also @ TechSpot: Building a Thin Mini-ITX PC: Small and Silent Performance

[A] C:\WINDOWS\assembly\GAC_64\Desktop.ini virus, please help

Discussion in 'Virus and Malware Removal' started by Premachu, Oct 17, 2012.

  1. Premachu Newcomer, in training

    Thanks, it worked. What do I do with the quarantine folder of roguekiller and FRST? Can it just be deleted?

    AdwCleaner log
    _______________________________
    # AdwCleaner v2.005 - Logfile created 10/23/2012 at 16:39:38
    # Updated 14/10/2012 by Xplode
    # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
    # User : Sergio - SERGE-PC
    # Boot Mode : Safe mode
    # Running from : C:\Users\Sergio\Desktop\adwcleaner.exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
    File Deleted : C:\Users\Sergio\AppData\Roaming\Mozilla\Firefox\Profiles\5z77mhhc.default\searchplugins\mywebsearch.xml
    Folder Deleted : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Deleted : C:\Users\Giovanni\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Giovanni\AppData\Local\Conduit
    Folder Deleted : C:\Users\Giovanni\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\y0sqdvyh.default\FCTB
    Folder Deleted : C:\Users\Serge\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Sergio\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\Sergio\AppData\Local\OpenCandy
    Folder Deleted : C:\Users\Sergio\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\Sergio\AppData\LocalLow\boost_interprocess
    Folder Deleted : C:\Users\Sergio\AppData\LocalLow\FunWebProducts
    Folder Deleted : C:\Users\Sergio\AppData\LocalLow\MyWebSearch
    Folder Deleted : C:\Users\Sergio\AppData\Roaming\Babylon
    Folder Deleted : C:\Users\Sergio\AppData\Roaming\BabylonToolbar

    ***** [Registry] *****

    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Deleted : HKCU\Software\AppDataLow\Software\Fun Web Products
    Key Deleted : HKCU\Software\AppDataLow\Software\FunWebProducts
    Key Deleted : HKCU\Software\AppDataLow\Software\MyWebSearch
    Key Deleted : HKCU\Software\AppDataLow\Software\Toolbar
    Key Deleted : HKCU\Software\AppDataLow\Toolbar
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\BabylonToolbar
    Key Deleted : HKCU\Software\CToolbar
    Key Deleted : HKCU\Software\Headlight
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Crawler Search
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5F970FDE-702B-4EF9-920C-5F2848A5AF26}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    Key Deleted : HKLM\Software\AVG Secure Search
    Key Deleted : HKLM\Software\Babylon
    Key Deleted : HKLM\Software\BabylonToolbar
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\3192AA38321C641458DBDAF83979D193
    Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\tbr
    Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
    Key Deleted : HKLM\Software\CompeteInc
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\CToolbar
    Key Deleted : HKLM\SOFTWARE\FCSB000063123
    Key Deleted : HKLM\Software\Iminent
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASAPI32
    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_install_RASMANCS
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\Crawler
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{83AA2913-C123-4146-85BD-AD8F93971D39}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01C78433-6FDF-4E5A-A82D-B535C32E03DF}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{41349826-5C7F-4BF0-8279-5DAF1DE6E9AE}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{604EA016-1EDE-41E6-A23E-76CF8F2A4808}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8E9CF769-3D3B-40EB-9E2D-76E7A205E4D2}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B3BA5582-79A9-464D-A7FA-711C5888C6E9}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E9BBD270-4B87-4EE2-912F-6635674986C0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    Key Deleted : HKLM\SOFTWARE\Software
    Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16421

    Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={7EA4BF3F-6EAA-4C8F-9D41-94E7281F7CE0}&mid=b4438680197047d1b7ca41affcd54571-6ed2972a9320afa5d115548b7317ea45dc552151&lang=&ds=&pr=&d=&v=9.0.0.22&sap=nt --> hxxp://www.google.com

    -\\ Mozilla Firefox v16.0.1 (en-US)

    Profile name : default
    File : C:\Users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\ucns3ca7.default\prefs.js

    Deleted : user_pref("extensions.personas.current", "{\"id\":\"300372\",\"name\":\"Conduit 2\",\"headerURL\":\"[...]
    Deleted : user_pref("extensions.personas.lastselected0", "{\"id\":\"300372\",\"name\":\"Conduit 2\",\"headerUR[...]
    Deleted : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"300372\",\"name\":\"Conduit 2\",\"headerURL\":[...]

    Profile name : default
    File : C:\Users\Sergio\AppData\Roaming\Mozilla\Firefox\Profiles\5z77mhhc.default\prefs.js

    C:\Users\Sergio\AppData\Roaming\Mozilla\Firefox\Profiles\5z77mhhc.default\user.js ... Deleted !

    Deleted : user_pref("FlashVD.cache.video", "hxxp://vids.myspace.com\nhxxp://www.yourfilehost.com\nhxxp://www.m[...]
    Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\9.0.0.21");
    Deleted : user_pref("browser.search.defaultengine", "Ask.com");
    Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
    Deleted : user_pref("browser.search.defaultthis.engineName", "PageRage Customized Web Search");
    Deleted : user_pref("browser.search.order.1", "Crawler Search");
    Deleted : user_pref("extensions.BabylonToolbar.admin", "false");
    Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
    Deleted : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
    Deleted : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
    Deleted : user_pref("extensions.BabylonToolbar.babExt", "");
    Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en");
    Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false);
    Deleted : user_pref("extensions.BabylonToolbar.hmpg", false);
    Deleted : user_pref("extensions.BabylonToolbar.id", "a0a2395400000000000090e6ba31ac82");
    Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15581");
    Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
    Deleted : user_pref("extensions.BabylonToolbar.isdcmntcmplt", true);
    Deleted : user_pref("extensions.BabylonToolbar.newTab", false);
    Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
    Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
    Deleted : user_pref("extensions.BabylonToolbar.sg", "none");
    Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none");
    Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
    Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
    Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
    Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
    Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
    Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
    Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=111020&tt=280812_2003_3512_2");
    Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "a0a2395400000000000090e6ba31ac82");
    Deleted : user_pref("extensions.BabylonToolbar_i.id", "a0a2395400000000000090e6ba31ac82");
    Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15534");
    Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
    Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false);
    Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
    Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
    Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
    Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
    Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
    Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.128:52:06");
    Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
    Deleted : user_pref("extensions.ffxtlbr@babylon.com.install-event-fired", true);
    Deleted : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea[...]
    Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
    Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "chrome://browser-region/locale/region.properties");
    Deleted : user_pref("extensions.personas.current", "{\"id\":\"300372\",\"name\":\"Conduit 2\",\"headerURL\":\"[...]
    Deleted : user_pref("extensions.personas.lastselected0", "{\"id\":\"300372\",\"name\":\"Conduit 2\",\"headerUR[...]
    Deleted : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"300372\",\"name\":\"Conduit 2\",\"headerURL\":[...]
    Deleted : user_pref("tweaktube.pref.cacheInfo", "({'hxxp://wedata.net/databases/AutoPagerize/items.json':{url:[...]

    Profile name : default
    File : C:\Users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\y0sqdvyh.default\prefs.js

    C:\Users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\y0sqdvyh.default\user.js ... Deleted !

    Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\9.0.0.21");
    Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
    Deleted : user_pref("extensions.crossriderapp498.498.InstallationThankYouPage", true);
    Deleted : user_pref("extensions.crossriderapp498.498.InstallationTime", 1323378875);
    Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.searchUserConifrmation", false);
    Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setHomepage", false);
    Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setNewTab", false);
    Deleted : user_pref("extensions.crossriderapp498.498.InstallationUserSettings.setSearch", false);
    Deleted : user_pref("extensions.crossriderapp498.498.active", true);
    Deleted : user_pref("extensions.crossriderapp498.498.addressbar", "");
    Deleted : user_pref("extensions.crossriderapp498.498.affid", "0");
    Deleted : user_pref("extensions.crossriderapp498.498.backgroundjs", "\n/**************************************[...]
    Deleted : user_pref("extensions.crossriderapp498.498.backgroundver", 4);
    Deleted : user_pref("extensions.crossriderapp498.498.certdomaininstaller", "");
    Deleted : user_pref("extensions.crossriderapp498.498.changeprevious", false);
    Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallationTime.value", "1323378875");
    Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:0[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie.InstallerParams.value", "%7B%22sub_id%22%3A%22defa[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_geo.expiration", "Thu Dec 15 2011 16:43:44 GM[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_geo.value", "%7B%22geoplugin_city%22%3A%22Cam[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 20[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_hotfix20111102645.value", "%221%22");
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 0[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_parent_zoneid.value", "%2211697%22");
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00[...]
    Deleted : user_pref("extensions.crossriderapp498.498.cookie._GPL_zoneid.value", "%2213563%22");
    Deleted : user_pref("extensions.crossriderapp498.498.description", "RewardsArcade is a platform that allows us[...]
    Deleted : user_pref("extensions.crossriderapp498.498.domain", "www.rewardsarcade.com");
    Deleted : user_pref("extensions.crossriderapp498.498.emailsig", "");
    Deleted : user_pref("extensions.crossriderapp498.498.enablesearch", false);
    Deleted : user_pref("extensions.crossriderapp498.498.exposesites", "");
    Deleted : user_pref("extensions.crossriderapp498.498.fbremoteurl", "");
    Deleted : user_pref("extensions.crossriderapp498.498.group", 0);
    Deleted : user_pref("extensions.crossriderapp498.498.homepage", "");
    Deleted : user_pref("extensions.crossriderapp498.498.iframe", false);
    Deleted : user_pref("extensions.crossriderapp498.498.js", "\n\nvar _GPL_PID = 18;\n\n(function($) { \n\n $.[...]
    Deleted : user_pref("extensions.crossriderapp498.498.manifesturl", "");
    Deleted : user_pref("extensions.crossriderapp498.498.name", "RewardsArcade");
    Deleted : user_pref("extensions.crossriderapp498.498.newtab", "");
    Deleted : user_pref("extensions.crossriderapp498.498.opensearch", "");
    Deleted : user_pref("extensions.crossriderapp498.498.premium", true);
    Deleted : user_pref("extensions.crossriderapp498.498.publisher", "215 Apps");
    Deleted : user_pref("extensions.crossriderapp498.498.searchstatus", 0);
    Deleted : user_pref("extensions.crossriderapp498.498.setnewtab", false);
    Deleted : user_pref("extensions.crossriderapp498.498.settingsurl", "");
    Deleted : user_pref("extensions.crossriderapp498.498.thankyou", "hxxp://www.rewardsarcade.com/r.php?app_id=498[...]
    Deleted : user_pref("extensions.crossriderapp498.498.updateinterval", 360);
    Deleted : user_pref("extensions.crossriderapp498.498.ver", 61);
    Deleted : user_pref("extensions.crossriderapp498.apps", "498");
    Deleted : user_pref("extensions.crossriderapp498.bic", "1341fa1c1b277b896bf2ab88d212b510");
    Deleted : user_pref("extensions.crossriderapp498.cid", 498);
    Deleted : user_pref("extensions.crossriderapp498.firstrun", false);
    Deleted : user_pref("extensions.crossriderapp498.hadappinstalled", true);
    Deleted : user_pref("extensions.crossriderapp498.installationdate", 1323380622);
    Deleted : user_pref("extensions.crossriderapp498.jsver", 3);
    Deleted : user_pref("extensions.crossriderapp498.lastcheck", 22060755);
    Deleted : user_pref("extensions.crossriderapp498.lastcheckitem", 22060835);
    Deleted : user_pref("extensions.crossriderapp498.misc.lastBgWorkerTimer", "1323650138351");
    Deleted : user_pref("extensions.crossriderapp498.misc.lastDomWorkerTimer", "1323650138345");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.DNSCatch", false);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.FirstLaunchShown", true);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.LastDate", 19);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.customNewTab", false);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.CaptureType", 3);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.clickSendingStats.20121019.connection_e[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.clickSendingStats.20121019.invalid_cert[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.clickSendingStats.20121019.server_error[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.clickSendingStats.20121019.success", 0)[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.currentOffset", 4);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.dcaConfigInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.enableVoicebox", false);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.epochTimeInterval", "1440");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.eulaVersion", 20110301);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.externalJSInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.externalJSRshInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.externalJSSerpInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.externalJSShoppingcartInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastDcaConfigModification", "Tue, 05 Ju[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastDcaConfigTime", "1350684851049");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastDcaConfigUrl", "hxxps://dcs-config.[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastDcaStatus", 1);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastEpochTime", "1350684851401");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastEpochTimeUrl", "hxxps://dcs.consume[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastEventSendAttemptDate", "20121019");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastEventSendSuccessDate", "20121019");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSModification", "Tue, 15 M[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSRshModification", "Tue, 1[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSRshTime", "1350684850512"[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSRshUrl", "hxxps://dcs-fil[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSSerpModification", "Mon, [...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSSerpTime", "1350684850513[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSSerpUrl", "hxxps://dcs-fi[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSShoppingcartModification"[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSShoppingcartTime", "13506[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSShoppingcartUrl", "hxxps:[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSTime", "1350684850079");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastExternalJSUrl", "hxxps://dcs-files.[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastPingTime", "1350684909257");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastPrivacyRulesModification", "Mon, 17[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastPrivacyRulesTime", "1350684850062")[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastPrivacyRulesUrl", "hxxps://dcs-file[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastWhitelistModification", "Wed, 17 Oc[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastWhitelistTime", "1350684850599");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.lastWhitelistUrl", "hxxps://dcs-files.c[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.panelID", "FCZ3F9Lfox");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.pingInterval", "1440");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.privacyFailures", 0);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.privacyFailuresThreshold", 6);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.privacyRulesInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.probationLength", 1440);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.rulesVersion", "2003");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.userID", "FCZ3F9L58569927");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.version", "1.7.0.9411");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.dca.whitelistInterval", "60");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.installDate", "12092011");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.dca.version", "1.0.39");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.processAddrBar", false);
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.session", "1BB1BB670AF34250BAD8142015BB4410ACAA[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.tb_lang", "en");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.user_id", "58569927");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.vars.dcaAlertShown", "1");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.vars.disablecuidinject", "1");
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.vars.lastcheck", "Sat%20Dec%2031%202011%2010%3A[...]
    Deleted : user_pref("freecause46d606b0a64511df981c0800200c9a66.yahooSearch", false);
    Deleted : user_pref("keyword.URL", "hxxps://isearch.avg.com/search?cid={7EA4BF3F-6EAA-4C8F-9D41-94E7281F7CE0}&[...]

    -\\ Google Chrome v [Unable to get version]

    File : C:\Users\Serge\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Deleted [l.1] : icon_url ={"bookmark_bar":{"show_on_all_tabs":true},"browser":{"check_default_browser":false,"clear_data":{"form_data":true,"passwords":true,"time_period":4},"show_home_button":true,"window_placement":{"bottom":1323,"left":160,"maximized":true,"right":1210,"top":349,"work_area_bottom":994,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"cloud_print":{"email":""},"countryid_at_install":21843,"default_apps_install_state":1,"default_search_provider":{"enabled":true,"encodings":"UTF-8","hxxp://www.google.com/favicon.ico","id":"2","instant_url":"{google:baseURL}webhp?{google:RLZ}sourceid=chrome-instant&{google:instantFieldTrialGroupParameter}ie={inputEncoding}&ion=1{searchTerms}","keyword":"google.com","name":"Google","prepopulate_id":"1","search_url":"{google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:eek:riginalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}","suggest_url":"{google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}"},"dns_prefetching":{"host_referral_list":[2,["hxxp://cheese.formice.com/",["hxxp://en.transformice.com/",1.667545806713975,"hxxp://www.google-analytics.com/",2.063489714889133]],["hxxp://en.transformice.com/",["hxxp://ad.doubleclick.net/",4.258266517648518,"hxxp://avatar.transformice.com/",3.634707505960125,"hxxp://belette.transformice.com/",4.501818640882298,"hxxp://bulle.transformice.com/",4.561169660961329,"hxxp://cdn2.cpmstar.com/",3.020024856803117,"hxxp://cheese.formice.com/",3.020024856803117,"hxxp://en.transformice.com/",4.258266517648518,"hxxp://s0.2mdn.net/",3.020024856803117,"hxxp://server.cpmstar.com/",4.561169660961329]],["hxxp://talesrunner.gpotato.com/",["hxxp://ajax.googleapis.com/",2.457556104889546,"hxxp://connect.facebook.net/",2.145776599045350,"hxxp://register.gpotato.com/",2.145776599045350,"hxxp://secure.gpotato.com/",2.145776599045350,"hxxp://static.ak.connect.facebook.com/",3.081115116577939,"hxxp://talesrunner.gpotato.com/",41.42999433541418,"hxxp://www.connect.facebook.com/",2.457556104889546,"hxxp://www.facebook.com/",2.145776599045350,"hxxp://www.google-analytics.com/",2.769335610733743,"hxxps://secure.gpotato.com/",2.145776599045350]],["hxxp://www.connect.facebook.com/",["hxxp://profile.ak.fbcdn.net/",4.016453634110526,"hxxp://static.ak.fbcdn.net/",4.640012645798919]],["hxxp://www.google.com/",["hxxp://id.google.com/",0.6169021891191421,"hxxp://ssl.gstatic.com/",0.9768670658012355,"hxxp://www.google.com/",4.416017019654065]],["hxxps://secure.gpotato.com/",["hxxps://secure.gpotato.com/",7.757807704240880]]],"startup_list":[1,"hxxp://www.google.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":""},"extensions":{"autoupdate":{"last_check":"12968732314540600","next_check":"12970111026240000"},"blacklistupdate":{"lastpingday":"12968668798690600","version":"0.0.0.7"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","webstorePrivate"]},"app_launcher_index":-2,"page_index":0},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"app_launcher_index":3,"from_bookmark":false,"from_webstore":false,"install_time":"12968732315865600","lastpingday":"12968668797809600","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"current_locale":"en_US","default_locale":"en","description":"The world's most popular online video community.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2.2"},"page_index":0,"path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.2_0","state":1},"cbbjhegipokkofhhicbckicchjpcpeni":{"blacklist":true},"coobgpohoikkiipiblmjeljniedjpjpf":{"app_launcher_index":5,"from_bookmark":false,"from_webstore":false,"install_time":"12968732317854600","lastpingday":"12968668797809600","location":2,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/"},"urls":["*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"current_locale":"en_US","default_locale":"en","description":"The fastest way to search the web.","icons":{"128":"128.png","16":"16.png","32":"32.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Google Search","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.16"},"page_index":0,"path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.16_0","state":1},"fnjbmmemklcjgepojigaapkoodmkgbae":{"active_permissions":{"api":["tabs"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"allowFileAccess":true,"app_launcher_index":-1,"install_time":"12958149275024500","lastpingday":"12968668797809600","location":3,"manifest":{"background_page":"core.html","content_scripts":[{"js":["json-sans-eval.js","HiQLocale.js","HiQSmartUpdate.js","wpaCommon.js","wpaContentScript.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_end"}],"current_locale":"en_US","default_locale":"en","description":"Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites.","icons":{"128":"images/divx128x128.png","48":"images/divx48x48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCcGrxEIFDMZsRcZElmc43mwjk59yras7iAXtDuGIf0XA5tWoFOD3+VaIcpNltXT2/xNmNE/ifp2jAZPti3L+5/5Ly6KKid6gUUIv51gpZ08iDRrHsJ+b9mtiC6CeYge5JS+kl/mi8tODxYBZE/Hz1wXFp0+Z4um1Qi8K6H2pV8EQIDAQAB","name":"DivX HiQ","permissions":["tabs","hxxp://*/*","hxxps://*/*"],"version":"2.1.1.94"},"path":"fnjbmmemklcjgepojigaapkoodmkgbae\\2.1.1.94_0","state":1},"hpibmhghjndideebpackbdlpncgkcppp":{"blacklist":true},"jfmjfhklogoienhpfnppmbcbjfjnkonk":{"active_permissions":{"api":["tabs"],"explicit_host":["hxxp://*/*","hxxps://*/*"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"allowFileAccess":true,"app_launcher_index":-1,"install_time":"12958149274741500","lastpingday":"12968668797809600","location":3,"manifest":{"background_page":"background.html","content_scripts":[{"js":["contentscript.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_idle"}],"description":"RealPlayer HTML5Video Downloader Extension","key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCl0WKWTrid8Fh+tsoJPRheLc7tksPgH1NfLF79Fj3YKb0fk2Fip1eE/chfSnGWQkxe5Ck2r+ZPba7m+FWQhZDCE5EXvOTDoqi7TEvjccW5pMpW5wCUOLKQVSttgBwkY8EUYt40SwtJ6HmLoPZfQmo9W3qAjnlhlF5AkY4jYgBv3QIDAQAB","name":"RealPlayer HTML5Video Downloader Extension","permissions":["tabs","hxxp://*/*","hxxps://*/*"],"version":"1.4"},"path":"jfmjfhklogoienhpfnppmbcbjfjnkonk\\1.4_0","state":1},"lncjcfkpannmofmpgdfoonkniofdnaba":{"blacklist":true},"nneajnkjbffgblleaoojgaacokifdkhm":{"active_permissions":{"api":["tabs"],"scriptable_host":["hxxp://*/*","hxxps://*/*"]},"allowFileAccess":true,"app_launcher_index":-1,"install_time":"12958149275080500","lastpingday":"12968668797809600","location":3,"manifest":{"content_scripts":[{"js":["script.js"],"matches":["hxxp://*/*","hxxps://*/*"],"run_at":"document_end"}],"current_locale":"en_US","default_locale":"en","description":"Increase performance and video formats for your HTML5 <video>","icons":{"128":"divx128x128.png","48":"divx48x48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgKGj4sjJKwOs1NkcicEV4Rkq2kpG7jM+u/UGvcCzxtLTjUIbJ80v6eoI33XmcwiKILCymnIX591nlTXDOI+eHeHUAY42f3SIeh/bDlea9T6MMJXW1Fh7ZuG30QKivxtzwKSSgrspwbBTauN6Rq3FGoDrv2L9rNwmYBrUPA8Z4awIDAQAB","name":"DivX Plus Web Player HTML5 <video>","permissions":["tabs"],"version":"2.1.1.94"},"path":"nneajnkjbffgblleaoojgaacokifdkhm\\2.1.1.94_0","state":1},"pbglijbamgmlcpnnpbfjkbdeheejjloj":{"blacklist":true},"pjkljhegncpnkpknbcohdijeoejaedia":{"active_permissions":{"api":["notifications"]},"app_launcher_index":4,"from_bookmark":false,"from_webstore":false,"install_time":"12968732316851600","lastpingday":"12968668797809600","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxps://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"en_US","default_locale":"en","description":"Fast, searchable email with less spam.","icons":{"128":"128.png","24":"24.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Gmail","options_page":"hxxps://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"6.1.4"},"page_index":0,"path":"pjkljhegncpnkpknbcohdijeoejaedia\\6.1.4_0","state":1}}},"google":{"services":{"username":""}},"homepage":"hxxp://www.google.com/","homepage_is_newtabpage":false,"hxxp_throttling":{"enabled":true},"ntp":{"intro_display_count":4,"pref_version":3,"promo_build":0,"promo_closed":false,"promo_end":1323071940.0,"promo_group":89,"promo_group_max":0,"promo_group_timeslice":0,"promo_line":"<a href=\"hxxp://www.google.com/chromebook/index.html#utm_campaign=en&utm_source=en-ntp-holidays-na-us-bkws&utm_medium=ntp-holidays\">Get a Chromebook for the holidays</a>: the computer powered by Chrome.","promo_resource_cache_update":"1324258027.7196","promo_start":1321862280.0,"promo_views":0,"promo_views_max":0,"shown_sections":64,"webstore_last_promo_id":"1335115"},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Users\\Serge\\AppData\\Local\\Google\\Chrome\\Application\\16.0.912.63","plugins_list":[{"enabled":true,"name":"Shockwave Flash","path":"C:\\Users\\Serge\\AppData\\Local\\Google\\Chrome\\Application\\16.0.912.63\\gcswf32.dll","version":"11,1,102,55"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Windows\\SysWOW64\\Macromed\\Flash\\NPSWF32.dll","version":"11,0,1,152"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin2.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin3.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin4.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin5.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin6.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"QuickTime Plug-in 7.6.9","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\npqtplugin7.dll","version":"7.6.9 (1680.9)"},{"enabled":true,"name":"Java Deployment Toolkit 6.0.240.7","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npdeployJava1.dll","version":"6.0.240.7"},{"enabled":true,"name":"Java(TM) Platform SE 6 U24","path":"C:\\Program Files (x86)\\Java\\jre6\\bin\\new_plugin\\npjp2.dll","version":"6.0.240.7"},{"enabled":false,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Browser\\nppdf32.dll","version":"9.3.2.163"},{"enabled":true,"name":"Silverlight Plug-In","path":"c:\\Program Files (x86)\\Microsoft Silverlight\\4.0.60831.0\\npctrl.dll","version":"4.0.60831.0"},{"enabled":true,"name":"Shockwave for Director","path":"C:\\Windows\\system32\\Adobe\\Director\\np32dsw.dll","version":"11.5.9r620"},{"enabled":true,"name":"DivX Web Player","path":"C:\\Program Files (x86)\\DivX\\DivX Plus Web Player\\npdivx32.dll","version":"2, 1, 1, 94"},{"enabled":true,"name":"RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\nppl3260.dll","version":"12.0.1.647"},{"enabled":true,"name":"RealPlayer Version Plugin","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\nprpjplug.dll","version":"12.0.1.647"},{"enabled":true,"name":"RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ","path":"C:\\ProgramData\\Real\\RealPlayer\\BrowserRecordPlugin\\MozillaPlugins\\nprpchromebrowserrecordext.dll","version":"12.0.1.647"},{"enabled":true,"name":"RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ","path":"C:\\ProgramData\\Real\\RealPlayer\\BrowserRecordPlugin\\MozillaPlugins\\nprphtml5videoshim.dll","version":"12.0.1.647"},{"enabled":true,"name":"Microsoft® Windows Media Player Firefox Plugin","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\np-mswmp.dll","version":"1.0.0.8"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~2\\Office14\\NPAUTHZ.DLL","version":"14.0.4730.1010"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~2\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Native Client","path":"C:\\Users\\Serge\\AppData\\Local\\Google\\Chrome\\Application\\16.0.912.63\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Users\\Serge\\AppData\\Local\\Google\\Chrome\\Application\\16.0.912.63\\pdf.dll","version":""},{"enabled":true,"name":"RealJukebox NS Plugin","path":"C:\\Program Files (x86)\\Mozilla Firefox\\plugins\\nprjplug.dll","version":"12.0.1.647"},{"enabled":true,"name":"DivX VOD Helper Plug-in","path":"C:\\Program Files (x86)\\DivX\\DivX OVS Helper\\npovshelper.dll","version":"1.0.0.363"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.79\\npGoogleUpdate3.dll","version":"1.3.21.79"},{"enabled":true,"name":"Pando Web Plugin","path":"C:\\Program Files (x86)\\Pando Networks\\Media Booster\\npPandoWebPlugin.dll","version":"2.3.3.8"},{"enabled":true,"name":"Windows Live? Photo Gallery","path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll","version":"15.4.3508.1109_ship.wlx.w4m4 (ship)"},{"enabled":true,"name":"iTunes Application Detector","path":"C:\\Program Files (x86)\\iTunes\\Mozilla Plugins\\npitunes.dll","version":"1.0.1.1"},{"enabled":true,"name":"Nexon Game Controller","path":"C:\\ProgramData\\NexonUS\\NGM\\npNxGameUS.dll","version":"1, 0, 1, 2"},{"enabled":true,"name":"Unity Player","path":"C:\\Users\\Serge\\AppData\\LocalLow\\Unity\\WebPlayer\\loader\\npUnity3D32.dll","version":"3.4.0.27242"},{"enabled":true,"name":"Roblox Launcher Plugin","path":"C:\\Users\\Serge\\AppData\\Local\\Roblox\\Versions\\version-684ac714abb74f38\\\\NPRobloxProxy.dll","version":"1, 2, 2, 6"},{"enabled":true,"name":"Windows Activation Technologies","path":"C:\\Windows\\system32\\Wat\\npWatWeb.dll","version":"7.1.7600.16395"},{"enabled":true,"name":"OGPlanet Game Plugin","path":"C:\\Windows\\system32\\npOGPPlugin.dll","version":"2, 0, 0, 0"},{"enabled":true,"name":"Default Plug-in","path":"default_plugin","version":"1"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"QuickTime"},{"enabled":true,"name":"Java"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Shockwave"},{"enabled":true,"name":"DivX Player"},{"enabled":true,"name":"RealPlayer"},{"enabled":true,"name":"Windows Media Player"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"RealJukebox NS Plugin"},{"enabled":true,"name":"DivX VOD Helper Plug-in"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Pando Web Plugin"},{"enabled":true,"name":"Windows Live? Photo Gallery"},{"enabled":true,"name":"iTunes Application Detector"},{"enabled":true,"name":"Nexon Game Controller"},{"enabled":true,"name":"Unity Player"},{"enabled":true,"name":"Roblox Launcher Plugin"},{"enabled":true,"name":"Windows Activation Technologies"},{"enabled":true,"name":"OGPlanet Game Plugin"},{"enabled":true,"name":"Default Plug-in"}]},"profile":{"content_settings":{"pattern_pairs":{"*,*":{"per_plugin":{"npsitesafety.dll":1}}},"plugin_whitelist":{"npsitesafety":{"dll":true}},"pref_version":1},"exited_cleanly":true},"spdy":{"servers":["clients2.google.com:443"]},"tabs":{"use_compact_navigation_bar":false,"use_vertical_tabs":false}}

    File : C:\Users\Sergio\AppData\Local\Google\Chrome\User Data\Default\Preferences

    [OK] File is clean.

    *************************

    AdwCleaner[S1].txt - [355 octets] - [22/10/2012 17:13:57]
    AdwCleaner[S2].txt - [355 octets] - [23/10/2012 01:30:50]
    AdwCleaner[S3].txt - [46777 octets] - [23/10/2012 16:39:38]

    ########## EOF - C:\AdwCleaner[S3].txt - [46838 octets] ##########
  2. Broni Malware Annihilator Posts: 39,313   +175

    I still need Eset scan.
  3. Broni Malware Annihilator Posts: 39,313   +175

    This topic is marked as abandoned and closed due to inactivity.
    This member will NOT be eligible to receive any more help in malware removal forum.