I have run the three programs that you suggested. Actually, I ran AdwCleaner twice as I ran it with some items unchecked the first time. I am attaching 7 logs. I included the scan log and the clean logs without relaizing what they were. Don't know if you want them both. Thanks.
Log 1 AdwCleaner
# AdwCleaner v3.004 - Report created 15/09/2013 at 07:36:37
# Updated 15/09/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Mary's Documents - MRAVEN1
# Running from : C:\Documents and Settings\Mary's Documents\My Documents\Downloads\AdwCleaner.exe
# Option : Scan
***** [ Services ] *****
Service Found : DefaultTabSearch
Service Found : DefaultTabUpdate
Service Found : FastFreeConverterUpdt
Service Found : Viewpoint Manager Service
***** [ Files / Folders ] *****
File Found : C:\Documents and Settings\All Users\Desktop\Open It!.lnk
File Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\
[email protected]File Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\Askcom.xml
File Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\Conduit.xml
File Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\search.xml
File Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\user.js
File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\.autoreg
Folder Found : C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{07cbf788-1359-421b-a4e3-5a8d041b90a3}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{78fad561-2f55-4bcd-b896-786662704334}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{bfec236d-e122-4102-864f-f5f19d897f5e}
Folder Found : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen
Folder Found : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcnkjmghmdigcjcajaemenhlleobnhih
Folder Found : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Folder Found : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nemfjadlboooiffmcelkafilagddogim
Folder Found C:\Documents and Settings\All Users\Application Data\apn
Folder Found C:\Documents and Settings\All Users\Application Data\Ask
Folder Found C:\Documents and Settings\All Users\Application Data\Conduit
Folder Found C:\Documents and Settings\All Users\Application Data\ParetoLogic
Folder Found C:\Documents and Settings\All Users\Application Data\Tarma Installer
Folder Found C:\Documents and Settings\All Users\Application Data\Viewpoint
Folder Found C:\Documents and Settings\LocalService\AppData\LocalLow\Fast Free Converter
Folder Found C:\Documents and Settings\LocalService\Local Settings\Application Data\Viewpoint
Folder Found C:\Documents and Settings\Mary's Documents\AppData\LocalLow\Fast Free Converter
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\0D0S1L2Z1P1B0T1P1B2Z
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\DefaultTab
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\DriverCure
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\DSite
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3289663
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3295465
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3298566
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3309657
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Smartbar
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\ParetoLogic
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\PriceGong
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Conduit
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\cre
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\DefineExt
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\internethelper3.1
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\InternetHelper3.1
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\KeyBar_2.2
Folder Found C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Viewpoint
Folder Found C:\Documents and Settings\Michael Raven\AppData\LocalLow\Fast Free Converter
Folder Found C:\Documents and Settings\Michael Raven\Application Data\Viewpoint
Folder Found C:\Documents and Settings\Michael Raven\Local Settings\Application Data\Viewpoint
Folder Found C:\Documents and Settings\NetworkService\AppData\LocalLow\Fast Free Converter
Folder Found C:\Program Files\Common Files\Viewpoint
Folder Found C:\Program Files\Conduit
Folder Found C:\Program Files\DefaultTab
Folder Found C:\Program Files\Fast Free Converter
Folder Found C:\Program Files\File Type Helper
Folder Found C:\Program Files\InternetHelper3.1
Folder Found C:\Program Files\internethelper3.1
Folder Found C:\Program Files\KeyBar_2.2
Folder Found C:\Program Files\openit
Folder Found C:\Program Files\Viewpoint
Folder Found C:\WINDOWS\TEMP\CT3289663
Folder Found C:\WINDOWS\TEMP\CT3289663
Folder Found C:\WINDOWS\TEMP\CT3289663
Folder Found C:\WINDOWS\TEMP\CT3289663
Folder Found C:\WINDOWS\TEMP\CT3298566
Folder Found C:\WINDOWS\TEMP\CT3298566
Folder Found C:\WINDOWS\TEMP\CT3298566
Folder Found C:\WINDOWS\TEMP\CT3298566
Folder Found C:\WINDOWS\TEMP\CT3309657
Folder Found C:\WINDOWS\TEMP\CT3309657
Folder Found C:\WINDOWS\TEMP\CT3309657
Folder Found C:\WINDOWS\TEMP\CT3309657
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AppDataLow\Software\DefaultTab
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\Default Tab
Key Found : HKCU\Software\DefaultTab
Key Found : HKCU\Software\dsiteproducts
Key Found : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Found : HKCU\Software\Google\Chrome\Extensions\jcnkjmghmdigcjcajaemenhlleobnhih
Key Found : HKCU\Software\Google\Chrome\Extensions\nemfjadlboooiffmcelkafilagddogim
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\InternetHelper3.1
Key Found : HKCU\Software\KeyBar_2.2
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\VWPT
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CACF6E1-2F85-462F-892F-D9E30E3B7DB9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6CE83F03-4DFD-4070-A0A7-C46C82E20971}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7736C7FA-512D-11E2-B871-DEC36088709B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7327C09-B521-4EDB-8509-7D2660C9EC98}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BFEC236D-E122-4102-864F-F5F19D897F5E}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Key Found : HKCU\Software\ParetoLogic
Key Found : HKCU\Software\PriceGong
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\Viewpoint
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKCU\Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Found : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Found : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{0E2C3126-DDED-4A58-800E-9AEDE84EA31E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3CACF6E1-2F85-462F-892F-D9E30E3B7DB9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6CE83F03-4DFD-4070-A0A7-C46C82E20971}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{73D463FE-D8AE-431D-A0B0-8755A38F90EE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8D97A421-A945-4078-AEE6-A1DAC74F68F8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A7327C09-B521-4EDB-8509-7D2660C9EC98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{BFEC236D-E122-4102-864F-F5F19D897F5E}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3289663
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3295465
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3298566
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3309657
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\Default Tab
Key Found : HKLM\Software\DefaultTab
Key Found : HKLM\Software\Fast Free Converter
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jcnkjmghmdigcjcajaemenhlleobnhih
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\nemfjadlboooiffmcelkafilagddogim
Key Found : HKLM\Software\InternetHelper3.1
Key Found : HKLM\Software\KeyBar_2.2
Key Found : HKLM\Software\MetaStream
Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{829274DF-B94D-44CF-A3E6-79072531F07E}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB287CEB-71F3-4357-A834-C5CCC4FEF658}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCF32F16-1013-4E9F-813D-434F2A5BFEFE}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2A4E73D-3DB8-4FE4-9332-B5E797F30E24}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab Chrome
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\InternetHelper3.1 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\KeyBar_2.2 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Viewpoint Manager
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BFEC236D-E122-4102-864F-F5F19D897F5E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3CACF6E1-2F85-462F-892F-D9E30E3B7DB9}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6CE83F03-4DFD-4070-A0A7-C46C82E20971}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fast Free Converter
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InternetHelper3.1 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KeyBar_2.2 Toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Viewpoint Manager
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Found : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Key Found : HKLM\Software\ParetoLogic
Key Found : HKLM\Software\Tarma Installer
Key Found : HKLM\Software\Viewpoint
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BFEC236D-E122-4102-864F-F5F19D897F5E}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BFEC236D-E122-4102-864F-F5F19D897F5E}]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_fdkednngfjmpnljkolbapdednncafhen]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_jcnkjmghmdigcjcajaemenhlleobnhih]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BFEC236D-E122-4102-864F-F5F19D897F5E}]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [
[email protected]]
***** [ Browsers ] *****
-\\ Internet Explorer v7.0.6000.21352
-\\ Mozilla Firefox v7.0.1 (en-US)
[ File : C:\Documents and Settings\Michael Raven\Application Data\Mozilla\Firefox\Profiles\9fndwsjv.default\prefs.js ]
Line Found : user_pref("browser.search.defaultengine", "Ask.com");
Line Found : user_pref("browser.search.defaultenginename", "Ask.com");
Line Found : user_pref("browser.search.order.1", "Ask.com");
Line Found : user_pref("browser.search.selectedEngine", "Ask.com");
Line Found : user_pref("extensions.asktb.ff-original-keyword-url", "");
Line Found : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000031&locale=en_US&apn_uid=8B20FABA-1E2E-4006-8248-342A100D2F13&apn_ptnrs=TV&apn_sauid=E3F7848A-BBA1-4C34-9BF8[...]
[ File : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\prefs.js ]
Line Found : user_pref("CT3289663.1000082.isPlayDisplay", "true");
Line Found : user_pref("CT3289663.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
Line Found : user_pref("CT3289663.1000234.TWC_TMP_city", "HIGHLANDS RANCH");
Line Found : user_pref("CT3289663.1000234.TWC_TMP_country", "US");
Line Found : user_pref("CT3289663.1000234.TWC_country", "UNITED STATES");
Line Found : user_pref("CT3289663.1000234.TWC_locId", "USCO0426");
Line Found : user_pref("CT3289663.1000234.TWC_location", "Highlands Ranch, CO");
Line Found : user_pref("CT3289663.1000234.TWC_region", "US");
Line Found : user_pref("CT3289663.1000234.TWC_temp_dis", "f");
Line Found : user_pref("CT3289663.1000234.TWC_wind_dis", "mph");
Line Found : user_pref("CT3289663.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289663.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289663.FF19Solved", "true");
Line Found : user_pref("CT3289663.FirstTime", "true");
Line Found : user_pref("CT3289663.FirstTimeFF3", "true");
Line Found : user_pref("CT3289663.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289663&SearchSource=2&CUI=UN61118443222423232&UM=2&q=");
Line Found : user_pref("CT3289663.UserID", "UN61118443222423232");
Line Found : user_pref("CT3289663.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT3289663.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3289663.countryCode", "US");
Line Found : user_pref("CT3289663.defaultSearch", "true");
Line Found : user_pref("CT3289663.embeddedsData", "[{\"appId\":\"130067724014616498\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Found : user_pref("CT3289663.enableAlerts", "true");
Line Found : user_pref("CT3289663.enableSearchFromAddressBar", "true");
Line Found : user_pref("CT3289663.firstTimeDialogOpened", "true");
Line Found : user_pref("CT3289663.fixPageNotFoundError", "true");
Line Found : user_pref("CT3289663.fixPageNotFoundErrorByUser", "true");
Line Found : user_pref("CT3289663.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT3289663.fullUserID", "UN61118443222423232.IN.20130902181930");
Line Found : user_pref("CT3289663.installDate", "02/09/2013 18:19:38");
Line Found : user_pref("CT3289663.installId", "stub.exe");
Line Found : user_pref("CT3289663.installSessionId", "{22966E3E-4AAE-4BBA-996B-2FF7785E116F}");
Line Found : user_pref("CT3289663.installSp", "TRUE");
Line Found : user_pref("CT3289663.installType", "conduitnsisintegration");
Line Found : user_pref("CT3289663.installUsageEarly", "2013-09-07T05:07:45.5742943+03:00");
Line Found : user_pref("CT3289663.installerVersion", "1.6.1.2");
Line Found : user_pref("CT3289663.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3289663.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289663.isFirstTimeToolbarLoading", "false");
Line Found : user_pref("CT3289663.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3289663.keyword", "true");
Line Found : user_pref("CT3289663.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3289663&octid=CT3289663&SearchSource=15&CUI=UN61118443222423232&SSPV=&Lay=1&UM=2\"}");
Line Found : user_pref("CT3289663.lastVersion", "10.20.0.513");
Line Found : user_pref("CT3289663.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Found : user_pref("CT3289663.openThankYouPage", "false");
Line Found : user_pref("CT3289663.openUninstallPage", "true");
Line Found : user_pref("CT3289663.originalHomepage", "about:home");
Line Found : user_pref("CT3289663.originalSearchAddressUrl", "");
Line Found : user_pref("CT3289663.originalSearchEngine", "");
Line Found : user_pref("CT3289663.originalSearchEngineName", "");
Line Found : user_pref("CT3289663.revertSettingsEnabled", "false");
Line Found : user_pref("CT3289663.search.searchAppId", "130067724014616498");
Line Found : user_pref("CT3289663.search.searchCount", "1");
Line Found : user_pref("CT3289663.searchFromAddressBarEnabledByUser", "true");
Line Found : user_pref("CT3289663.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT3289663.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT3289663.searchRevert", "false");
Line Found : user_pref("CT3289663.searchSuggestEnabledByUser", "true");
Line Found : user_pref("CT3289663.searchUserMode", "2");
Line Found : user_pref("CT3289663.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289663.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3289663.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Found : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3289663\"}");
Line Found : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://InternetHelper31.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"InternetHelper3.1 \"}");
Line Found : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3289663.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3289663.serviceLayer_services_Configuration_lastUpdate", "1378519675694");
Line Found : user_pref("CT3289663.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1378519683080");
Line Found : user_pref("CT3289663.serviceLayer_services_appsMetadata_lastUpdate", "1378519682951");
Line Found : user_pref("CT3289663.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1378519681015");
Line Found : user_pref("CT3289663.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1378519676655");
Line Found : user_pref("CT3289663.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1378519682900");
Line Found : user_pref("CT3289663.serviceLayer_services_searchAPI_lastUpdate", "1378519676716");
Line Found : user_pref("CT3289663.serviceLayer_services_serviceMap_lastUpdate", "1378519674865");
Line Found : user_pref("CT3289663.serviceLayer_services_toolbarContextMenu_lastUpdate", "1378519680901");
Line Found : user_pref("CT3289663.serviceLayer_services_toolbarSettings_lastUpdate", "1378519676046");
Line Found : user_pref("CT3289663.serviceLayer_services_translation_lastUpdate", "1378519682982");
Line Found : user_pref("CT3289663.settingsINI", true);
Line Found : user_pref("CT3289663.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3289663.showToolbarPermission", "false");
Line Found : user_pref("CT3289663.smartbar.CTID", "CT3289663");
Line Found : user_pref("CT3289663.smartbar.Uninstall", "0");
Line Found : user_pref("CT3289663.smartbar.homepage", "true");
Line Found : user_pref("CT3289663.smartbar.isHidden", false);
Line Found : user_pref("CT3289663.smartbar.toolbarName", "InternetHelper3.1 ");
Line Found : user_pref("CT3289663.startPage", "true");
Line Found : user_pref("CT3289663.toolbarBornServerTime", "7-9-2013");
Line Found : user_pref("CT3289663.toolbarCurrentServerTime", "7-9-2013");
Line Found : user_pref("CT3289663.toolbarLoginClientTime", "Sun Sep 08 2013 04:31:09 GMT-0600 (Mountain Daylight Time)");
Line Found : user_pref("CT3289663.versionFromInstaller", "10.19.2.5");
Line Found : user_pref("CT3289663.xpeMode", "0");
Line Found : user_pref("CT3289663_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248447934,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("CT3295465.1000082.isPlayDisplay", "true");
Line Found : user_pref("CT3295465.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
Line Found : user_pref("CT3295465.1000234.TWC_TMP_city", "HIGHLANDS RANCH");
Line Found : user_pref("CT3295465.1000234.TWC_TMP_country", "US");
Line Found : user_pref("CT3295465.1000234.TWC_country", "UNITED STATES");
Line Found : user_pref("CT3295465.1000234.TWC_locId", "USCO0426");
Line Found : user_pref("CT3295465.1000234.TWC_location", "Highlands Ranch, CO");
Line Found : user_pref("CT3295465.1000234.TWC_region", "US");
Line Found : user_pref("CT3295465.1000234.TWC_temp_dis", "f");
Line Found : user_pref("CT3295465.1000234.TWC_wind_dis", "mph");
Line Found : user_pref("CT3295465.1000234.weatherData", "{\"icon\":\"26.png\",\"temperature\":\"63°F\",\"temperatureClear\":\"63°F\",\"highTemperature\":\"63°F\",\"lowTemperature\":\"58°F\",\"feelsLike\":\"63°F\",[...]
Line Found : user_pref("CT3295465.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3295465.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3295465.FirstTime", "true");
Line Found : user_pref("CT3295465.FirstTimeFF3", "true");
Line Found : user_pref("CT3295465.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3295465&ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Found : user_pref("CT3295465.UserID", "UN36086918243058231");
Line Found : user_pref("CT3295465.addressBarTakeOverEnabledInHidden", "true");
Line Found : user_pref("CT3295465.browser.search.defaultthis.engineName", true);
Line Found : user_pref("CT3295465.countryCode", "US");
Line Found : user_pref("CT3295465.defaultSearch", "true");
Line Found : user_pref("CT3295465.embeddedsData", "[{\"appId\":\"130093305333696280\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Found : user_pref("CT3295465.enableAlerts", "true");
Line Found : user_pref("CT3295465.enableFix404ByUser", "TRUE");
Line Found : user_pref("CT3295465.enableSearchFromAddressBar", "true");
Line Found : user_pref("CT3295465.firstTimeDialogOpened", "true");
Line Found : user_pref("CT3295465.fixPageNotFoundError", "true");
Line Found : user_pref("CT3295465.fixPageNotFoundErrorByUser", "true");
Line Found : user_pref("CT3295465.fixPageNotFoundErrorInHidden", "true");
Line Found : user_pref("CT3295465.fixUrls", true);
Line Found : user_pref("CT3295465.fullUserID", "UN36086918243058231.IN.20130707170421");
Line Found : user_pref("CT3295465.installId", "stub.exe");
Line Found : user_pref("CT3295465.installType", "conduitnsisintegration");
Line Found : user_pref("CT3295465.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3295465.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3295465.isFirstTimeToolbarLoading", "false");
Line Found : user_pref("CT3295465.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Found : user_pref("CT3295465.keyword", true);
Line Found : user_pref("CT3295465.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3295465&octid=CT3295465&SearchSource=15&CUI=UN36086918243058231&SSPV=&Lay=1&UM=2\"}");
Line Found : user_pref("CT3295465.lastVersion", "10.20.0.513");
Line Found : user_pref("CT3295465.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Found : user_pref("CT3295465.migrateAppsAndComponents", true);
Line Found : user_pref("CT3295465.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Found : user_pref("CT3295465.openThankYouPage", "false");
Line Found : user_pref("CT3295465.openUninstallPage", "true");
Line Found : user_pref("CT3295465.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3289663&octid=CT3289663&SearchSource=61&CUI=UN61118443222423232&UM=2&UP=SP23774ED5-11FA-4E6B-B62D-0FEF74CC5332");
Line Found : user_pref("CT3295465.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289663&SearchSource=2&CUI=UN61118443222423232&UM=2&q=");
Line Found : user_pref("CT3295465.originalSearchEngine", "InternetHelper3.1 Customized Web Search");
Line Found : user_pref("CT3295465.revertSettingsEnabled", "false");
Line Found : user_pref("CT3295465.search.searchAppId", "130093305333696280");
Line Found : user_pref("CT3295465.search.searchCount", "0");
Line Found : user_pref("CT3295465.searchFromAddressBarEnabledByUser", "true");
Line Found : user_pref("CT3295465.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT3295465.searchInNewTabEnabledInHidden", "true");
Line Found : user_pref("CT3295465.searchSuggestEnabledByUser", "true");
Line Found : user_pref("CT3295465.searchUserMode", "2");
Line Found : user_pref("CT3295465.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3295465.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Found : user_pref("CT3295465.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Found : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295465\"}");
Line Found : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BrowserPlus1.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BrowserPlus1 \"}");
Line Found : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3295465.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Found : user_pref("CT3295465.serviceLayer_services_Configuration_lastUpdate", "1378519675608");
Line Found : user_pref("CT3295465.serviceLayer_services_searchAPI_lastUpdate", "1378519688630");
Line Found : user_pref("CT3295465.serviceLayer_services_serviceMap_lastUpdate", "1378519674289");
Line Found : user_pref("CT3295465.serviceLayer_services_setupAPI_lastUpdate", "1378519677002");
Line Found : user_pref("CT3295465.serviceLayer_services_toolbarSettings_lastUpdate", "1378519688916");
Line Found : user_pref("CT3295465.settingsINI", true);
Line Found : user_pref("CT3295465.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3295465.showToolbarPermission", "false");
Line Found : user_pref("CT3295465.smartbar.CTID", "CT3295465");
Line Found : user_pref("CT3295465.smartbar.Uninstall", "0");
Line Found : user_pref("CT3295465.smartbar.homepage", true);
Line Found : user_pref("CT3295465.smartbar.toolbarName", "BrowserPlus1 ");
Line Found : user_pref("CT3295465.startPage", "true");
Line Found : user_pref("CT3295465.toolbarBornServerTime", "7-9-2013");
Line Found : user_pref("CT3295465.toolbarCurrentServerTime", "7-9-2013");
Line Found : user_pref("CT3295465.toolbarLoginClientTime", "Sun Sep 08 2013 04:31:24 GMT-0600 (Mountain Daylight Time)");
Line Found : user_pref("CT3295465_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248449073,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("CT3298566.FF19Solved", "true");
Line Found : user_pref("CT3298566.FirstTime", "true");
Line Found : user_pref("CT3298566.FirstTimeFF3", "true");
Line Found : user_pref("CT3298566.UserID", "UN28724037872055419");
Line Found : user_pref("CT3298566.defaultSearch", "true");
Line Found : user_pref("CT3298566.enableAlerts", "true");
Line Found : user_pref("CT3298566.enableSearchFromAddressBar", "true");
Line Found : user_pref("CT3298566.fixPageNotFoundError", "true");
Line Found : user_pref("CT3298566.fixPageNotFoundErrorByUser", "true");
Line Found : user_pref("CT3298566.fullUserID", "UN28724037872055419.IN.20130911150834");
Line Found : user_pref("CT3298566.installDate", "11/09/2013 15:08:56");
Line Found : user_pref("CT3298566.installId", "cid111");
Line Found : user_pref("CT3298566.installSessionId", "{E21D1DE2-E864-4F02-B04E-701C370F5DBF}");
Line Found : user_pref("CT3298566.installSp", "TRUE");
Line Found : user_pref("CT3298566.installType", "conduitnsisintegration");
Line Found : user_pref("CT3298566.installerVersion", "1.7.0.9");
Line Found : user_pref("CT3298566.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3298566.lastVersion", "10.20.0.513");
Line Found : user_pref("CT3298566.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Found : user_pref("CT3298566.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Found : user_pref("CT3298566.openThankYouPage", "false");
Line Found : user_pref("CT3298566.openUninstallPage", "true");
Line Found : user_pref("CT3298566.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3309657&octid=CT3309657&SearchSource=61&CUI=UN23493783171330916&UM=2&UP=SP23774ED5-11FA-4E6B-B62D-0FEF74CC5332");
Line Found : user_pref("CT3298566.revertSettingsEnabled", "false");
Line Found : user_pref("CT3298566.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT3298566.searchRevert", "false");
Line Found : user_pref("CT3298566.searchSuggestEnabledByUser", "true");
Line Found : user_pref("CT3298566.searchUserMode", "2");
Line Found : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3298566\"}");
Line Found : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://MixiDJV30.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"MixiDJ V30 \"}");
Line Found : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3298566.serviceLayer_services_serviceMap_lastUpdate", "1378938894660");
Line Found : user_pref("CT3298566.settingsINI", true);
Line Found : user_pref("CT3298566.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3298566.smartbar.CTID", "CT3298566");
Line Found : user_pref("CT3298566.smartbar.Uninstall", "0");
Line Found : user_pref("CT3298566.smartbar.homepage", "true");
Line Found : user_pref("CT3298566.smartbar.toolbarName", "MixiDJ V30 ");
Line Found : user_pref("CT3298566.startPage", "true");
Line Found : user_pref("CT3298566.versionFromInstaller", "10.20.0.13");
Line Found : user_pref("CT3298566.xpeMode", "0");
Line Found : user_pref("CT3298566_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248446947,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("CT3309657.FF19Solved", "true");
Line Found : user_pref("CT3309657.FirstTime", "true");
Line Found : user_pref("CT3309657.FirstTimeFF3", "true");
Line Found : user_pref("CT3309657.UserID", "UN23493783171330916");
Line Found : user_pref("CT3309657.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3309657.defaultSearch", "true");
Line Found : user_pref("CT3309657.enableAlerts", "true");
Line Found : user_pref("CT3309657.enableSearchFromAddressBar", "true");
Line Found : user_pref("CT3309657.fixPageNotFoundError", "true");
Line Found : user_pref("CT3309657.fixPageNotFoundErrorByUser", "true");
Line Found : user_pref("CT3309657.fullUserID", "UN23493783171330916.IN.20130907003954");
Line Found : user_pref("CT3309657.installId", "stub.exe");
Line Found : user_pref("CT3309657.installSessionId", "{4357EBAB-5FCF-4BFB-B1BE-2BBDD2DBECBA}");
Line Found : user_pref("CT3309657.installSp", "TRUE");
Line Found : user_pref("CT3309657.installType", "conduitnsisintegration");
Line Found : user_pref("CT3309657.installerVersion", "1.6.1.1");
Line Found : user_pref("CT3309657.isCheckedStartAsHidden", true);
Line Found : user_pref("CT3309657.keyword", "true");
Line Found : user_pref("CT3309657.lastVersion", "10.20.0.513");
Line Found : user_pref("CT3309657.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Found : user_pref("CT3309657.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Found : user_pref("CT3309657.openThankYouPage", "false");
Line Found : user_pref("CT3309657.openUninstallPage", "true");
Line Found : user_pref("CT3309657.originalHomepage", "hxxp://search.conduit.com/?octid=CT3295465&ctid=CT3295465&CUI=UN36086918243058231&UM=2&SearchSource=13&UP=SP23774ED5-11FA-4E6B-B62D-0FEF74CC5332");
Line Found : user_pref("CT3309657.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3295465&ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Found : user_pref("CT3309657.originalSearchEngine", "BrowserPlus1 Customized Web Search");
Line Found : user_pref("CT3309657.originalSearchEngineName", "InternetHelper3.1 Customized Web Search");
Line Found : user_pref("CT3309657.revertSettingsEnabled", "false");
Line Found : user_pref("CT3309657.searchInNewTabEnabledByUser", "true");
Line Found : user_pref("CT3309657.searchRevert", "false");
Line Found : user_pref("CT3309657.searchSuggestEnabledByUser", "true");
Line Found : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3309657\"}");
Line Found : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://KeyBar22.OurToolbar.com//xpi\"}");
Line Found : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"KeyBar 2.2 \"}");
Line Found : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Found : user_pref("CT3309657.serviceLayer_services_serviceMap_lastUpdate", "1378938894605");
Line Found : user_pref("CT3309657.settingsINI", true);
Line Found : user_pref("CT3309657.shouldFirstTimeDialog", "false");
Line Found : user_pref("CT3309657.smartbar.CTID", "CT3309657");
Line Found : user_pref("CT3309657.smartbar.Uninstall", "0");
Line Found : user_pref("CT3309657.smartbar.homepage", "true");
Line Found : user_pref("CT3309657.smartbar.isHidden", false);
Line Found : user_pref("CT3309657.smartbar.toolbarName", "KeyBar 2.2 ");
Line Found : user_pref("CT3309657.startPage", "true");
Line Found : user_pref("CT3309657.versionFromInstaller", "10.19.2.5");
Line Found : user_pref("CT3309657.xpeMode", "0");
Line Found : user_pref("CT3309657_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248445769,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?octid=CT3295465&ctid=CT3295465&CUI=UN36086918243058231&UM=2&SearchSource=13");
Line Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3295465&ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3295465");
Line Found : user_pref("browser.search.defaultenginename", "BrowserPlus1 Customized Web Search");
Line Found : user_pref("browser.search.defaultthis.engineName", "KeyBar 2.2 Customized Web Search");
Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3309657&CUI=UN23493783171330916&UM=2&SearchSource=3&q={searchTerms}");
Line Found : user_pref("browser.search.selectedEngine", "KeyBar 2.2 Customized Web Search");
Line Found : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?octid=CT3295465&ctid=CT3295465&CUI=UN36086918243058231&UM=2&SearchSource=13");
Line Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT3295465");
Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289663&CUI=UN61118443222423232&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3289663&octid=CT3289663&SearchSource[...]
Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289663&SearchSource=2&CUI=UN61118443222423232&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?oct[...]
Line Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3295465");
Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3295465");
Line Found : user_pref("smartbar.machineId", "NMKESLFLPPYPN5QGDTVWP8RS2HV7JOFREBV7PAAWBSP85NUXPVZ5ST7ZALYNA2XQJVA0BVBPBHHT7VRAZ50BUQ");
Line Found : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3289663&CUI=UN61118443222423232&UM=2&SearchSource=13");
-\\ Google Chrome v29.0.1547.66
[ File : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [45647 octets] - [15/09/2013 07:36:37]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [45708 octets] ##########
Log 2 AdwCleaner
# AdwCleaner v3.004 - Report created 15/09/2013 at 08:40:49
# Updated 15/09/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Mary's Documents - MRAVEN1
# Running from : C:\Documents and Settings\Mary's Documents\My Documents\Downloads\AdwCleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
File Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\Askcom.xml
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{07cbf788-1359-421b-a4e3-5a8d041b90a3}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{78fad561-2f55-4bcd-b896-786662704334}
Folder Found : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{bfec236d-e122-4102-864f-f5f19d897f5e}
Folder Found C:\Documents and Settings\All Users\Application Data\ParetoLogic
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3289663
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3295465
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3298566
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3309657
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Smartbar
Folder Found C:\Documents and Settings\Mary's Documents\Application Data\ParetoLogic
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_jcnkjmghmdigcjcajaemenhlleobnhih]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [
[email protected]]
***** [ Browsers ] *****
-\\ Internet Explorer v7.0.6000.21352
-\\ Mozilla Firefox v7.0.1 (en-US)
[ File : C:\Documents and Settings\Michael Raven\Application Data\Mozilla\Firefox\Profiles\9fndwsjv.default\prefs.js ]
[ File : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\prefs.js ]
-\\ Google Chrome v29.0.1547.66
[ File : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [45789 octets] - [15/09/2013 07:36:37]
AdwCleaner[R1].txt - [3166 octets] - [15/09/2013 08:40:49]
AdwCleaner[S0].txt - [46015 octets] - [15/09/2013 07:50:12]
########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [3287 octets] ##########
Log 3 AdwCleaner
# AdwCleaner v3.004 - Report created 15/09/2013 at 07:50:12
# Updated 15/09/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Mary's Documents - MRAVEN1
# Running from : C:\Documents and Settings\Mary's Documents\My Documents\Downloads\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : DefaultTabSearch
Service Deleted : DefaultTabUpdate
Service Deleted : FastFreeConverterUpdt
Service Deleted : Viewpoint Manager Service
***** [ Files / Folders ] *****
Folder Deleted : C:\Documents and Settings\All Users\Application Data\apn
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Ask
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Conduit
[x] Not Deleted : C:\Documents and Settings\All Users\Application Data\ParetoLogic
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Tarma Installer
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Viewpoint
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\DefaultTab
Folder Deleted : C:\Program Files\Fast Free Converter
Folder Deleted : C:\Program Files\File Type Helper
Folder Deleted : C:\Program Files\internethelper3.1
Folder Deleted : C:\Program Files\openit
Folder Deleted : C:\Program Files\Viewpoint
Folder Deleted : C:\Program Files\KeyBar_2.2
Folder Deleted : C:\Program Files\Common Files\Viewpoint
Folder Deleted : C:\Documents and Settings\LocalService\Local Settings\Application Data\Viewpoint
Folder Deleted : C:\WINDOWS\TEMP\CT3289663
Folder Deleted : C:\WINDOWS\TEMP\CT3298566
Folder Deleted : C:\WINDOWS\TEMP\CT3309657
Folder Deleted : C:\Documents and Settings\LocalService\AppData\LocalLow\Fast Free Converter
Folder Deleted : C:\Documents and Settings\NetworkService\AppData\LocalLow\Fast Free Converter
Folder Deleted : C:\Documents and Settings\Michael Raven\Local Settings\Application Data\Viewpoint
Folder Deleted : C:\Documents and Settings\Michael Raven\AppData\LocalLow\Fast Free Converter
Folder Deleted : C:\Documents and Settings\Michael Raven\Application Data\Viewpoint
Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\cre
Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\DefineExt
Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\internethelper3.1
Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Viewpoint
Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\KeyBar_2.2
Folder Deleted : C:\Documents and Settings\Mary's Documents\AppData\LocalLow\Fast Free Converter
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\0D0S1L2Z1P1B0T1P1B2Z
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\DefaultTab
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\DriverCure
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\DSite
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\ParetoLogic
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\PriceGong
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Smartbar
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3289663
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3298566
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3295465
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3309657
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{07cbf788-1359-421b-a4e3-5a8d041b90a3}
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{78fad561-2f55-4bcd-b896-786662704334}
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{bfec236d-e122-4102-864f-f5f19d897f5e}
[!] Folder Deleted : C:\Documents and Settings\LocalService\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
[!] Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
[!] Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen
[!] Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jcnkjmghmdigcjcajaemenhlleobnhih
[!] Folder Deleted : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nemfjadlboooiffmcelkafilagddogim
File Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\
[email protected]File Deleted : C:\END
File Deleted : C:\Documents and Settings\All Users\Desktop\Open It!.lnk
File Deleted : C:\Program Files\Mozilla Firefox\.autoreg
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\Conduit.xml
File Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\search.xml
File Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\user.js
***** [ Shortcuts ] *****
***** [ Registry ] *****
[x] Not Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [
[email protected]]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Key Deleted : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKCU\Software\Google\Chrome\Extensions\jcnkjmghmdigcjcajaemenhlleobnhih
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcnkjmghmdigcjcajaemenhlleobnhih
Key Deleted : HKCU\Software\Google\Chrome\Extensions\nemfjadlboooiffmcelkafilagddogim
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\nemfjadlboooiffmcelkafilagddogim
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\VWPT
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Key Deleted : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
[x] Not Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3289663
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3295465
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3298566
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3309657
[x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_jcnkjmghmdigcjcajaemenhlleobnhih]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_fdkednngfjmpnljkolbapdednncafhen]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0E2C3126-DDED-4A58-800E-9AEDE84EA31E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A7327C09-B521-4EDB-8509-7D2660C9EC98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{73D463FE-D8AE-431D-A0B0-8755A38F90EE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6CE83F03-4DFD-4070-A0A7-C46C82E20971}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BFEC236D-E122-4102-864F-F5F19D897F5E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8D97A421-A945-4078-AEE6-A1DAC74F68F8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3CACF6E1-2F85-462F-892F-D9E30E3B7DB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E060D9D9-E979-4C2F-A840-BE5150F84AC5}
[x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BFEC236D-E122-4102-864F-F5F19D897F5E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7736C7FA-512D-11E2-B871-DEC36088709B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7327C09-B521-4EDB-8509-7D2660C9EC98}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F8AD5AA5-D966-4667-9DAF-2561D68B2012}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6CE83F03-4DFD-4070-A0A7-C46C82E20971}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BFEC236D-E122-4102-864F-F5F19D897F5E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CACF6E1-2F85-462F-892F-D9E30E3B7DB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B78F92C8-DEB3-11E2-9A0A-FB64281D6ADE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6CE83F03-4DFD-4070-A0A7-C46C82E20971}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3CACF6E1-2F85-462F-892F-D9E30E3B7DB9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F2A4E73D-3DB8-4FE4-9332-B5E797F30E24}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{829274DF-B94D-44CF-A3E6-79072531F07E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCF32F16-1013-4E9F-813D-434F2A5BFEFE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB287CEB-71F3-4357-A834-C5CCC4FEF658}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
[x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{BFEC236D-E122-4102-864F-F5F19D897F5E}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BFEC236D-E122-4102-864F-F5F19D897F5E}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{07CBF788-1359-421B-A4E3-5A8D041B90A3}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BFEC236D-E122-4102-864F-F5F19D897F5E}]
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\Default Tab
Key Deleted : HKCU\Software\DefaultTab
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Viewpoint
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\InternetHelper3.1
Key Deleted : HKCU\Software\KeyBar_2.2
Key Deleted : HKCU\Software\AppDataLow\Software\DefaultTab
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\Software\DefaultTab
Key Deleted : HKLM\Software\Fast Free Converter
Key Deleted : HKLM\Software\MetaStream
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\Tarma Installer
Key Deleted : HKLM\Software\Viewpoint
Key Deleted : HKLM\Software\InternetHelper3.1
Key Deleted : HKLM\Software\KeyBar_2.2
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fast Free Converter
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OpenIt Open It!
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Viewpoint Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InternetHelper3.1 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KeyBar_2.2 Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab Chrome
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Viewpoint Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\InternetHelper3.1 Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\KeyBar_2.2 Toolbar
***** [ Browsers ] *****
-\\ Internet Explorer v7.0.6000.21352
-\\ Mozilla Firefox v7.0.1 (en-US)
[ File : C:\Documents and Settings\Michael Raven\Application Data\Mozilla\Firefox\Profiles\9fndwsjv.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.defaultenginename", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("browser.search.selectedEngine", "Ask.com");
Line Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "");
Line Deleted : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000031&locale=en_US&apn_uid=8B20FABA-1E2E-4006-8248-342A100D2F13&apn_ptnrs=TV&apn_sauid=E3F7848A-BBA1-4C34-9BF8[...]
[ File : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\prefs.js ]
Line Deleted : user_pref("CT3289663.1000082.isPlayDisplay", "true");
Line Deleted : user_pref("CT3289663.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
Line Deleted : user_pref("CT3289663.1000234.TWC_TMP_city", "HIGHLANDS RANCH");
Line Deleted : user_pref("CT3289663.1000234.TWC_TMP_country", "US");
Line Deleted : user_pref("CT3289663.1000234.TWC_country", "UNITED STATES");
Line Deleted : user_pref("CT3289663.1000234.TWC_locId", "USCO0426");
Line Deleted : user_pref("CT3289663.1000234.TWC_location", "Highlands Ranch, CO");
Line Deleted : user_pref("CT3289663.1000234.TWC_region", "US");
Line Deleted : user_pref("CT3289663.1000234.TWC_temp_dis", "f");
Line Deleted : user_pref("CT3289663.1000234.TWC_wind_dis", "mph");
Line Deleted : user_pref("CT3289663.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3289663.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3289663.FF19Solved", "true");
Line Deleted : user_pref("CT3289663.FirstTime", "true");
Line Deleted : user_pref("CT3289663.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3289663.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289663&SearchSource=2&CUI=UN61118443222423232&UM=2&q=");
Line Deleted : user_pref("CT3289663.UserID", "UN61118443222423232");
Line Deleted : user_pref("CT3289663.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3289663.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3289663.countryCode", "US");
Line Deleted : user_pref("CT3289663.defaultSearch", "true");
Line Deleted : user_pref("CT3289663.embeddedsData", "[{\"appId\":\"130067724014616498\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT3289663.enableAlerts", "true");
Line Deleted : user_pref("CT3289663.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3289663.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3289663.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3289663.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3289663.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3289663.fullUserID", "UN61118443222423232.IN.20130902181930");
Line Deleted : user_pref("CT3289663.installDate", "02/09/2013 18:19:38");
Line Deleted : user_pref("CT3289663.installId", "stub.exe");
Line Deleted : user_pref("CT3289663.installSessionId", "{22966E3E-4AAE-4BBA-996B-2FF7785E116F}");
Line Deleted : user_pref("CT3289663.installSp", "TRUE");
Line Deleted : user_pref("CT3289663.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3289663.installUsageEarly", "2013-09-07T05:07:45.5742943+03:00");
Line Deleted : user_pref("CT3289663.installerVersion", "1.6.1.2");
Line Deleted : user_pref("CT3289663.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3289663.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3289663.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3289663.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3289663.keyword", "true");
Line Deleted : user_pref("CT3289663.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3289663&octid=CT3289663&SearchSource=15&CUI=UN61118443222423232&SSPV=&Lay=1&UM=2\"}");
Line Deleted : user_pref("CT3289663.lastVersion", "10.20.0.513");
Line Deleted : user_pref("CT3289663.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Deleted : user_pref("CT3289663.openThankYouPage", "false");
Line Deleted : user_pref("CT3289663.openUninstallPage", "true");
Line Deleted : user_pref("CT3289663.originalHomepage", "about:home");
Line Deleted : user_pref("CT3289663.originalSearchAddressUrl", "");
Line Deleted : user_pref("CT3289663.originalSearchEngine", "");
Line Deleted : user_pref("CT3289663.originalSearchEngineName", "");
Line Deleted : user_pref("CT3289663.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3289663.search.searchAppId", "130067724014616498");
Line Deleted : user_pref("CT3289663.search.searchCount", "1");
Line Deleted : user_pref("CT3289663.searchFromAddressBarEnabledByUser", "true");
Line Deleted : user_pref("CT3289663.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3289663.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3289663.searchRevert", "false");
Line Deleted : user_pref("CT3289663.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3289663.searchUserMode", "2");
Line Deleted : user_pref("CT3289663.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3289663\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://InternetHelper31.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"InternetHelper3.1 \"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3289663.serviceLayer_services_Configuration_lastUpdate", "1378519675694");
Line Deleted : user_pref("CT3289663.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1378519683080");
Line Deleted : user_pref("CT3289663.serviceLayer_services_appsMetadata_lastUpdate", "1378519682951");
Line Deleted : user_pref("CT3289663.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1378519681015");
Line Deleted : user_pref("CT3289663.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1378519676655");
Line Deleted : user_pref("CT3289663.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1378519682900");
Line Deleted : user_pref("CT3289663.serviceLayer_services_searchAPI_lastUpdate", "1378519676716");
Line Deleted : user_pref("CT3289663.serviceLayer_services_serviceMap_lastUpdate", "1378519674865");
Line Deleted : user_pref("CT3289663.serviceLayer_services_toolbarContextMenu_lastUpdate", "1378519680901");
Line Deleted : user_pref("CT3289663.serviceLayer_services_toolbarSettings_lastUpdate", "1378519676046");
Line Deleted : user_pref("CT3289663.serviceLayer_services_translation_lastUpdate", "1378519682982");
Line Deleted : user_pref("CT3289663.settingsINI", true);
Line Deleted : user_pref("CT3289663.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3289663.showToolbarPermission", "false");
Line Deleted : user_pref("CT3289663.smartbar.CTID", "CT3289663");
Line Deleted : user_pref("CT3289663.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3289663.smartbar.homepage", "true");
Line Deleted : user_pref("CT3289663.smartbar.isHidden", false);
Line Deleted : user_pref("CT3289663.smartbar.toolbarName", "InternetHelper3.1 ");
Line Deleted : user_pref("CT3289663.startPage", "true");
Line Deleted : user_pref("CT3289663.toolbarBornServerTime", "7-9-2013");
Line Deleted : user_pref("CT3289663.toolbarCurrentServerTime", "7-9-2013");
Line Deleted : user_pref("CT3289663.toolbarLoginClientTime", "Sun Sep 08 2013 04:31:09 GMT-0600 (Mountain Daylight Time)");
Line Deleted : user_pref("CT3289663.versionFromInstaller", "10.19.2.5");
Line Deleted : user_pref("CT3289663.xpeMode", "0");
Line Deleted : user_pref("CT3289663_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248447934,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3295465.1000082.isPlayDisplay", "true");
Line Deleted : user_pref("CT3295465.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock - Rock\",\"url\":\"hxxp://www.feedlive.net/california.asx\"}");
Line Deleted : user_pref("CT3295465.1000234.TWC_TMP_city", "HIGHLANDS RANCH");
Line Deleted : user_pref("CT3295465.1000234.TWC_TMP_country", "US");
Line Deleted : user_pref("CT3295465.1000234.TWC_country", "UNITED STATES");
Line Deleted : user_pref("CT3295465.1000234.TWC_locId", "USCO0426");
Line Deleted : user_pref("CT3295465.1000234.TWC_location", "Highlands Ranch, CO");
Line Deleted : user_pref("CT3295465.1000234.TWC_region", "US");
Line Deleted : user_pref("CT3295465.1000234.TWC_temp_dis", "f");
Line Deleted : user_pref("CT3295465.1000234.TWC_wind_dis", "mph");
Line Deleted : user_pref("CT3295465.1000234.weatherData", "{\"icon\":\"26.png\",\"temperature\":\"63°F\",\"temperatureClear\":\"63°F\",\"highTemperature\":\"63°F\",\"lowTemperature\":\"58°F\",\"feelsLike\":\"63°F\",[...]
Line Deleted : user_pref("CT3295465.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3295465.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3295465.FirstTime", "true");
Line Deleted : user_pref("CT3295465.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3295465.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3295465&ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Deleted : user_pref("CT3295465.UserID", "UN36086918243058231");
Line Deleted : user_pref("CT3295465.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3295465.browser.search.defaultthis.engineName", true);
Line Deleted : user_pref("CT3295465.countryCode", "US");
Line Deleted : user_pref("CT3295465.defaultSearch", "true");
Line Deleted : user_pref("CT3295465.embeddedsData", "[{\"appId\":\"130093305333696280\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
Line Deleted : user_pref("CT3295465.enableAlerts", "true");
Line Deleted : user_pref("CT3295465.enableFix404ByUser", "TRUE");
Line Deleted : user_pref("CT3295465.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3295465.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3295465.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3295465.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3295465.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3295465.fixUrls", true);
Line Deleted : user_pref("CT3295465.fullUserID", "UN36086918243058231.IN.20130707170421");
Line Deleted : user_pref("CT3295465.installId", "stub.exe");
Line Deleted : user_pref("CT3295465.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3295465.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3295465.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3295465.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3295465.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT3295465.keyword", true);
Line Deleted : user_pref("CT3295465.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3295465&octid=CT3295465&SearchSource=15&CUI=UN36086918243058231&SSPV=&Lay=1&UM=2\"}");
Line Deleted : user_pref("CT3295465.lastVersion", "10.20.0.513");
Line Deleted : user_pref("CT3295465.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3295465.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT3295465.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Deleted : user_pref("CT3295465.openThankYouPage", "false");
Line Deleted : user_pref("CT3295465.openUninstallPage", "true");
Line Deleted : user_pref("CT3295465.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3289663&octid=CT3289663&SearchSource=61&CUI=UN61118443222423232&UM=2&UP=SP23774ED5-11FA-4E6B-B62D-0FEF74CC5332");
Line Deleted : user_pref("CT3295465.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289663&SearchSource=2&CUI=UN61118443222423232&UM=2&q=");
Line Deleted : user_pref("CT3295465.originalSearchEngine", "InternetHelper3.1 Customized Web Search");
Line Deleted : user_pref("CT3295465.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3295465.search.searchAppId", "130093305333696280");
Line Deleted : user_pref("CT3295465.search.searchCount", "0");
Line Deleted : user_pref("CT3295465.searchFromAddressBarEnabledByUser", "true");
Line Deleted : user_pref("CT3295465.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3295465.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3295465.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3295465.searchUserMode", "2");
Line Deleted : user_pref("CT3295465.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3295465\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BrowserPlus1.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BrowserPlus1 \"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT3295465.serviceLayer_services_Configuration_lastUpdate", "1378519675608");
Line Deleted : user_pref("CT3295465.serviceLayer_services_searchAPI_lastUpdate", "1378519688630");
Line Deleted : user_pref("CT3295465.serviceLayer_services_serviceMap_lastUpdate", "1378519674289");
Line Deleted : user_pref("CT3295465.serviceLayer_services_setupAPI_lastUpdate", "1378519677002");
Line Deleted : user_pref("CT3295465.serviceLayer_services_toolbarSettings_lastUpdate", "1378519688916");
Line Deleted : user_pref("CT3295465.settingsINI", true);
Line Deleted : user_pref("CT3295465.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3295465.showToolbarPermission", "false");
Line Deleted : user_pref("CT3295465.smartbar.CTID", "CT3295465");
Line Deleted : user_pref("CT3295465.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3295465.smartbar.homepage", true);
Line Deleted : user_pref("CT3295465.smartbar.toolbarName", "BrowserPlus1 ");
Line Deleted : user_pref("CT3295465.startPage", "true");
Line Deleted : user_pref("CT3295465.toolbarBornServerTime", "7-9-2013");
Line Deleted : user_pref("CT3295465.toolbarCurrentServerTime", "7-9-2013");
Line Deleted : user_pref("CT3295465.toolbarLoginClientTime", "Sun Sep 08 2013 04:31:24 GMT-0600 (Mountain Daylight Time)");
Line Deleted : user_pref("CT3295465_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248449073,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3298566.FF19Solved", "true");
Line Deleted : user_pref("CT3298566.FirstTime", "true");
Line Deleted : user_pref("CT3298566.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3298566.UserID", "UN28724037872055419");
Line Deleted : user_pref("CT3298566.defaultSearch", "true");
Line Deleted : user_pref("CT3298566.enableAlerts", "true");
Line Deleted : user_pref("CT3298566.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3298566.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3298566.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3298566.fullUserID", "UN28724037872055419.IN.20130911150834");
Line Deleted : user_pref("CT3298566.installDate", "11/09/2013 15:08:56");
Line Deleted : user_pref("CT3298566.installId", "cid111");
Line Deleted : user_pref("CT3298566.installSessionId", "{E21D1DE2-E864-4F02-B04E-701C370F5DBF}");
Line Deleted : user_pref("CT3298566.installSp", "TRUE");
Line Deleted : user_pref("CT3298566.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3298566.installerVersion", "1.7.0.9");
Line Deleted : user_pref("CT3298566.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3298566.lastVersion", "10.20.0.513");
Line Deleted : user_pref("CT3298566.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3298566.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Deleted : user_pref("CT3298566.openThankYouPage", "false");
Line Deleted : user_pref("CT3298566.openUninstallPage", "true");
Line Deleted : user_pref("CT3298566.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3309657&octid=CT3309657&SearchSource=61&CUI=UN23493783171330916&UM=2&UP=SP23774ED5-11FA-4E6B-B62D-0FEF74CC5332");
Line Deleted : user_pref("CT3298566.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3298566.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3298566.searchRevert", "false");
Line Deleted : user_pref("CT3298566.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3298566.searchUserMode", "2");
Line Deleted : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3298566\"}");
Line Deleted : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://MixiDJV30.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"MixiDJ V30 \"}");
Line Deleted : user_pref("CT3298566.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3298566.serviceLayer_services_serviceMap_lastUpdate", "1378938894660");
Line Deleted : user_pref("CT3298566.settingsINI", true);
Line Deleted : user_pref("CT3298566.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3298566.smartbar.CTID", "CT3298566");
Line Deleted : user_pref("CT3298566.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3298566.smartbar.homepage", "true");
Line Deleted : user_pref("CT3298566.smartbar.toolbarName", "MixiDJ V30 ");
Line Deleted : user_pref("CT3298566.startPage", "true");
Line Deleted : user_pref("CT3298566.versionFromInstaller", "10.20.0.13");
Line Deleted : user_pref("CT3298566.xpeMode", "0");
Line Deleted : user_pref("CT3298566_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248446947,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CT3309657.FF19Solved", "true");
Line Deleted : user_pref("CT3309657.FirstTime", "true");
Line Deleted : user_pref("CT3309657.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3309657.UserID", "UN23493783171330916");
Line Deleted : user_pref("CT3309657.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3309657.defaultSearch", "true");
Line Deleted : user_pref("CT3309657.enableAlerts", "true");
Line Deleted : user_pref("CT3309657.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3309657.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3309657.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3309657.fullUserID", "UN23493783171330916.IN.20130907003954");
Line Deleted : user_pref("CT3309657.installId", "stub.exe");
Line Deleted : user_pref("CT3309657.installSessionId", "{4357EBAB-5FCF-4BFB-B1BE-2BBDD2DBECBA}");
Line Deleted : user_pref("CT3309657.installSp", "TRUE");
Line Deleted : user_pref("CT3309657.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3309657.installerVersion", "1.6.1.1");
Line Deleted : user_pref("CT3309657.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3309657.keyword", "true");
Line Deleted : user_pref("CT3309657.lastVersion", "10.20.0.513");
Line Deleted : user_pref("CT3309657.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Line Deleted : user_pref("CT3309657.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwindows.microsoft.com%2Fen-us%2Fwindows%2Fmicrosoft-security-essentials-help%23microsoft-security-essentials-help%3D[...]
Line Deleted : user_pref("CT3309657.openThankYouPage", "false");
Line Deleted : user_pref("CT3309657.openUninstallPage", "true");
Line Deleted : user_pref("CT3309657.originalHomepage", "hxxp://search.conduit.com/?octid=CT3295465&ctid=CT3295465&CUI=UN36086918243058231&UM=2&SearchSource=13&UP=SP23774ED5-11FA-4E6B-B62D-0FEF74CC5332");
Line Deleted : user_pref("CT3309657.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3295465&ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Deleted : user_pref("CT3309657.originalSearchEngine", "BrowserPlus1 Customized Web Search");
Line Deleted : user_pref("CT3309657.originalSearchEngineName", "InternetHelper3.1 Customized Web Search");
Line Deleted : user_pref("CT3309657.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3309657.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT3309657.searchRevert", "false");
Line Deleted : user_pref("CT3309657.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3309657\"}");
Line Deleted : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://KeyBar22.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"KeyBar 2.2 \"}");
Line Deleted : user_pref("CT3309657.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT3309657.serviceLayer_services_serviceMap_lastUpdate", "1378938894605");
Line Deleted : user_pref("CT3309657.settingsINI", true);
Line Deleted : user_pref("CT3309657.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3309657.smartbar.CTID", "CT3309657");
Line Deleted : user_pref("CT3309657.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3309657.smartbar.homepage", "true");
Line Deleted : user_pref("CT3309657.smartbar.isHidden", false);
Line Deleted : user_pref("CT3309657.smartbar.toolbarName", "KeyBar 2.2 ");
Line Deleted : user_pref("CT3309657.startPage", "true");
Line Deleted : user_pref("CT3309657.versionFromInstaller", "10.19.2.5");
Line Deleted : user_pref("CT3309657.xpeMode", "0");
Line Deleted : user_pref("CT3309657_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1379248445769,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?octid=CT3295465&ctid=CT3295465&CUI=UN36086918243058231&UM=2&SearchSource=13");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3295465&ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3295465");
Line Deleted : user_pref("browser.search.defaultenginename", "BrowserPlus1 Customized Web Search");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "KeyBar 2.2 Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3309657&CUI=UN23493783171330916&UM=2&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.selectedEngine", "KeyBar 2.2 Customized Web Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?octid=CT3295465&ctid=CT3295465&CUI=UN36086918243058231&UM=2&SearchSource=13");
Line Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3295465&SearchSource=2&CUI=UN36086918243058231&UM=2&q=");
Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3295465");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289663&CUI=UN61118443222423232&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3289663&octid=CT3289663&SearchSource[...]
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289663&SearchSource=2&CUI=UN61118443222423232&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?oct[...]
Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3295465");
Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3295465");
Line Deleted : user_pref("smartbar.machineId", "NMKESLFLPPYPN5QGDTVWP8RS2HV7JOFREBV7PAAWBSP85NUXPVZ5ST7ZALYNA2XQJVA0BVBPBHHT7VRAZ50BUQ");
Line Deleted : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3289663&CUI=UN61118443222423232&UM=2&SearchSource=13");
-\\ Google Chrome v29.0.1547.66
[ File : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [45789 octets] - [15/09/2013 07:36:37]
AdwCleaner[S0].txt - [45873 octets] - [15/09/2013 07:50:12]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [45934 octets] ##########
Log 4 AdwCleaner
# AdwCleaner v3.004 - Report created 15/09/2013 at 08:48:09
# Updated 15/09/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Mary's Documents - MRAVEN1
# Running from : C:\Documents and Settings\Mary's Documents\My Documents\Downloads\AdwCleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Documents and Settings\All Users\Application Data\ParetoLogic
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\ParetoLogic
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Smartbar
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3289663
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3298566
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3295465
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\CT3309657
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{07cbf788-1359-421b-a4e3-5a8d041b90a3}
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{78fad561-2f55-4bcd-b896-786662704334}
Folder Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\Extensions\{bfec236d-e122-4102-864f-f5f19d897f5e}
[x] Not Deleted : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\searchplugins\Askcom.xml
***** [ Shortcuts ] *****
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [
[email protected]]
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_jcnkjmghmdigcjcajaemenhlleobnhih]
***** [ Browsers ] *****
-\\ Internet Explorer v7.0.6000.21352
-\\ Mozilla Firefox v7.0.1 (en-US)
[ File : C:\Documents and Settings\Michael Raven\Application Data\Mozilla\Firefox\Profiles\9fndwsjv.default\prefs.js ]
[ File : C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\prefs.js ]
-\\ Google Chrome v29.0.1547.66
[ File : C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [45789 octets] - [15/09/2013 07:36:37]
AdwCleaner[R1].txt - [3367 octets] - [15/09/2013 08:40:49]
AdwCleaner[S0].txt - [46015 octets] - [15/09/2013 07:50:12]
AdwCleaner[S1].txt - [3167 octets] - [15/09/2013 08:48:09]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3227 octets] ##########
Log JWT
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.1 (09.15.2013:1)
OS: Microsoft Windows XP x86
Ran by Mary's Documents on Sun 09/15/2013 at 9:20:20.12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\browserconnection.dll
~~~ Files
~~~ Folders
Failed to delete: [Folder] "C:\Program Files\web layers"
~~~ FireFox
Successfully deleted the following from C:\Documents and Settings\Mary's Documents\Application Data\mozilla\firefox\profiles\bpaxhf9n.default\prefs.js
user_pref("extensions.defaulttab.installdate", 1378519638);
Emptied folder: C:\Documents and Settings\Mary's Documents\Application Data\mozilla\firefox\profiles\bpaxhf9n.default\minidumps [11 files]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 09/15/2013 at 9:24:43.06
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log 1 OTL
OTL logfile created on: 9/15/2013 9:30:27 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Mary's Documents\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.94 Gb Total Physical Memory | 2.52 Gb Available Physical Memory | 85.72% Memory free
4.19 Gb Paging File | 3.95 Gb Available in Paging File | 94.28% Paging File free
Paging file location(s): c:\pagefile.sys 1440 2880 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 229.68 Gb Total Space | 96.87 Gb Free Space | 42.18% Space Free | Partition Type: NTFS
Computer Name: MRAVEN1 | User Name: Mary's Documents | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2013/09/11 18:52:20 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Mary's Documents\My Documents\Downloads\OTL (1).exe
PRC - [2013/08/31 01:41:04 | 000,206,624 | ---- | M] (Web Layers) -- C:\Program Files\Web Layers\updateWebLayers.exe
PRC - [2013/07/18 10:25:07 | 000,182,184 | ---- | M] (Oracle Corporation) -- C:\Program Files\Java\jre7\bin\jqs.exe
PRC - [2013/06/20 18:05:14 | 000,022,208 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013/06/20 17:25:44 | 000,995,176 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2008/04/14 05:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006/12/22 08:31:50 | 000,108,712 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
PRC - [2006/08/15 02:38:14 | 000,282,624 | ---- | M] (SigmaTel, Inc.) -- C:\WINDOWS\stsystra.exe
========== Modules (No Company Name) ========== MOD - [2013/08/14 03:18:55 | 000,212,992 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\15fd2d2f4e709154b44187a6915db244\System.ServiceProcess.ni.dll
MOD - [2013/08/14 03:18:29 | 000,141,312 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\cab8d2f8933390bab32c35c5c6a479bd\System.Configuration.Install.ni.dll
MOD - [2013/08/14 03:15:06 | 000,978,944 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\14d1a28674a9f78c5759e7dcf74a13fd\System.Configuration.ni.dll
MOD - [2013/08/14 03:11:59 | 005,462,016 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\f93600ac836b9140e1df13bb0f6bfccf\System.Xml.ni.dll
MOD - [2013/08/14 03:07:06 | 007,977,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\10df39542df7d48462451fc39bce8418\System.ni.dll
MOD - [2013/07/17 17:24:48 | 011,497,984 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll
MOD - [2006/12/22 08:31:50 | 000,108,712 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
MOD - [2006/08/23 12:12:38 | 000,196,608 | ---- | M] () -- C:\WINDOWS\system32\nvapi.dll
MOD - [2002/07/04 10:38:00 | 000,053,248 | ---- | M] () -- C:\Program Files\ArcSoft\PhotoImpression 5\Share\PIHook.dll
========== Services (SafeList) ========== SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2013/09/11 18:20:56 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/08/31 01:41:04 | 000,206,624 | ---- | M] (Web Layers) [Auto | Running] -- C:\Program Files\Web Layers\updateWebLayers.exe -- (Update Web Layers)
SRV - [2013/07/18 10:25:07 | 000,182,184 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Program Files\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2013/06/20 18:05:14 | 000,022,208 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2010/01/25 11:02:20 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)
SRV - [2009/03/19 14:07:54 | 000,382,320 | ---- | M] (SupportSoft, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\supportsoft\bin\ssrc.exe -- (SupportSoft RemoteAssist)
SRV - [2006/12/22 08:31:50 | 000,108,712 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor5.0)
========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\wanatw4.sys -- (wanatw)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\BitDefender\BitDefender 2010\bdselfpr.sys -- (BDSelfPr)
DRV - [2007/01/23 11:12:07 | 000,009,856 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2006/08/15 02:38:14 | 001,171,464 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sthda.sys -- (STHDA)
DRV - [2006/08/14 06:29:44 | 000,044,544 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2006/07/31 21:44:00 | 000,580,992 | ---- | M] (Omnivision Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ov550i.sys -- (APL531)
DRV - [2006/06/18 21:37:34 | 000,036,864 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006/01/10 11:07:58 | 000,004,864 | ---- | M] (GTek Technologies Ltd.) [Kernel | On_Demand | Stopped] -- C:\Program Files\Dell Support\GTAction\triggers\DSproct.sys -- (DSproct)
DRV - [2005/09/08 05:20:00 | 000,094,332 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)
DRV - [2005/09/08 05:20:00 | 000,087,036 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)
DRV - [2005/09/08 05:20:00 | 000,086,524 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)
DRV - [2005/09/08 05:20:00 | 000,025,628 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS -- (DLABOIOM)
DRV - [2005/09/08 05:20:00 | 000,014,684 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)
DRV - [2005/09/08 05:20:00 | 000,006,364 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS -- (DLAPoolM)
DRV - [2005/09/08 05:20:00 | 000,002,496 | ---- | M] (Sonic Solutions) [File_System | Auto | Running] -- C:\WINDOWS\system32\DLA\DLADResN.SYS -- (DLADResN)
DRV - [2005/08/25 12:16:52 | 000,005,628 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS -- (DLACDBHM)
DRV - [2005/08/25 12:16:16 | 000,022,684 | ---- | M] (Sonic Solutions) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS -- (DLARTL_N)
DRV - [2004/06/09 08:29:56 | 000,006,977 | ---- | M] (Gteko Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\DDMI2.sys -- (SDDMI2)
DRV - [2003/11/17 14:59:20 | 000,212,224 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSFHWBS2.sys -- (HSFHWBS2)
DRV - [2003/11/17 14:58:02 | 000,680,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2003/11/17 14:56:26 | 001,042,432 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\HSF_DP.sys -- (HSF_DP)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1061209
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
http://www.google.com/ieIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.com/ieIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=1061209
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/...ms}&FORM=IE8SRCIE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.co...g}&sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://www.msn.com/?ocid=iehpIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 5A 11 D8 EB 0D B7 CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://www.bing.com/searchIE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" =
http://www.google.co...g}&sourceid=ie7IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons:
[email protected]:1.0.0
FF - prefs.js..extensions.enabledAddons:
[email protected]:2.1.34
FF - prefs.js..extensions.enabledAddons: {bfec236d-e122-4102-864f-f5f19d897f5e}:10.20.0.513
FF - prefs.js..extensions.enabledAddons: {1122b43d-30ee-403f-9bfa-3cc99b0caddd}:10.20.0.513
FF - prefs.js..extensions.enabledAddons: {07cbf788-1359-421b-a4e3-5a8d041b90a3}:10.20.0.513
FF - prefs.js..extensions.enabledAddons: {78fad561-2f55-4bcd-b896-786662704334}:10.20.0.513
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\
[email protected]: C:\Program Files\BitDefender\BitDefender 2010\bdaphffext\ [2013/07/16 17:24:13 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/07/17 14:56:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/05/15 18:59:19 | 000,000,000 | ---D | M]
[2009/06/09 15:44:47 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Extensions
[2013/09/15 08:48:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\extensions
[2013/07/07 17:07:45 | 000,000,000 | ---D | M] (Define Ext) -- C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\extensions\
[email protected][2013/08/31 01:41:04 | 000,015,156 | ---- | M] () (No name found) -- C:\Documents and Settings\Mary's Documents\Application Data\Mozilla\Firefox\Profiles\bpaxhf9n.default\extensions\
[email protected][2013/07/18 10:23:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/11/11 16:14:05 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013/07/07 17:07:39 | 000,000,000 | ---D | M] (Define Ext) -- C:\Program Files\Mozilla Firefox\extensions\
[email protected]File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MARY'S DOCUMENTS\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\BPAXHF9N.DEFAULT\EXTENSIONS\{07CBF788-1359-421B-A4E3-5A8D041B90A3}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MARY'S DOCUMENTS\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\BPAXHF9N.DEFAULT\EXTENSIONS\{1122B43D-30EE-403F-9BFA-3CC99B0CADDD}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MARY'S DOCUMENTS\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\BPAXHF9N.DEFAULT\EXTENSIONS\{78FAD561-2F55-4BCD-B896-786662704334}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MARY'S DOCUMENTS\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\BPAXHF9N.DEFAULT\EXTENSIONS\{BFEC236D-E122-4102-864F-F5F19D897F5E}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\MARY'S DOCUMENTS\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\BPAXHF9N.DEFAULT\EXTENSIONS\
[email protected][2013/07/17 16:09:20 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/10/09 14:27:49 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010/11/07 09:52:29 | 000,028,488 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\atgpcdec.dll
[2010/11/07 09:52:29 | 000,185,240 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\atgpcext.dll
[2010/11/07 09:53:26 | 000,099,224 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\ieatgpc.dll
[2010/11/07 09:52:26 | 000,061,848 | ---- | M] (WebEx Communications, Inc) -- C:\Program Files\mozilla firefox\plugins\npatgpc.dll
[2011/10/09 14:27:28 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
========== Chrome ========== CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
http://www.google.com/CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\PepperFlash\11.8.800.170\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll
CHR - plugin: npDefaultTabSearch plugin (Enabled) = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc\1.1.27_0\plugins/npDefaultTabSearch.dll
CHR - plugin: Conduit Chrome Plugin (Enabled) = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen\10.19.2.5_0\plugins/ConduitChromeApiPlugin.dll
CHR - plugin: Conduit Chrome Plugin (Enabled) = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen\10.19.2.5_0\search/plugins/npConduitNewTabPlugin.dll
CHR - plugin: Conduit Radio Plugin (Enabled) = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen\10.19.2.5_0\plugins/np-cwmp.dll
CHR - plugin: Conduit Chrome Approve TB Plugin (Enabled) = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen\10.19.2.5_0\plugins/ChromeApproveTBPlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: ActiveTouch General Plugin Container (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npatgpc.dll
CHR - plugin: getPlusPlus for Adobe 16260 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np_gp.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java Platform SE 7 U25 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.250.17 (Enabled) = C:\WINDOWS\system32\npDeployJava1.dll
CHR - plugin: MetaStream 3 Plugin (Enabled) = C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_1\
CHR - Extension: Google Search = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_1\
CHR - Extension: Web Layers = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ghdomkkcnldpmfcefiaaahchgoinofkb\1.0.0_0\
CHR - Extension: Chrome In-App Payments service = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Gmail = C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
O1 HOSTS File: ([2009/10/31 04:00:39 | 000,000,151 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 91.212.127.226 winguard2009.microsoft.com
O1 - Hosts: 91.212.127.226 winguard-2009.com
O1 - Hosts: 91.212.127.226 www.winguard-2009.com
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Fast Free Converter 4.1) - {C3E50543-BC36-4C80-8070-38A97E02DEB2} - C:\PROGRA~1\FASTFR~1\FASTFR~1\FASTFR~1.DLL File not found
O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {42435041-312D-5637-00A7-7A786E7484D7} - No CLSID value found.
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre7\bin\jusched.exe" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000 File not found
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O16 - DPF: {01010200-5E80-11D8-9E86-0007E96C65AE}
https://ra.qwest.com...ad/tgctlins.cab (SupportSoft Installer)
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED}
https://ra.qwest.com...oad/tgctlcm.cab (Reg Error: Key error.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
http://fpdownload.ma...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0}
http://www.costcopho...stcoActivia.cab (Snapfish Activia)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://www.update.mi...b?1374094942406 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.ma...r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
https://akamaicdn.we...ent/ieatgpc.cab (GpcContainer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 205.171.3.25
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F462F024-92FE-450D-8C53-0D6BBD15B578}: DhcpNameServer = 192.168.0.1 205.171.3.25
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop WallPaper: C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 13:04:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{0395f4f5-0f03-11dc-8f92-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{0395f4f5-0f03-11dc-8f92-00038a000015}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{0395f4f5-0f03-11dc-8f92-00038a000015}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{b6a92200-a485-11dd-8fde-00038a000015}\Shell\AutoRun\command - "" = E:\wd_windows_tools\WDSetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ========== [2013/09/15 09:14:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERUNT
[2013/09/15 07:36:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/09/15 07:12:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mary's Documents\AppData
[2013/09/11 20:58:37 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Mary's Documents\Recent
[2013/09/11 18:24:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome
[2013/09/08 08:53:01 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ieencode.dll
[2013/09/08 08:53:01 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieencode.dll
[2013/09/02 18:24:44 | 000,000,000 | ---D | C] -- C:\Program Files\Web Layers
[2013/09/02 17:23:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\Sun
[2011/06/15 18:44:01 | 107,761,096 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Mary's Documents\pluginsx86.exe
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[11 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2013/09/15 09:04:10 | 000,081,191 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013/09/15 09:01:34 | 000,000,384 | -H-- | M] () -- C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job
[2013/09/15 08:51:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013/09/15 08:51:10 | 3152,531,456 | -HS- | M] () -- C:\hiberfil.sys
[2013/09/15 07:20:30 | 000,000,414 | ---- | M] () -- C:\WINDOWS\tasks\At2.job
[2013/09/15 07:13:12 | 000,000,414 | ---- | M] () -- C:\WINDOWS\tasks\At1.job
[2013/09/15 06:09:52 | 000,001,831 | ---- | M] () -- C:\Documents and Settings\Mary's Documents\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/09/15 06:08:27 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/09/15 06:08:17 | 000,298,848 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/09/11 20:45:48 | 000,001,813 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2013/09/11 18:20:57 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/09/11 18:20:45 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/09/11 18:20:44 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/09/11 16:23:39 | 000,000,002 | ---- | M] () -- C:\WINDOWS\msoffice.ini
[2013/09/11 15:31:31 | 000,000,815 | ---- | M] () -- C:\Documents and Settings\Mary's Documents\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/09/07 00:57:24 | 000,001,759 | ---- | M] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2013/09/07 00:56:52 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[11 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ========== [2013/09/15 07:20:29 | 000,000,414 | ---- | C] () -- C:\WINDOWS\tasks\At2.job
[2013/09/15 07:13:11 | 000,000,414 | ---- | C] () -- C:\WINDOWS\tasks\At1.job
[2013/09/11 18:24:05 | 000,001,831 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013/09/11 18:24:05 | 000,001,813 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2013/09/11 16:23:39 | 000,000,002 | ---- | C] () -- C:\WINDOWS\msoffice.ini
[2013/09/08 09:33:34 | 000,000,815 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2013/09/08 09:33:34 | 000,000,803 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Start Menu\Programs\Internet Explorer.lnk
[2012/02/14 19:41:37 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2011/06/15 18:43:59 | 000,176,128 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\msiscan.exe
[2011/04/24 04:25:43 | 000,002,033 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\search_result.xml
[2011/04/07 21:29:00 | 000,528,451 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\bdinstall.bin
[2011/02/19 09:55:36 | 000,000,240 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~Zz5O2QmszzXzW4B
[2011/02/19 09:55:36 | 000,000,152 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\~Zz5O2QmszzXzW4Br
[2011/02/19 09:55:29 | 000,000,392 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Zz5O2QmszzXzW4B
[2011/02/19 09:51:50 | 000,000,336 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\08lGeIV2Y0nJ
[2010/12/27 17:39:23 | 000,001,759 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2010/09/29 20:59:46 | 000,000,074 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\evplay.prf
[2010/07/08 10:37:14 | 000,101,544 | ---- | C] () -- C:\Program Files\Common Files\LinkInstaller.exe
[2010/04/06 07:00:26 | 000,000,000 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\ex34
[2010/03/25 12:50:00 | 000,000,025 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\bdfvconp.ini
[2010/03/24 13:40:55 | 000,000,850 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application DataProductTweaks.xml
[2010/03/24 13:40:55 | 000,000,385 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Datauser_gensett.xml
[2010/03/02 22:05:18 | 000,000,376 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Dataprivacy.xml
[2009/06/07 22:25:20 | 000,002,119 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\waQ1P0bNat.gif
[2009/06/07 22:25:20 | 000,000,607 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\waQ1P0bNzn.gif
[2009/06/07 22:25:20 | 000,000,598 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\waQ1P0bNby.gif
[2007/05/07 23:09:29 | 000,004,096 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Application Data\dvd.bmk
[2007/05/07 23:01:28 | 000,000,139 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\fusioncache.dat
[2007/03/18 11:33:16 | 000,022,528 | ---- | C] () -- C:\Documents and Settings\Mary's Documents\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/02/12 20:07:43 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLec.DAT
========== ZeroAccess Check ========== [2004/08/10 13:09:48 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010/09/09 08:16:30 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 06:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/13 18:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== Alternate Data Streams ========== @Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
< End of report >
Extra Log OTL
OTL Extras logfile created on: 9/15/2013 9:30:27 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Mary's Documents\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.94 Gb Total Physical Memory | 2.52 Gb Available Physical Memory | 85.72% Memory free
4.19 Gb Paging File | 3.95 Gb Available in Paging File | 94.28% Paging File free
Paging file location(s): c:\pagefile.sys 1440 2880 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 229.68 Gb Total Space | 96.87 Gb Free Space | 42.18% Space Free | Partition Type: NTFS
Computer Name: MRAVEN1 | User Name: Mary's Documents | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (All) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = comfile] -- "%1" %*
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\WINDOWS\System32\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\WINDOWS\System32\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.inf [@ = inffile] -- C:\WINDOWS\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\WINDOWS\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
.js [@ = JSFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\WINDOWS\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\WINDOWS\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\WINDOWS\System32\WScript.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "C:\WINDOWS\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- winhlp32.exe %1 (Microsoft Corporation)
hlpfile [open] -- %SystemRoot%\System32\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\WINDOWS\system32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
InternetShortcut [print] -- rundll32.exe C:\WINDOWS\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
vbsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
wsffile [edit] -- %SystemRoot%\System32\Notepad.exe %1 (Microsoft Corporation)
wsffile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
wsffile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 (Microsoft Corporation)
wshfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
Unknown [openas] -- C:\Program Files\File Type Helper\FileTypeHelper.exe "%1"
Directory [ACDBrowse] -- "C:\Program Files\ACD Systems\ACDSee\6.0\ACDSee6.exe" "%1" (ACD Systems Ltd.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5985:TCP" = 5985:TCP:*:Disabled:Windows Remote Management
"80:TCP" = 80:TCP:*:Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)
========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL
"C:\Program Files\America Online 9.0\waol.exe" = C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.0 -- (Microsoft Corporation)
"C:\Program Files\Qwest\QuickConnect\QuickConnect.exe" = C:\Program Files\Qwest\QuickConnect\QuickConnect.exe:*:Enabled:QuickConnect -- (Qwest Communications International Inc.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL
"C:\Program Files\America Online 9.0\waol.exe" = C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL
"C:\WINDOWS\system32\fxsclnt.exe" = C:\WINDOWS\system32\fxsclnt.exe:*:Disabled:Microsoft Fax Console -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.0 -- (Microsoft Corporation)
"C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Enabled:Windows Explorer -- (Microsoft Corporation)
"C:\Program Files\Qwest\QuickConnect\QuickConnect.exe" = C:\Program Files\Qwest\QuickConnect\QuickConnect.exe:*:Enabled:QuickConnect -- (Qwest Communications International Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0677D6E4-6C60-43EE-8ABA-F08A363D0C4E}" = QuickConnect
"{075473F5-846A-448B-BCB3-104AA1760205}" = Roxio RecordNow Data
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{0F756CD9-4A1E-409B-B101-601DDC4C03AA}" = Qualxserve Service Agreement
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = Roxio DLA
"{178BAABD-0C95-4EB6-9E12-29A039EA27F6}" = Qwest eChat Support Tools
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Roxio MyDVD LE
"{25569723-DC5A-4467-A639-79535BF01B71}" = Adobe Help Center 2.1
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{33BB4982-DC52-4886-A03B-F4C5C80BEE89}" = Windows Media Player 10
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3B1394A6-5DD1-4325-8F14-C6D05D74B88E}" = Infinite Geometry
"{3DADB23F-94E6-4E4D-AFE8-15DE4395E8F3}" = Microsoft Security Client
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54}" = Dell CinePlayer
"{4998FF95-709A-430A-B104-92A009ABB848}" = QuickConnect
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56BAF3BB-2EE4-4832-B7D6-0E913306F83F}_is1" = DYouville College Directory version 1.0
"{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}" = Sonic Activation Module
"{5E68BB65-4059-4FE5-AAC4-0CD1D79BBDE2}" = EarthLink Setup Files
"{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}" = AOLIcon
"{65D81281-21C0-4B31-8D5C-9BF98F6A8DD5}" = Infinite Pre-Algebra
"{6B566EFE-DC1D-471F-93DD-84832663F140}" = OVT Scanner X86
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}" = Dell System Restore
"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9692FD03-6662-4E62-B08C-30DFF51651E1}" = Actiontec Gateway
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5F68DC8-0278-4AD8-B413-861509B5F25B}" = ArcSoft Panorama Maker 3
"{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}" = Adobe Photoshop Elements 5.0
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Roxio RecordNow Audio
"{ABEB838C-A1A7-4C5D-B7E1-8B4314600816}" = MSN Messenger 7.0
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Roxio RecordNow Copy
"{B702CCCE-3176-4DBF-B932-D1B8F402F330}" = Digital Content Portal
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C21D5524-A970-42FA-AC8A-59B8C7CDCA31}" = QuickTime
"{C252EB7B-7AE0-46DE-9BEE-DF681B885F13}" = Modem Diagnostic Tool
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEE2252C-4035-4B27-8EC6-0B085DD3A413}" = Dell Support 3.2.1
"{D07205E7-F6D3-4333-AFCC-782A07685B72}" = OverDrive Media Console
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{D433ABC3-0CD8-4BB0-B6A9-84501B4B47B7}" = ArcSoft PhotoImpression 5
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E60EF56C-C330-4575-8463-921E70D1458B}" = ACDSee 6.0 Standard Trial
"{E61C6437-B4C5-434A-8598-A56C95156E65}" = Infinite Algebra 1
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E6B87DC4-2B3D-4483-ADFF-E483BF718991}" = OpenOffice.org 3.1
"{EF086D4F-728E-4B41-BF99-99185FF782F5}" = CyberView CS - Memor-ease 1.2a (build 20090910)
"{F1878128-BF34-4B25-BE4B-28895A2CCCC8}" = Basic Math Skills 2003 TRL
"{FB64BF25-3593-4E4E-AA85-84AEF1D1475F}" = Broadcom Management Programs
"{FF3999BE-1A7B-4738-88AA-97BF14094A4A}" = PictureProject
"ActiveTouchMeetingClient" = Cisco WebEx Meetings
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 5" = Adobe Photoshop Elements 5.0
"Adobe Shockwave Player" = Adobe Shockwave Player
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200F14F1" = Conexant D850 56K V.9x DFVc Modem
"EPSON Printer and Utilities" = EPSON Printer Software
"EPSON Scanner" = EPSON Scan
"ExamView Player" = ExamView Player
"Files Opened" = Files Opened
"Google Chrome" = Google Chrome
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"Infinite Algebra 1 1.55.00" = Infinite Algebra 1 (Site License)
"Infinite Geometry 1.55.00" = Infinite Geometry (Site License)
"Infinite Pre-Algebra 1.53.00" = Infinite Pre-Algebra (Site License)
"InstallShield_{C21D5524-A970-42FA-AC8A-59B8C7CDCA31}" = QuickTime
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 7.0.1 (x86 en-US)" = Mozilla Firefox 7.0.1 (x86 en-US)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"OVT Scanner" = Uninstall OVT Scanner
"PictureProject In Touch Downloader" = PictureProject In Touch Downloader 1.0
"Silent Package Run-Time Sample" = EPSON CX 3800 Guide
"StreetPlugin" = Learn2 Player (Uninstall Only)
"Web Layers" = Web Layers 3.0.0
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Define Ext" = Define Ext
"DSite" = Update for Zip Opener
========== Last 20 Event Log Errors ========== [ Application Events ]
Error - 9/11/2013 7:54:35 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2013 10:35:59 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2013 10:38:29 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2013 10:38:33 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1001
Description = Fault bucket -472826385.
Error - 9/11/2013 10:38:34 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2013 11:09:26 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2013 11:09:29 PM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1001
Description = Fault bucket -472826385.
Error - 9/15/2013 8:19:14 AM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/15/2013 8:24:38 AM | Computer Name = MRAVEN1 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.6000.21352, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/15/2013 8:36:29 AM | Computer Name = MRAVEN1 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 2152759308, P2 unspecified, P3 scanfile,
P4 4.3.215.0, P5 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P6 unspecified, P7 unspecified, P8 NIL, P9 NIL, P10 NIL.
[ System Events ]
Error - 9/11/2013 7:04:19 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
Error - 9/11/2013 7:04:20 PM | Computer Name = MRAVEN1 | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126
< End of report >