ComboFix 12-08-24.02 - Aileen 08/24/2012 15:20:12.2.2 - x86
Microsoft Windows 7 Starter 6.1.7600.0.1252.1.1033.18.1013.176 [GMT -7:00]
Running from: c:\users\Aileen\Desktop\fix\ComboFix.exe
Command switches used :: c:\users\Aileen\Desktop\fix\CFScript.txt.txt
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2012-07-24 to 2012-08-24 )))))))))))))))))))))))))))))))
.
.
2012-08-24 22:42 . 2012-08-24 22:42--------d-----w-c:\windows\system32\config\systemprofile\AppData\Local\temp
2012-08-24 22:42 . 2012-08-24 22:42--------d-----w-c:\users\Guest\AppData\Local\temp
2012-08-24 22:42 . 2012-08-24 22:42--------d-----w-c:\users\Default\AppData\Local\temp
2012-08-24 11:24 . 2012-08-24 22:42--------d-----w-c:\users\Aileen\AppData\Local\temp
2012-08-24 03:19 . 2012-08-24 03:19--------d-----w-c:\users\Guest\AppData\Roaming\Creative
2012-08-20 23:28 . 2012-08-20 23:28--------d-----w-c:\users\Guest\AppData\Local\Apple
2012-08-17 13:16 . 2012-08-17 13:17--------d-----w-C:\FRST
2012-08-17 10:35 . 2012-08-21 21:50--------d-----w-c:\program files\Microsoft Security Client
2012-08-13 23:56 . 2012-08-13 23:56--------d-----w-c:\windows\Sun
2012-08-11 06:36 . 2012-06-29 08:446891424----a-w-c:\programdata\Microsoft\Windows Defender\Definition Updates\{C8146B2B-F741-4BF8-9BC8-7DC36EEB2A0A}\mpengine.dll
2012-08-05 03:48 . 2012-08-05 03:47108544----a-w-c:\programdata\Microsoft\Windows\DRM\BB69.tmp
2012-08-01 18:22 . 2012-08-06 06:32--------d-----w-c:\users\Guest\AppData\Local\Facebook
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-27 05:20 . 2012-06-27 05:20426184----a-w-c:\windows\system32\FlashPlayerApp.exe
2012-06-27 05:20 . 2012-06-27 05:2070344----a-w-c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-12 02:44 . 2012-07-12 18:462344448----a-w-c:\windows\system32\win32k.sys
2012-06-06 05:09 . 2012-07-11 20:151389568----a-w-c:\windows\system32\msxml6.dll
2012-06-06 05:09 . 2012-07-11 20:151236992----a-w-c:\windows\system32\msxml3.dll
2012-06-02 22:19 . 2012-06-08 23:09171904----a-w-c:\windows\system32\wuwebv.dll
2012-06-02 22:19 . 2012-06-08 23:1053784----a-w-c:\windows\system32\wuauclt.exe
2012-06-02 22:19 . 2012-06-08 23:1045080----a-w-c:\windows\system32\wups2.dll
2012-06-02 22:19 . 2012-06-08 23:0935864----a-w-c:\windows\system32\wups.dll
2012-06-02 22:19 . 2012-06-08 23:09577048----a-w-c:\windows\system32\wuapi.dll
2012-06-02 22:19 . 2012-06-08 23:101933848----a-w-c:\windows\system32\wuaueng.dll
2012-06-02 22:12 . 2012-06-08 23:102422272----a-w-c:\windows\system32\wucltux.dll
2012-06-02 22:12 . 2012-06-08 23:0933792----a-w-c:\windows\system32\wuapp.exe
2012-06-02 22:12 . 2012-06-08 23:0988576----a-w-c:\windows\system32\wudriver.dll
2012-06-02 04:51 . 2012-07-11 20:15134000----a-w-c:\windows\system32\drivers\ksecpkg.sys
2012-06-02 04:51 . 2012-07-11 20:1567440----a-w-c:\windows\system32\drivers\ksecdd.sys
2012-06-02 04:50 . 2012-07-11 20:15369336----a-w-c:\windows\system32\drivers\cng.sys
2012-06-02 04:48 . 2012-07-11 20:15225280----a-w-c:\windows\system32\schannel.dll
2012-06-02 04:47 . 2012-07-11 20:15219136----a-w-c:\windows\system32\ncrypt.dll
2012-05-31 19:25 . 2010-06-20 03:06237072------w-c:\windows\system32\MpSigStub.exe
2012-04-08 06:42 . 2011-06-16 22:39121816----a-w-c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-06-15 15141768]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-11-05 1594664]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-11-17 7866912]
"Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4562944]
"BTMeter"="c:\program files\Battery Meter\BTMeter.exe" [2009-09-17 632176]
"WSED"="c:\program files\WSED\WSED.exe" [2009-05-27 247080]
"CapsLKNotify"="c:\program files\CapsLKNotify\CapsLKNotify.exe" [2009-06-09 320880]
"Dell DataSafe Online"="c:\program files\Dell DataSafe Online\DataSafeOnline.exe" [2009-09-11 1779952]
"dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-06-03 206064]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-08-10 421888]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-10-25 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-10-25 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-10-25 150552]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
.
c:\users\Aileen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-9-21 1316192]
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2009-9-21 1316192]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 dc3d;MS Hardware Device Detection Driver (HID);c:\windows\system32\DRIVERS\dc3d.sys [x]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]
S0 EMSC;COMPAL Embedded System Control;c:\windows\system32\DRIVERS\EMSC.SYS [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonationREG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc
.
Contents of the 'Scheduled Tasks' folder
.
2012-08-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-01 00:19]
.
2012-08-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-01 00:19]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://
www.startnow.com/?src=startpage&provider=Bing&provider_code=Z059&partner_id=308&product_id=435&affiliate_id=&channel=dpgrupo&toolbar_id=200&toolbar_version=2.0&install_country=US&install_date=20110701&user_guid=8FF070CEFC3241ADA77A5A60E1EEBDEA&machine_id=e5ba8923dbc0dbb1bc908bb979ea2c7c&browser=IE&os=win&os_version=6.1-x86-SP0
mStart Page = hxxp://
www.yahoo.com
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.1
FF - ProfilePath - c:\users\Aileen\AppData\Roaming\Mozilla\Firefox\Profiles\hwk53vfa.default\
FF - user.js: yahoo.ytff.general.dontshowhpoffer - true
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2012-08-24 16:01:21
ComboFix-quarantined-files.txt 2012-08-24 23:01
ComboFix2.txt 2012-08-24 11:50
.
Pre-Run: 80,786,227,200 bytes free
Post-Run: 80,745,553,920 bytes free
.
- - End Of File - - 2DC8AD6C3BD155F73DC9A7F2222EAB2A
# AdwCleaner v1.801 - Logfile created 08/24/2012 at 16:04:58
# Updated 14/08/2012 by Xplode
# Operating system : Windows 7 Starter (32 bits)
# User : Aileen - AILEEN-PC
# Boot Mode : Normal
# Running from : C:\Users\Aileen\Desktop\fix\adwcleaner.exe
# Option [Search]
***** [Services] *****
***** [Files / Folders] *****
Folder Found : C:\Users\Aileen\AppData\Local\OpenCandy
Folder Found : C:\Users\Aileen\AppData\Roaming\OpenCandy
Folder Found : C:\Users\Aileen\AppData\Roaming\Mozilla\Firefox\Profiles\hwk53vfa.default\Conduit
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\Trymedia
Folder Found : C:\Program Files\DAEMON Tools Toolbar
File Found : C:\Users\Aileen\AppData\Roaming\Mozilla\Firefox\Profiles\hwk53vfa.default\searchplugins\Askcom.xml
File Found : C:\Users\Aileen\AppData\Roaming\Mozilla\Firefox\Profiles\hwk53vfa.default\searchplugins\Conduit.xml
***** [Registry] *****
Key Found : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj
Key Found : HKLM\SOFTWARE\Classes\DTToolbar.ToolBandObj.1
Key Found : HKLM\SOFTWARE\Google\chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl
Value Found : HKCU\Software\Mozilla\Firefox\Extensions [{EB132DB0-A4CA-11DF-9732-0E29E0D72085}]
***** [Registre - GUID] *****
Key Found : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66D8FBA6-D90F-40A9-AC55-84896F79CA69}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BFE4B5CB-63F7-4A51-9266-6167655D5B4F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C80BDEB2-8735-44C6-BD55-A1CCD555667A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BFE4B5CB-63F7-4A51-9266-6167655D5B4F}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C80BDEB2-8735-44C6-BD55-A1CCD555667A}
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.7600.16385
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://
www.startnow.com/?src=startpage&provider=Bing&provider_code=Z059&partner_id=308&product_id=435&affiliate_id=&channel=dpgrupo&toolbar_id=200&toolbar_version=2.0&install_country=US&install_date=20110701&user_guid=8FF070CEFC3241ADA77A5A60E1EEBDEA&machine_id=e5ba8923dbc0dbb1bc908bb979ea2c7c&browser=IE&os=win&os_version=6.1-x86-SP0
-\\ Mozilla Firefox v9.0.1 (en-US)
Profile name : default
File : C:\Users\Aileen\AppData\Roaming\Mozilla\Firefox\Profiles\hwk53vfa.default\prefs.js
Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("extensions.crossriderapp4924.4924.InstallationTime", 1338146321);
Found : user_pref("extensions.crossriderapp4924.4924.active", true);
Found : user_pref("extensions.crossriderapp4924.4924.addressbar", "");
Found : user_pref("extensions.crossriderapp4924.4924.affid", "0");
Found : user_pref("extensions.crossriderapp4924.4924.backgroundjs", "\n\n/**********************************[...]
Found : user_pref("extensions.crossriderapp4924.4924.backgroundver", 4);
Found : user_pref("extensions.crossriderapp4924.4924.can_run_bg_code", true);
Found : user_pref("extensions.crossriderapp4924.4924.certdomaininstaller", "");
Found : user_pref("extensions.crossriderapp4924.4924.changeprevious", false);
Found : user_pref("extensions.crossriderapp4924.4924.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]
Found : user_pref("extensions.crossriderapp4924.4924.cookie.InstallationTime.value", "1338146321");
Found : user_pref("extensions.crossriderapp4924.4924.description", "The Easiest Way To Remove Your Facebook [...]
Found : user_pref("extensions.crossriderapp4924.4924.domain", "removemytimeline.com");
Found : user_pref("extensions.crossriderapp4924.4924.emailsig", "");
Found : user_pref("extensions.crossriderapp4924.4924.enablesearch", false);
Found : user_pref("extensions.crossriderapp4924.4924.exposesites", "");
Found : user_pref("extensions.crossriderapp4924.4924.fbremoteurl", "");
Found : user_pref("extensions.crossriderapp4924.4924.group", 0);
Found : user_pref("extensions.crossriderapp4924.4924.homepage", "");
Found : user_pref("extensions.crossriderapp4924.4924.iframe", false);
Found : user_pref("extensions.crossriderapp4924.4924.manifesturl", "");
Found : user_pref("extensions.crossriderapp4924.4924.name", "FB Timeline Remover");
Found : user_pref("extensions.crossriderapp4924.4924.newtab", "");
Found : user_pref("extensions.crossriderapp4924.4924.opensearch", "");
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_13.code", "(function(c){c.selectedText=f[...]
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_13.name", "CrossriderAppUtils");
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_13.ver", 1);
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_14.code", "\"undefined\"===typeof appAPI[...]
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_14.name", "CrossriderUtils");
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_14.ver", 1);
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_15.code", "(function(e){function u(c,b){[...]
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_15.name", "FacebookFFIE");
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_15.ver", 1);
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_16.code", "(function(b,a){function I(){v[...]
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_16.name", "FFAppAPIWrapper");
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_16.ver", 1);
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_17.code", "var $$jquery;\n(function(l,n)[...]
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_17.name", "jQuery");
Found : user_pref("extensions.crossriderapp4924.4924.plugins.plugin_17.ver", 1);
Found : user_pref("extensions.crossriderapp4924.4924.plugins_lists.plugins_0", "17,14,16");
Found : user_pref("extensions.crossriderapp4924.4924.plugins_lists.plugins_1", "17,14,13,16,15");
Found : user_pref("extensions.crossriderapp4924.4924.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...]
Found : user_pref("extensions.crossriderapp4924.4924.pluginsversion", 1);
Found : user_pref("extensions.crossriderapp4924.4924.premium", true);
Found : user_pref("extensions.crossriderapp4924.4924.publisher", "Deximol");
Found : user_pref("extensions.crossriderapp4924.4924.searchstatus", 0);
Found : user_pref("extensions.crossriderapp4924.4924.setnewtab", false);
Found : user_pref("extensions.crossriderapp4924.4924.settingsurl", "");
Found : user_pref("extensions.crossriderapp4924.4924.thankyou", "hxxp://facebook.com/profile.php?");
Found : user_pref("extensions.crossriderapp4924.4924.updateinterval", 360);
Found : user_pref("extensions.crossriderapp4924.4924.ver", 30);
Found : user_pref("extensions.crossriderapp4924.apps", "4924");
Found : user_pref("extensions.crossriderapp4924.bic", "1378fbc72284c2145e569c479529b9b7");
Found : user_pref("extensions.crossriderapp4924.cid", 4924);
Found : user_pref("extensions.crossriderapp4924.firstrun", false);
Found : user_pref("extensions.crossriderapp4924.hadappinstalled", true);
Found : user_pref("extensions.crossriderapp4924.installationdate", 1338146321);
Found : user_pref("extensions.crossriderapp4924.lastcheck", 22302439);
Found : user_pref("extensions.crossriderapp4924.lastcheckitem", 22302599);
Found : user_pref("extensions.crossriderapp4924.misc.lastBgWorkerTimer", "1338155924618");
Found : user_pref("extensions.crossriderapp4924.misc.lastDomWorkerTimer", "1338155924569");
Found : user_pref("extensions.crossriderapp4926.4926.InstallationTime", 1338244166);
Found : user_pref("extensions.crossriderapp4926.4926.active", true);
Found : user_pref("extensions.crossriderapp4926.4926.addressbar", "");
Found : user_pref("extensions.crossriderapp4926.4926.affid", "0");
Found : user_pref("extensions.crossriderapp4926.4926.backgroundjs", "\n\n/**********************************[...]
Found : user_pref("extensions.crossriderapp4926.4926.backgroundver", 2);
Found : user_pref("extensions.crossriderapp4926.4926.can_run_bg_code", true);
Found : user_pref("extensions.crossriderapp4926.4926.certdomaininstaller", "");
Found : user_pref("extensions.crossriderapp4926.4926.changeprevious", false);
Found : user_pref("extensions.crossriderapp4926.4926.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]
Found : user_pref("extensions.crossriderapp4926.4926.cookie.InstallationTime.value", "1338244166");
Found : user_pref("extensions.crossriderapp4926.4926.description", "The Easiest Way To Remove Your Facebook [...]
Found : user_pref("extensions.crossriderapp4926.4926.domain", "battle-stats.com");
Found : user_pref("extensions.crossriderapp4926.4926.emailsig", "");
Found : user_pref("extensions.crossriderapp4926.4926.enablesearch", false);
Found : user_pref("extensions.crossriderapp4926.4926.exposesites", "");
Found : user_pref("extensions.crossriderapp4926.4926.fbremoteurl", "");
Found : user_pref("extensions.crossriderapp4926.4926.group", 0);
Found : user_pref("extensions.crossriderapp4926.4926.homepage", "");
Found : user_pref("extensions.crossriderapp4926.4926.iframe", false);
Found : user_pref("extensions.crossriderapp4926.4926.manifesturl", "");
Found : user_pref("extensions.crossriderapp4926.4926.name", "Timeline Remover");
Found : user_pref("extensions.crossriderapp4926.4926.newtab", "");
Found : user_pref("extensions.crossriderapp4926.4926.opensearch", "");
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_13.code", "(function(c){c.selectedText=f[...]
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_13.name", "CrossriderAppUtils");
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_13.ver", 1);
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_14.code", "\"undefined\"===typeof appAPI[...]
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_14.name", "CrossriderUtils");
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_14.ver", 1);
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_15.code", "(function(e){function u(c,b){[...]
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_15.name", "FacebookFFIE");
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_15.ver", 1);
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_16.code", "(function(b,a){function I(){v[...]
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_16.name", "FFAppAPIWrapper");
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_16.ver", 1);
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_17.code", "var $$jquery;\n(function(l,n)[...]
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_17.name", "jQuery");
Found : user_pref("extensions.crossriderapp4926.4926.plugins.plugin_17.ver", 1);
Found : user_pref("extensions.crossriderapp4926.4926.plugins_lists.plugins_0", "17,14,16");
Found : user_pref("extensions.crossriderapp4926.4926.plugins_lists.plugins_1", "17,14,13,16,15");
Found : user_pref("extensions.crossriderapp4926.4926.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...]
Found : user_pref("extensions.crossriderapp4926.4926.pluginsversion", 1);
Found : user_pref("extensions.crossriderapp4926.4926.premium", true);
Found : user_pref("extensions.crossriderapp4926.4926.publisher", "Deximol");
Found : user_pref("extensions.crossriderapp4926.4926.searchstatus", 0);
Found : user_pref("extensions.crossriderapp4926.4926.setnewtab", false);
Found : user_pref("extensions.crossriderapp4926.4926.settingsurl", "");
Found : user_pref("extensions.crossriderapp4926.4926.thankyou", "hxxp://facebook.com/profile.php");
Found : user_pref("extensions.crossriderapp4926.4926.updateinterval", 360);
Found : user_pref("extensions.crossriderapp4926.4926.ver", 55);
Found : user_pref("extensions.crossriderapp4926.apps", "4926");
Found : user_pref("extensions.crossriderapp4926.bic", "1378fbc72284c2145e569c479529b9b7");
Found : user_pref("extensions.crossriderapp4926.cid", 4926);
Found : user_pref("extensions.crossriderapp4926.firstrun", false);
Found : user_pref("extensions.crossriderapp4926.hadappinstalled", true);
Found : user_pref("extensions.crossriderapp4926.installationdate", 1338244165);
Found : user_pref("extensions.crossriderapp4926.lastcheck", 22304069);
Found : user_pref("extensions.crossriderapp4926.lastcheckitem", 22304094);
Found : user_pref("extensions.crossriderapp4926.misc.lastBgWorkerTimer", "1338245606731");
Found : user_pref("extensions.crossriderapp4926.misc.lastDomWorkerTimer", "1338245606604");
Found : user_pref("extensions.enabledAddons", "{5911488E-9D1E-40ec-8CBB-06B231CC153F}:2.4.0,crossriderapp492[...]
-\\ Google Chrome v21.0.1180.83
File : C:\Users\Aileen\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [14000 octets] - [24/08/2012 16:04:58]
########## EOF - C:\AdwCleaner[R1].txt - [14129 octets] ##########