Malware/adware

Inactive
By abernathycjm
Aug 30, 2012
  1. -\\ Internet Explorer v8.0.6001.18702

    [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultName] = My Web Search
    [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultUrl] = hxxp://www.mywebsearch.com/jsp/cfg_redir2....barsearch.jhtml&st=sb&searchfor={searchTerms}
    [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://search.babylon.com/?affID=112208&tt=201208_mnt_n_3412_8&babsrc=HP_ss&mntrId=4cfa2c150000000000000013d352a920
    [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112208&tt=201208_mnt_n_3412_8&babsrc=NT_ss&mntrId=4cfa2c150000000000000013d352a920

    -\\ Mozilla Firefox v9.0 (en-US)

    Profile name : default
    File : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\prefs.js

    Found : user_pref("CT2438727..clientLogIsEnabled", true);
    Found : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2438727.AppTrackingLastCheckTime", "Sat Aug 20 2011 10:13:43 GMT-0500 (Central Daylight[...]
    Found : user_pref("CT2438727.BrowserCompStateIsOpen_1000515", true);
    Found : user_pref("CT2438727.CT2438727", "CT2438727");
    Found : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
    Found : user_pref("CT2438727.CurrentServerDate", "23-8-2011");
    Found : user_pref("CT2438727.DialogsAlignMode", "LTR");
    Found : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sun Aug 21 2011 15:24:12 GMT-0500 (Central Daylig[...]
    Found : user_pref("CT2438727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
    Found : user_pref("CT2438727.EnableSearchHistory", false);
    Found : user_pref("CT2438727.EnableSearchSuggest", false);
    Found : user_pref("CT2438727.FirstServerDate", "22-7-2011");
    Found : user_pref("CT2438727.FirstTime", true);
    Found : user_pref("CT2438727.FirstTimeFF3", true);
    Found : user_pref("CT2438727.FixPageNotFoundErrors", true);
    Found : user_pref("CT2438727.GroupingInvalidateCache", false);
    Found : user_pref("CT2438727.GroupingLastCheckTime", "0");
    Found : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
    Found : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
    Found : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Found : user_pref("CT2438727.HasUserGlobalKeys", true);
    Found : user_pref("CT2438727.HomePageProtectorEnabled", false);
    Found : user_pref("CT2438727.Initialize", true);
    Found : user_pref("CT2438727.InitializeCommonPrefs", true);
    Found : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
    Found : user_pref("CT2438727.InstalledDate", "Fri Jul 22 2011 12:46:56 GMT-0500 (Central Daylight Time)");
    Found : user_pref("CT2438727.InvalidateCache", false);
    Found : user_pref("CT2438727.IsAlertDBUpdated", true);
    Found : user_pref("CT2438727.IsGrouping", false);
    Found : user_pref("CT2438727.IsInitSetupIni", true);
    Found : user_pref("CT2438727.IsMulticommunity", false);
    Found : user_pref("CT2438727.IsOpenThankYouPage", true);
    Found : user_pref("CT2438727.IsOpenUninstallPage", true);
    Found : user_pref("CT2438727.IsProtectorsInit", true);
    Found : user_pref("CT2438727.LanguagePackLastCheckTime", "Mon Aug 22 2011 20:44:53 GMT-0500 (Central Dayligh[...]
    Found : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
    Found : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Found : user_pref("CT2438727.LastLogin_3.5.0.12", "Tue Aug 16 2011 21:48:25 GMT-0500 (Central Daylight Time)[...]
    Found : user_pref("CT2438727.LastLogin_3.6.0.10", "Tue Aug 23 2011 13:00:33 GMT-0500 (Central Daylight Time)[...]
    Found : user_pref("CT2438727.LatestVersion", "3.6.0.10");
    Found : user_pref("CT2438727.Locale", "en");
    Found : user_pref("CT2438727.MCDetectTooltipHeight", "83");
    Found : user_pref("CT2438727.MCDetectTooltipShow", false);
    Found : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Found : user_pref("CT2438727.MCDetectTooltipWidth", "295");
    Found : user_pref("CT2438727.MyStuffEnabledAtInstallation", false);
    Found : user_pref("CT2438727.OriginalFirstVersion", "3.5.0.12");
    Found : user_pref("CT2438727.RadioLastCheckTime", "0");
    Found : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
    Found : user_pref("CT2438727.RadioLastUpdateServer", "0");
    Found : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
    Found : user_pref("CT2438727.SearchBackToDefaultEngine", false);
    Found : user_pref("CT2438727.SearchBoxWidth", 141);
    Found : user_pref("CT2438727.SearchEngine", "Software||hxxp://www.softonic.com/s/UCM_SEARCH_TERM?ptn=conduit[...]
    Found : user_pref("CT2438727.SearchEngineBeforeUnload", " ");
    Found : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
    Found : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
    Found : user_pref("CT2438727.SearchInNewTabEnabled", true);
    Found : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
    Found : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Mon Aug 22 2011 20:44:51 GMT-0500 (Central Dayli[...]
    Found : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Found : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Found : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
    Found : user_pref("CT2438727.SearchProtectorEnabled", false);
    Found : user_pref("CT2438727.SearchProtectorToolbarDisabled", false);
    Found : user_pref("CT2438727.ServiceMapLastCheckTime", "Mon Aug 22 2011 20:44:55 GMT-0500 (Central Daylight [...]
    Found : user_pref("CT2438727.SettingsLastCheckTime", "Tue Aug 23 2011 11:46:19 GMT-0500 (Central Daylight Ti[...]
    Found : user_pref("CT2438727.SettingsLastUpdate", "1312887586");
    Found : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
    Found : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Fri Aug 12 2011 16:58:55 GMT-0500 (Central Day[...]
    Found : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1246786978");
    Found : user_pref("CT2438727.ToolbarShrinkedFromSetup", false);
    Found : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
    Found : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
    Found : user_pref("CT2438727.UserID", "UN11604455052121598");
    Found : user_pref("CT2438727.ValidationData_Search", 2);
    Found : user_pref("CT2438727.ValidationData_Toolbar", 2);
    Found : user_pref("CT2438727.alertChannelId", "832836");
    Found : user_pref("CT2438727.approveUntrustedApps", true);
    Found : user_pref("CT2438727.backendstorage.currentgame", "63697479");
    Found : user_pref("CT2438727.backendstorage.facebbok_user_cuid_100001690096614", "31336536303030312D37353337[...]
    Found : user_pref("CT2438727.backendstorage.facebbok_user_id", "6E6F6E65");
    Found : user_pref("CT2438727.backendstorage.facebook_conduit_social_sskey_100001690096614", "756F736845744F7[...]
    Found : user_pref("CT2438727.backendstorage.facebook_ctid_connect_send_n", "73656E646564");
    Found : user_pref("CT2438727.backendstorage.facebook_ctid_connect_send_new", "73656E646564");
    Found : user_pref("CT2438727.backendstorage.facebook_first_visit", "6E6F744669727374");
    Found : user_pref("CT2438727.backendstorage.facebook_last_message_choice", "656D707479");
    Found : user_pref("CT2438727.backendstorage.facebook_loggedin", "");
    Found : user_pref("CT2438727.backendstorage.facebook_login_refresh", "302E37373933303936343432373638303132")[...]
    Found : user_pref("CT2438727.backendstorage.facebook_login_status", "30");
    Found : user_pref("CT2438727.backendstorage.facebook_lust_recievegadet", "353037323833332C");
    Found : user_pref("CT2438727.backendstorage.facebook_mode", "32");
    Found : user_pref("CT2438727.backendstorage.facebook_permission_lastshow_100001690096614", "3133313134373031[...]
    Found : user_pref("CT2438727.backendstorage.facebook_toolbar_not_numer", "32");
    Found : user_pref("CT2438727.backendstorage.facebook_user_locale", "656E");
    Found : user_pref("CT2438727.backendstorage.facebook_user_name", "6E6F6E65");
    Found : user_pref("CT2438727.backendstorage.facebook_user_token", "6E6F6E65");
    Found : user_pref("CT2438727.backendstorage.facebooknotifications", "30");
    Found : user_pref("CT2438727.backendstorage.hxxp://facebook_conduitapps_com/v3_8.facebook_last_visit_tab", "[...]
    Found : user_pref("CT2438727.backendstorage.hxxp://facebook_conduitapps_com/v3_8.facebook_permission_showsnu[...]
    Found : user_pref("CT2438727.components.1000515", true);
    Found : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
    Found : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Tue Aug 23 2011 13:00:33 GMT-0500 (Central [...]
    Found : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
    Found : user_pref("CT2438727.initDone", true);
    Found : user_pref("CT2438727.isAppTrackingManagerOn", true);
    Found : user_pref("CT2438727.myStuffEnabled", true);
    Found : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
    Found : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Found : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
    Found : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Found : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,111,129509324767711885,129[...]
    Found : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
    Found : user_pref("CT2438727.searchProtectorEnableByLogin", true);
    Found : user_pref("CT2438727.testingCtid", "");
    Found : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Mon Aug 22 2011 20:44:55 GMT-0500 (Central D[...]
    Found : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Fri Aug 19 2011 12:46:57 GMT-0500 (Central D[...]
    Found : user_pref("CT2438727.usageEnabled", false);
    Found : user_pref("CT2438727.usagesFlag", 2);
    Found : user_pref("CT2786678..clientLogIsEnabled", true);
    Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2786678.CTID", "CT2786678");
    Found : user_pref("CT2786678.CurrentServerDate", "29-6-2011");
    Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
    Found : user_pref("CT2786678.DialogsGetterLastCheckTime", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central Daylig[...]
    Found : user_pref("CT2786678.DownloadReferralCookieData", "");
    Found : user_pref("CT2786678.EMailNotifierPollDate", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central Daylight Ti[...]
    Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 158);
    Found : user_pref("CT2786678.FeedPollDate2429156812186649977", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813040823546", "Wed Jun 29 2011 01:02:55 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813130095866", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813224203613", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813230837251", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813454291735", "Wed Jun 29 2011 01:02:56 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813729834876", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156813860870021", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156814264681793", "Wed Jun 29 2011 01:02:54 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156814863075366", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedPollDate2429156815257761081", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
    Found : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
    Found : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
    Found : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
    Found : user_pref("CT2786678.FirstServerDate", "29-6-2011");
    Found : user_pref("CT2786678.FirstTime", true);
    Found : user_pref("CT2786678.FirstTimeFF3", true);
    Found : user_pref("CT2786678.FixPageNotFoundErrors", true);
    Found : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
    Found : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Found : user_pref("CT2786678.HasUserGlobalKeys", true);
    Found : user_pref("CT2786678.HomePageProtectorEnabled", false);
    Found : user_pref("CT2786678.Initialize", true);
    Found : user_pref("CT2786678.InitializeCommonPrefs", true);
    Found : user_pref("CT2786678.InstallationAndCookieDataSentCount", 1);
    Found : user_pref("CT2786678.InstalledDate", "Tue Jun 28 2011 21:02:37 GMT-0500 (Central Daylight Time)");
    Found : user_pref("CT2786678.IsGrouping", false);
    Found : user_pref("CT2786678.IsInitSetupIni", true);
    Found : user_pref("CT2786678.IsMulticommunity", false);
    Found : user_pref("CT2786678.IsOpenThankYouPage", true);
    Found : user_pref("CT2786678.IsOpenUninstallPage", true);
    Found : user_pref("CT2786678.IsProtectorsInit", true);
    Found : user_pref("CT2786678.LanguagePackLastCheckTime", "Tue Jun 28 2011 21:02:37 GMT-0500 (Central Dayligh[...]
    Found : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
    Found : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Found : user_pref("CT2786678.LastLogin_3.5.0.12", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central Daylight Time)[...]
    Found : user_pref("CT2786678.LatestVersion", "3.3.3.2");
    Found : user_pref("CT2786678.Locale", "en");
    Found : user_pref("CT2786678.MCDetectTooltipHeight", "83");
    Found : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Found : user_pref("CT2786678.MCDetectTooltipWidth", "295");
    Found : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
    Found : user_pref("CT2786678.OriginalFirstVersion", "3.5.0.12");
    Found : user_pref("CT2786678.SearchEngineBeforeUnload", " ");
    Found : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
    Found : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
    Found : user_pref("CT2786678.SearchInNewTabEnabled", true);
    Found : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
    Found : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central Dayli[...]
    Found : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Found : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Found : user_pref("CT2786678.SearchProtectorEnabled", true);
    Found : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
    Found : user_pref("CT2786678.ServiceMapLastCheckTime", "Tue Jun 28 2011 21:02:33 GMT-0500 (Central Daylight [...]
    Found : user_pref("CT2786678.SettingsLastCheckTime", "Tue Jun 28 2011 21:02:34 GMT-0500 (Central Daylight Ti[...]
    Found : user_pref("CT2786678.SettingsLastUpdate", "1308223219");
    Found : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
    Found : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Tue Jun 28 2011 21:02:33 GMT-0500 (Central Day[...]
    Found : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
    Found : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
    Found : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
    Found : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,OurTo[...]
    Found : user_pref("CT2786678.UserID", "UN29809350864489556");
    Found : user_pref("CT2786678.WeatherNetwork", "");
    Found : user_pref("CT2786678.WeatherPollDate", "Tue Jun 28 2011 21:02:37 GMT-0500 (Central Daylight Time)");
    Found : user_pref("CT2786678.WeatherUnit", "F");
    Found : user_pref("CT2786678.alertChannelId", "1178763");
    Found : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
    Found : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed Jun 29 2011 01:02:34 GMT-0500 (Central [...]
    Found : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
    Found : user_pref("CT2786678.initDone", true);
    Found : user_pref("CT2786678.isAppTrackingManagerOn", true);
    Found : user_pref("CT2786678.myStuffEnabled", true);
    Found : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
    Found : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Found : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
    Found : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Found : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
    Found : user_pref("CT2786678.searchProtectorEnableByLogin", true);
    Found : user_pref("CT2786678.testingCtid", "");
    Found : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Found : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Tue Jun 28 2011 21:02:38 GMT-0500 (Central D[...]
    Found : user_pref("CT3072253..clientLogIsEnabled", true);
    Found : user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
    Found : user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT3072253.BrowserCompStateIsOpen_129572937280362976", true);
    Found : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
    Found : user_pref("CT3072253.CTID", "CT3072253");
    Found : user_pref("CT3072253.CurrentServerDate", "12-2-2012");
    Found : user_pref("CT3072253.DSChangedManually", true);
    Found : user_pref("CT3072253.DSInstall", true);
    Found : user_pref("CT3072253.DialogsAlignMode", "LTR");
    Found : user_pref("CT3072253.DialogsGetterLastCheckTime", "Sun Feb 12 2012 12:16:58 GMT-0600 (Central Standa[...]
    Found : user_pref("CT3072253.DownloadReferralCookieData", "");
    Found : user_pref("CT3072253.FirstServerDate", "12-2-2012");
    Found : user_pref("CT3072253.FirstTime", true);
    Found : user_pref("CT3072253.FirstTimeFF3", true);
    Found : user_pref("CT3072253.FixPageNotFoundErrors", true);
    Found : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
    Found : user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Found : user_pref("CT3072253.HPChangedManually", false);
    Found : user_pref("CT3072253.HPInstall", true);
    Found : user_pref("CT3072253.HPProtectChoice", true);
    Found : user_pref("CT3072253.HPProtectCount", 8);
    Found : user_pref("CT3072253.HasUserGlobalKeys", true);
    Found : user_pref("CT3072253.HomePageProtectorEnabled", true);
    Found : user_pref("CT3072253.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=[...]
    Found : user_pref("CT3072253.Initialize", true);
    Found : user_pref("CT3072253.InitializeCommonPrefs", true);
    Found : user_pref("CT3072253.InstallationAndCookieDataSentCount", 1);
    Found : user_pref("CT3072253.InstallationId", "ConduitXPEIntegration");
    Found : user_pref("CT3072253.InstallationType", "ConduitXPEIntegration");
    Found : user_pref("CT3072253.InstalledDate", "Sun Feb 12 2012 12:16:57 GMT-0600 (Central Standard Time)");
    Found : user_pref("CT3072253.IsAlertDBUpdated", true);
    Found : user_pref("CT3072253.IsGrouping", false);
    Found : user_pref("CT3072253.IsInitSetupIni", true);
    Found : user_pref("CT3072253.IsMulticommunity", false);
    Found : user_pref("CT3072253.IsOpenThankYouPage", true);
    Found : user_pref("CT3072253.IsOpenUninstallPage", false);
    Found : user_pref("CT3072253.IsProtectorsInit", true);
    Found : user_pref("CT3072253.LanguagePackLastCheckTime", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central Standar[...]
    Found : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
    Found : user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Found : user_pref("CT3072253.LastLogin_3.9.0.3", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central Standard Time)"[...]
    Found : user_pref("CT3072253.LatestVersion", "3.9.0.3");
    Found : user_pref("CT3072253.Locale", "en");
    Found : user_pref("CT3072253.MCDetectTooltipHeight", "83");
    Found : user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Found : user_pref("CT3072253.MCDetectTooltipWidth", "295");
    Found : user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
    Found : user_pref("CT3072253.OriginalFirstVersion", "3.9.0.3");
    Found : user_pref("CT3072253.SHRINK_TOOLBAR", 1);
    Found : user_pref("CT3072253.SavedHomepage", "hxxp://www.yahoo.com/");
    Found : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
    Found : user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
    Found : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
    Found : user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT307[...]
    Found : user_pref("CT3072253.SearchInNewTabEnabled", true);
    Found : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
    Found : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central Stand[...]
    Found : user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Found : user_pref("CT3072253.SearchProtectorEnabled", false);
    Found : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
    Found : user_pref("CT3072253.SendProtectorDataViaLogin", true);
    Found : user_pref("CT3072253.ServiceMapLastCheckTime", "Sun Feb 12 2012 12:16:50 GMT-0600 (Central Standard [...]
    Found : user_pref("CT3072253.SettingsLastCheckTime", "Sun Feb 12 2012 12:16:53 GMT-0600 (Central Standard Ti[...]
    Found : user_pref("CT3072253.SettingsLastUpdate", "1328745660");
    Found : user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
    Found : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
    Found : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Sun Feb 12 2012 12:16:50 GMT-0600 (Central Sta[...]
    Found : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
    Found : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
    Found : user_pref("CT3072253.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3072253");
    Found : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
    Found : user_pref("CT3072253.Uninstall", true);
    Found : user_pref("CT3072253.UserID", "UN95424492979632391");
    Found : user_pref("CT3072253.ValidationData_Toolbar", 0);
    Found : user_pref("CT3072253.alertChannelId", "1463702");
    Found : user_pref("CT3072253.backendstorage.cbfirsttime", "53756E2046656220313220323031322031323A31373A30332[...]
    Found : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
    Found : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Sun Feb 12 2012 12:16:58 GMT-0600 (Central [...]
    Found : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
    Found : user_pref("CT3072253.initDone", true);
    Found : user_pref("CT3072253.isAppTrackingManagerOn", true);
    Found : user_pref("CT3072253.myStuffEnabled", true);
    Found : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
    Found : user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Found : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
    Found : user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Found : user_pref("CT3072253.revertSettingsEnabled", false);
    Found : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
    Found : user_pref("CT3072253.searchProtectorEnableByLogin", true);
    Found : user_pref("CT3072253.testingCtid", "");
    Found : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Sun Feb 12 2012 12:16:58 GMT-0600 (Central S[...]
    Found : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central S[...]
    Found : user_pref("CT3072253.usagesFlag", 2);
    Found : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
    Found : user_pref("CommunityToolbar.ConduitSearchList", " ,uTorrentControl2 Customized Web Search");
    Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3042922/CT3042922[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/US", "\"0\"[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/820350/816161/US", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/US", "\"0\"")[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2426074", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3042922", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2426074",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3042922",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2426074/CT2426074[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"2[...]
    Found : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"cde[...]
    Found : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Owner\\Application[...]
    Found : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");
    Found : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.avg.com/route/?d=4c6a86d5&[...]
    Found : user_pref("CommunityToolbar.ToolbarsList", "CT2786678,CT2438727,CT3072253");
    Found : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678,CT2438727,CT3072253");
    Found : user_pref("CommunityToolbar.ToolbarsList4", "CT2786678,CT2438727,CT3072253");
    Found : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Dec 10 2011 09:22:13 GMT-0600 (Cen[...]
    Found : user_pref("CommunityToolbar.globalUserId", "efd51156-5f91-43fe-8d85-cbecb57d68f9");
    Found : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
    Found : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
    Found : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
    Found : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Feb 12 2012 12:16:5[...]
    Found : user_pref("CommunityToolbar.notifications.alertEnabled", false);
    Found : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
    Found : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Mon Aug 22 2011 21:29:49 GMT-050[...]
    Found : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
    Found : user_pref("CommunityToolbar.notifications.locale", "en");
    Found : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
    Found : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Feb 12 2012 12:16:54 GMT-0600 (C[...]
    Found : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
    Found : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
    Found : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
    Found : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
    Found : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
    Found : user_pref("CommunityToolbar.notifications.userId", "6a5ceb73-2322-4a9f-a30f-2a10f1575abe");
    Found : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.yahoo.com/?ilc=1");
    Found : user_pref("CommunityToolbar.originalSearchEngine", "PCH Search&Win");
    Found : user_pref("FirstSearch.aol_toolbar.search.hasDoneFirst", 295);
    Found : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=112208&tt=201208_mnt_n_341[...]
    Found : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
    Found : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=110795&tt=3412_8&babsrc=NT_ss&mntr[...]
    Found : user_pref("browser.search.defaultengine", "Ask.com");
    Found : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
    Found : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
    Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
    Found : user_pref("browser.search.order.1", "Search the web (Babylon)");
    Found : user_pref("extensions.BabylonToolbar.admin", false);
    Found : user_pref("extensions.BabylonToolbar.aflt", "babsst");
    Found : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
    Found : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
    Found : user_pref("extensions.BabylonToolbar.babExt", "");
    Found : user_pref("extensions.BabylonToolbar.babTrack", "affID=112208&tt=201208_mnt_n_3412_8");
    Found : user_pref("extensions.BabylonToolbar.babext", "babExt");
    Found : user_pref("extensions.BabylonToolbar.babtrack", "babTrack");
    Found : user_pref("extensions.BabylonToolbar.bbdpng", 26);
    Found : user_pref("extensions.BabylonToolbar.cntry", "US");
    Found : user_pref("extensions.BabylonToolbar.dfltLng", "en");
    Found : user_pref("extensions.BabylonToolbar.dfltlng", "en");
    Found : user_pref("extensions.BabylonToolbar.dfltsrch", "false");
    Found : user_pref("extensions.BabylonToolbar.dp_alert", "newBlk");
    Found : user_pref("extensions.BabylonToolbar.envrmnt", "production");
    Found : user_pref("extensions.BabylonToolbar.excTlbr", false);
    Found : user_pref("extensions.BabylonToolbar.firstrun", false);
    Found : user_pref("extensions.BabylonToolbar.hdrMd5", "4BA28A9F02287B5ED9056FF51ECB337F");
    Found : user_pref("extensions.BabylonToolbar.hmpg", false);
    Found : user_pref("extensions.BabylonToolbar.hrdid", "4cfa2c150000000000000013d352a920");
    Found : user_pref("extensions.BabylonToolbar.id", "4cfa2c150000000000000013d352a920");
    Found : user_pref("extensions.BabylonToolbar.instlDay", "15578");
    Found : user_pref("extensions.BabylonToolbar.instlRef", "sst");
    Found : user_pref("extensions.BabylonToolbar.instlday", "15578");
    Found : user_pref("extensions.BabylonToolbar.instlref", "sst");
    Found : user_pref("extensions.BabylonToolbar.isdcmntcmplt", "false");
    Found : user_pref("extensions.BabylonToolbar.keywordurl", "");
    Found : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1210:10:49");
    Found : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
    Found : user_pref("extensions.BabylonToolbar.newTab", false);
    Found : user_pref("extensions.BabylonToolbar.newtab", "false");
    Found : user_pref("extensions.BabylonToolbar.newtaburl", "");
    Found : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
    Found : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
    Found : user_pref("extensions.BabylonToolbar.prtnrid", "babylon");
    Found : user_pref("extensions.BabylonToolbar.savedVrsnTs", "1");
    Found : user_pref("extensions.BabylonToolbar.sg", "none");
    Found : user_pref("extensions.BabylonToolbar.smplGrp", "none");
    Found : user_pref("extensions.BabylonToolbar.smplgrp", "none");
    Found : user_pref("extensions.BabylonToolbar.srcExt", "ss");
    Found : user_pref("extensions.BabylonToolbar.srcext", "ss");
    Found : user_pref("extensions.BabylonToolbar.srch", "");
    Found : user_pref("extensions.BabylonToolbar.srchprvdr", "");
    Found : user_pref("extensions.BabylonToolbar.tlbrId", "base");
    Found : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
    Found : user_pref("extensions.BabylonToolbar.tlbrid", "base");
    Found : user_pref("extensions.BabylonToolbar.tlbrsrchurl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
    Found : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
    Found : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1210:10:49");
    Found : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
    Found : user_pref("extensions.BabylonToolbar.vrsnts", "1.6.9.1210:10:49");
    Found : user_pref("extensions.BabylonToolbar_i.babExt", "");
    Found : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112208&tt=201208_mnt_n_3412_8");
    Found : user_pref("extensions.BabylonToolbar_i.newTab", false);
    Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110795&tt=3412_[...]
    Found : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Found : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
    Found : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1210:10:49");
    Found : user_pref("extensions.CouponAlert_2p.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/open[...]
    Found : user_pref("extensions.inboxcomtoolbar@inbox.com.update.url", "hxxp://toolbar.inbox.com/toolbar/firef[...]
    Found : user_pref("extensions.m3ffxtbr@mywebsearch.com.install-event-fired", true);
    Found : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea[...]
    Found : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
    Found : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.avg.com/route/?d=4c6a86d5&v=6.010.006.[...]
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.DNSCatch", false);
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.FirstLaunchShown", true);
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.LastDate", 23);
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.customNewTab", false);
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.processAddrBar", false);
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.session", "DBD4DC7A50F7D7391B18C3F0F550110D6D53[...]
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.tb_lang", "en");
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.vars.disablecuidinject", "1");
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.vars.lastcheck", "Tue%20Aug%2023%202011%2000%3A[...]
    Found : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.yahooSearch", false);
    Found : user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=4cfa2c150000000000000013d35[...]

    Profile name : default
    File : C:\Documents and Settings\MAXXIE\Application Data\Mozilla\Firefox\Profiles\crs30z3f.default\prefs.js

    Found : user_pref("extensions.crossriderapp5060.adsOldValue", -1);

    -\\ Google Chrome v [Unable to get version]

    File : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    [OK] File is clean.

    *************************

    AdwCleaner[R2].txt - [50900 octets] - [30/08/2012 01:52:58]

    ########## EOF - C:\AdwCleaner[R2].txt - [51029 octets] ##########
  2. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Hello, and welcome to TechSpot.


    [​IMG] Please see here for the board rules and other FAQ.

    Please feel free to introduce yourself, after you follow the steps below to get started.

    Information
    • From this point on, please do not make any more changes to your computer; such as install/uninstall programs, use special fix tools, delete files, edit the registry, etc. - unless advised by a malware removal helper.
    • Please do not ask for help elsewhere (in this site or other sites). Doing so can result in system changes, which may not show up in the logs you post.
    • If you have already asked for help somewhere, please post the link to the topic you were helped.
    • We try our best to reply quickly, but for any reason we do not reply in two days, please reply to this topic with the word BUMP!
    • Lastly, keep in mind that we are volunteers, so you do not have to pay for malware removal. Persist in this topic until its close, and your computer is declared clean.
    Remove the Adware.
    • Please close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Delete.
    • Confirm each time with OK.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the content of that logfile in your reply.
    • You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.
    Please post the log.
  3. abernathycjm

    abernathycjm Newcomer, in training Topic Starter

    # AdwCleaner v1.801 - Logfile created 08/30/2012 at 08:32:40
    # Updated 14/08/2012 by Xplode
    # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
    # User : Owner - CHRISTINE
    # Boot Mode : Normal
    # Running from : C:\Documents and Settings\Owner\My Documents\Downloads\adwcleaner(2).exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\Conduit
    Folder Deleted : C:\Documents and Settings\Owner\Local Settings\Application Data\Ilivid Player
    Folder Deleted : C:\Documents and Settings\Owner\Application Data\Searchqutoolbar
    Folder Deleted : C:\Documents and Settings\Owner\Application Data\Viewpoint
    Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\ConduitCommon
    Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\FCTB
    Folder Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\Searchqutoolbar
    Folder Deleted : C:\Documents and Settings\MAXXIE\Application Data\Mozilla\Firefox\Profiles\crs30z3f.default\Searchqutoolbar
    Folder Deleted : C:\Documents and Settings\MAXXIE\Application Data\Mozilla\Firefox\Profiles\crs30z3f.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\InstallMate
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\Trymedia
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\Viewpoint
    Folder Deleted : C:\Program Files\AppGraffiti
    Folder Deleted : C:\Program Files\Ask.com
    Folder Deleted : C:\Program Files\Conduit
    Folder Deleted : C:\Program Files\RebateInformer
    Folder Deleted : C:\Program Files\Search Toolbar
    Folder Deleted : C:\Program Files\Trymedia
    Folder Deleted : C:\Program Files\Viewpoint
    Folder Deleted : C:\Program Files\Windows iLivid Toolbar
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\Premium
    File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\searchplugins\Ask.xml
    File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\searchplugins\Askcom.xml
    File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\searchplugins\CouponAlert_2p.xml
    File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\searchplugins\mywebsearch.xml
    File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\searchplugins\SearchquWebSearch.xml
    File Deleted : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\searchplugins\web-search.xml
    File Deleted : C:\Program Files\Mozilla FireFox\Components\AskSearch.js
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
    File Deleted : C:\user.js

    ***** [Registry] *****

    Key Deleted : HKCU\Software\AGI
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\Binary Noise\mPlayer\kiwee_toolbar_installer.exe
    Key Deleted : HKCU\Software\ConduitSearchScopes
    Key Deleted : HKCU\Software\DataMngr
    Key Deleted : HKCU\Software\Zugo
    Key Deleted : HKLM\SOFTWARE\bflixtoolbar
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\contenthandler.dll
    Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
    Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
    Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
    Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
    Key Deleted : HKLM\SOFTWARE\Classes\contenthandler.contentselection
    Key Deleted : HKLM\SOFTWARE\Classes\contenthandler.contentselection.1
    Key Deleted : HKLM\SOFTWARE\Classes\IMsiDe1egate.Application.1
    Key Deleted : HKLM\SOFTWARE\Conduit
    Key Deleted : HKLM\SOFTWARE\DataMngr
    Key Deleted : HKLM\SOFTWARE\MetaStream
    Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
    Key Deleted : HKLM\SOFTWARE\Viewpoint

    ***** [Registre - GUID] *****

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A5461FCA-320C-4D6F-A150-A53823CE8142}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4260E0CC-0F75-462E-88A3-1E05C248BF4C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E15D3C4-C6FC-4F02-B130-77CC5B1F09DB}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5663B370-F3C3-40D1-9C46-0E800AA4D0E8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{819FFE20-35C7-4925-8CDA-4E0E2DB94302}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16FE2505-F2A0-4782-B035-AF0E5188C02C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2AF08E71-3657-462F-898C-F7E791948F94}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56965DCF-718F-4148-BECF-5A2B466F4556}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F99D2AE-5C90-43C2-A2FE-81DBE512E2FC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7225F6C9-CF64-4D6D-AE8A-169779FD7B4D}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6E15D3C4-C6FC-4F02-B130-77CC5B1F09DB}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8867AC9B-4426-44A2-A693-C95850D3405C}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00000000-6E41-4FD3-8538-502F5495E5FC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{201F27D4-3704-41D6-89C1-AA35E39143ED}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{61E0EF7A-9BC0-45ea-9B2F-F3E9F02692BD}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8736C681-37A0-40C6-A0F0-4C083409151C}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6BF16AB-42A1-4BC5-965D-5E407E449AAA}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC99A798-FD3D-4AB4-969E-6071612524F9}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{61E0EF7A-9BC0-45ea-9B2F-F3E9F02692BD}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98279C38-DE4B-4BCF-93C9-8EC26069D6F4}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6BF16AB-42A1-4BC5-965D-5E407E449AAA}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA}
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v8.0.6001.18702

    Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultName] = My Web Search --> hxxp://www.google.com
    Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultUrl] = hxxp://www.mywebsearch.com/jsp/cfg_redir2....barsearch.jhtml&st=sb&searchfor={searchTerms} --> hxxp://www.google.com
    Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://search.babylon.com/?affID=112208&tt=201208_mnt_n_3412_8&babsrc=HP_ss&mntrId=4cfa2c150000000000000013d352a920 --> hxxp://www.google.com
    Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112208&tt=201208_mnt_n_3412_8&babsrc=NT_ss&mntrId=4cfa2c150000000000000013d352a920 --> hxxp://www.google.com

    -\\ Mozilla Firefox v9.0 (en-US)

    Profile name : default
    File : C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\prefs.js

    C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\e1o8mjeq.default\user.js ... Deleted !

    Deleted : user_pref("CT2438727..clientLogIsEnabled", true);
    Deleted : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Deleted : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Deleted : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT2438727.AppTrackingLastCheckTime", "Sat Aug 20 2011 10:13:43 GMT-0500 (Central Daylight[...]
    Deleted : user_pref("CT2438727.BrowserCompStateIsOpen_1000515", true);
    Deleted : user_pref("CT2438727.CT2438727", "CT2438727");
    Deleted : user_pref("CT2438727.CommunitiesChangesLastCheckTime", "0");
    Deleted : user_pref("CT2438727.CurrentServerDate", "23-8-2011");
    Deleted : user_pref("CT2438727.DialogsAlignMode", "LTR");
    Deleted : user_pref("CT2438727.DialogsGetterLastCheckTime", "Sun Aug 21 2011 15:24:12 GMT-0500 (Central Daylig[...]
    Deleted : user_pref("CT2438727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...]
    Deleted : user_pref("CT2438727.EnableSearchHistory", false);
    Deleted : user_pref("CT2438727.EnableSearchSuggest", false);
    Deleted : user_pref("CT2438727.FirstServerDate", "22-7-2011");
    Deleted : user_pref("CT2438727.FirstTime", true);
    Deleted : user_pref("CT2438727.FirstTimeFF3", true);
    Deleted : user_pref("CT2438727.FixPageNotFoundErrors", true);
    Deleted : user_pref("CT2438727.GroupingInvalidateCache", false);
    Deleted : user_pref("CT2438727.GroupingLastCheckTime", "0");
    Deleted : user_pref("CT2438727.GroupingLastServerUpdateTime", "0");
    Deleted : user_pref("CT2438727.GroupingServerCheckInterval", 1440);
    Deleted : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT2438727.HasUserGlobalKeys", true);
    Deleted : user_pref("CT2438727.HomePageProtectorEnabled", false);
    Deleted : user_pref("CT2438727.Initialize", true);
    Deleted : user_pref("CT2438727.InitializeCommonPrefs", true);
    Deleted : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3);
    Deleted : user_pref("CT2438727.InstalledDate", "Fri Jul 22 2011 12:46:56 GMT-0500 (Central Daylight Time)");
    Deleted : user_pref("CT2438727.InvalidateCache", false);
    Deleted : user_pref("CT2438727.IsAlertDBUpdated", true);
    Deleted : user_pref("CT2438727.IsGrouping", false);
    Deleted : user_pref("CT2438727.IsInitSetupIni", true);
    Deleted : user_pref("CT2438727.IsMulticommunity", false);
    Deleted : user_pref("CT2438727.IsOpenThankYouPage", true);
    Deleted : user_pref("CT2438727.IsOpenUninstallPage", true);
    Deleted : user_pref("CT2438727.IsProtectorsInit", true);
    Deleted : user_pref("CT2438727.LanguagePackLastCheckTime", "Mon Aug 22 2011 20:44:53 GMT-0500 (Central Dayligh[...]
    Deleted : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
    Deleted : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Deleted : user_pref("CT2438727.LastLogin_3.5.0.12", "Tue Aug 16 2011 21:48:25 GMT-0500 (Central Daylight Time)[...]
    Deleted : user_pref("CT2438727.LastLogin_3.6.0.10", "Tue Aug 23 2011 13:00:33 GMT-0500 (Central Daylight Time)[...]
    Deleted : user_pref("CT2438727.LatestVersion", "3.6.0.10");
    Deleted : user_pref("CT2438727.Locale", "en");
    Deleted : user_pref("CT2438727.MCDetectTooltipHeight", "83");
    Deleted : user_pref("CT2438727.MCDetectTooltipShow", false);
    Deleted : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Deleted : user_pref("CT2438727.MCDetectTooltipWidth", "295");
    Deleted : user_pref("CT2438727.MyStuffEnabledAtInstallation", false);
    Deleted : user_pref("CT2438727.OriginalFirstVersion", "3.5.0.12");
    Deleted : user_pref("CT2438727.RadioLastCheckTime", "0");
    Deleted : user_pref("CT2438727.RadioLastUpdateIPServer", "0");
    Deleted : user_pref("CT2438727.RadioLastUpdateServer", "0");
    Deleted : user_pref("CT2438727.SHRINK_TOOLBAR", 1);
    Deleted : user_pref("CT2438727.SearchBackToDefaultEngine", false);
    Deleted : user_pref("CT2438727.SearchBoxWidth", 141);
    Deleted : user_pref("CT2438727.SearchEngine", "Software||hxxp://www.softonic.com/s/UCM_SEARCH_TERM?ptn=conduit[...]
    Deleted : user_pref("CT2438727.SearchEngineBeforeUnload", " ");
    Deleted : user_pref("CT2438727.SearchFromAddressBarIsInit", true);
    Deleted : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
    Deleted : user_pref("CT2438727.SearchInNewTabEnabled", true);
    Deleted : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
    Deleted : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Mon Aug 22 2011 20:44:51 GMT-0500 (Central Dayli[...]
    Deleted : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Deleted : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Deleted : user_pref("CT2438727.SearchInNewTabUserEnabled", false);
    Deleted : user_pref("CT2438727.SearchProtectorEnabled", false);
    Deleted : user_pref("CT2438727.SearchProtectorToolbarDisabled", false);
    Deleted : user_pref("CT2438727.ServiceMapLastCheckTime", "Mon Aug 22 2011 20:44:55 GMT-0500 (Central Daylight [...]
    Deleted : user_pref("CT2438727.SettingsLastCheckTime", "Tue Aug 23 2011 11:46:19 GMT-0500 (Central Daylight Ti[...]
    Deleted : user_pref("CT2438727.SettingsLastUpdate", "1312887586");
    Deleted : user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
    Deleted : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Fri Aug 12 2011 16:58:55 GMT-0500 (Central Day[...]
    Deleted : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1246786978");
    Deleted : user_pref("CT2438727.ToolbarShrinkedFromSetup", false);
    Deleted : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727");
    Deleted : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
    Deleted : user_pref("CT2438727.UserID", "UN11604455052121598");
    Deleted : user_pref("CT2438727.ValidationData_Search", 2);
    Deleted : user_pref("CT2438727.ValidationData_Toolbar", 2);
    Deleted : user_pref("CT2438727.alertChannelId", "832836");
    Deleted : user_pref("CT2438727.approveUntrustedApps", true);
    Deleted : user_pref("CT2438727.backendstorage.currentgame", "63697479");
    Deleted : user_pref("CT2438727.backendstorage.facebbok_user_cuid_100001690096614", "31336536303030312D37353337[...]
    Deleted : user_pref("CT2438727.backendstorage.facebbok_user_id", "6E6F6E65");
    Deleted : user_pref("CT2438727.backendstorage.facebook_conduit_social_sskey_100001690096614", "756F736845744F7[...]
    Deleted : user_pref("CT2438727.backendstorage.facebook_ctid_connect_send_n", "73656E646564");
    Deleted : user_pref("CT2438727.backendstorage.facebook_ctid_connect_send_new", "73656E646564");
    Deleted : user_pref("CT2438727.backendstorage.facebook_first_visit", "6E6F744669727374");
    Deleted : user_pref("CT2438727.backendstorage.facebook_last_message_choice", "656D707479");
    Deleted : user_pref("CT2438727.backendstorage.facebook_loggedin", "");
    Deleted : user_pref("CT2438727.backendstorage.facebook_login_refresh", "302E37373933303936343432373638303132")[...]
    Deleted : user_pref("CT2438727.backendstorage.facebook_login_status", "30");
    Deleted : user_pref("CT2438727.backendstorage.facebook_lust_recievegadet", "353037323833332C");
    Deleted : user_pref("CT2438727.backendstorage.facebook_mode", "32");
    Deleted : user_pref("CT2438727.backendstorage.facebook_permission_lastshow_100001690096614", "3133313134373031[...]
    Deleted : user_pref("CT2438727.backendstorage.facebook_toolbar_not_numer", "32");
    Deleted : user_pref("CT2438727.backendstorage.facebook_user_locale", "656E");
    Deleted : user_pref("CT2438727.backendstorage.facebook_user_name", "6E6F6E65");
    Deleted : user_pref("CT2438727.backendstorage.facebook_user_token", "6E6F6E65");
    Deleted : user_pref("CT2438727.backendstorage.facebooknotifications", "30");
    Deleted : user_pref("CT2438727.backendstorage.hxxp://facebook_conduitapps_com/v3_8.facebook_last_visit_tab", "[...]
    Deleted : user_pref("CT2438727.backendstorage.hxxp://facebook_conduitapps_com/v3_8.facebook_permission_showsnu[...]
    Deleted : user_pref("CT2438727.components.1000515", true);
    Deleted : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
    Deleted : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Tue Aug 23 2011 13:00:33 GMT-0500 (Central [...]
    Deleted : user_pref("CT2438727.homepageProtectorEnableByLogin", true);
    Deleted : user_pref("CT2438727.initDone", true);
    Deleted : user_pref("CT2438727.isAppTrackingManagerOn", true);
    Deleted : user_pref("CT2438727.myStuffEnabled", true);
    Deleted : user_pref("CT2438727.myStuffPublihserMinWidth", 400);
    Deleted : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Deleted : user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
    Deleted : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Deleted : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,111,129509324767711885,129[...]
    Deleted : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10);
    Deleted : user_pref("CT2438727.searchProtectorEnableByLogin", true);
    Deleted : user_pref("CT2438727.testingCtid", "");
    Deleted : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Mon Aug 22 2011 20:44:55 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Fri Aug 19 2011 12:46:57 GMT-0500
  4. abernathycjm

    abernathycjm Newcomer, in training Topic Starter

    (Central D[...]
    Deleted : user_pref("CT2438727.usageEnabled", false);
    Deleted : user_pref("CT2438727.usagesFlag", 2);
    Deleted : user_pref("CT2786678..clientLogIsEnabled", true);
    Deleted : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Deleted : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Deleted : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT2786678.CTID", "CT2786678");
    Deleted : user_pref("CT2786678.CurrentServerDate", "29-6-2011");
    Deleted : user_pref("CT2786678.DialogsAlignMode", "LTR");
    Deleted : user_pref("CT2786678.DialogsGetterLastCheckTime", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central Daylig[...]
    Deleted : user_pref("CT2786678.DownloadReferralCookieData", "");
    Deleted : user_pref("CT2786678.EMailNotifierPollDate", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central Daylight Ti[...]
    Deleted : user_pref("CT2786678.FeedLastCount5690698542593514850", 158);
    Deleted : user_pref("CT2786678.FeedPollDate2429156812186649977", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813040823546", "Wed Jun 29 2011 01:02:55 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813130095866", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813224203613", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813230837251", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813454291735", "Wed Jun 29 2011 01:02:56 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813729834876", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156813860870021", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156814264681793", "Wed Jun 29 2011 01:02:54 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156814863075366", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedPollDate2429156815257761081", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.FeedTTL2429156813040823546", 15);
    Deleted : user_pref("CT2786678.FeedTTL2429156813130095866", 10);
    Deleted : user_pref("CT2786678.FeedTTL2429156813454291735", 5);
    Deleted : user_pref("CT2786678.FeedTTL2429156814264681793", 5);
    Deleted : user_pref("CT2786678.FirstServerDate", "29-6-2011");
    Deleted : user_pref("CT2786678.FirstTime", true);
    Deleted : user_pref("CT2786678.FirstTimeFF3", true);
    Deleted : user_pref("CT2786678.FixPageNotFoundErrors", true);
    Deleted : user_pref("CT2786678.GroupingServerCheckInterval", 1440);
    Deleted : user_pref("CT2786678.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT2786678.HasUserGlobalKeys", true);
    Deleted : user_pref("CT2786678.HomePageProtectorEnabled", false);
    Deleted : user_pref("CT2786678.Initialize", true);
    Deleted : user_pref("CT2786678.InitializeCommonPrefs", true);
    Deleted : user_pref("CT2786678.InstallationAndCookieDataSentCount", 1);
    Deleted : user_pref("CT2786678.InstalledDate", "Tue Jun 28 2011 21:02:37 GMT-0500 (Central Daylight Time)");
    Deleted : user_pref("CT2786678.IsGrouping", false);
    Deleted : user_pref("CT2786678.IsInitSetupIni", true);
    Deleted : user_pref("CT2786678.IsMulticommunity", false);
    Deleted : user_pref("CT2786678.IsOpenThankYouPage", true);
    Deleted : user_pref("CT2786678.IsOpenUninstallPage", true);
    Deleted : user_pref("CT2786678.IsProtectorsInit", true);
    Deleted : user_pref("CT2786678.LanguagePackLastCheckTime", "Tue Jun 28 2011 21:02:37 GMT-0500 (Central Dayligh[...]
    Deleted : user_pref("CT2786678.LanguagePackReloadIntervalMM", 1440);
    Deleted : user_pref("CT2786678.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Deleted : user_pref("CT2786678.LastLogin_3.5.0.12", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central Daylight Time)[...]
    Deleted : user_pref("CT2786678.LatestVersion", "3.3.3.2");
    Deleted : user_pref("CT2786678.Locale", "en");
    Deleted : user_pref("CT2786678.MCDetectTooltipHeight", "83");
    Deleted : user_pref("CT2786678.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Deleted : user_pref("CT2786678.MCDetectTooltipWidth", "295");
    Deleted : user_pref("CT2786678.MyStuffEnabledAtInstallation", true);
    Deleted : user_pref("CT2786678.OriginalFirstVersion", "3.5.0.12");
    Deleted : user_pref("CT2786678.SearchEngineBeforeUnload", " ");
    Deleted : user_pref("CT2786678.SearchFromAddressBarIsInit", true);
    Deleted : user_pref("CT2786678.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT278[...]
    Deleted : user_pref("CT2786678.SearchInNewTabEnabled", true);
    Deleted : user_pref("CT2786678.SearchInNewTabIntervalMM", 1440);
    Deleted : user_pref("CT2786678.SearchInNewTabLastCheckTime", "Tue Jun 28 2011 21:02:36 GMT-0500 (Central Dayli[...]
    Deleted : user_pref("CT2786678.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Deleted : user_pref("CT2786678.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Deleted : user_pref("CT2786678.SearchProtectorEnabled", true);
    Deleted : user_pref("CT2786678.SearchProtectorToolbarDisabled", false);
    Deleted : user_pref("CT2786678.ServiceMapLastCheckTime", "Tue Jun 28 2011 21:02:33 GMT-0500 (Central Daylight [...]
    Deleted : user_pref("CT2786678.SettingsLastCheckTime", "Tue Jun 28 2011 21:02:34 GMT-0500 (Central Daylight Ti[...]
    Deleted : user_pref("CT2786678.SettingsLastUpdate", "1308223219");
    Deleted : user_pref("CT2786678.ThirdPartyComponentsInterval", 504);
    Deleted : user_pref("CT2786678.ThirdPartyComponentsLastCheck", "Tue Jun 28 2011 21:02:33 GMT-0500 (Central Day[...]
    Deleted : user_pref("CT2786678.ThirdPartyComponentsLastUpdate", "1246786978");
    Deleted : user_pref("CT2786678.ToolbarShrinkedFromSetup", false);
    Deleted : user_pref("CT2786678.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2786678");
    Deleted : user_pref("CT2786678.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,OurTo[...]
    Deleted : user_pref("CT2786678.UserID", "UN29809350864489556");
    Deleted : user_pref("CT2786678.WeatherNetwork", "");
    Deleted : user_pref("CT2786678.WeatherPollDate", "Tue Jun 28 2011 21:02:37 GMT-0500 (Central Daylight Time)");
    Deleted : user_pref("CT2786678.WeatherUnit", "F");
    Deleted : user_pref("CT2786678.alertChannelId", "1178763");
    Deleted : user_pref("CT2786678.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
    Deleted : user_pref("CT2786678.globalFirstTimeInfoLastCheckTime", "Wed Jun 29 2011 01:02:34 GMT-0500 (Central [...]
    Deleted : user_pref("CT2786678.homepageProtectorEnableByLogin", true);
    Deleted : user_pref("CT2786678.initDone", true);
    Deleted : user_pref("CT2786678.isAppTrackingManagerOn", true);
    Deleted : user_pref("CT2786678.myStuffEnabled", true);
    Deleted : user_pref("CT2786678.myStuffPublihserMinWidth", 400);
    Deleted : user_pref("CT2786678.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Deleted : user_pref("CT2786678.myStuffServiceIntervalMM", 1440);
    Deleted : user_pref("CT2786678.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Deleted : user_pref("CT2786678.searchProtectorDialogDelayInSec", 10);
    Deleted : user_pref("CT2786678.searchProtectorEnableByLogin", true);
    Deleted : user_pref("CT2786678.testingCtid", "");
    Deleted : user_pref("CT2786678.toolbarAppMetaDataLastCheckTime", "Tue Jun 28 2011 21:02:35 GMT-0500 (Central D[...]
    Deleted : user_pref("CT2786678.toolbarContextMenuLastCheckTime", "Tue Jun 28 2011 21:02:38 GMT-0500 (Central D[...]
    Deleted : user_pref("CT3072253..clientLogIsEnabled", true);
    Deleted : user_pref("CT3072253..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Deleted : user_pref("CT3072253..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Deleted : user_pref("CT3072253.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
    Deleted : user_pref("CT3072253.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129572937280362976", true);
    Deleted : user_pref("CT3072253.BrowserCompStateIsOpen_129573915102477663", true);
    Deleted : user_pref("CT3072253.CTID", "CT3072253");
    Deleted : user_pref("CT3072253.CurrentServerDate", "12-2-2012");
    Deleted : user_pref("CT3072253.DSChangedManually", true);
    Deleted : user_pref("CT3072253.DSInstall", true);
    Deleted : user_pref("CT3072253.DialogsAlignMode", "LTR");
    Deleted : user_pref("CT3072253.DialogsGetterLastCheckTime", "Sun Feb 12 2012 12:16:58 GMT-0600 (Central Standa[...]
    Deleted : user_pref("CT3072253.DownloadReferralCookieData", "");
    Deleted : user_pref("CT3072253.FirstServerDate", "12-2-2012");
    Deleted : user_pref("CT3072253.FirstTime", true);
    Deleted : user_pref("CT3072253.FirstTimeFF3", true);
    Deleted : user_pref("CT3072253.FixPageNotFoundErrors", true);
    Deleted : user_pref("CT3072253.GroupingServerCheckInterval", 1440);
    Deleted : user_pref("CT3072253.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT3072253.HPChangedManually", false);
    Deleted : user_pref("CT3072253.HPInstall", true);
    Deleted : user_pref("CT3072253.HPProtectChoice", true);
    Deleted : user_pref("CT3072253.HPProtectCount", 8);
    Deleted : user_pref("CT3072253.HasUserGlobalKeys", true);
    Deleted : user_pref("CT3072253.HomePageProtectorEnabled", true);
    Deleted : user_pref("CT3072253.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=[...]
    Deleted : user_pref("CT3072253.Initialize", true);
    Deleted : user_pref("CT3072253.InitializeCommonPrefs", true);
    Deleted : user_pref("CT3072253.InstallationAndCookieDataSentCount", 1);
    Deleted : user_pref("CT3072253.InstallationId", "ConduitXPEIntegration");
    Deleted : user_pref("CT3072253.InstallationType", "ConduitXPEIntegration");
    Deleted : user_pref("CT3072253.InstalledDate", "Sun Feb 12 2012 12:16:57 GMT-0600 (Central Standard Time)");
    Deleted : user_pref("CT3072253.IsAlertDBUpdated", true);
    Deleted : user_pref("CT3072253.IsGrouping", false);
    Deleted : user_pref("CT3072253.IsInitSetupIni", true);
    Deleted : user_pref("CT3072253.IsMulticommunity", false);
    Deleted : user_pref("CT3072253.IsOpenThankYouPage", true);
    Deleted : user_pref("CT3072253.IsOpenUninstallPage", false);
    Deleted : user_pref("CT3072253.IsProtectorsInit", true);
    Deleted : user_pref("CT3072253.LanguagePackLastCheckTime", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central Standar[...]
    Deleted : user_pref("CT3072253.LanguagePackReloadIntervalMM", 1440);
    Deleted : user_pref("CT3072253.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Deleted : user_pref("CT3072253.LastLogin_3.9.0.3", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central Standard Time)"[...]
    Deleted : user_pref("CT3072253.LatestVersion", "3.9.0.3");
    Deleted : user_pref("CT3072253.Locale", "en");
    Deleted : user_pref("CT3072253.MCDetectTooltipHeight", "83");
    Deleted : user_pref("CT3072253.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Deleted : user_pref("CT3072253.MCDetectTooltipWidth", "295");
    Deleted : user_pref("CT3072253.MyStuffEnabledAtInstallation", true);
    Deleted : user_pref("CT3072253.OriginalFirstVersion", "3.9.0.3");
    Deleted : user_pref("CT3072253.SHRINK_TOOLBAR", 1);
    Deleted : user_pref("CT3072253.SavedHomepage", "hxxp://www.yahoo.com/");
    Deleted : user_pref("CT3072253.SearchCaption", "uTorrentControl2 Customized Web Search");
    Deleted : user_pref("CT3072253.SearchEngineBeforeUnload", "uTorrentControl2 Customized Web Search");
    Deleted : user_pref("CT3072253.SearchFromAddressBarIsInit", true);
    Deleted : user_pref("CT3072253.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT307[...]
    Deleted : user_pref("CT3072253.SearchInNewTabEnabled", true);
    Deleted : user_pref("CT3072253.SearchInNewTabIntervalMM", 1440);
    Deleted : user_pref("CT3072253.SearchInNewTabLastCheckTime", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central Stand[...]
    Deleted : user_pref("CT3072253.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Deleted : user_pref("CT3072253.SearchProtectorEnabled", false);
    Deleted : user_pref("CT3072253.SearchProtectorToolbarDisabled", false);
    Deleted : user_pref("CT3072253.SendProtectorDataViaLogin", true);
    Deleted : user_pref("CT3072253.ServiceMapLastCheckTime", "Sun Feb 12 2012 12:16:50 GMT-0600 (Central Standard [...]
    Deleted : user_pref("CT3072253.SettingsLastCheckTime", "Sun Feb 12 2012 12:16:53 GMT-0600 (Central Standard Ti[...]
    Deleted : user_pref("CT3072253.SettingsLastUpdate", "1328745660");
    Deleted : user_pref("CT3072253.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3072253&SearchSource=13");
    Deleted : user_pref("CT3072253.ThirdPartyComponentsInterval", 504);
    Deleted : user_pref("CT3072253.ThirdPartyComponentsLastCheck", "Sun Feb 12 2012 12:16:50 GMT-0600 (Central Sta[...]
    Deleted : user_pref("CT3072253.ThirdPartyComponentsLastUpdate", "1312887586");
    Deleted : user_pref("CT3072253.ToolbarShrinkedFromSetup", false);
    Deleted : user_pref("CT3072253.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3072253");
    Deleted : user_pref("CT3072253.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
    Deleted : user_pref("CT3072253.Uninstall", true);
    Deleted : user_pref("CT3072253.UserID", "UN95424492979632391");
    Deleted : user_pref("CT3072253.ValidationData_Toolbar", 0);
    Deleted : user_pref("CT3072253.alertChannelId", "1463702");
    Deleted : user_pref("CT3072253.backendstorage.cbfirsttime", "53756E2046656220313220323031322031323A31373A30332[...]
    Deleted : user_pref("CT3072253.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
    Deleted : user_pref("CT3072253.globalFirstTimeInfoLastCheckTime", "Sun Feb 12 2012 12:16:58 GMT-0600 (Central [...]
    Deleted : user_pref("CT3072253.homepageProtectorEnableByLogin", true);
    Deleted : user_pref("CT3072253.initDone", true);
    Deleted : user_pref("CT3072253.isAppTrackingManagerOn", true);
    Deleted : user_pref("CT3072253.myStuffEnabled", true);
    Deleted : user_pref("CT3072253.myStuffPublihserMinWidth", 400);
    Deleted : user_pref("CT3072253.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Deleted : user_pref("CT3072253.myStuffServiceIntervalMM", 1440);
    Deleted : user_pref("CT3072253.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Deleted : user_pref("CT3072253.revertSettingsEnabled", false);
    Deleted : user_pref("CT3072253.searchProtectorDialogDelayInSec", 10);
    Deleted : user_pref("CT3072253.searchProtectorEnableByLogin", true);
    Deleted : user_pref("CT3072253.testingCtid", "");
    Deleted : user_pref("CT3072253.toolbarAppMetaDataLastCheckTime", "Sun Feb 12 2012 12:16:58 GMT-0600 (Central S[...]
    Deleted : user_pref("CT3072253.toolbarContextMenuLastCheckTime", "Sun Feb 12 2012 12:17:01 GMT-0600 (Central S[...]
    Deleted : user_pref("CT3072253.usagesFlag", 2);
    Deleted : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3072253&Search[...]
    Deleted : user_pref("CommunityToolbar.ConduitSearchList", " ,uTorrentControl2 Customized Web Search");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3042922/CT3042922[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3072253/CT3072253[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1178763/1174448/US", "\"0\"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/820350/816161/US", "\"0\"")[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/US", "\"0\"")[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2426074", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2786678", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3042922", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3072253", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2426074",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2786678",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3042922",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3072253",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2426074/CT2426074[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2438727/CT2438727[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2786678/CT2786678[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"2[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"cde[...]
    Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Owner\\Application[...]
    Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3");
    Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.avg.com/route/?d=4c6a86d5&[...]
    Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2786678,CT2438727,CT3072253");
    Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2786678,CT2438727,CT3072253");
    Deleted : user_pref("CommunityToolbar.ToolbarsList4", "CT2786678,CT2438727,CT3072253");
    Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Dec 10 2011 09:22:13 GMT-0600 (Cen[...]
    Deleted : user_pref("CommunityToolbar.globalUserId", "efd51156-5f91-43fe-8d85-cbecb57d68f9");
    Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
    Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
    Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3072253");
    Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Feb 12 2012 12:16:5[...]
    Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", false);
    Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
    Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Mon Aug 22 2011 21:29:49 GMT-050[...]
    Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
    Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
    Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
    Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Feb 12 2012 12:16:54 GMT-0600 (C[...]
    Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
    Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
    Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
    Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
    Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
    Deleted : user_pref("CommunityToolbar.notifications.userId", "6a5ceb73-2322-4a9f-a30f-2a10f1575abe");
    Deleted : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.yahoo.com/?ilc=1");
    Deleted : user_pref("CommunityToolbar.originalSearchEngine", "PCH Search&Win");
    Deleted : user_pref("FirstSearch.aol_toolbar.search.hasDoneFirst", 295);
    Deleted : user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=112208&tt=201208_mnt_n_341[...]
    Deleted : user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
    Deleted : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=110795&tt=3412_8&babsrc=NT_ss&mntr[...]
    Deleted : user_pref("browser.search.defaultengine", "Ask.com");
    Deleted : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
    Deleted : user_pref("browser.search.defaultthis.engineName", "uTorrentControl2 Customized Web Search");
    Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3072253&Sea[...]
    Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)");
    Deleted : user_pref("extensions.BabylonToolbar.admin", false);
    Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
    Deleted : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
    Deleted : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
    Deleted : user_pref("extensions.BabylonToolbar.babExt", "");
    Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=112208&tt=201208_mnt_n_3412_8");
    Deleted : user_pref("extensions.BabylonToolbar.babext", "babExt");
    Deleted : user_pref("extensions.BabylonToolbar.babtrack", "babTrack");
    Deleted : user_pref("extensions.BabylonToolbar.bbdpng", 26);
    Deleted : user_pref("extensions.BabylonToolbar.cntry", "US");
    Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en");
    Deleted : user_pref("extensions.BabylonToolbar.dfltlng", "en");
    Deleted : user_pref("extensions.BabylonToolbar.dfltsrch", "false");
    Deleted : user_pref("extensions.BabylonToolbar.dp_alert", "newBlk");
    Deleted : user_pref("extensions.BabylonToolbar.envrmnt", "production");
    Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false);
    Deleted : user_pref("extensions.BabylonToolbar.firstrun", false);
    Deleted : user_pref("extensions.BabylonToolbar.hdrMd5", "4BA28A9F02287B5ED9056FF51ECB337F");
    Deleted : user_pref("extensions.BabylonToolbar.hmpg", false);
    Deleted : user_pref("extensions.BabylonToolbar.hrdid", "4cfa2c150000000000000013d352a920");
    Deleted : user_pref("extensions.BabylonToolbar.id", "4cfa2c150000000000000013d352a920");
    Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15578");
    Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
    Deleted : user_pref("extensions.BabylonToolbar.instlday", "15578");
    Deleted : user_pref("extensions.BabylonToolbar.instlref", "sst");
    Deleted : user_pref("extensions.BabylonToolbar.isdcmntcmplt", "false");
    Deleted : user_pref("extensions.BabylonToolbar.keywordurl", "");
    Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1210:10:49");
    Deleted : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
    Deleted : user_pref("extensions.BabylonToolbar.newTab", false);
    Deleted : user_pref("extensions.BabylonToolbar.newtab", "false");
    Deleted : user_pref("extensions.BabylonToolbar.newtaburl", "");
    Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
    Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
    Deleted : user_pref("extensions.BabylonToolbar.prtnrid", "babylon");
    Deleted : user_pref("extensions.BabylonToolbar.savedVrsnTs", "1");
    Deleted : user_pref("extensions.BabylonToolbar.sg", "none");
    Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none");
    Deleted : user_pref("extensions.BabylonToolbar.smplgrp", "none");
    Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss");
    Deleted : user_pref("extensions.BabylonToolbar.srcext", "ss");
    Deleted : user_pref("extensions.BabylonToolbar.srch", "");
    Deleted : user_pref("extensions.BabylonToolbar.srchprvdr", "");
    Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "base");
    Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
    Deleted : user_pref("extensions.BabylonToolbar.tlbrid", "base");
    Deleted : user_pref("extensions.BabylonToolbar.tlbrsrchurl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
    Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
    Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1210:10:49");
    Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
    Deleted : user_pref("extensions.BabylonToolbar.vrsnts", "1.6.9.1210:10:49");
    Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
    Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112208&tt=201208_mnt_n_3412_8");
    Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false);
    Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110795&tt=3412_[...]
    Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
    Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
    Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1210:10:49");
    Deleted : user_pref("extensions.CouponAlert_2p.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/open[...]
    Deleted : user_pref("extensions.inboxcomtoolbar@inbox.com.update.url", "hxxp://toolbar.inbox.com/toolbar/firef[...]
    Deleted : user_pref("extensions.m3ffxtbr@mywebsearch.com.install-event-fired", true);
    Deleted : user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea[...]
    Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
    Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://search.avg.com/route/?d=4c6a86d5&v=6.010.006.[...]
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.DNSCatch", false);
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.FirstLaunchShown", true);
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.LastDate", 23);
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.customNewTab", false);
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.processAddrBar", false);
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.session", "DBD4DC7A50F7D7391B18C3F0F550110D6D53[...]
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.tb_lang", "en");
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.vars.disablecuidinject", "1");
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.vars.lastcheck", "Tue%20Aug%2023%202011%2000%3A[...]
    Deleted : user_pref("freecause4ac80c6c0a1b4b3aad7e8a6d8f5e6928.yahooSearch", false);
    Deleted : user_pref("keyword.URL", "hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=4cfa2c150000000000000013d35[...]

    Profile name : default
    File : C:\Documents and Settings\MAXXIE\Application Data\Mozilla\Firefox\Profiles\crs30z3f.default\prefs.js

    Deleted : user_pref("extensions.crossriderapp5060.adsOldValue", -1);

    -\\ Google Chrome v [Unable to get version]

    File : C:\Documents and Settings\Owner\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    [OK] File is clean.

    *************************

    AdwCleaner[R2].txt - [51031 octets] - [30/08/2012 01:52:58]
    AdwCleaner[R3].txt - [50802 octets] - [30/08/2012 08:31:46]
    AdwCleaner[S1].txt - [52156 octets] - [30/08/2012 08:32:40]

    ########## EOF - C:\AdwCleaner[S1].txt - [52285 octets] ##########
  5. abernathycjm

    abernathycjm Newcomer, in training Topic Starter

    This adware/malware is a real pain in the butt! It shuts my computer down it messes with my cookies and I am tired of having to erase my cookies and so forth. The person who ever started this crap should be sued for all the damage and headaches. Argh!!!! I am not so sure this even worked because after I did everything you suggested and rebooted I received a message stating that window had to shut down. HELP!
  6. abernathycjm

    abernathycjm Newcomer, in training Topic Starter

    Unfortunately this did not work. I have Firefox but that is what we use out here in the boondocks and this Ib.adnxs beast will not stop messing with my computer! I cant get rid of it unless I blow up my computer! Argh!!!!!
  7. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Okay...let's search here....

    Please download and run TDSSKiller to your desktop as outlined below:

    Doubleclick on TDSSKiller.exe to run the application, then click on Change parameters.

    For Windows XP, double-click to start.
    For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.


    [​IMG]

    -------------------------

    Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.

    [​IMG]

    ------------------------

    Click the Start Scan button.

    [​IMG]

    -----------------------

    If a suspicious object is detected, the default action will be Skip, click on Continue
    If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
    Skip and click on Continue


    [​IMG]

    ----------------------

    If malicious objects are found, they will show in the Scan results and offer three (3) options.

    Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
    Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.


    [​IMG]


    --------------------

    A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.
    Sometimes these logs can be very large, in that case please attach it or zip it up and attach it.

    -------------------

    Here's a summary of what to do if you would like to print it out:

    If a suspicious object is detected, the default action will be Skip, click on Continue
    If you get the warning about a file UnsignedFile.Multi.Generic or LockedFile.Multi.Generic please choose
    Skip and click on Continue

    If malicious objects are found, they will show in the Scan results and offer three (3) options.

    Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.
    Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
  8. Jay Pfoutz

    Jay Pfoutz Malware Helper Posts: 4,286   +49

    Hello. Are you still with us?

    Your thread has been marked as "Inactive" because of your lack of reply. Please let us know how your computer is running, or if you want to continue in this topic.

    Thanks.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.