTAUDFX.DLL; C:\Windows\System32\CTAUDFX.DLL [546048 2007-04-12] (Creative Technology Ltd)

S3 ctdvda2k; C:\Windows\System32\drivers\ctdvda2k.sys [347128 2007-04-10] (Creative Technology Ltd)

S3 CTEAPSFX.DLL; C:\Windows\System32\CTEAPSFX.DLL [168192 2007-04-12] (Creative Technology Ltd)

S3 CTEDSPFX.DLL; C:\Windows\System32\CTEDSPFX.DLL [280320 2007-04-12] (Creative Technology Ltd)

S3 CTEDSPIO.DLL; C:\Windows\System32\CTEDSPIO.DLL [128768 2007-04-12] (Creative Technology Ltd)

S3 CTEDSPSY.DLL; C:\Windows\System32\CTEDSPSY.DLL [323328 2007-04-12] (Creative Technology Ltd)

S3 CTERFXFX.DLL; C:\Windows\System32\CTERFXFX.DLL [94976 2007-04-12] (Creative Technology Ltd)

S3 CTEXFIFX.DLL; C:\Windows\System32\CTEXFIFX.DLL [1317632 2007-04-12] (Creative Technology Ltd.)

S3 CTHWIUT.DLL; C:\Windows\System32\CTHWIUT.DLL [66816 2007-04-12] (Creative Technology Ltd.)

R3 CTSBLFX.DLL; C:\Windows\System32\CTSBLFX.DLL [560384 2007-04-12] (Creative Technology Ltd)

R3 ha10kx2k; C:\Windows\System32\drivers\ha10kx2k.sys [797992 2007-04-10] (Creative Technology Ltd)

R3 hap16v2k; C:\Windows\System32\drivers\hap16v2k.sys [163112 2007-04-10] (Creative Technology Ltd)

S3 hap17v2k; C:\Windows\System32\drivers\hap17v2k.sys [189736 2007-04-10] (Creative Technology Ltd)

S3 HTCAND32; C:\Windows\System32\Drivers\ANDROIDUSB.sys [25088 2009-10-26] (HTC, Corporation) [File not signed]

S3 LVUSBSta; C:\Windows\System32\DRIVERS\LVUSBSta.sys [41888 2007-05-11] (Logitech Inc.)

R0 MxEFUF; C:\Windows\System32\DRIVERS\MxEFUF32.sys [102728 2010-11-04] (Matrox Graphics Inc.)

R3 netr28u; C:\Windows\System32\DRIVERS\netr28u.sys [657408 2009-07-13] (Ralink Technology Corp.)

R3 NuidFltr; C:\Windows\System32\DRIVERS\NuidFltr.sys [21792 2011-04-13] (Microsoft Corporation)

R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-06-09] (Avira Operations GmbH & Co. KG)

S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [104064 2006-02-23] (Microsoft Corporation) [File not signed]

S3 catchme; \??\C:\Users\Jesus\AppData\Local\Temp\catchme.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-10-31 00:01 - 2015-10-31 00:01 - 00161512 _____ C:\Windows\Minidump\103115-27409-01.dmp

2015-10-30 23:55 - 2015-10-30 23:55 - 00018049 _____ C:\ComboFix.txt

2015-10-30 23:33 - 2015-10-30 23:33 - 00153096 _____ C:\Windows\Minidump\103015-23587-01.dmp

2015-10-30 23:31 - 2015-10-30 23:31 - 00159608 _____ C:\Windows\Minidump\103015-21840-01.dmp

2015-10-30 23:23 - 2011-06-25 23:45 - 00256000 _____ C:\Windows\PEV.exe

2015-10-30 23:23 - 2010-11-07 10:20 - 00208896 _____ C:\Windows\MBR.exe

2015-10-30 23:23 - 2009-04-19 21:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00098816 _____ C:\Windows\sed.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00080412 _____ C:\Windows\grep.exe

2015-10-30 23:23 - 2000-08-30 17:00 - 00068096 _____ C:\Windows\zip.exe

2015-10-30 23:22 - 2015-10-30 23:55 - 00000000 ____D C:\Qoobox

2015-10-30 23:22 - 2015-10-30 23:53 - 00000000 ____D C:\Windows\erdnt

2015-10-30 06:43 - 2015-10-30 06:43 - 00000000 ____D C:\Users\Jesus\Desktop\New folder

2015-10-30 06:38 - 2015-10-30 06:55 - 00000000 ____D C:\jbj fix this [bleep]

2015-10-29 15:12 - 2015-10-30 23:50 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\DMCache

2015-10-29 14:19 - 2015-10-29 14:25 - 00000000 ____D C:\AdwCleaner

2015-10-29 13:52 - 2015-10-29 13:54 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024.exe

2015-10-28 05:46 - 2015-10-31 11:08 - 00000000 ____D C:\FRST

2015-10-28 05:32 - 2015-10-30 23:19 - 00000000 ____D C:\Users\Jesus\Desktop\jbj fix this [bleep]

2015-10-28 03:08 - 2015-10-28 03:08 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024 (2).exe

2015-10-28 03:04 - 2015-10-28 03:05 - 22908888 _____ (Malwarebytes ) C:\Users\Jesus\Downloads\mbam-setup-2.2.0.1024 (1).exe

2015-10-28 02:58 - 2015-10-28 02:58 - 00001590 _____ C:\Users\Jesus\Desktop\aswMBR - Shortcut.lnk

2015-10-28 02:12 - 2015-10-28 02:12 - 00001628 _____ C:\Users\Jesus\Desktop\AppRemover - Shortcut.lnk

2015-10-28 02:08 - 2015-10-28 02:10 - 13377536 _____ C:\Users\Jesus\Downloads\OPSWAT_GEARS_CLIENT_3445-7c867995737c1853977386e89a5560c5.msi

2015-10-27 23:32 - 2015-10-27 23:36 - 01190616 _____ (Adobe Systems Incorporated) C:\Users\Jesus\Downloads\flashplayer19_ga_install.exe

2015-10-27 10:24 - 2015-10-27 10:25 - 38319888 _____ (Microsoft Corporation) C:\Users\Jesus\Desktop\mpas-fe.exe

2015-10-27 10:14 - 2012-06-02 15:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-10-27 10:14 - 2012-06-02 15:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-10-27 10:14 - 2012-06-02 15:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-10-27 10:14 - 2012-06-02 15:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-10-27 10:14 - 2012-06-02 15:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-10-27 10:14 - 2012-06-02 15:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-10-27 10:14 - 2012-06-02 15:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-10-27 10:13 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-10-27 10:13 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-10-27 03:19 - 2015-10-27 03:19 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2015-10-27 03:19 - 2015-10-27 03:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2015-10-27 02:56 - 2015-10-27 02:56 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-10-27 02:52 - 2015-10-30 09:25 - 03373292 _____ C:\Windows\system32\CFG1315048787

2015-10-27 02:33 - 2015-10-27 03:32 - 03996360 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe

2015-10-27 01:03 - 2015-10-27 01:03 - 00000000 ____D C:\Users\Public\Speedup Sessions

2015-10-26 22:29 - 2015-10-26 23:06 - 00000000 ____D C:\Program Files\pandasecuritytb

2015-10-26 21:32 - 2015-10-27 02:41 - 00000000 ____D C:\ProgramData\panda_url_filtering

2015-10-26 21:27 - 2015-10-26 23:09 - 00000000 ____D C:\Program Files\Panda Security

2015-10-26 21:22 - 2015-10-26 23:05 - 00000000 ____D C:\ProgramData\Panda Security

2015-10-23 13:04 - 2015-10-27 02:41 - 00000000 ___HD C:\ProgramData\{D9E629DC-CB1C-4A97-9900-81922B4EFFD4}

2015-10-22 00:03 - 2015-10-22 00:03 - 00055341 _____ C:\Users\Jesus\Downloads\tattoo (1).html

2015-10-22 00:02 - 2015-10-22 00:02 - 00055341 _____ C:\Users\Jesus\Downloads\tattoo.html

2015-10-15 09:50 - 2015-10-27 02:41 - 00000000 ____D C:\Program Files\grabzilla pro V11

2015-10-14 01:09 - 2015-10-14 01:09 - 00000000 ____D C:\Program Files\Infogrames

2015-10-14 01:09 - 2015-10-14 01:09 - 00000000 ____D C:\Program Files\directx

2015-10-14 01:07 - 2015-10-14 01:07 - 00000000 _____ C:\Windows\PowerReg.dat

2015-10-12 21:33 - 2015-10-13 12:21 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\80l3ug2MOcd

2015-10-12 21:30 - 2015-10-13 13:17 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\SoftAd

2015-10-12 21:29 - 2015-10-12 21:29 - 00000066 _____ C:\Users\Jesus\AppData\Roaming\sn.txt

2015-10-12 06:53 - 2015-10-12 06:53 - 03531374 _____ C:\Users\Jesus\AppData\Local\curl.zip

2015-10-12 06:53 - 2015-10-12 06:53 - 00000000 ____D C:\Users\Jesus\AppData\Local\cu

2015-10-11 03:51 - 2015-10-11 03:51 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\c

2015-10-11 02:19 - 2015-10-11 02:19 - 00000000 ____D C:\Users\Jesus\AppData\Local\Opera Software

2015-10-11 02:09 - 2015-10-11 02:09 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Opera Software

2015-10-11 02:01 - 2015-10-11 02:01 - 00000000 ____D C:\Users\Jesus\AppData\Local\CEF

2015-10-11 01:45 - 2015-10-11 08:04 - 00000000 ____D C:\Program Files\Opera

2015-10-11 01:18 - 2015-10-11 01:18 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Itibiti

2015-10-11 01:15 - 2015-10-13 13:19 - 00000000 ____D C:\ProgramData\KeyStream

2015-10-11 00:57 - 2015-10-13 13:19 - 00000000 ____D C:\Program Files\Faster Web

2015-10-11 00:43 - 2015-10-11 00:45 - 00000000 ____D C:\Users\Jesus\AppData\Local\PlaythruPlayer

2015-10-11 00:43 - 2015-10-11 00:45 - 00000000 ____D C:\Program Files\PCAPDownloader

2015-10-11 00:39 - 2015-10-11 00:39 - 00000000 ____D C:\ProgramData\{4BB8A37B-1B3A-72FD-AABC-027F7A3ED1F1}

2015-10-11 00:34 - 2015-10-13 13:17 - 00000000 ____D C:\Users\Jesus\AppData\Local\{7F6C4930-5BC4-2588-365C-00601234FCF8}

2015-10-11 00:30 - 2015-10-13 13:19 - 00000000 ____D C:\Program Files\winnetmng

2015-10-07 22:04 - 2015-10-28 07:28 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\uTorrent

2015-10-05 15:22 - 2015-10-05 15:24 - 00000091 _____ C:\Users\Jesus\Downloads\ecare.xls

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2015-10-31 10:52 - 2015-06-19 07:41 - 00000918 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job

2015-10-31 05:00 - 2015-06-19 07:41 - 00000866 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job

2015-10-31 04:51 - 2011-04-22 00:45 - 01659454 _____ C:\Windows\WindowsUpdate.log

2015-10-31 00:53 - 2011-10-25 15:08 - 03936768 ___SH C:\Users\Jesus\Downloads\Thumbs.db

2015-10-31 00:05 - 2015-09-15 23:01 - 00000000 ____D C:\Users\Jesus\AppData\Local\PlutoTV

2015-10-31 00:03 - 2012-09-08 20:26 - 00000000 ___RD C:\Users\Jesus\Dropbox

2015-10-31 00:03 - 2012-09-08 20:18 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Dropbox

2015-10-31 00:01 - 2013-10-19 01:52 - 377033551 _____ C:\Windows\MEMORY.DMP

2015-10-31 00:01 - 2013-03-07 12:32 - 00020657 _____ C:\Windows\setupact.log

2015-10-31 00:01 - 2013-03-07 12:31 - 00323986 _____ C:\Windows\PFRO.log

2015-10-31 00:01 - 2012-10-28 12:36 - 00000000 ____D C:\Windows\Minidump

2015-10-31 00:01 - 2012-02-20 00:29 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Spotify

2015-10-31 00:01 - 2009-07-13 21:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-10-30 23:55 - 2009-07-13 19:37 - 00000000 ___RD C:\Users\Public

2015-10-30 23:50 - 2009-07-13 19:04 - 00000215 _____ C:\Windows\system.ini

2015-10-30 23:48 - 2013-08-15 04:30 - 00000000 ____D C:\Users\Jesus\AppData\Local\ArcadeFrontier

2015-10-30 02:12 - 2012-10-12 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus

2015-10-29 16:59 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\rescache

2015-10-29 14:23 - 2012-11-23 06:57 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\Yahoo!

2015-10-29 14:23 - 2011-05-15 15:29 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\Yahoo!

2015-10-29 14:22 - 2013-02-22 01:11 - 00000000 ____D C:\Program Files\Amazon

2015-10-29 14:22 - 2011-09-25 09:32 - 00000000 ____D C:\Program Files\Yahoo!

2015-10-28 20:18 - 2011-07-02 07:09 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy

2015-10-28 20:18 - 2011-06-03 12:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

2015-10-28 19:51 - 2011-07-21 11:04 - 00000000 ____D C:\Users\Jesus\AppData\LocalLow\Temp

2015-10-28 19:49 - 2013-04-14 01:48 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-10-28 19:49 - 2011-04-22 00:47 - 00000000 ____D C:\Users\Jesus

2015-10-28 15:03 - 2013-05-02 20:49 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\player

2015-10-28 14:55 - 2013-05-02 20:59 - 00000000 ____D C:\Windows\system32\appmgmt

2015-10-28 14:48 - 2011-07-02 07:09 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2015-10-28 12:54 - 2011-05-01 23:01 - 00000000 ____D C:\ProgramData\TEMP

2015-10-28 07:21 - 2009-07-13 21:34 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-10-28 07:21 - 2009-07-13 21:34 - 00013584 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-10-28 02:40 - 2012-02-09 19:17 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware

2015-10-28 00:37 - 2013-04-04 21:46 - 00000000 ____D C:\ProgramData\Package Cache

2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\ProgramData\Avira

2015-10-28 00:37 - 2013-03-02 20:57 - 00000000 ____D C:\Program Files\Avira

2015-10-27 03:32 - 2012-04-05 02:18 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-10-27 03:32 - 2011-09-16 21:12 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-10-27 02:32 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\LogFiles

2015-10-27 02:27 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\wfp

2015-10-27 02:25 - 2011-10-30 18:32 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\FreeFileViewer

2015-10-27 02:25 - 2011-04-28 16:59 - 00000000 ____D C:\Users\Jesus\AppData\Roaming\VTExtra

2015-10-27 02:25 - 2011-04-28 16:56 - 00000000 ____D C:\Users\Jesus\AppData\Local\VTShared

2015-10-27 02:25 - 2009-07-14 00:48 - 00000000 ___RD C:\Users\Public\Recorded TV

2015-10-27 02:25 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\system32\NDF

2015-10-27 02:24 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\registration

2015-10-27 02:22 - 2011-06-10 17:35 - 00000000 ____D C:\ProgramData\Real

2015-10-27 01:54 - 2013-05-02 22:56 - 00057952 _____ C:\Users\Jesus\AppData\Local\GDIPFONTCACHEV1.DAT

2015-10-14 01:05 - 2011-06-03 12:36 - 00000000 ____D C:\Program Files\Common Files\InstallShield

2015-10-13 14:48 - 2013-05-07 22:12 - 00055912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys

2015-10-13 14:48 - 2013-03-02 20:57 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-10-13 14:09 - 2009-07-13 19:37 - 00000000 ____D C:\Windows\Microsoft.NET

2015-10-13 13:23 - 2015-09-23 10:38 - 00000000 ____D C:\ProgramData\BlueStacks

2015-10-13 13:23 - 2015-09-23 10:38 - 00000000 ____D C:\Program Files\BlueStacks

2015-10-13 13:22 - 2014-10-01 21:03 - 00000000 ____D C:\Users\Jesus\Documents\Fax

2015-10-13 13:21 - 2009-07-13 19:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy

2015-10-13 13:20 - 2015-09-23 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks

2015-10-13 13:20 - 2013-10-20 22:18 - 00000000 ____D C:\Program Files\AdFender

 

==================== Files in the root of some directories =======

 

2015-08-28 13:09 - 2015-08-28 13:09 - 6420480 _____ () C:\Program Files\GUTD05A.tmp

2011-05-01 22:55 - 2011-05-01 23:09 - 0007887 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.cat

2011-05-01 22:55 - 2011-05-01 23:09 - 0001144 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.inf

2011-05-01 22:56 - 2011-05-01 23:09 - 0000034 _____ () C:\Users\Jesus\AppData\Roaming\pcouffin.log

2011-05-01 22:55 - 2011-05-01 23:09 - 0047360 _____ (VSO Software) C:\Users\Jesus\AppData\Roaming\pcouffin.sys

2015-10-12 21:29 - 2015-10-12 21:29 - 0000066 _____ () C:\Users\Jesus\AppData\Roaming\sn.txt

2015-10-12 06:53 - 2015-10-12 06:53 - 3531374 _____ () C:\Users\Jesus\AppData\Local\curl.zip

2012-04-21 14:09 - 2012-04-21 14:17 - 0001667 _____ () C:\Users\Jesus\AppData\Local\Temp1.html

2012-04-21 14:09 - 2012-04-21 14:17 - 0002419 _____ () C:\Users\Jesus\AppData\Local\Temp2.html

2012-07-11 06:04 - 2013-05-02 23:18 - 0023066 _____ () C:\ProgramData\hpzinstall.log

 

Some files in TEMP:

====================

C:\Users\Jesus\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxkmj8w.dll

 

 

==================== Bamital & volsnap =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => MD5 is legit

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2015-10-29 16:48

 

==================== End of FRST.txt ============================

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version:29-10-2015

Ran by Jesus (2015-10-31 11:09:32)

Running from C:\Users\Jesus\Desktop\jbj fix this [bleep]

Microsoft Windows 7 Ultimate  (X86) (2011-04-22 07:40:54)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrator (S-1-5-21-11595131-3550647590-3570146784-500 - Administrator - Disabled)

Guest (S-1-5-21-11595131-3550647590-3570146784-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-11595131-3550647590-3570146784-1003 - Limited - Enabled)

Jesus (S-1-5-21-11595131-3550647590-3570146784-1001 - Administrator - Enabled) => C:\Users\Jesus

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

32 Bit HP CIO Components Installer (Version: 6.1.2 - Hewlett-Packard) Hidden

3-D Ultra Minigolf Adventures Deluxe (HKLM\...\114075133) (Version:  - Oberon Media)

Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.2.0.2070 - Adobe Systems Incorporated)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.226 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.226 - Adobe Systems Incorporated)

Adobe Reader X (10.1.6) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.6 - Adobe Systems Incorporated)

Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)

Amazon Kindle (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Amazon Kindle) (Version:  - Amazon)

Angry Birds (HKLM\...\{AC30CF7C-2D62-4910-9147-3EC8EA5EB6D1}) (Version: 1.5.1 - Rovio)

ArcadeFrontier (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\{4AFCAFDC-D870-41FA-B9FB-1442B9DAFE76}) (Version:  - ArcadeFrontier)

Ashampoo WinOptimizer 2012 v.8.1.4 (HKLM\...\Ashampoo WinOptimizer 2012_is1) (Version: 8.1.4 - Ashampoo GmbH & Co. KG)

Backspin Billiards (HKLM\...\111543617) (Version:  - Oberon Media)

Bejeweled 3 (HKLM\...\Bejeweled 31.0) (Version: 1.0 - AllSmartGames)

Big Fish Games: Game Manager (HKLM\...\BFGC) (Version: 3.0.1.60 - )

BlueStacks App Player (HKLM\...\BlueStacks App Player) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM\...\{473E82D7-79E2-43DF-8FA0-025407C93191}) (Version: 0.10.0.4321 - BlueStack Systems, Inc.)

ConvertXtoDVD 3.3.4.106e (HKLM\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.3.4.106e - )

Dashlane (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Dashlane) (Version: 3.5.2.91395 - Dashlane SAS)

Dell Driver Download Manager (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\f031ef6ac137efc5) (Version: 2.1.0.0 - Dell Inc.)

DivX Setup (HKLM\...\DivX Setup) (Version: 2.6.1.87 - DivX, LLC)

DriverUpdate (HKLM\...\{04F46566-A95C-46FF-9CA1-F3FDBAB61283}) (Version: 2.2.16918 - SlimWare Utilities, Inc.)

Dropbox (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)

ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - )

Foxit Reader 5.1 (HKLM\...\Foxit Reader_is1) (Version: 5.1.4.104 - Foxit Corporation)

Free Download Manager 3.9.2 (HKLM\...\Free Download Manager_is1) (Version:  - FreeDownloadManager.ORG)

GOM Player (HKLM\...\GOM Player) (Version: 2.1.37.5085 - Gretech Corporation)

Google Chrome (HKLM\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)

Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (Version: 1.3.28.15 - Google Inc.) Hidden

Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )

HP Product Detection (HKLM\...\{3C22981C-5C14-4176-B0E8-C2BE71174C41}) (Version: 11.14.0003 - HP)

HTC BMP USB Driver (HKLM\...\{31A559C1-9E4D-423B-9DD3-34A6C5398752}) (Version: 1.0.5375 - HTC)

Intel AppUp(SM) center (HKLM\...\Intel AppUp(SM) center 18988) (Version: 18988 - Intel)

Internet Download Manager (HKLM\...\Internet Download Manager) (Version:  - )

Java 8 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)

Kingo ROOT version 1.3.1.2217 (HKLM\...\{AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1) (Version: 1.3.1.2217 - Kingosoft Technology Ltd.)

K-Lite Codec Pack 7.0.0 (Standard) (HKLM\...\KLiteCodecPack_is1) (Version: 7.0.0 - )

Kodi (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Kodi) (Version:  - XBMC-Foundation)

Liberty Slots Casino (HKLM\...\{FE8C9237-59BF-45A4-A179-EF24C882C03D}) (Version: 1.00.0000 - LibertySlots)

Mahjong Match (HKLM\...\111177437) (Version:  - Oberon Media)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft)

Microsoft IntelliType Pro 8.1 (HKLM\...\Microsoft IntelliType Pro 8.1) (Version: 8.15.406.0 - Microsoft)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 3.0.40818.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Midnight Mysteries: Haunted Houdini Deluxe (HKLM\...\BFG-Midnight Mysteries - Haunted Houdini Deluxe) (Version:  - )

Mobile App Sync (HKLM\...\Mobile App Sync) (Version:  - Mobile App Sync)

Mozilla Firefox 20.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 20.0.1 (x86 en-US)) (Version: 20.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 20.0.1 - Mozilla)

MPEG2 Codec(libmpeg2/mad) (HKLM\...\MPEG2 Codec(libmpeg2/mad)) (Version:  - )

Mplayer 0.6.9 (HKLM\...\Mplayer) (Version: 0.6.9 - )

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

NOOK for PC (HKLM\...\{05B59BD3-1B29-4DFA-99B8-0EC8CF88A60C}) (Version: 2.5.2 - Barnes & Noble)

PageRage Toolbar (HKLM\...\PageRage Toolbar) (Version: 6.5.0.202 - PageRage)

Plantronics MyHeadset Updater (x86) (HKLM\...\{BAE54DD5-2727-4F6F-9577-2B83BD450BF4}) (Version: 2.8.26503.0 - Plantronics, Inc.)

Pluto TV version 0.1.5 (HKLM\...\Pluto TV_is1) (Version: 0.1.5 - Pluto TV)

RealDownloader (Version: 18.0.1.10 - RealNetworks, Inc.) Hidden

RealDownloader (Version: 18.0.1.9 - RealNetworks) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden

RealTimes (RealPlayer) (HKLM\...\RealPlayer 18.0) (Version: 18.0.1 - RealNetworks)

RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden

Reel Deal Slots: Fishin' Fortune (HKLM\...\BFG-Reel Deal Slots - Fishin' Fortune) (Version:  - )

RoboForm 7-4-1 (All Users) (HKLM\...\AI RoboForm) (Version: 7-4-1 - Siber Systems)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)

SlimCleaner (HKLM\...\{A95F1368-38A4-4E02-99B7-96F0DC2779C7}) (Version: 4.0.28412 - SlimWare Utilities, Inc.)

Socialbox (HKLM\...\com.socialbox.socialbox) (Version: 2.109.1 - Zoosk, Inc.)

Socialbox (Version: 2.109.1 - Zoosk, Inc.) Hidden

Spotify (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Spotify) (Version: 0.8.3.222.g317ab79d - Spotify AB)

swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

UpdateService (Version: 1.0.0 - RealNetworks, Inc.) Hidden

Usenet.nl (HKLM\...\Usenet.nl_is1) (Version:  - )

Vacation Quest - The Hawaiian Islands (HKLM\...\Vacation Quest - The Hawaiian Islands) (Version:  - PopCap Games)

VC 9.0 Runtime (Version: 1.0.0 - Check Point Software Technologies Ltd) Hidden

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden

VegasVip (HKLM\...\VegasVip_is1) (Version:  - Kingsbury)

Veoh Web Player (HKLM\...\Veoh Web Player Beta) (Version: 1.1.2.0000 - Veoh Networks, Inc.)

Video Downloader (Version: 1.0.0 - RealNetworks) Hidden

VLC media player 1.1.9 (HKLM\...\VLC media player) (Version: 1.1.9 - VideoLAN)

WhoCrashed 3.00 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)

Windows Driver Package - Cambridge Silicon Radio (CSRBC) USB  (10/26/2012 2.4.0.0) (HKLM\...\20C7EDA3129B3FF8F72F9BF59252B718B554FBDC) (Version: 10/26/2012 2.4.0.0 - Cambridge Silicon Radio)

WinRAR 4.20 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team)

Yahoo! BrowserPlus 2.9.8 (HKU\S-1-5-21-11595131-3550647590-3570146784-1001\...\Yahoo! BrowserPlus) (Version:  - Yahoo! Inc.)

Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version:  - )

Your Uninstaller! 2010 (HKLM\...\YU2010_is1) (Version: 7.0 - URSoft, Inc.)

Zuma's Revenge! (HKLM\...\Zuma's Revenge!) (Version:  - PopCap Games)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{052253BF-F1FF-4686-B231-8D1904DEED68}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{0A368B9B-3566-4730-B40E-EAF6858A53AF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{0F81C552-68AD-4AAB-99D2-26F7F72A423C}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Commmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1B72D1C3-A1B3-4C87-9552-894CFF74051F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1BC0C7E7-0ADF-4FCE-9FBD-70B2DBC3BD48}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameMdl.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1E1C74D3-EF64-4F13-B631-DFDCEE4572FD}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Loginmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{1FD9E587-43E1-4F1F-A41F-A6E8B93A5546}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{2D0235FC-1701-4F1C-B36C-84CD8813EDB5}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{3059C9E6-9EDC-4C89-933E-C65623F8FD60}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{31DC369C-75C3-4D8B-9C2D-0B10BF77BA0F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{343ADE39-3C61-421B-93CB-19C44D33ED9B}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Jesus\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{47231DCA-F7A4-4696-B836-B2430D451226}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Imagemgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{4AC4E235-EB53-4942-B113-931D66A470B8}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameSelectorMdl.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{50021F2A-9C64-4766-A697-84E366A407B1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{50632C37-EDD8-4B8F-A32B-8E280D942A8E}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{51B894AD-B2D5-48F6-B1D1-C1F0CF849587}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{52FE3F2E-A71F-4EC7-BCA4-08D5C9FA57C4}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{553E32D1-AAF3-406A-B19E-E575829EC651}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{58456121-F6E2-4E74-96D5-521EBE19E124}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{58F0E5CC-C1B3-453A-B1EB-A1B40A6DAEF9}\localserver32 -> c:\program files\planet7 casino\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{59715A3F-0AF7-427E-99AF-757668C8576E}\localserver32 -> c:\program files\palace of chance\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{5C5F7442-9ADC-4BD8-89CC-7C3615C26546}\localserver32 -> c:\program files\palace of chance\casino.exe %1 => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{62A0D750-DED9-448C-B693-406B34BB0892}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.145\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{648326CD-6F37-4A8F-BF14-E2BAD67AAAA8}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6BB1EAF0-7572-4166-9DF4-2A817F5FCD83}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6CE4B8A6-4DB5-4F63-8013-1197503692EF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Yahoo!\BrowserPlus\2.9.8\Plugins\YBPAddon_2.9.8.dll (Yahoo! Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6D7374DE-63AA-473C-8C02-60D9CDCD84C5}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.153\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{6F80F85C-FC5C-4C7E-B7ED-9ECCECC7CF57}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Configmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{72A62965-EF25-42E0-97CE-7A2D69BF28C0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{87DC457B-B35D-48AC-BD42-BDF35EF623CE}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8A0F754D-9636-4771-A1A6-8A1126E03345}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8A73CF97-446B-46AD-964C-2C3400CAA60F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8B48847D-052F-4153-93B8-7223BFF1C406}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Commmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{8B5F91E9-0032-4560-93B0-4539497C5366}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{91EFB276-CEFE-48EC-BB3A-57795A7B4008}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Google\Update\1.3.21.149\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{941D2E9A-D724-4FB5-94D5-775B70E8C408}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{97637B78-01D0-4A40-A842-68774AA416BB}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{987585FA-DD0C-4E8B-8FC2-89B1181CA701}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9A5A84A0-2E60-47D1-8C75-278A8D0F41FF}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9E8F05AF-C18E-4A72-8743-A479EFD255E6}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{9FAA38ED-5635-44F7-9BE0-8CAFE29B3783}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A16CA865-CD74-46EC-9432-74579FD657A0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A2DF38B5-93D0-44D6-8130-AA80F351F852}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Timemgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A70E086C-1477-4B0C-808A-94EF8271ED39}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Resourcemgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{A7674421-DB75-4081-B0FE-2B378F1FFAEB}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\GameMdl.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ACAB158F-423F-4D59-BEDD-15C9E0CC2DD1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B10A3751-CC13-4A25-875B-EEC84674C6C0}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Soundmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B1267A8A-D143-41F7-A655-5765A8464796}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B6C64A50-7BB8-441B-AE31-C4366C84BF00}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{B8217B92-8FDD-4A74-9417-B77BD74F62B7}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{BD75936F-2B69-477E-9E9A-218FFAF35F49}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{BE742811-02F4-4D7E-87C1-886909462A16}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Modulemgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{C0DD324D-A74F-4533-84AD-030F76771C77}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{C32E3EEC-3C10-426E-95F3-38C7F139FADD}\localserver32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\DropboxUpdateOnDemand.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D166BD15-03AF-413A-BEFD-0679FF410B49}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.29\psuser.dll => No File

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D2E87C0B-C06A-4E69-8A41-0AC3117505B4}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D4A86438-A95B-487D-8B1D-1E67B2A0F379}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\DownloadMgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{D7B3EAC0-36D9-459E-AC96-3A88309FDDCC}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E65E6AAE-9169-4625-B98D-EB903E707116}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E6BFA606-59F2-4CD6-89C8-DAED6D789027}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{E9AC37A2-E79C-4CA3-A6A8-1884BF9A7852}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{EAD67B06-459C-48B9-90C1-5F2F34D4F83F}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ECA7C134-E84B-4E6B-A3E2-355FCB853766}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{ED0BD0F4-ECAC-41D2-BD28-0ABFB129F40C}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\VersionMgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{F0349E13-BD03-4073-BA25-6B2610C0750D}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{F53E4C9E-703C-41f3-8F69-C7E3D277594B}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Jesus\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FD995983-DC2B-4B97-B3FE-E9534AA1A769}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Graphicsmgr.dll (TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FE0AA82B-B32A-4D54-BA97-918D2A9F6E70}\InprocServer32 -> C:\Users\Jesus\AppData\Local\VTShared\Windowmgr.dll ()

CustomCLSID: HKU\S-1-5-21-11595131-3550647590-3570146784-1001_Classes\CLSID\{FE819BE5-BADF-4370-9913-6FB84ABA6FB1}\InprocServer32 -> C:\Users\Jesus\AppData\Local\Dropbox\Update\1.3.27.33\psuser.dll (Dropbox, Inc.)

 

==================== Restore Points =========================

 

27-10-2015 02:13:45 Restore Operation

27-10-2015 10:12:42 Windows Update

28-10-2015 14:51:31 Quitado VAFPlayer

28-10-2015 14:59:35 Quitado VAFPlayer

28-10-2015 19:46:11 Restore Point Created by FRST

 

==================== Hosts content: ===============================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2009-07-13 19:04 - 2015-10-30 23:50 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

 

127.0.0.1       localhost

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {0BBD681C-7304-41A0-B869-688657E40A9F} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {0DF8152A-D272-4BDB-9F51-1721D7FE3452} - System32\Tasks\FCBfan => C:\Users\Jesus\AppData\Roaming\FCBfan\fcbfan.exe

Task: {21E511F1-54F9-417B-B428-CB47E06E30ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-10-27] (Adobe Systems Incorporated)

Task: {2DE646AB-A4FC-47BB-B49A-E30A184AF633} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

Task: {3110396D-9536-4D0B-BAFA-6EB5D0DD9DC7} - System32\Tasks\{D28D4A94-5DFA-4081-BFAE-D98440EFDCA4} => pcalua.exe -a C:\Users\Jesus\Downloads\Programs\SlotMadnessCasinoInstaller.exe -d C:\Users\Jesus\AppData\Roaming\IDM

Task: {3DA3D8CB-B969-4A98-A4C1-B8C5E74FCD7F} - System32\Tasks\{45B4BE60-DFC5-4343-A749-E33917113EA3} => pcalua.exe -a C:\Users\Jesus\Downloads\Programs\setup.exe -d C:\Users\Jesus\AppData\Roaming\IDM

Task: {475D8051-7C74-4EFB-8D2F-B87EB6AC0EBA} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2011-08-05] (Siber Systems)

Task: {5D56AE02-A011-4D32-86B7-035674FDA02F} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {60E6A20E-6629-414A-9C27-7246C2DBA88C} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)

Task: {61C18BFF-7684-4957-9EF0-1F0C353A27EB} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

Task: {7755AC6D-FF88-483C-9C2B-9BBCEC55718A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {7CC318B5-0679-467C-8FD1-713512DA51B1} - System32\Tasks\ArcadeFrontier => C:\Users\Jesus\AppData\Local\ArcadeFrontier\veragent.exe [2014-06-28] ()

Task: {A41A3A8C-2CC2-4102-9065-C8525D9A24A9} - System32\Tasks\{B4489070-50F4-459A-A65F-49CE70E4110C} => pcalua.exe -a "C:\Users\Jesus\Desktop\deer dr\SCS Software\makeDesktopIcon.exe" -d "C:\Users\Jesus\Desktop\deer dr\SCS Software"

Task: {A5E24E6E-099B-42F9-9956-79182B2C8CA9} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

Task: {A922BCA2-5CD6-4531-94AB-6879F23868DC} - System32\Tasks\{6BBEED7F-C68C-41D3-9751-E85EFC186AAD} => pcalua.exe -a E:\install\setup.exe -d E:\install

Task: {BF4A1A15-21AE-4584-BA88-95321E8C8D2C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)

Task: {CC98A113-7FCC-4478-B481-4F50ACE95E37} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {DDB7E82D-017D-410C-867A-E5CB41874779} - System32\Tasks\Go to RoboForm Install page => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNJOMMJLMNJKMJJOMCNJJKJJMPMCNLMOJNJJJCNOJLJJMNJCNNMMMMMKMNJJJOMNJKMJMJMPMJNJICMIMCNMMCNPMFMGMCNPMCNHMOMOMNMFMJMCNOMCNIMJMPMPMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMFLKJMIKIMIJNKJCMJNNICMJNDJCMKJBJ"

Task: {E16F6A82-7107-4BF2-BCD3-26AC698877F1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

Task: {E6BCEEE9-A25A-432F-B170-9F2008F7E743} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMNJOMMJLMNJKMJJOMCNJJKJJMPMCNLMOJNJJJCNOJLJJMNJCNNMMMMMKMNJJJOMNJKMJMJMPMJNJICMIMCNLMCNOMFMGMCNPMCNHMOMOMNMFMJMCNOMCNIMJMPMPMCNNMJNPICMPMFMMJBJKJLIMJFMIMNMJNHICMMJBJKJLIMJJNBJCMFLKJMIKIMIJNKJCMJNNICMJNDJCMKJBJ"

Task: {E81EFEAD-4F21-4CB4-86D1-BE7B2F7B1E94} - System32\Tasks\{5398D605-AC1F-4226-8D0A-92360D246A95} => pcalua.exe -a "C:\Users\Jesus\Desktop\Magellan roadmate\Magellan_Roadmate_1412_NA_3_12_Rel2.exe" -d "C:\Users\Jesus\Desktop\Magellan roadmate"

Task: {ED7AA6B2-7FC7-4609-A5C3-C0C995F91388} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\RealNetworks\RealDownloader\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

Task: {EE7D1483-02C0-41A3-B9DD-0C9AE2E6062B} - System32\Tasks\{5C942655-003B-42ED-89AD-1303AF7A188A} => pcalua.exe -a C:\Users\Jesus\AppData\Local\Temp\{FAED904B-E73C-4F5B-80C6-725A05BCD83D}\adobeshockwavextrabundle.exe -d "C:\Program Files\Mozilla Firefox" -c /xtrabundle=Shockwave_3D_Asset

Task: {F6D0A09A-D6D0-4CD0-B887-11B6AF6799AF} - System32\Tasks\RealDownloader Update Check => C:\Program Files\RealNetworks\RealDownloader\downloader2.exe [2015-06-17] ()

Task: {F9ADBE9E-46B4-4F0D-8A2F-B90CA81EF8BB} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-11595131-3550647590-3570146784-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2015-06-17] (RealNetworks, Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001Core.job => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-11595131-3550647590-3570146784-1001UA.job => C:\Users\Jesus\AppData\Local\Dropbox\Update\DropboxUpdate.exe

 

==================== Loaded Modules (Whitelisted) ==============

 

2011-10-30 18:23 - 2007-08-21 13:32 - 00098304 _____ () C:\Windows\System32\redmonnt.dll

2013-04-04 03:10 - 2013-04-04 03:10 - 00032768 _____ () C:\Program Files\Plantronics\MyHeadsetUpdater\NativeUsbLib.dll

2015-06-17 03:25 - 2015-06-17 03:25 - 00031856 _____ () C:\Program Files\Real\UpdateService\RealPlayerUpdateSvc.exe

2015-06-17 03:24 - 2015-06-17 03:24 - 00035976 _____ () C:\Program Files\Real\UpdateService\DL2UpdatePlugin.dll

2015-06-17 03:24 - 2015-06-17 03:24 - 00039560 _____ () C:\Program Files\Real\UpdateService\RealDownloaderUpdatePlugin.dll

2015-06-17 03:24 - 2015-06-17 03:24 - 00037528 _____ () C:\Program Files\Real\UpdateService\VideoDLUpdatePlugin.dll

2013-08-28 17:23 - 2013-08-28 17:23 - 01861968 _____ () C:\Program Files\DivX\DivX Update\DivXUpdate.exe

2013-08-28 17:25 - 2013-08-28 17:25 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll

2012-05-06 20:10 - 2012-05-06 20:10 - 00932528 _____ () C:\Users\Jesus\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

2015-09-15 23:01 - 2015-09-10 11:12 - 93077896 _____ () C:\Program Files\Pluto TV\PlutoTV.exe

2015-07-16 00:11 - 2015-07-16 00:11 - 00088640 _____ () c:\program files\real\realplayer\CrashRpt\CrashRpt1402.dll

2015-10-31 00:01 - 2015-10-31 00:01 - 00071168 _____ () c:\users\jesus\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxkmj8w.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00012800 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00779776 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00056320 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll

2015-10-13 13:58 - 2015-09-23 16:07 - 00012288 _____ () C:\Users\Jesus\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll

2015-06-17 00:07 - 2015-06-17 00:07 - 00066112 _____ () C:\Program Files\RealNetworks\RealDownloader\dtvhooks.dll

2015-10-27 03:19 - 2015-10-20 07:08 - 01532744 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\libglesv2.dll

2015-10-27 03:19 - 2015-10-20 07:08 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\libegl.dll

2015-09-15 23:01 - 2015-09-10 11:12 - 01481728 _____ () C:\Program Files\Pluto TV\libglesv2.dll

2015-09-15 23:01 - 2015-09-10 11:12 - 00073728 _____ () C:\Program Files\Pluto TV\libegl.dll

2015-10-31 00:04 - 2015-09-10 11:12 - 17482952 _____ () C:\Users\Jesus\AppData\Local\Temp\nw3280_11740\plugins\NPSWF32_18_0_0_232.dll

2015-10-27 03:19 - 2015-10-20 07:08 - 16493384 _____ () C:\Program Files\Google\Chrome\Application\46.0.2490.80\PepperFlash\pepflashplayer.dll

2015-06-17 00:06 - 2015-06-17 00:06 - 00608320 _____ () C:\Program Files\RealNetworks\RealDownloader\downloader2.exe

2015-06-16 23:47 - 2015-06-16 23:47 - 01382048 _____ () C:\Program Files\RealNetworks\RealDownloader\cpprest100_1_2.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

 

==================== EXE Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-11595131-3550647590-3570146784-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Jesus\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.1.254

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall is disabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

(Currently there is no automatic fix for this section.)

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [{7A784CDB-971B-466A-B80A-02EA7C5EA6D8}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

FirewallRules: [{36907D82-DD55-407A-A399-14D8447B1A99}] => (Allow) C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe

FirewallRules: [TCP Query User{6185CFB9-2B43-44A9-9708-BE96442DE65A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{B3FA4339-CF70-4ACB-A307-BA1C0F593D83}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{C8161B9B-794D-46D8-B386-B7F810D09474}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe] => (Block) C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe

FirewallRules: [UDP Query User{47373C8B-A82C-42EA-90EB-B536AEF61E46}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe] => (Block) C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe

FirewallRules: [TCP Query User{2384371E-C20C-472E-A6C9-86FBC9ABA9B8}C:\program files\relevantknowledge\rlvknlg.exe] => (Allow) C:\program files\relevantknowledge\rlvknlg.exe

FirewallRules: [UDP Query User{189B13DB-5C16-41EE-B369-8D92723BE549}C:\program files\relevantknowledge\rlvknlg.exe] => (Allow) C:\program files\relevantknowledge\rlvknlg.exe

FirewallRules: [{FA2B9148-2E97-423B-819B-384C8407CE4E}] => (Allow) C:\Windows\System32\ZoneLabs\vsmon.exe

FirewallRules: [{9247F2EF-BDF4-4FC9-AA42-AF28FDCF52B0}] => (Allow) C:\Windows\System32\ZoneLabs\vsmon.exe

FirewallRules: [{A4B594B4-2323-40A0-B653-D4C2760D3985}] => (Allow) C:\Program Files\FreeFileViewer\FFVCheckForUpdates.exe

FirewallRules: [TCP Query User{001CCCAB-7132-4B73-AD67-F0284C03EED3}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{6498C408-AAE1-4FF5-A358-A9DDB19AE8C1}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{2CCE0A00-00E7-4191-9B07-A89BD2429BC4}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{61B1D9FA-5EB0-4B23-96DB-7862D9FB9789}C:\users\jesus\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\jesus\appdata\roaming\spotify\spotify.exe

FirewallRules: [{63A19801-6617-4B24-BB4F-09FB5A252A8D}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS3E09\setup\hpznui01.exe

FirewallRules: [{4BB71658-1C30-4799-98CE-D4113AACD9DD}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{D1D27524-56B1-4DD1-BB15-2FB8A83904B2}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{DA355BAE-3339-4D24-81E5-62D7CDF7227C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [TCP Query User{280F7616-C78A-4375-8C04-AD8100A13873}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{CDFCF1FB-3F53-4396-BFAE-B63C9F0F2A45}C:\program files\mozilla firefox\plugin-container.exe] => (Allow) C:\program files\mozilla firefox\plugin-container.exe

FirewallRules: [{8D5E4A02-DE83-45C0-8A7F-7B1E8E408454}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS07D1\HPDiagnosticCoreUI.exe

FirewallRules: [{0F4FFF26-E501-4ED7-8717-5AF4D1DEDD1A}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS07D1\HPDiagnosticCoreUI.exe

FirewallRules: [{39E9B839-3733-4D1E-B2EB-DD561A640B0C}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS0823\HPDiagnosticCoreUI.exe

FirewallRules: [{51F11CCA-4D0D-42AE-B2CA-FF382027B652}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS0823\HPDiagnosticCoreUI.exe

FirewallRules: [{9C14D8C9-8E04-49EE-A1DA-D7C12AD8AA91}] => (Allow) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{462548CB-2CBB-44FE-B52B-30169D6AB79F}] => (Allow) C:\Users\Jesus\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [TCP Query User{A498AA84-357C-4042-A0D7-DD29F71DC8C3}C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{9EE64CE1-C1A4-49CC-B574-3CDE2AABCE7E}C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\jesus\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{6DF886A4-EF95-466E-BED5-0A77B93D0442}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS2360\hppiw.exe

FirewallRules: [{1359EFB4-9AC3-428C-9BCE-BB63BE90605C}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS2360\hppiw.exe

FirewallRules: [{62C44071-D444-44A7-B04E-7F0313350016}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{B4ACDEBE-717D-4DCA-AE9C-83C3A7BF171E}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{775E0A6B-9C35-4DB1-92C9-75849AFB37B6}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{3A0DEB72-085D-40F2-AA94-387270A2D616}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{B145BE92-97A8-48D7-B69C-DB012C969356}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{BCAC67A4-17FD-4958-AD9B-D8A225694F2A}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe

FirewallRules: [{3DDA7105-AAD6-4B21-B2F3-2C2B9019BF15}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{077BD633-ABF0-4379-BB79-BD8E969A6D4C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{910725D0-9380-4AE6-A729-62F0D0B2553C}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe

FirewallRules: [{2DE9157D-6C55-4BAE-8EEA-5A666F8E9309}] => (Allow) C:\Program Files\common files\hp\digital imaging\bin\hpqphotocrm.exe

FirewallRules: [{05D1AFB7-AFC7-4E55-B793-02A4BDDDC95F}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe

FirewallRules: [{049C44B8-6761-42EB-9580-A7476499C501}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe

FirewallRules: [{6570AF2F-8E48-493E-AF1F-EAD48B743F12}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{2F27F3DB-39EC-48C7-B66D-0435420D7180}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{BC9CA938-53C0-472C-A487-D61482C27229}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe

FirewallRules: [{DBB333BC-12D5-4C33-99B3-DEA67A3BFCDA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{E0A59DB0-7659-488E-AA21-3D1A7370FB8B}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{9A413204-FCC1-4DD8-9AB8-842F65B292EB}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{5A553DF0-D456-4868-ACF8-620F04FA01EA}] => (Allow) C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{03130421-AC6C-4C4B-BCE4-0708001A6D44}] => (Allow) C:\Program Files\HP\hp software update\hpwucli.exe

FirewallRules: [{6D568F24-4CB9-4A91-BEC3-2B02275092D8}] => (Allow) C:\Program Files\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [TCP Query User{60F9B6C2-504E-482E-AC63-87FA5FBF3830}C:\program files\frostwire\frostwire.exe] => (Block) C:\program files\frostwire\frostwire.exe

FirewallRules: [UDP Query User{F82D9D03-A1C9-4DE4-8B9D-D8D0D1B2A57E}C:\program files\frostwire\frostwire.exe] => (Block) C:\program files\frostwire\frostwire.exe

FirewallRules: [{56A0F0DC-5831-4652-9028-0CE4B651C494}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{78C22347-E375-4D37-9C48-D442EBB42B63}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{7D67DAE3-D439-4B08-BBD1-CD7A36AE0BD0}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{50F1AB90-37C0-427A-A066-2C76DB8F70D5}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{EC4CAA6D-0CDA-40AA-95E1-23B9F2C6B00F}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{63419E58-E4A5-476A-B4D0-F8B2D6259190}] => (Allow) C:\Windows\System32\dmwu.exe

FirewallRules: [{D7E2B0F6-24E5-42C4-B8AC-8F174D6F8770}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{FE66C115-BA96-4DB4-8F88-2F1DB64A57CA}] => (Allow) C:\Windows\System32\ARFC\wrtc.exe

FirewallRules: [{8D5503CA-9E8B-4AD3-993F-0386871AD56A}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS51EA\hppiw.exe

FirewallRules: [{AC07A8C7-A8C6-46B4-9FFA-A597F909D1E5}] => (Allow) C:\Users\Jesus\AppData\Local\Temp\7zS51EA\hppiw.exe

FirewallRules: [{3F7D9768-5300-49FC-B6EF-7512D2C7142B}] => (Allow) C:\Program Files\GoforFiles\goforfilesdl.exe

FirewallRules: [{EB3805E1-5F5E-4C92-A4E7-EB8B6A16397A}] => (Allow) C:\Program Files\GoforFiles\goforfilesdl.exe

FirewallRules: [{BDFF1364-B566-40E2-AEE9-F85AA6936DB9}] => (Allow) C:\Program Files\GoforFiles\GoforFiles.exe

FirewallRules: [{D38FE597-5248-423F-BB9C-BA4A593D99F0}] => (Allow) C:\Program Files\GoforFiles\GoforFiles.exe

FirewallRules: [{0B6DED41-BCAB-4D85-B813-35201C35D15E}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{1E4A3D69-F0E1-43B2-A4DE-11CDAB985A05}] => (Allow) C:\Users\Jesus\Downloads\Programs\ChainzGalaxy_SoftangoDownloader.exe

FirewallRules: [{F860C8E9-3336-4DC0-A367-2189BACCF19F}] => (Allow) C:\Users\Jesus\Downloads\Programs\ChainzGalaxy_SoftangoDownloader.exe

FirewallRules: [{49D2D9D8-A038-4673-866A-A77F182CDD10}] => (Allow) C:\ProgramData\eSafe\eGdpSvc.exe

FirewallRules: [{93C948C7-481F-463B-9A9A-69CFDFC3254C}] => (Allow) c:\program files\real\realplayer\RPDS\Bin\rpdsvc.exe

FirewallRules: [TCP Query User{B354850D-609B-4822-B042-C519A9D57FB8}C:\program files\frostwire 6\frostwire.exe] => (Block) C:\program files\frostwire 6\frostwire.exe

FirewallRules: [UDP Query User{793F822F-0A1D-4A48-B80B-ACD9CD865C40}C:\program files\frostwire 6\frostwire.exe] => (Block) C:\program files\frostwire 6\frostwire.exe

FirewallRules: [TCP Query User{F1E93E4E-F071-48A3-8442-0E8B748A04ED}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe

FirewallRules: [UDP Query User{E65A6A87-B614-4B9E-A73D-AFBD9614C3D6}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe

FirewallRules: [{159BDD8D-44D4-4396-AFD8-F3724F75FDF9}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (10/31/2015 05:19:45 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".

Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

 

Error: (10/31/2015 05:19:34 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

 

Error: (10/31/2015 12:01:13 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

 

Error: (10/30/2015 11:43:58 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8

Faulting module name: PEV.exe, version: 0.0.0.0, time stamp: 0x4e06cfe8

Exception code: 0x40000015

Fault offset: 0x0008d1c0

Faulting process id: 0xbe8

Faulting application start time: 0xPEV.exe0

Faulting application path: PEV.exe1

Faulting module path: PEV.exe2

Report Id: PEV.exe3

 

Error: (10/30/2015 11:33:16 PM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

 

Error: (10/30/2015 06:57:02 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

 

Error: (10/30/2015 06:31:08 AM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

 

Error: (10/29/2015 04:49:59 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".

Dependent Assembly rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

 

Error: (10/29/2015 04:49:49 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Activation context generation failed for "Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1".

Dependent Assembly Microsoft.Windows.Common-Controls,language="&#x2a;",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" could not be found.

Please use sxstrace.exe for detailed diagnosis.

 

Error: (10/29/2015 03:18:30 PM) (Source: Winlogon) (EventID: 4103) (User: )

Description: Windows license activation failed. Error 0x80070005.

 

 

System errors:

=============

Error: (10/31/2015 04:50:50 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

 

Error: (10/31/2015 12:01:23 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Avira Mail Protection service depends on the Avira Real-Time Protection service which failed to start because of the following error: 

%%1053

 

Error: (10/31/2015 12:01:18 AM) (Source: BugCheck) (EventID: 1001) (User: )

Description: 0x00000050 (0xe0000000, 0x00000000, 0x832c7cea, 0x00000002)C:\Windows\MEMORY.DMP103115-27409-01

 

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Avira Web Protection service depends on the Avira Real-Time Protection service which failed to start because of the following error: 

%%1053

 

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Avira Real-Time Protection service failed to start due to the following error: 

%%1053

 

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: A timeout was reached (30000 milliseconds) while waiting for the Avira Real-Time Protection service to connect.

 

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Avira Scheduler service failed to start due to the following error: 

%%1053

 

Error: (10/31/2015 12:01:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: A timeout was reached (30000 milliseconds) while waiting for the Avira Scheduler service to connect.

 

Error: (10/31/2015 12:01:10 AM) (Source: EventLog) (EventID: 6008) (User: )

Description: The previous system shutdown at 11:59:00 PM on ‎10/‎30/‎2015 was unexpected.

 

Error: (10/30/2015 11:50:49 PM) (Source: Service Control Manager) (EventID: 7030) (User: )

Description: The PEVSystemStart service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly.

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™2 CPU 6700 @ 2.66GHz

Percentage of memory in use: 47%

Total physical RAM: 2301.51 MB

Available physical RAM: 1207.45 MB

Total Virtual: 4601.3 MB

Available Virtual: 2123.86 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:186.21 GB) (Free:80.99 GB) NTFS

Drive d: (Oper.Blockade) (CDROM) (Total:0.13 GB) (Free:0 GB) UDF

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 186.3 GB) (Disk ID: 2A61B455)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=186.2 GB) - (Type=07 NTFS)

 

==================== End of Addition.txt ============================

[zep516]

Nice work, good timing just got in from work.

Need time to look things over and feed the cat. I'm curious after the running of combofix will Malwarebytes run or Junkremoval tool. Try them, and I'll be back with you in about an hour or so.

Thanks
Joe

[jbj1162]

Dont trip I gotta take off for a couple hours anyway so enjoy whats left of your saturday and Ill try running those programs b4 I take off talk to ya in a couple hrs 

 

Tried them both and no luck I gotta run c-ya in a bit

Edited by jbj1162, 31 October 2015 - 02:19 PM.

[zep516]

Hello,
Few things to do, no hurry...
Uninstall this program.

• Ashampoo WinOptimizer-------These programs can create issues.
  
  Next Clean up Malwarebytes
  Please visit this Link. Scroll down to Free Version. and Run the clean tool. Do not reinstall Malwarebytes yet.
  
  Replace Anti Virus Avira looks broken.
  Download Microsoft security Essentials from Here. Do not install it just yet! Just download it.
  
  Then
  Visit this Link. to remove Anti Virus programs.
  Run the Anti virus removal tools for following Anti Virus programs
• Panda
• Avira
  Once you have run the uninstaller for panda and Avira, go back to the desktop, double click on the Microsoft Security Essentials Icon that you downloaded, install it, and run a scan with it.
   
  
  Let me know if you can scan with Microsoft Security Essentials.
  Thanks
  Joe