offline
- Pridružio: 01 Sep 2007
- Poruke: 137
|
Napisano: 05 Apr 2014 14:07
Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Srdjan on sub 05.04.2014 at 13:20:57.48.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Srdjan\Desktop\zoek.scr [Scan all users] [Script inserted]
==== System Restore Info ======================
5.4.2014 13:25:20 Zoek.exe System Restore Point Created Succesfully.
==== Possible Rootkit Infection ======================
C:\WINDOWS\$NtUninstallKB27543$\1998709577\U
C:\WINDOWS\$NtUninstallKB27543$\1998709577\L
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6DEBE277-C9DD-4F3E-8914-C7C6E45A73B6} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{BE4E2A9C-EB3A-4488-B62A-E9D08D4B31B3} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{DA113174-9303-4EA8-8DA6-A56C282DEBC3} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{93935F7F-9C88-42F8-8445-95251D27FABC} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{93935F7F-9C88-42F8-8445-95251D27FABC} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{93935F7F-9C88-42F8-8445-95251D27FABC} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Approved Extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{336D0C35-8A85-403a-B9D2-65C292C39087} deleted successfully
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\jqs@sun.com deleted successfully
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ibupdaterservice deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\ibupdaterservice deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Web Assistant deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Web Assistant deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\web assistant updater deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\web assistant updater deleted successfully
==== FireFox Fix ======================
ProfilePath: C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default
---- Lines BabylonToolbar removed from prefs.js ----
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
user_pref("extensions.BabylonToolbar.autoRvrt", "false");
user_pref("extensions.BabylonToolbar.bbDpng", "2");
user_pref("extensions.BabylonToolbar.cntry", "ME");
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar.dpkLst", "");
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.hdrMd5", "FAD535A9BD14B1483B834702AB0A5DED");
user_pref("extensions.BabylonToolbar.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.BabylonToolbar.instlDay", "15714");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.lastB", "http://searchou.com/?id=d0a1dfa6000000000000005345000000");
user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.7.221:29:28");
user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"76\",\"lastVrsn\":\"76\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.prtkDS", 0);
user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.rvrt", "false");
user_pref("extensions.BabylonToolbar.sg", "azb");
user_pref("extensions.BabylonToolbar.smplGrp", "azb");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=d0a1dfa6000000000000005345000000&q=");
user_pref("extensions.BabylonToolbar.vrsn", "1.8.7.2");
user_pref("extensions.BabylonToolbar.vrsni", "1.8.7.2");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=117023&tt=090113_ctrl_0213_2");
user_pref("extensions.BabylonToolbar_i.excTlbr", false);
user_pref("extensions.BabylonToolbar_i.newTab", false);
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.7.221:29:30");
---- Lines BabylonToolbar removed from user.js ----
user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=d0a1dfa6000000000000005345000000&q=");
user_pref("extensions.BabylonToolbar.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
user_pref("extensions.BabylonToolbar.instlDay", "15714");
user_pref("extensions.BabylonToolbar.vrsn", "1.8.7.2");
user_pref("extensions.BabylonToolbar.vrsni", "1.8.7.2");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.7.221:29:30");
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.dfltLng", "en");
user_pref("extensions.BabylonToolbar_i.excTlbr", false);
user_pref("extensions.BabylonToolbar.excTlbr", false);
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=117023&tt=090113_ctrl_0213_2");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.BabylonToolbar.autoRvrt", "false");
user_pref("extensions.BabylonToolbar.rvrt", "false");
user_pref("extensions.BabylonToolbar_i.newTab", false);
---- Lines incredibar removed from prefs.js ----
user_pref("extensions.ffxtlbr@incredibar.com.install-event-fired", true);
user_pref("extensions.incredibar.actvtyRptTime", "1359719348689");
user_pref("extensions.incredibar.admin", false);
user_pref("extensions.incredibar.afd-1a2d3abe806f9951da73a33d41fcfc9c", "%7B%22items%22%3A%5B%7B%22id%22%3A%22lGtla66abWFupG1lbVNlZmViVWyca2Rspmtna1Vl
user_pref("extensions.incredibar.afd-1a2d3abe806f9951da73a33d41fcfc9c_wid", "2521; expires=Thu, 13 Dec 2012 22:55:21 GMT");
user_pref("extensions.incredibar.aflt", "orgnl");
user_pref("extensions.incredibar.afterInstallRpt", "sent");
user_pref("extensions.incredibar.cntry", "RS");
user_pref("extensions.incredibar.dfltlng", "EN");
user_pref("extensions.incredibar.dfltLng", "EN");
user_pref("extensions.incredibar.dfltsrch", "false");
user_pref("extensions.incredibar.dfltSrch", false);
user_pref("extensions.incredibar.did", "10643");
user_pref("extensions.incredibar.envrmnt", "production");
user_pref("extensions.incredibar.excTlbr", false);
user_pref("extensions.incredibar.hdrMd5", "46026146D970B22E9E97AFC30EB1BCB6");
user_pref("extensions.incredibar.hmpg", false);
user_pref("extensions.incredibar.hrdid", "d0a1dfa6000000000000005345000000");
user_pref("extensions.incredibar.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.incredibar.installerproductid", "26");
user_pref("extensions.incredibar.instlday", "15576");
user_pref("extensions.incredibar.instlDay", "15576");
user_pref("extensions.incredibar.instlRef", "");
user_pref("extensions.incredibar.instlref", "");
user_pref("extensions.incredibar.isdcmntcmplt", "false");
user_pref("extensions.incredibar.isDcmntCmplt", false);
user_pref("extensions.incredibar.keywordurl", "");
user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.143:08:27");
user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
user_pref("extensions.incredibar.newtab", "false");
user_pref("extensions.incredibar.newTab", false);
user_pref("extensions.incredibar.newtaburl", "");
user_pref("extensions.incredibar.noFFXTlbr", false);
user_pref("extensions.incredibar.ppd", "1");
user_pref("extensions.incredibar.prdct", "incredibar");
user_pref("extensions.incredibar.productid", "26");
user_pref("extensions.incredibar.prtnrId", "Incredibar");
user_pref("extensions.incredibar.prtnrid", "Incredibar");
user_pref("extensions.incredibar.sg", "none");
user_pref("extensions.incredibar.smplgrp", "none");
user_pref("extensions.incredibar.smplGrp", "none");
user_pref("extensions.incredibar.srch", "");
user_pref("extensions.incredibar.srchprvdr", "");
user_pref("extensions.incredibar.tlbrId", "base");
user_pref("extensions.incredibar.tlbrid", "base");
user_pref("extensions.incredibar.tlbrsrchurl", "http://mystart.Incredibar.com/?a=6R8D0ggWG7&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8D0ggWG7&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar.upn2", "6R8D0ggWG7");
user_pref("extensions.incredibar.upn2n", "92824933240078427");
user_pref("extensions.incredibar.vrsn", "1.5.11.14");
user_pref("extensions.incredibar.vrsni", "1.5.11.14");
user_pref("extensions.incredibar.vrsnTs", "1.5.11.143:08:27");
user_pref("extensions.incredibar.vrsnts", "1.5.11.143:08:27");
user_pref("extensions.incredibar_i.aflt", "orgnl");
user_pref("extensions.incredibar_i.dfltLng", "");
user_pref("extensions.incredibar_i.did", "10643");
user_pref("extensions.incredibar_i.excTlbr", false);
user_pref("extensions.incredibar_i.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.incredibar_i.installerproductid", "26");
user_pref("extensions.incredibar_i.instlDay", "15576");
user_pref("extensions.incredibar_i.instlRef", "");
user_pref("extensions.incredibar_i.ms_url_id", "");
user_pref("extensions.incredibar_i.newTab", false);
user_pref("extensions.incredibar_i.ppd", "1");
user_pref("extensions.incredibar_i.prdct", "incredibar");
user_pref("extensions.incredibar_i.productid", "26");
user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
user_pref("extensions.incredibar_i.smplGrp", "none");
user_pref("extensions.incredibar_i.tlbrId", "base");
user_pref("extensions.incredibar_i.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8D0ggWG7&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar_i.upn2", "6R8D0ggWG7");
user_pref("extensions.incredibar_i.upn2n", "92824933240078427");
user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.143:08:27");
---- Lines incredibar modified from prefs.js ----
user_pref("extensions.enabledItems", "toolbar@ask.com:3.3.3.123,{ce18769b-c7fa-42d2-860d-17c4662c70ad}:2.7.2.0,{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}:
---- Lines incredibar removed from user.js ----
user_pref("extensions.incredibar_i.newTab", false);
user_pref("extensions.incredibar_i.tlbrSrchUrl", "http://mystart.Incredibar.com/?a=6R8D0ggWG7&loc=IB_TB&i=26&search=");
user_pref("extensions.incredibar_i.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.incredibar_i.instlDay", "15576");
user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.143:08:27");
user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
user_pref("extensions.incredibar_i.prdct", "incredibar");
user_pref("extensions.incredibar_i.aflt", "orgnl");
user_pref("extensions.incredibar_i.smplGrp", "none");
user_pref("extensions.incredibar_i.tlbrId", "base");
user_pref("extensions.incredibar_i.instlRef", "");
user_pref("extensions.incredibar_i.dfltLng", "");
user_pref("extensions.incredibar_i.excTlbr", false);
user_pref("extensions.incredibar_i.ms_url_id", "");
user_pref("extensions.incredibar_i.upn2", "6R8D0ggWG7");
user_pref("extensions.incredibar_i.upn2n", "92824933240078427");
user_pref("extensions.incredibar_i.productid", "26");
user_pref("extensions.incredibar_i.installerproductid", "26");
user_pref("extensions.incredibar_i.did", "10643");
user_pref("extensions.incredibar_i.ppd", "1");
---- Lines privitize removed from prefs.js ----
user_pref("browser.search.order.1", "Search The Web (privitize)");
user_pref("browser.search.selectedEngine", "Search The Web (privitize)");
user_pref("extensions.ffxtlbr@privitize.com.install-event-fired", true);
user_pref("extensions.privitize.admin", false);
user_pref("extensions.privitize.aflt", "orgnl");
user_pref("extensions.privitize.appId", "{301966DF-A84B-4255-AAB9-574B5CE237E4}");
user_pref("extensions.privitize.autoRvrt", "false");
user_pref("extensions.privitize.dfltLng", "");
user_pref("extensions.privitize.dfltSrch", true);
user_pref("extensions.privitize.dnsErr", true);
user_pref("extensions.privitize.excTlbr", true);
user_pref("extensions.privitize.ffxUnstlRst", false);
user_pref("extensions.privitize.hmpg", true);
user_pref("extensions.privitize.hmpgUrl", "http://searchou.com/?id=d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.hpFFXOld", "http://www.mysearchresults.com/?c=3513&t=07");
user_pref("extensions.privitize.hpOld0", "http://www.mysearchresults.com/?c=3513&t=07");
user_pref("extensions.privitize.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.instlDay", "15822");
user_pref("extensions.privitize.instlRef", "");
user_pref("extensions.privitize.kw_url", "http://searchou.com/?q={searchTerms}&id=d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.lastB", "http://www.mysearchresults.com/?c=3513&t=07");
user_pref("extensions.privitize.lastVrsnTs", "1.8.16.221:36:22");
user_pref("extensions.privitize.newTab", true);
user_pref("extensions.privitize.newTabUrl", "http://searchou.com/?id=d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.prdct", "privitize");
user_pref("extensions.privitize.prtnrId", "privitize");
user_pref("extensions.privitize.rvrt", "false");
user_pref("extensions.privitize.smplGrp", "none");
user_pref("extensions.privitize.srchPrvdr", "Search The Web (privitize)");
user_pref("extensions.privitize.tlbrId", "base");
user_pref("extensions.privitize.tlbrSrchUrl", "http://searchou.com/?id=d0a1dfa6000000000000005345000000&q=");
user_pref("extensions.privitize.vrsn", "1.8.16.22");
user_pref("extensions.privitize.vrsni", "1.8.16.22");
user_pref("extensions.privitize.vrsnTs", "1.8.16.221:36:22");
---- Lines privitize modified from prefs.js ----
user_pref("extensions.enabledAddons", "%7Be968fc70-8f95-4ab9-9e79-304de2a71ee1%7D:0.7.3,ffxtlbr%40babylon.com:1.5.0,%7BB17C1C5A-04B1-11DB-9804-B622A1E
---- Lines privitize removed from user.js ----
user_pref("extensions.privitize.hpOld0", "http://www.mysearchresults.com/?c=3513&t=07");
user_pref("extensions.privitize.tlbrSrchUrl", "http://searchou.com/?id=d0a1dfa6000000000000005345000000&q=");
user_pref("extensions.privitize.id", "d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.appId", "{301966DF-A84B-4255-AAB9-574B5CE237E4}");
user_pref("extensions.privitize.instlDay", "15822");
user_pref("extensions.privitize.vrsn", "1.8.16.22");
user_pref("extensions.privitize.vrsni", "1.8.16.22");
user_pref("extensions.privitize.vrsnTs", "1.8.16.221:36:22");
user_pref("extensions.privitize.prtnrId", "privitize");
user_pref("extensions.privitize.prdct", "privitize");
user_pref("extensions.privitize.aflt", "orgnl");
user_pref("extensions.privitize.smplGrp", "none");
user_pref("extensions.privitize.tlbrId", "base");
user_pref("extensions.privitize.instlRef", "");
user_pref("extensions.privitize.dfltLng", "");
user_pref("extensions.privitize.excTlbr", true);
user_pref("extensions.privitize.ffxUnstlRst", false);
user_pref("extensions.privitize.admin", false);
user_pref("extensions.privitize.autoRvrt", "false");
user_pref("extensions.privitize.rvrt", "false");
user_pref("extensions.privitize.hmpg", true);
user_pref("extensions.privitize.hmpgUrl", "http://searchou.com/?id=d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.dfltSrch", true);
user_pref("extensions.privitize.srchPrvdr", "Search The Web (privitize)");
user_pref("extensions.privitize.kw_url", "http://searchou.com/?q={searchTerms}&id=d0a1dfa6000000000000005345000000");
user_pref("extensions.privitize.dnsErr", true);
user_pref("extensions.privitize.newTab", true);
user_pref("extensions.privitize.newTabUrl", "http://searchou.com/?id=d0a1dfa6000000000000005345000000");
---- Lines CT2465030 removed from prefs.js ----
user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2465030&SearchSource=3&q={searchTerms}");
user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2465030", "\"1367226713\"");
user_pref("CommunityToolbar.ETag.http://ip2location.conduit-services.com/ip/?ctid=CT2465030&ver=3.20.0.4&client=ToolbarConfiguration", "\"5cbc0f716c8a
user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2465030", "\"7097fd37277b6a1b754b125bd11d0197\"");
user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2465030/CT2465030", "\"bfa40aa1935b85fb0436bc259b4223a73\"");
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2465030");
user_pref("CommunityToolbar.ToolbarsList", "CT1142338,CT2010429,CT2720081,CT2443659,CT2465030");
user_pref("CommunityToolbar.ToolbarsList2", "CT2010429,CT2720081,CT2443659,CT2465030");
user_pref("CT2465030..clientLogIsEnabled", false);
user_pref("CT2465030..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2465030..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2465030.AboutPrivacyUrl", "http://www.conduit.com/privacy/default.aspx");
user_pref("CT2465030.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2465030.alertChannelId", "858666");
user_pref("CT2465030.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT2465030.backendstorage.d_date_ginyas1", "31333235373735303536323638");
user_pref("CT2465030.backendstorage.d_ginyas1", "30");
user_pref("CT2465030.backendstorage.ginyasstest", "676F6F64");
user_pref("CT2465030.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_affid", "626567726561745F636F6E64756974");
user_pref("CT2465030.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_bguid", "626567726561745F636F6E647569742D45323434423939352D364431462D3336324
user_pref("CT2465030.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba", "3232313330383933");
user_pref("CT2465030.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba1", "323031322D312D3239");
user_pref("CT2465030.BrowserCompStateIsOpen_1334739083000", true);
user_pref("CT2465030.BrowserCompStateIsOpen_1366729388000", true);
user_pref("CT2465030.BrowserCompStateIsOpen_1367226296000", true);
user_pref("CT2465030.clientLogIsEnabled", false);
user_pref("CT2465030.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2465030.components.1000034", false);
user_pref("CT2465030.ConfigurationLastCheckTime", "Tue Apr 01 2014 14:05:55 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.countryCode", "ME");
user_pref("CT2465030.CT2465030.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2465030&octid=CT2465030
user_pref("CT2465030.CTID", "CT2465030");
user_pref("CT2465030.CurrentServerDate", "1-4-2014");
user_pref("CT2465030.d_date_ginyas1.from_oldbar.enc", "MTMyNTc3NTA1NjI2OA==");
user_pref("CT2465030.d_ginyas1.from_oldbar.enc", "MA==");
user_pref("CT2465030.DialogsAlignMode", "LTR");
user_pref("CT2465030.DialogsGetterLastCheckTime", "Tue Apr 01 2014 14:05:51 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.DownloadReferralCookieData", "");
user_pref("CT2465030.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2465030.FirstServerDate", "7-11-2010");
user_pref("CT2465030.FirstTime", true);
user_pref("CT2465030.firstTimeDialogOpened", true);
user_pref("CT2465030.FirstTimeFF3", true);
user_pref("CT2465030.FirstTimeSettingsDone", true);
user_pref("CT2465030.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2465030.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2465030.fullUserID", "UN06539814063218508.UP.20140401170618");
user_pref("CT2465030.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.
user_pref("CT2465030.ginyasstest.from_oldbar.enc", "Z29vZA==");
user_pref("CT2465030.GroupingServerCheckInterval", 1440);
user_pref("CT2465030.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2465030.HasUserGlobalKeys", true);
user_pref("CT2465030.homepageProtectorEnableByLogin", true);
user_pref("CT2465030.http___rv_ginyas_com_app_conduit.bbrs_affid.from_oldbar.enc", "YmVncmVhdF9jb25kdWl0");
user_pref("CT2465030.http___rv_ginyas_com_app_conduit.bbrs_bguid.from_oldbar.enc", "YmVncmVhdF9jb25kdWl0LUUyNDRCOTk1LTZEMUYtMzYyRi1EOEY5LUUxMTNENjNDQT
user_pref("CT2465030.http___rv_ginyas_com_app_conduit.bbrs_lba.from_oldbar.enc", "MjIxMzA4OTM=");
user_pref("CT2465030.http___rv_ginyas_com_app_conduit.bbrs_lba1.from_oldbar.enc", "MjAxMi0xLTI5");
user_pref("CT2465030.initDone", true);
user_pref("CT2465030.Initialize", true);
user_pref("CT2465030.InitializeCommonPrefs", true);
user_pref("CT2465030.InstallationAndCookieDataSentCount", 3);
user_pref("CT2465030.InstalledDate", "Sun Nov 07 2010 16:58:51 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2465030.installType", "Unknown");
user_pref("CT2465030.InvalidateCache", false);
user_pref("CT2465030.isCheckedStartAsHidden", true);
user_pref("CT2465030.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2465030.isFirstTimeToolbarLoading", "false");
user_pref("CT2465030.IsGrouping", false);
user_pref("CT2465030.IsMulticommunity", false);
user_pref("CT2465030.IsOpenThankYouPage", true);
user_pref("CT2465030.IsOpenUninstallPage", true);
user_pref("CT2465030.isPerformedSmartBarTransition", "true");
user_pref("CT2465030.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2465030.keyword", true);
user_pref("CT2465030.LanguagePackLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2465030.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2465030.LastLogin_2.7.2.0", "Thu Nov 29 2012 13:23:10 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2465030.LastLogin_3.16.0.3", "Sun Feb 10 2013 21:54:45 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2465030.LastLogin_3.18.0.7", "Tue Jul 23 2013 17:25:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.LastLogin_3.19.0.3", "Sun Sep 15 2013 12:25:09 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.LastLogin_3.20.0.4", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2465030&octid=CT2465030&ISID=ISID
user_pref("CT2465030.lastVersion", "10.20.101.5");
user_pref("CT2465030.LatestVersion", "3.20.0.4");
user_pref("CT2465030.Locale", "en");
user_pref("CT2465030.LoginCache", 4);
user_pref("CT2465030.MCDetectTooltipHeight", "83");
user_pref("CT2465030.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2465030.MCDetectTooltipWidth", "295");
user_pref("CT2465030.myStuffEnabled", true);
user_pref("CT2465030.MyStuffEnabledAtInstallation", true);
user_pref("CT2465030.myStuffPublihserMinWidth", 400);
user_pref("CT2465030.myStuffSearchUrl", "http://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2465030.myStuffServiceIntervalMM", 1440);
user_pref("CT2465030.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUF
user_pref("CT2465030.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"http%3A%2F%2Fwww.familycirclecup.com%2Fschedule%2F\",\"EB_MAIN_FRAME_TITLE\":\"
user_pref("CT2465030.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
user_pref("CT2465030.RadioIsPodcast", false);
user_pref("CT2465030.RadioLastCheckTime", "Thu Nov 29 2012 13:23:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2465030.RadioLastUpdateIPServer", "3");
user_pref("CT2465030.RadioLastUpdateServer", "3");
user_pref("CT2465030.RadioMediaID", "9962");
user_pref("CT2465030.RadioMediaType", "Media Player");
user_pref("CT2465030.RadioMenuSelectedID", "EBRadioMenu_CT24650309962");
user_pref("CT2465030.RadioStationName", "California%20Rock");
user_pref("CT2465030.RadioStationURL", "http://feedlive.net/california.asx");
user_pref("CT2465030.revertSettingsEnabled", true);
user_pref("CT2465030.SavedHomepage", "http://search.babylon.com/home");
user_pref("CT2465030.SearchAPILastCheckTime", "Tue Apr 01 2014 14:05:54 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2465030&octid=EB_ORIGINAL_CTID&SearchSour
user_pref("CT2465030.searchFromAddressBarEnabledByUser", "true");
user_pref("CT2465030.SearchFromAddressBarIsInit", true);
user_pref("CT2465030.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2465030&q=");
user_pref("CT2465030.SearchInNewTabEnabled", true);
user_pref("CT2465030.searchInNewTabEnabledByUser", "true");
user_pref("CT2465030.searchInNewTabEnabledInHidden", "true");
user_pref("CT2465030.SearchInNewTabIntervalMM", 1440);
user_pref("CT2465030.SearchInNewTabLastCheckTime", "Sat Sep 14 2013 13:01:39 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
user_pref("CT2465030.SearchInNewTabURLFromSearchAPI", "http://search.conduit.com/?gd=&ctid=CT2465030&octid=CT2465030&ISID=ISID_ID&SearchSource=15&CUI=
user_pref("CT2465030.SearchInNewTabUsageUrl", "http://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
user_pref("CT2465030.searchProtectorDialogDelayInSec", 10);
user_pref("CT2465030.searchProtectorEnableByLogin", true);
user_pref("CT2465030.searchSuggestEnabledByUser", "false");
user_pref("CT2465030.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2465030.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2465030.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2465030.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2465030\"}");
user_pref("CT2465030.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://miponyplugin.Media-Toolbar.c
user_pref("CT2465030.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"mipony-plugin \"}");
user_pref("CT2465030.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2465030.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2465030.serviceLayer_services_Configuration_lastUpdate", "1396364788190");
user_pref("CT2465030.serviceLayer_services_login_10.20.101.5_lastUpdate", "1396435440565");
user_pref("CT2465030.serviceLayer_services_searchAPI_lastUpdate", "1396364785382");
user_pref("CT2465030.serviceLayer_services_serviceMap_lastUpdate", "1396364784389");
user_pref("CT2465030.serviceLayer_services_toolbarSettings_lastUpdate", "1396435441318");
user_pref("CT2465030.serviceLayer_services_translation_lastUpdate", "1396364788062");
user_pref("CT2465030.ServiceMapLastCheckTime", "Tue Apr 01 2014 14:05:53 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.SettingsCheckIntervalMin", 120);
user_pref("CT2465030.settingsINI", true);
user_pref("CT2465030.SettingsLastCheckTime", "Tue Apr 01 2014 14:05:41 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.SettingsLastUpdate", "1396271104");
user_pref("CT2465030.showToolbarPermission", "false");
user_pref("CT2465030.SHRINK_TOOLBAR", 1);
user_pref("CT2465030.smartbar.CTID", "CT2465030");
user_pref("CT2465030.smartbar.toolbarName", "mipony-plugin ");
user_pref("CT2465030.smartbar.Uninstall", "0");
user_pref("CT2465030.testingCtid", "");
user_pref("CT2465030.ThirdPartyComponentsInterval", 504);
user_pref("CT2465030.ThirdPartyComponentsLastCheck", "Thu Nov 29 2012 13:23:07 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2465030.ThirdPartyComponentsLastUpdate", "1331805997");
user_pref("CT2465030.toolbarAppMetaDataLastCheckTime", "Tue Apr 01 2014 14:05:51 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.toolbarBornServerTime", "7-11-2010");
user_pref("CT2465030.toolbarCurrentServerTime", "2-4-2014");
user_pref("CT2465030.toolbarLoginClientTime", "Tue Apr 01 2014 17:06:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2465030.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,codefuel.com,tbccint.com,tro
user_pref("CT2465030.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2465030.upgradeFromOBVersion", true);
user_pref("CT2465030.UserID", "UN06539814063218508");
user_pref("CT2465030.ValidationData_Toolbar", 2);
user_pref("CT2465030.WeatherNetwork", "");
user_pref("CT2465030.WeatherPollDate", "Thu Nov 29 2012 13:23:09 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2465030.WeatherUnit", "C");
user_pref("CT2465030_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1396435429103,\"isWithState\":\"\",\"timeFromStar
user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2465030&q=");
user_pref("smartbar.addressBarOwnerCTID", "CT2465030");
user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2465030&q=,http://search.conduit.com/ResultsExt.as
user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.aspx?CUI=UN59017517916167479&ctid=CT2465030&SearchSource=3&q={searchT
user_pref("Smartbar.keywordURLSelectedCTID", "CT2465030");
---- Lines CT1142338 removed from prefs.js ----
user_pref("CT1142338.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
user_pref("CT1142338.AllowNonPrivacy", false);
user_pref("CT1142338.CommunityChanged", false);
user_pref("CT1142338.CTID", "CT1142338");
user_pref("CT1142338.CTPBaseServerUrl", "http://grouping.services.conduit.com/");
user_pref("CT1142338.DialogsAlignMode", "LTR");
user_pref("CT1142338.EMailNotifierPollDate", "Wed Jan 27 2010 22:22:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedLastCount128311388426518939", 395);
user_pref("CT1142338.FeedLastCount6562300526403385993", 650);
user_pref("CT1142338.FeedLastCount7128679457159772809", 2551);
user_pref("CT1142338.FeedPollDate128400382093694199", "Wed Aug 19 2009 02:18:02 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128400382093694200", "Wed Aug 19 2009 02:18:02 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128400382093694201", "Wed Aug 19 2009 02:18:02 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128400382093694202", "Wed Aug 19 2009 02:18:02 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128400382093694203", "Wed Aug 19 2009 02:18:02 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128400382093694204", "Wed Aug 19 2009 21:39:07 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795189875412541", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795190048693893", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795190288694224", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795190536975738", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795190743694609", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795190874007232", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795191041350439", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795191313381778", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795191487444304", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795191630569465", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795191790100333", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795191910256261", "Wed Aug 19 2009 21:39:08 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795192020569087", "Wed Aug 19 2009 21:39:09 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate128795192359788404", "Wed Aug 19 2009 21:39:09 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300524687040615", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300524833418053", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525204730076", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525232756911", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525238887218", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525420534763", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525437870036", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525572968581", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525615870832", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525629532356", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525690233134", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525748203330", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525799839850", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525855100008", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300525859676017", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526025051564", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526048131241", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526112771742", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526174541644", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526260384632", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526261679659", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526322175975", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526651820505", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526682270456", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526693601752", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526777219652", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526819626200", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526850551449", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526860923011", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526938927592", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300526967796339", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527093709470", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527154834582", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527216648519", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527309612460", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527326442497", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527554116084", "Tue Sep 29 2009 11:54:15 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527737766085", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527744637077", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527813582288", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527841566060", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300527843290008", "Mon Sep 28 2009 12:45:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528058585882", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528101799262", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528113907619", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528188560533", "Tue Sep 29 2009 11:54:11 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528357723037", "Tue Sep 29 2009 11:54:12 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528359966906", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528531358620", "Tue Sep 29 2009 11:54:14 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528697173886", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate6562300528719153500", "Tue Sep 29 2009 11:54:13 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate7128679455443427431", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679455589804869", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679455961116892", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679455989143727", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679455995274034", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456176921579", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456194256852", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456329355397", "Wed Jan 27 2010 22:12:07 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456372257648", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456385919172", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456446619950", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456504590146", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456556226666", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456611486824", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456616062833", "Wed Jan 27 2010 22:12:07 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456685041025", "Sat Oct 17 2009 12:27:56 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT1142338.FeedPollDate7128679456781438380", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456804518057", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456869158558", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679456930928460", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457016771448", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457018066475", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457078562791", "Wed Jan 27 2010 20:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457408207321", "Wed Jan 27 2010 20:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457438657272", "Wed Jan 27 2010 22:12:07 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457449988568", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457533606468", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457576013016", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457606938265", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457617309827", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457695314408", "Wed Jan 27 2010 20:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457724183155", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457850096286", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457911221398", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679457973035335", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458065999276", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458082829313", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458310502900", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458494152901", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458501023893", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458569969104", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458597952876", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458599676824", "Wed Jan 27 2010 20:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458723761838", "Wed Jan 27 2010 20:12:07 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458814972698", "Wed Jan 27 2010 22:12:04 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458858186078", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458870294435", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679458944947349", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679459114109853", "Wed Jan 27 2010 22:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679459116353722", "Wed Jan 27 2010 22:12:07 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679459287745436", "Wed Jan 27 2010 22:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679459453560702", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FeedPollDate7128679459475540316", "Wed Jan 27 2010 22:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.FirstTime", true);
user_pref("CT1142338.FirstTimeFF3", true);
user_pref("CT1142338.Initialize", true);
user_pref("CT1142338.InitializeCommonPrefs", true);
user_pref("CT1142338.IsGrouping", false);
user_pref("CT1142338.IsMulticommunity", false);
user_pref("CT1142338.IsOpenThankYouPage", true);
user_pref("CT1142338.IsOpenUninstallPage", true);
user_pref("CT1142338.LanguagePackLastCheckTime", "Wed Jan 27 2010 20:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.LanguagePackReloadInterval", "24");
user_pref("CT1142338.LastLogin", "Wed Jan 27 2010 20:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.Locale", "en-us");
user_pref("CT1142338.LoginCache", "4");
user_pref("CT1142338.MCDetectTooltipHeight", "83");
user_pref("CT1142338.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT1142338.MCDetectTooltipWidth", "295");
user_pref("CT1142338.MyGadgetsServerUrl", "http://services.MyStuff.u-page.com/MyStuffService.asmx/LegacyLogin");
user_pref("CT1142338.MyGadgetsTrustedDomains", "conduit.com");
user_pref("CT1142338.RadioIsPodcast", false);
user_pref("CT1142338.RadioLastCheckTime", "Wed Jan 27 2010 20:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.RadioLastUpdateIPServer", "4");
user_pref("CT1142338.RadioLastUpdateServer", "128929877726170000");
user_pref("CT1142338.RadioMediaID", "6866669");
user_pref("CT1142338.RadioMediaType", "Media Player");
user_pref("CT1142338.RadioMenuSelectedID", "EBRadioMenu_CT11423386866669");
user_pref("CT1142338.RadioStationName", "MTV");
user_pref("CT1142338.RadioStationURL", "http://www.radios.com.br/asx/dmtvgo-br.asx");
user_pref("CT1142338.SearchFromAddressBarIsInit", true);
user_pref("CT1142338.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1142338&SearchSource=2&q=");
user_pref("CT1142338.Server", "http://users.conduit.com");
user_pref("CT1142338.SettingsLastUpdate", "1264097292");
user_pref("CT1142338.SHRINK_TOOLBAR", 1);
user_pref("CT1142338.ThirdPartyComponentsInterval", "72");
user_pref("CT1142338.ThirdPartyComponentsLastCheck", "Fri Jan 30 2009 01:48:44 GMT-0800 (Pacific Standard Time)");
user_pref("CT1142338.ThirdPartyComponentsLastUpdate", "1230122563");
user_pref("CT1142338.ToolbarAlignMode", "SYSTEM");
user_pref("CT1142338.ToolbarName", "Softonic English");
user_pref("CT1142338.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT1142338.UserID", "UN20090130014842251");
user_pref("CT1142338.VusualLastUpdateTime", "1264097292");
user_pref("CT1142338.WeatherNetwork", "");
user_pref("CT1142338.WeatherPollDate", "Wed Jan 27 2010 22:10:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT1142338.WeatherUnit", "C");
---- Lines CT2010429 removed from prefs.js ----
user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2010429", "\"1367215463\"");
user_pref("CommunityToolbar.ETag.http://ip2location.conduit-services.com/ip/?ctid=CT2010429&ver=3.20.0.4&client=ToolbarConfiguration", "\"5cbc0f716c8a
user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2010429", "\"7097fd37277b6a1b754b125bd11d0197\"");
user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2010429/CT2010429", "\"28c2be4fd4df7651cd9a8802ad63f0203\"");
user_pref("CT2010429..clientLogIsEnabled", false);
user_pref("CT2010429..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2010429..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2010429.AboutPrivacyUrl", "http://www.conduit.com/privacy/default.aspx");
user_pref("CT2010429.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2010429.alertChannelId", "492777");
user_pref("CT2010429.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT2010429.BrowserCompStateIsOpen_1367159896000", true);
user_pref("CT2010429.clientLogIsEnabled", false);
user_pref("CT2010429.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2010429.components.1000082", true);
user_pref("CT2010429.ConfigurationLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.countryCode", "ME");
user_pref("CT2010429.CT2010429.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2010429&octid=CT2010429
user_pref("CT2010429.CTID", "CT2010429");
user_pref("CT2010429.CurrentServerDate", "1-4-2014");
user_pref("CT2010429.DialogsAlignMode", "LTR");
user_pref("CT2010429.DialogsGetterLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.DownloadReferralCookieData", "");
user_pref("CT2010429.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2010429.FeedLastCount128892253208343847", 20);
user_pref("CT2010429.FeedPollDate128909605711044026", "Wed Jan 27 2010 20:12:05 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.FeedTTL128909605711044026", 40);
user_pref("CT2010429.FirstServerDate", "13-12-2012");
user_pref("CT2010429.FirstTime", true);
user_pref("CT2010429.firstTimeDialogOpened", true);
user_pref("CT2010429.FirstTimeFF3", true);
user_pref("CT2010429.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2010429.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2010429.fullUserID", "UN23522896938602245.UP.20140401170619");
user_pref("CT2010429.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.
user_pref("CT2010429.GroupingServerCheckInterval", 1440);
user_pref("CT2010429.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2010429.HasUserGlobalKeys", true);
user_pref("CT2010429.homepageProtectorEnableByLogin", true);
user_pref("CT2010429.initDone", true);
user_pref("CT2010429.Initialize", true);
user_pref("CT2010429.InitializeCommonPrefs", true);
user_pref("CT2010429.InstallationAndCookieDataSentCount", 3);
user_pref("CT2010429.InstallationType", "Unknown");
user_pref("CT2010429.InstalledDate", "Fri Jan 22 2010 00:02:48 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.installType", "Unknown");
user_pref("CT2010429.InvalidateCache", false);
user_pref("CT2010429.isCheckedStartAsHidden", true);
user_pref("CT2010429.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2010429.isFirstTimeToolbarLoading", "false");
user_pref("CT2010429.IsGrouping", false);
user_pref("CT2010429.IsMulticommunity", false);
user_pref("CT2010429.IsOpenThankYouPage", true);
user_pref("CT2010429.IsOpenUninstallPage", true);
user_pref("CT2010429.isPerformedSmartBarTransition", "true");
user_pref("CT2010429.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2010429.keyword", true);
user_pref("CT2010429.LanguagePackLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2010429.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2010429.LastLogin_2.4.0.4", "Wed Jan 27 2010 20:12:08 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.LastLogin_3.15.1.0", "Mon Dec 24 2012 17:53:46 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.LastLogin_3.16.0.3", "Sun Feb 10 2013 21:54:48 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.LastLogin_3.18.0.7", "Tue Jul 23 2013 17:25:21 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.LastLogin_3.19.0.3", "Sun Sep 15 2013 12:25:10 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.LastLogin_3.20.0.4", "Tue Apr 01 2014 14:05:53 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2010429&octid=CT2010429&ISID=ISID
user_pref("CT2010429.lastVersion", "10.23.0.822");
user_pref("CT2010429.LatestVersion", "3.20.0.4");
user_pref("CT2010429.Locale", "en-us");
user_pref("CT2010429.LoginCache", 4);
user_pref("CT2010429.MCDetectTooltipHeight", "83");
user_pref("CT2010429.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2010429.MCDetectTooltipWidth", "295");
user_pref("CT2010429.myStuffEnabled", true);
user_pref("CT2010429.MyStuffEnabledAtInstallation", true);
user_pref("CT2010429.myStuffPublihserMinWidth", 400);
user_pref("CT2010429.myStuffSearchUrl", "http://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2010429.myStuffServiceIntervalMM", 1440);
user_pref("CT2010429.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUF
user_pref("CT2010429.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"http%3A%2F%2Fwww.familycirclecup.com%2Fschedule%2F\",\"
user_pref("CT2010429.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
user_pref("CT2010429.RadioIsPodcast", false);
user_pref("CT2010429.RadioLastCheckTime", "Wed Jan 27 2010 20:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.RadioLastUpdateIPServer", "4");
user_pref("CT2010429.RadioLastUpdateServer", "0");
user_pref("CT2010429.RadioMediaID", "9962");
user_pref("CT2010429.RadioMediaType", "Media Player");
user_pref("CT2010429.RadioMenuSelectedID", "EBRadioMenu_CT20104299962");
user_pref("CT2010429.RadioStationName", "California%20Rock");
user_pref("CT2010429.RadioStationURL", "http://feedlive.net/california.asx");
user_pref("CT2010429.revertSettingsEnabled", true);
user_pref("CT2010429.SearchAPILastCheckTime", "Tue Apr 01 2014 14:05:51 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2010429&octid=EB_ORIGINAL_CTID");
user_pref("CT2010429.searchFromAddressBarEnabledByUser", "false");
user_pref("CT2010429.SearchFromAddressBarIsInit", true);
user_pref("CT2010429.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2010429&SearchSource=2&q=");
user_pref("CT2010429.SearchInNewTabEnabled", true);
user_pref("CT2010429.searchInNewTabEnabledByUser", "true");
user_pref("CT2010429.searchInNewTabEnabledInHidden", "true");
user_pref("CT2010429.SearchInNewTabIntervalMM", 1440);
user_pref("CT2010429.SearchInNewTabLastCheckTime", "Sat Sep 14 2013 13:01:39 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
user_pref("CT2010429.SearchInNewTabURLFromSearchAPI", "http://search.conduit.com/?gd=&ctid=CT2010429&octid=CT2010429&ISID=ISID_ID&SearchSource=15&CUI=
user_pref("CT2010429.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2010429.searchProtectorDialogDelayInSec", 10);
user_pref("CT2010429.searchProtectorEnableByLogin", true);
user_pref("CT2010429.searchSuggestEnabledByUser", "false");
user_pref("CT2010429.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2010429.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2010429.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2010429.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2010429\"}");
user_pref("CT2010429.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://ThemeXPToolbar.OurToolbar.co
user_pref("CT2010429.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Theme XP \"}");
user_pref("CT2010429.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2010429.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"1\"}");
user_pref("CT2010429.serviceLayer_services_Configuration_lastUpdate", "1396364785375");
user_pref("CT2010429.serviceLayer_services_login_10.23.0.822_lastUpdate", "1396435441893");
user_pref("CT2010429.serviceLayer_services_searchAPI_lastUpdate", "1396364788321");
user_pref("CT2010429.serviceLayer_services_serviceMap_lastUpdate", "1396364784468");
user_pref("CT2010429.serviceLayer_services_toolbarSettings_lastUpdate", "1396435442427");
user_pref("CT2010429.serviceLayer_services_translation_lastUpdate", "1396364788300");
user_pref("CT2010429.ServiceMapLastCheckTime", "Tue Apr 01 2014 14:05:53 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.SettingsCheckIntervalMin", 120);
user_pref("CT2010429.settingsINI", true);
user_pref("CT2010429.SettingsLastCheckTime", "Tue Apr 01 2014 14:05:42 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.SettingsLastUpdate", "1396269581");
user_pref("CT2010429.showToolbarPermission", "false");
user_pref("CT2010429.SHRINK_TOOLBAR", 1);
user_pref("CT2010429.smartbar.CTID", "CT2010429");
user_pref("CT2010429.smartbar.toolbarName", "Theme XP ");
user_pref("CT2010429.smartbar.Uninstall", "0");
user_pref("CT2010429.testingCtid", "");
user_pref("CT2010429.ThirdPartyComponentsInterval", 504);
user_pref("CT2010429.ThirdPartyComponentsLastCheck", "Fri Jan 22 2010 00:02:37 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.ThirdPartyComponentsLastUpdate", "1250280007");
user_pref("CT2010429.toolbarAppMetaDataLastCheckTime", "Tue Apr 01 2014 14:05:51 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.toolbarBornServerTime", "13-12-2012");
user_pref("CT2010429.toolbarCurrentServerTime", "2-4-2014");
user_pref("CT2010429.toolbarLoginClientTime", "Tue Apr 01 2014 17:06:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2010429.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,codefuel.com,tbccint.com,tro
user_pref("CT2010429.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2010429.usagesFlag", 2);
user_pref("CT2010429.UserID", "UN23522896938602245");
user_pref("CT2010429.ValidationData_Toolbar", 0);
user_pref("CT2010429.WeatherNetwork", "");
user_pref("CT2010429.WeatherPollDate", "Wed Jan 27 2010 20:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2010429.WeatherUnit", "C");
user_pref("CT2010429_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1396435429938,\"isWithState\":\"\",\"timeFromStar
---- Lines CT2443659 removed from prefs.js ----
user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2443659", "\"0\"");
user_pref("CommunityToolbar.ETag.http://ip2location.conduit-services.com/ip/?ctid=CT2443659&ver=3.20.0.4&client=ToolbarConfiguration", "\"5cbc0f716c8a
user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2443659", "\"7097fd37277b6a1b754b125bd11d0197\"");
user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2443659/CT2443659", "\"f66987de2b4af124882c95ff6f53f03e3\"");
user_pref("CT2443659..clientLogIsEnabled", false);
user_pref("CT2443659..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2443659..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2443659.2443659a129490722519862522000000paramsgk.from_oldbar.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzIxODE2OTUwMzQ4LCJ1cGRhdGVSZXNwVGltZSI6MTMyM
user_pref("CT2443659.AboutPrivacyUrl", "http://www.conduit.com/privacy/default.aspx");
user_pref("CT2443659.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2443659.alertChannelId", "837702");
user_pref("CT2443659.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT2443659.backendstorage.2443659a129490722519862522000000paramsgk", "7B2275706461746552657154696D65223A313332313831363935303334382C22757064
user_pref("CT2443659.clientLogIsEnabled", true);
user_pref("CT2443659.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2443659.components.1000082", true);
user_pref("CT2443659.components.1000234", true);
user_pref("CT2443659.ConfigurationLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.countryCode", "ME");
user_pref("CT2443659.CT2443659.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2443659&octid=CT2443659
user_pref("CT2443659.CTID", "CT2443659");
user_pref("CT2443659.CurrentServerDate", "1-4-2014");
user_pref("CT2443659.DialogsAlignMode", "LTR");
user_pref("CT2443659.DialogsGetterLastCheckTime", "Tue Apr 01 2014 14:05:53 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"BannerCulture\":\"\",\"DownloadTime\":\"9/4/2010 8:56:
user_pref("CT2443659.EMailNotifierPollDate", "Sun Nov 20 2011 22:35:44 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2443659.FeedLastCount129023331966275212", 50);
user_pref("CT2443659.FeedPollDate129023331967837745", "Sun Nov 20 2011 22:05:45 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.FeedTTL129023331967837745", 40);
user_pref("CT2443659.FirstServerDate", "4-9-2010");
user_pref("CT2443659.FirstTime", true);
user_pref("CT2443659.firstTimeDialogOpened", true);
user_pref("CT2443659.FirstTimeFF3", true);
user_pref("CT2443659.FirstTimeSettingsDone", true);
user_pref("CT2443659.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2443659.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2443659.FixPageNotFoundErrors", true);
user_pref("CT2443659.fullUserID", "UN59017517916167479.UP.20140401170620");
user_pref("CT2443659.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.
user_pref("CT2443659.GroupingServerCheckInterval", 1440);
user_pref("CT2443659.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2443659.HasUserGlobalKeys", true);
user_pref("CT2443659.homepageProtectorEnableByLogin", true);
user_pref("CT2443659.initDone", true);
user_pref("CT2443659.Initialize", true);
user_pref("CT2443659.InitializeCommonPrefs", true);
user_pref("CT2443659.InstallationAndCookieDataSentCount", 3);
user_pref("CT2443659.InstalledDate", "Sat Sep 04 2010 19:56:03 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.installType", "Unknown");
user_pref("CT2443659.InvalidateCache", false);
user_pref("CT2443659.isCheckedStartAsHidden", true);
user_pref("CT2443659.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2443659.isFirstTimeToolbarLoading", "false");
user_pref("CT2443659.IsGrouping", false);
user_pref("CT2443659.IsMulticommunity", false);
user_pref("CT2443659.IsOpenThankYouPage", true);
user_pref("CT2443659.IsOpenUninstallPage", true);
user_pref("CT2443659.isPerformedSmartBarTransition", "true");
user_pref("CT2443659.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2443659.keyword", true);
user_pref("CT2443659.LanguagePackLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2443659.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2443659.LastLogin_2.7.2.0", "Sun Nov 20 2011 20:41:52 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.LastLogin_3.15.1.0", "Mon Dec 24 2012 17:53:45 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.LastLogin_3.16.0.3", "Sun Feb 10 2013 21:54:47 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.LastLogin_3.18.0.7", "Tue Jul 23 2013 17:25:19 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.LastLogin_3.19.0.3", "Fri Oct 04 2013 19:32:26 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.LastLogin_3.20.0.4", "Tue Apr 01 2014 14:05:53 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?gd=&ctid=CT2443659&octid=CT2443659&ISID=ISID
user_pref("CT2443659.lastVersion", "10.23.0.822");
user_pref("CT2443659.LatestVersion", "3.20.0.4");
user_pref("CT2443659.Locale", "en");
user_pref("CT2443659.LoginCache", 4);
user_pref("CT2443659.MCDetectTooltipHeight", "83");
user_pref("CT2443659.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2443659.MCDetectTooltipWidth", "295");
user_pref("CT2443659.myStuffEnabled", true);
user_pref("CT2443659.MyStuffEnabledAtInstallation", true);
user_pref("CT2443659.myStuffPublihserMinWidth", 400);
user_pref("CT2443659.myStuffSearchUrl", "http://appstrm.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2443659.myStuffServiceIntervalMM", 1440);
user_pref("CT2443659.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUF
user_pref("CT2443659.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"http%3A%2F%2Fwww.familycirclecup.com%2Fschedule%2F\",\"
user_pref("CT2443659.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2443659.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
user_pref("CT2443659.RadioIsPodcast", false);
user_pref("CT2443659.RadioLastCheckTime", "Sun Nov 20 2011 19:11:56 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.RadioLastUpdateIPServer", "3");
user_pref("CT2443659.RadioLastUpdateServer", "0");
user_pref("CT2443659.RadioMediaID", "9962");
user_pref("CT2443659.RadioMediaType", "Media Player");
user_pref("CT2443659.RadioMenuSelectedID", "EBRadioMenu_CT24436599962");
user_pref("CT2443659.RadioShrinked", "expanded");
user_pref("CT2443659.RadioStationName", "California%20Rock");
user_pref("CT2443659.RadioStationURL", "http://feedlive.net/california.asx");
user_pref("CT2443659.revertSettingsEnabled", true);
user_pref("CT2443659.SearchAPILastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2443659&octid=EB_ORIGINAL_CTID&SearchSour
user_pref("CT2443659.searchFromAddressBarEnabledByUser", "false");
user_pref("CT2443659.SearchFromAddressBarIsInit", true);
user_pref("CT2443659.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2443659&q=");
user_pref("CT2443659.SearchInNewTabEnabled", true);
user_pref("CT2443659.searchInNewTabEnabledByUser", "true");
user_pref("CT2443659.searchInNewTabEnabledInHidden", "true");
user_pref("CT2443659.SearchInNewTabIntervalMM", 1440);
user_pref("CT2443659.SearchInNewTabLastCheckTime", "Fri Oct 04 2013 19:32:23 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
user_pref("CT2443659.SearchInNewTabURLFromSearchAPI", "http://search.conduit.com/?gd=&ctid=CT2443659&octid=CT2443659&ISID=ISID_ID&SearchSource=15&CUI=
user_pref("CT2443659.SearchInNewTabUsageUrl", "http://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
user_pref("CT2443659.searchProtectorDialogDelayInSec", 10);
user_pref("CT2443659.searchProtectorEnableByLogin", true);
user_pref("CT2443659.searchSuggestEnabledByUser", "false");
user_pref("CT2443659.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2443659.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2443659.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2443659.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2443659\"}");
user_pref("CT2443659.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"http://ENRealMadridFC.OurToolbar.co
user_pref("CT2443659.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"EN - Real Madrid FC \"}");
user_pref("CT2443659.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2443659.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"1\"}");
user_pref("CT2443659.serviceLayer_services_Configuration_lastUpdate", "1396364785367");
user_pref("CT2443659.serviceLayer_services_login_10.23.0.822_lastUpdate", "1396435442134");
user_pref("CT2443659.serviceLayer_services_searchAPI_lastUpdate", "1396364788869");
user_pref("CT2443659.serviceLayer_services_serviceMap_lastUpdate", "1396364784438");
user_pref("CT2443659.serviceLayer_services_toolbarSettings_lastUpdate", "1396435442774");
user_pref("CT2443659.serviceLayer_services_translation_lastUpdate", "1396364788809");
user_pref("CT2443659.ServiceMapLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.SettingsCheckIntervalMin", 120);
user_pref("CT2443659.settingsINI", true);
user_pref("CT2443659.SettingsLastCheckTime", "Tue Apr 01 2014 14:05:42 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.SettingsLastUpdate", "1396270689");
user_pref("CT2443659.SHRINK_TOOLBAR", 1);
user_pref("CT2443659.smartbar.CTID", "CT2443659");
user_pref("CT2443659.smartbar.toolbarName", "EN - Real Madrid FC ");
user_pref("CT2443659.smartbar.Uninstall", "0");
user_pref("CT2443659.testingCtid", "");
user_pref("CT2443659.ThirdPartyComponentsInterval", 504);
user_pref("CT2443659.ThirdPartyComponentsLastCheck", "Mon Nov 07 2011 22:19:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.ThirdPartyComponentsLastUpdate", "1246790578");
user_pref("CT2443659.toolbarAppMetaDataLastCheckTime", "Tue Apr 01 2014 14:05:52 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.toolbarBornServerTime", "4-9-2010");
user_pref("CT2443659.toolbarCurrentServerTime", "2-4-2014");
user_pref("CT2443659.toolbarLoginClientTime", "Tue Apr 01 2014 17:06:32 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2443659.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,codefuel.com,tbccint.com,tro
user_pref("CT2443659.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2443659.upgradeFromOBVersion", true);
user_pref("CT2443659.usagesFlag", 2);
user_pref("CT2443659.UserID", "UN59017517916167479");
user_pref("CT2443659.ValidationData_Toolbar", 2);
user_pref("CT2443659.WeatherNetwork", "");
user_pref("CT2443659.WeatherPollDate", "Sun Nov 20 2011 22:35:52 GMT+0100 (Central Europe Standard Time)");
user_pref("CT2443659.WeatherUnit", "C");
user_pref("CT2443659_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1396435430863,\"isWithState\":\"\",\"timeFromStar
user_pref("valueApps.CT2443659.mam_gk_currentVersion", "312E31332E302E3137");
user_pref("valueApps.CT2443659.mam_gk_currentVersion.storedInFile", false);
user_pref("valueApps.CT2443659.mam_gk_migrated_from_ls", "31");
user_pref("valueApps.CT2443659.mam_gk_migrated_from_ls.storedInFile", false);
user_pref("valueApps.CT2443659.mam_gk_userBornDate", "4E2F41");
user_pref("valueApps.CT2443659.mam_gk_userBornDate.storedInFile", false);
---- Lines CT2720081 removed from prefs.js ----
user_pref("CT2720081.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
user_pref("CT2720081.alertChannelId", "1112366");
user_pref("CT2720081.clientLogIsEnabled", true);
user_pref("CT2720081.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2720081.CTID", "CT2720081");
user_pref("CT2720081.CurrentServerDate", "4-9-2010");
user_pref("CT2720081.DialogsAlignMode", "LTR");
user_pref("CT2720081.DownloadReferralCookieData", "");
user_pref("CT2720081.EMailNotifierPollDate", "Sat Sep 04 2010 20:10:53 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.FeedLastCount129248891425073064", 186);
user_pref("CT2720081.FeedPollDate129225116238185771", "Sat Sep 04 2010 19:37:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.FeedPollDate129225147492879732", "Sat Sep 04 2010 19:37:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.FeedPollDate129245643951202078", "Sat Sep 04 2010 19:37:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.FeedPollDate129245643951202084", "Sat Sep 04 2010 19:37:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.FeedTTL129225116238185771", 40);
user_pref("CT2720081.FeedTTL129225147492879732", 40);
user_pref("CT2720081.FeedTTL129245643951202078", 40);
user_pref("CT2720081.FeedTTL129245643951202084", 40);
user_pref("CT2720081.FirstServerDate", "1-9-2010");
user_pref("CT2720081.FirstTime", true);
user_pref("CT2720081.FirstTimeFF3", true);
user_pref("CT2720081.FirstTimeSettingsDone", true);
user_pref("CT2720081.FixPageNotFoundErrors", true);
user_pref("CT2720081.GroupingServerCheckInterval", 1440);
user_pref("CT2720081.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2720081.Initialize", true);
user_pref("CT2720081.InitializeCommonPrefs", true);
user_pref("CT2720081.InstallationAndCookieDataSentCount", 3);
user_pref("CT2720081.InstallationType", "UnknownIntegration");
user_pref("CT2720081.InstalledDate", "Wed Sep 01 2010 17:59:31 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.InvalidateCache", false);
user_pref("CT2720081.IsGrouping", false);
user_pref("CT2720081.IsMulticommunity", false);
user_pref("CT2720081.IsOpenThankYouPage", false);
user_pref("CT2720081.IsOpenUninstallPage", true);
user_pref("CT2720081.LanguagePackLastCheckTime", "Sat Sep 04 2010 11:05:40 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2720081.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2720081.LastLogin_2.7.2.0", "Sat Sep 04 2010 19:55:56 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.LatestVersion", "2.7.2.0");
user_pref("CT2720081.Locale", "en");
user_pref("CT2720081.LoginCache", 4);
user_pref("CT2720081.MCDetectTooltipHeight", "83");
user_pref("CT2720081.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2720081.MCDetectTooltipWidth", "295");
user_pref("CT2720081.myStuffEnabled", true);
user_pref("CT2720081.myStuffPublihserMinWidth", 400);
user_pref("CT2720081.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID"
user_pref("CT2720081.myStuffServiceIntervalMM", 1440);
user_pref("CT2720081.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUF
user_pref("CT2720081.RadioIsPodcast", false);
user_pref("CT2720081.RadioLastCheckTime", "Fri Sep 03 2010 23:38:01 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.RadioLastUpdateIPServer", "3");
user_pref("CT2720081.RadioLastUpdateServer", "129248947734170000");
user_pref("CT2720081.RadioMediaID", "21079850");
user_pref("CT2720081.RadioMediaType", "Media Player");
user_pref("CT2720081.RadioMenuSelectedID", "EBRadioMenu_CT272008121079850");
user_pref("CT2720081.RadioStationName", "AHL%20-%20Grand%20Rapids%20Griffins");
user_pref("CT2720081.RadioStationURL", "http://cdncon.wm.llnwd.net/cdncon_neulion1_ahl_griffins?eid=2037&pid=2037&gid=101]]");
user_pref("CT2720081.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2720081&octid=EB_ORIGINAL_CTID&SearchSour
user_pref("CT2720081.SearchFromAddressBarIsInit", true);
user_pref("CT2720081.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2720081&q=");
user_pref("CT2720081.SearchInNewTabEnabled", true);
user_pref("CT2720081.SearchInNewTabIntervalMM", 1440);
user_pref("CT2720081.SearchInNewTabLastCheckTime", "Fri Sep 03 2010 23:38:01 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2720081.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2720081.SettingsCheckIntervalMin", 120);
user_pref("CT2720081.SettingsLastCheckTime", "Sat Sep 04 2010 19:37:29 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.SettingsLastUpdate", "1283363605");
user_pref("CT2720081.SHRINK_TOOLBAR", 1);
user_pref("CT2720081.ThirdPartyComponentsInterval", 504);
user_pref("CT2720081.ThirdPartyComponentsLastCheck", "Wed Sep 01 2010 17:59:26 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.ThirdPartyComponentsLastUpdate", "1246790578");
user_pref("CT2720081.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2720081.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2720081.UserID", "UN94289844176283578");
user_pref("CT2720081.WeatherNetwork", "");
user_pref("CT2720081.WeatherPollDate", "Sat Sep 04 2010 20:07:55 GMT+0200 (Central Europe Daylight Time)");
user_pref("CT2720081.WeatherUnit", "C");
---- Lines conduit removed from prefs.js ----
user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com");
user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"97e416bb586ce1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.20.0.4", "\"dfe74040abc2ce1:0\"");
user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"f4006385da8a3ea2c255df21ee98e396\"");
user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en", "\"d622e869ad0a8a80208a18f8f4908246\"");
user_pref("plugin.state.npconduitfirefoxplugin", 2);
---- Lines babsrc removed from prefs.js ----
user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=toolbar|babsrc=tb_ss|invocationType=tb50-ie-aolsofton
user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_referrer", "http://isearch.babylon.com/?affID=117023&tt=090113_ctrl_0213_2&babsrc=NT_
---- Lines valueApps removed from prefs.js ----
user_pref("valueApps.storage.mam_gk_userId", "38303138336566612D333935642D343134642D613734632D396339353632613630346130");
---- Lines searchou removed from prefs.js ----
user_pref("browser.startup.homepage", "http://searchou.com/?id=d0a1dfa6000000000000005345000000");
---- Lines ask.com removed from prefs.js ----
user_pref("extensions.asktb.default-channel-url-mask", "http://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}");
user_pref("extensions.toolbar@ask.com.install-event-fired", true);
---- Lines ask.com modified from prefs.js ----
user_pref("extensions.enabledItems", "toolbar@ask.com:3.3.3.123,{ce18769b-c7fa-42d2-860d-17c4662c70ad}:2.7.2.0,{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}:
---- Lines Web Search removed from prefs.js ----
user_pref("browser.search.defaultenginename", "EN - Real Madrid FC Customized Web Search");
user_pref("browser.search.defaultthis.engineName", "mipony-plugin Customized Web Search");
---- Lines asktb removed from prefs.js ----
user_pref("extensions.asktb.cbid", "SQ");
user_pref("extensions.asktb.fresh-install", false);
user_pref("extensions.asktb.l", "dis");
user_pref("extensions.asktb.last-config-req", "4082012139357");
user_pref("extensions.asktb.locale", "en_US");
user_pref("extensions.asktb.o", "14088");
user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
user_pref("extensions.asktb.qsrc", "2871");
user_pref("extensions.asktb.r", "2");
---- Lines speedbit removed from prefs.js ----
user_pref("speedbit.dap_installed", true);
user_pref("speedbitvdownloader.auto_search", false);
user_pref("speedbitvdownloader.buttons.highlighter", false);
user_pref("speedbitvdownloader.buttons.showlabels", false);
user_pref("speedbitvdownloader.click_selects_all", true);
user_pref("speedbitvdownloader.ctrl_search", false);
user_pref("speedbitvdownloader.enable_auto_complete", false);
user_pref("speedbitvdownloader.focus_key", false);
user_pref("speedbitvdownloader.search_in_tab", false);
user_pref("speedbitvdownloader.search_on_drag_drop", false);
user_pref("speedbitvdownloader.shift_ctrl_search", false);
user_pref("speedbitvdownloader.shift_search", false);
user_pref("speedbitvdownloader.use_inline_complete", false);
user_pref("speedbitvdownloader.warn_on_form_history", false);
user_pref("speedbitvideodownloader.cache.tbs_include_xml_spd", "54/17/13/11/112");
user_pref("speedbitvideodownloader.firstlaunch", "0");
user_pref("speedbitvideodownloader.guid", "%7BF4BAB276-C757-BABE-9858-3E928C1BA02F%7D");
user_pref("speedbitvideodownloader.popupblockedcnt", "156");
user_pref("speedbitvideodownloader.userId", "%12");
user_pref("speedbitvideodownloader.Var1", "0");
user_pref("speedbitvideodownloader.Var10", "0");
user_pref("speedbitvideodownloader.Var2", "0");
user_pref("speedbitvideodownloader.Var3", "0");
user_pref("speedbitvideodownloader.Var4", "0");
user_pref("speedbitvideodownloader.Var5", "0");
user_pref("speedbitvideodownloader.Var6", "0");
user_pref("speedbitvideodownloader.Var7", "0");
user_pref("speedbitvideodownloader.Var8", "0");
user_pref("speedbitvideodownloader.Var9", "0");
user_pref("speedbitvideodownloader_installed_version", "2.2.4");
---- Lines CommunityToolbar removed from prefs.js ----
user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 30 2012 20:02:19 GMT+0200 (Central Europe Daylight Time)");
user_pref("CommunityToolbar.alert.locale", "en");
user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Jun 30 2012 20:02:19 GMT+0200 (Central Europe Daylight Time)");
user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
user_pref("CommunityToolbar.alert.showTrayIcon", false);
user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.alert.userId", "{32cfcf01-d52d-4031-9525-73681c6dc37f}");
user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Fri Sep 03 2010 23:38:01 GMT+0200 (Central Europe Daylight Time)");
user_pref("CommunityToolbar.globalUserId", "16b59a31-155e-4e12-be38-36ccbe6724ab");
user_pref("CommunityToolbar.MyGadgetsIntervalMM", 1440);
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.twitter.user_14293310.LastCheckTime", "Sat Sep 04 2010 19:37:34 GMT+0200 (Central Europe Daylight Time)");
user_pref("CommunityToolbar.twitter.user_14872237.LastCheckTime", "Sun Nov 20 2011 22:05:45 GMT+0100 (Central Europe Standard Time)");
user_pref("CommunityToolbar.twitter.user_2557521.LastCheckTime", "Sat Sep 04 2010 19:37:34 GMT+0200 (Central Europe Daylight Time)");
user_pref("CommunityToolbar.twitter.user_31109891.LastCheckTime", "Wed Jan 27 2010 20:12:06 GMT+0100 (Central Europe Standard Time)");
user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Sat Sep 04 2010 19:37:34 GMT+0200 (Central Europe Daylight Time)");
user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Sat Sep 04 2010 19:37:34 GMT+0200 (Central Europe Daylight Time)");
---- Lines crossrider removed from prefs.js ----
user_pref("extensions.crossrider.bic", "13d5bf3b79d89eeffcf1ba0d3bfaf145");
user_pref("extensions.crossriderapp21806.21806.active", true);
user_pref("extensions.crossriderapp21806.21806.addressbar", "NA");
user_pref("extensions.crossriderapp21806.21806.addressbarenhanced", "");
user_pref("extensions.crossriderapp21806.21806.asyncdb.was_copied", "true");
user_pref("extensions.crossriderapp21806.21806.asyncdb_dbWasSet", true);
user_pref("extensions.crossriderapp21806.21806.asyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.crossriderapp21806.21806.asyncinternaldb.was_copied", "true");
user_pref("extensions.crossriderapp21806.21806.asyncinternaldb_dbWasSet", true);
user_pref("extensions.crossriderapp21806.21806.asyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.crossriderapp21806.21806.backgroundjs", "\n\n//\n");
user_pref("extensions.crossriderapp21806.21806.backgroundver", 38);
user_pref("extensions.crossriderapp21806.21806.can_run_bg_code", true);
user_pref("extensions.crossriderapp21806.21806.certdomaininstaller", "");
user_pref("extensions.crossriderapp21806.21806.changeprevious", false);
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_aoi.value", "1363047265");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_blocklist.expiration", "Wed Apr 02 2014 13:01:01 GMT+0200 (Central Europe Daylight Time)");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_blocklist.value", "%22*%2Cnonexistantdomain.com%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_country_code.expiration", "Tue Apr 08 2014 14:05:53 GMT+0200 (Central Europe Daylight Time)
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_country_code.value", "%22RS%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_crr.value", "1396436332");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)"
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_currenttime.value", "%221392016071%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_hotfix20111102645.value", "%221%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_ib_disclosure_tmp.expiration", "Wed Apr 02 2014 13:06:01 GMT+0200 (Central Europe Daylight
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_ib_disclosure_tmp.value", "1396436161");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard T
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2255443%22%2C%22sub_id%22%3A%22default%22%2
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)"
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_installtime.value", "%221362693779%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_parent_zoneid.value", "%2214019%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)"
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_pc_20120828.value", "1363047439942");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)")
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_product_id.value", "%221180%22");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)");
user_pref("extensions.crossriderapp21806.21806.cookie._GPL_zoneid.value", "%22156286%22");
user_pref("extensions.crossriderapp21806.21806.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)");
user_pref("extensions.crossriderapp21806.21806.cookie.dbtest.value", "1363047376614");
user_pref("extensions.crossriderapp21806.21806.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)"
user_pref("extensions.crossriderapp21806.21806.cookie.InstallationTime.value", "1363047265");
user_pref("extensions.crossriderapp21806.21806.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time)")
user_pref("extensions.crossriderapp21806.21806.crossriderapp21806_dbWasSet", true);
user_pref("extensions.crossriderapp21806.21806.crossriderapp21806_dbWasSet_FF25_FIX", true);
user_pref("extensions.crossriderapp21806.21806.description", "Deals Plugin");
user_pref("extensions.crossriderapp21806.21806.domain", "");
user_pref("extensions.crossriderapp21806.21806.enablesearch", false);
user_pref("extensions.crossriderapp21806.21806.fbremoteurl", "");
user_pref("extensions.crossriderapp21806.21806.group", 0);
user_pref("extensions.crossriderapp21806.21806.homepage", "");
user_pref("extensions.crossriderapp21806.21806.iframe", false);
user_pref("extensions.crossriderapp21806.21806.InstallationThankYouPage", true);
user_pref("extensions.crossriderapp21806.21806.InstallationTime", 1363047265);
user_pref("extensions.crossriderapp21806.21806.InstallationUserSettings.searchUserConifrmation", false);
user_pref("extensions.crossriderapp21806.21806.InstallationUserSettings.setHomepage", false);
user_pref("extensions.crossriderapp21806.21806.InstallationUserSettings.setNewTab", false);
user_pref("extensions.crossriderapp21806.21806.InstallationUserSettings.setSearch", false);
user_pref("extensions.crossriderapp21806.21806.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standar
user_pref("extensions.crossriderapp21806.21806.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22F7AD076943BB4486848889F61645EE18IE
user_pref("extensions.crossriderapp21806.21806.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standar
user_pref("extensions.crossriderapp21806.21806.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzi
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Ti
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_appVer.value", "61");
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standa
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Time
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_nextCheck.expiration", "Wed Apr 02 2014 18:43:53 GMT+0200 (Central Europe Daylight
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Tim
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe S
user_pref("extensions.crossriderapp21806.21806.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
user_pref("extensions.crossriderapp21806.21806.internaldb.SoftwareDetected.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (Central Europe Standard Ti
user_pref("extensions.crossriderapp21806.21806.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%22%3Afalse%2C%22Wireshark%22%3Afalse%2C%22Virtua
user_pref("extensions.crossriderapp21806.21806.js", "\n\nif(\"undefined\"1180,baseCDN:\"contentcache-a.akamaihd.net\"})};$jquery(document).ready(_GPL_
user_pref("extensions.crossriderapp21806.21806.lastDailyReport", "1396435409513");
user_pref("extensions.crossriderapp21806.21806.lastUpdate", "1396435428472");
user_pref("extensions.crossriderapp21806.21806.manifesturl", "");
user_pref("extensions.crossriderapp21806.21806.name", "Deals Plugin Extension");
user_pref("extensions.crossriderapp21806.21806.newtab", "");
user_pref("extensions.crossriderapp21806.21806.opensearch", "");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_1.name", "base");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_1.ver", 7);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_1000014.name", "GPL Plugin (Loader)");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_1000014.ver", 16);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_1000015.name", "GPL Background (BG)");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_1000015.ver", 39);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_13.name", "CrossriderAppUtils");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_13.ver", 3);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_14.name", "CrossriderUtils");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_14.ver", 9);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_16.name", "FFAppAPIWrapper");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_16.ver", 10);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_17.name", "jQuery");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_17.ver", 4);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_21.name", "debug");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_21.ver", 4);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_22.name", "resources");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_22.ver", 5);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_config.a
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_28.name", "initializer");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_28.ver", 3);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_4.name", "jquery_1_7_1");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_4.ver", 4);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_47.name", "resources_background");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_47.ver", 3);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_64.name", "appApiMessage");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_64.ver", 3);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_72.name", "appApiValidation");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_72.ver", 3);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_78.name", "CrossriderInfo");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_78.ver", 4);
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";var a=function(){v
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_98.name", "omniCommands");
user_pref("extensions.crossriderapp21806.21806.plugins.plugin_98.ver", 2);
user_pref("extensions.crossriderapp21806.21806.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015");
user_pref("extensions.crossriderapp21806.21806.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28");
user_pref("extensions.crossriderapp21806.21806.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
user_pref("extensions.crossriderapp21806.21806.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/21806/plugins/094/ff/plugins.json");
user_pref("extensions.crossriderapp21806.21806.pluginsversion", 55);
user_pref("extensions.crossriderapp21806.21806.publisher", "Innovative Apps");
user_pref("extensions.crossriderapp21806.21806.searchstatus", 0);
user_pref("extensions.crossriderapp21806.21806.setnewtab", false);
user_pref("extensions.crossriderapp21806.21806.settingsurl", "");
user_pref("extensions.crossriderapp21806.21806.thankyou", "");
user_pref("extensions.crossriderapp21806.21806.updateinterval", 360);
user_pref("extensions.crossriderapp21806.21806.ver", 61);
user_pref("extensions.crossriderapp21806.apps", "21806");
user_pref("extensions.crossriderapp21806.bic", "13d5bf3b79d89eeffcf1ba0d3bfaf145");
user_pref("extensions.crossriderapp21806.cid", 21806);
user_pref("extensions.crossriderapp21806.FilesValidatorDueTime", "1396435465165");
user_pref("extensions.crossriderapp21806.firstrun", false);
user_pref("extensions.crossriderapp21806.hadappinstalled", true);
user_pref("extensions.crossriderapp21806.installationdate", 1363047332);
user_pref("extensions.crossriderapp21806.lastcheck", 22977344);
user_pref("extensions.crossriderapp21806.lastcheckitem", 22977344);
user_pref("extensions.crossriderapp21806.modetype", "production");
user_pref("extensions.crossriderapp21806.reportInstall", true);
user_pref("extensions.crossriderapp21806.statsDailyCounter", 267);
---- Lines mysearch removed from prefs.js ----
user_pref("{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}.ScriptData_WSG_temp_referer", "http://www.mysearchresults.com/?c=3513&t=07");
---- Lines defaulttab removed from prefs.js ----
user_pref("extensions.addon@defaulttab.com.install-event-fired", true);
user_pref("extensions.defaulttab.installdate", 1396353938);
user_pref("extensions.defaulttab.lastUsed", 1377607536);
user_pref("extensions.defaulttab.useNewTabWhiteList", false);
---- Lines defaulttab modified from prefs.js ----
user_pref("extensions.enabledAddons", "%7Be968fc70-8f95-4ab9-9e79-304de2a71ee1%7D:0.7.3,ffxtlbr%40babylon.com:1.5.0,%7BB17C1C5A-04B1-11DB-9804-B622A1E
---- Lines Sweet removed from prefs.js ----
user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
user_pref("sweetim.toolbar.previous.keyword.URL", "");
user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
user_pref("sweetim.toolbar.searchguard.enable", "");
user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
---- Lines smartbar removed from prefs.js ----
user_pref("smartbar.machineId", "OKMBAUY2AFEO6LO6GGYY0AWEF9G8WLGER4LT+IO2PKOEHWY9KF2MJNKN71W2JAWXUJCBYZXHLSZIX2EUBZHRSQ");
user_pref("Smartbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
---- Lines extensions.517c6abd60db5 removed from prefs.js ----
user_pref("extensions.517c6abd60db5.epoch", "1396440353");
user_pref("extensions.517c6abd60db5.url", "http://getitjpi.info/sync2/?ext=mag&pid=580&country=ME®d=130428001805&lsd=140401120504&ver=7&ind=7401453
---- Lines extensions.RbuoQTdoc removed from prefs.js ----
user_pref("extensions.RbuoQTdoc.epoch", "1396440354");
user_pref("extensions.RbuoQTdoc.url", "http://discountgetdirect.ru/sync2/?q=hfZ9oeZ4AchEAen0rchTB6lKDzt4ok8xtNtVh7n0rjnErHa7rjC9qTr7tMFHhd9Fqda9rdwFrT
---- Lines extensions.VGeP removed from prefs.js ----
user_pref("extensions.VGeP.epoch", "1396440354");
user_pref("extensions.VGeP.url", "http://driverguidemy.ru/sync2/?q=hfZ9oexIDzgMCyVUojaMg708BNmGWj8qmihGheDUojw9rdsFpdwErjwHrShIC7n0rjnEqdaFrjsEqjk5tNh
---- Lines {336D0C35-8A85-403a-B9D2-65C292C39087} removed from prefs.js ----
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.extensionFirstRun", false);
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.lastExtensionVersion", "2.0.0.474");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_installer_name", "sg_6R8D0ggWG7_active_MB179_MB180_UA-25323614-19_2012-08-24-03-06-49");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_product_name", "Web Assistant");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_product_version", "2.0.0.474");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_temp_installer_name", "sg_6R8D0ggWG7_active_MB179_MB180_UA-25323614-19_2012-08-24-03-06-4
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_toolbarID", "efd5c2c1412a45a8b3790f85240000c6");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_dailyPing", "true|||1354658990123");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_debugMode", "not set");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_gtQueryParam", "UA-25323614-19");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_inactive_by_user", "not set");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_installedPing", "true|||8641354191807315");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_lastUpdate", "1354572582705|||8641354572582706");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_redirectQueryParam1", "MB179");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_redirectQueryParam2", "MB180");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_showDialog", "not set");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_status", "active");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_temp_referer", "http://us.yhs4.search.yahoo.com/yhs/search?fr=altavista&itag=ody&q=ht
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_toolbar_query", "not set");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_upn2", "6R8D0ggWG7");
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.setdefaultsearch_2.0.0.474", false);
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.setdnscatch_2.0.0.413", false);
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.setdnscatch_2.0.0.474", false);
user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.sethomepage_2.0.0.474", false);
user_pref("extensions.{336D0C35-8A85-403a-B9D2-65C292C39087}.install-event-fired", true);
---- Lines jqs@sun.com removed from prefs.js ----
user_pref("extensions.jqs@sun.com.install-event-fired", true);
---- Lines jqs@sun.com modified from prefs.js ----
user_pref("extensions.enabledItems", "toolbar@disabled:3.3.3.123,{ce18769b-c7fa-42d2-860d-17c4662c70ad}:2.7.2.0,{6AA54174-C9E8-4B07-95A0-0FBC19CBE64C}
---- FireFox user.js and prefs.js backups ----
user_05.04.2014_1340_.backup
prefs_05.04.2014_1340_.backup
ProfilePath: C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default
---- Lines search.com removed from prefs.js ----
user_pref("browser.startup.homepage", "http://www.daemon-search.com/default");
---- Lines crossrider removed from prefs.js ----
user_pref("extensions.crossriderapp21806.adsOldValue", -1);
---- FireFox user.js and prefs.js backups ----
user_05.04.2014_1340_.backup
prefs_05.04.2014_1340_.backup
==== Batch Command(s) Run By Tool======================
==== Deleting Files \ Folders ======================
C:\Program Files\AskSBar deleted
C:\Program Files\BabylonToolbar deleted
C:\Documents and Settings\Srdjan\Application Data\BabylonToolbar deleted
C:\Program Files\Deals Plugin Extension deleted
C:\Program Files\Video Converter Ultimate deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\32bffc53f0072850 deleted
C:\Program Files\GUM3.tmp deleted
C:\Program Files\GUM66.tmp deleted
C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml deleted
C:\Program Files\Mozilla Firefox\defaults\preferences\autoconfig.js deleted
C:\Program Files\Softonic_English deleted
C:\Program Files\7plugincoupon deleted
C:\Program Files\MagniPic deleted
C:\Program Files\Avant Browser deleted
C:\Program Files\Conduit deleted
C:\Program Files\Free Download Manager deleted
C:\Program Files\DAEMON Tools Toolbar deleted
C:\Program Files\SpeedBit Video Downloader deleted
C:\Program Files\SopCast deleted
C:\Program Files\Babylon deleted
C:\Program Files\Babylon-English deleted
C:\Program Files\Internet Download Manager deleted
C:\Program Files\Wondershare deleted
C:\Program Files\Industriya deleted
C:\Program Files\Ask.com deleted
C:\Program Files\Perion deleted
C:\Program Files\SearchPredict deleted
C:\Program Files\Web Assistant deleted
C:\Documents and Settings\Srdjan\Application Data\Microsoft\Internet Explorer\Quick Launch\Search.lnk deleted
C:\Documents and Settings\Srdjan\Application Data\UserFlag.ini deleted
C:\Documents and Settings\Srdjan\Application Data\Thinstall deleted
C:\Documents and Settings\Srdjan\Application Data\Industriya deleted
C:\Documents and Settings\Srdjan\Application Data\Babylon deleted
C:\Documents and Settings\Srdjan\Application Data\DefaultTab deleted
C:\Documents and Settings\Srdjan\Application Data\GetRightToGo deleted
C:\Documents and Settings\Srdjan\Application Data\OpenCandy deleted
C:\Documents and Settings\yuser1\Application Data\Yahoo! deleted
C:\Documents and Settings\Srdjan\evkzcw.bat deleted
C:\Documents and Settings\Srdjan\qxekfye.bat deleted
C:\Documents and Settings\Srdjan\udscfux.bat deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Setting.dat deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\boost_interprocess deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MAAgniPic deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\CLSoft LTD deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SpeedBit deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\InstallMate deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Babylon deleted
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Trymedia deleted
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Babylon-English deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\check.vbs deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\crt.vbs deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\zlib1.dll deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Deals Plugin deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\eSupport.com deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\BenchUpdater deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\PackageAware deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\AskToolbar deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Babylon deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Babylon-English deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Conduit deleted
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd deleted
C:\Documents and Settings\yuser1\Local Settings\Application Data\Conduit deleted
C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\MAAgniPic deleted
C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Wondershare deleted
C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\SpeedBit Video Downloader deleted
C:\Documents and Settings\Srdjan\Start Menu\Programs\Search.lnk deleted
C:\WINDOWS\003025_.tmp deleted
C:\WINDOWS\SET3.tmp deleted
C:\WINDOWS\SET4.tmp deleted
C:\WINDOWS\SET8.tmp deleted
C:\WINDOWS\wininit.ini deleted
C:\WINDOWS\tasks\bench-S-1-5-21-1085031214-1343024091-839522115-1003.job deleted
C:\WINDOWS\tasks\bench-sys.job deleted
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job deleted
C:\user.js deleted
C:\END deleted
C:\WINDOWS\System32\ARFC deleted
C:\WINDOWS\System32\WNLT deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\babylon1.xml deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\daemon-search.xml deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\live-search.xml deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\MyStart Search.xml deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\search-here.xml deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\web-search.xml deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\ffxtlbr@babylon.com deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\valueApps deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\GoogleToolbarData deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\CT1142338 deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\CT2010429 deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\CT2443659 deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\CT2465030 deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\CT2720081 deleted
C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default\searchplugins\daemon-search.xml deleted
C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default\extensions\extension21806@extension21806.com deleted
C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default\GoogleToolbarData deleted
C:\Documents and Settings\All Users.WINDOWS\Desktop\Sothink Web Video Downloader.lnk deleted
C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} deleted
C:\Documents and Settings\Srdjan\Desktop\SRDJAN\oi_setup_aa-mp3exe.exe deleted
C:\Documents and Settings\Srdjan\Desktop\SRDJAN\just see\SoftonicDownloader_for_safari.exe deleted
C:\Documents and Settings\Srdjan\Desktop\SRDJAN\Temporary Files\SoftonicDownloader_for_freez-flv-to-mp3-converter.exe deleted
C:\Documents and Settings\Srdjan\Desktop\SRDJAN\Temporary Files\SoftonicDownloader_for_sony-vegas-video.exe deleted
C:\Documents and Settings\Srdjan\EoS-PreInstall.exe deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\{90d46c30-9f25-4104-aea9-35c3f84477ff} deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\{b88b1d29-b49c-455d-9fd2-3acd06af56b8} deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\{d3dc5de2-0384-43b1-bea5-80d202086138} deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\ffxtlbr@incredibar.com deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\ffxtlbr@privitize.com deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\conduit deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\conduitCommon deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\toolbar@ask.com deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\smartbar deleted
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\addon@defaulttab.com.xpi deleted
"C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\privitize.xml" deleted
"C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\searchplugins\conduit.xml" deleted
"C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\defaulttab.config" deleted
"C:\WINDOWS\System32\dmwu.exe" deleted
"C:\WINDOWS\system32\ImHttpComm.dll" deleted
"C:\WINDOWS\system32\dmwu.exe" deleted
"C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\eaojjjlcgbijkobckeokakahdacfbpfn\eaojjjlcgbijkobckeokakahdacfbpfn.crx" deleted
"C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\eaojjjlcgbijkobckeokakahdacfbpfn\update.xml" deleted
"C:\Documents and Settings\Srdjan\Local Settings\Application Data\Updater21806\Updater21806.exe" deleted
"C:\WINDOWS\System32\jmdp\lmrn.dll" deleted
"C:\WINDOWS\System32\jmdp\sqlite3.dll" deleted
"C:\WINDOWS\System32\jmdp\stij.exe" deleted
"C:\Program Files\Bench\BService\bhelper.dll" deleted
"C:\Program Files\Bench\BService\bservice.exe" deleted
"C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\eaojjjlcgbijkobckeokakahdacfbpfn" deleted
"C:\Documents and Settings\Srdjan\Application Data\temp" deleted
"C:\Documents and Settings\Srdjan\Application Data\DMCache" deleted
"C:\Program Files\Bench" not deleted
"C:\Documents and Settings\Srdjan\Local Settings\Application Data\Updater21806" deleted
"C:\WINDOWS\System32\jmdp" deleted
"C:\Program Files\Bench\BService" not deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"{8E9E3331-D360-4f87-8803-52DE43566502}"="C:\Program Files\Web Assistant\Firefox" []
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{8E9E3331-D360-4f87-8803-52DE43566502}"="C:\Program Files\Web Assistant\Firefox" []
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"support@easy-hide-ip.com"="C:\Program Files\Easy-Hide-IP\ff-extension" [26.01.2012 23:25]
==== Firefox Extensions ======================
ProfilePath: C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default
- Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Flash Video Downloader - Full HD Download - %ProfilePath%\extensions\artur.dubovoy@gmail.com
- TVU Web Player - %ProfilePath%\extensions\firefox@tvunetworks.com
- RapidShare DownloadHelper - %ProfilePath%\extensions\rsDownloadHelper@yevgenyandrov.net
- vShare Plugin - %ProfilePath%\extensions\vshare@toolbar
- IE Tab - %ProfilePath%\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
- kikin plugin - %ProfilePath%\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}
- DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
- Torbutton - %ProfilePath%\extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
- User Agent Switcher - %ProfilePath%\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
- Microsoft .NET Framework Assistant - %ProfilePath%\extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi
- Password Exporter - %ProfilePath%\extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi
- Fast Video Download with SearchMenu - %ProfilePath%\extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}.xpi
- Sothink Web Video Downloader for Firefox - %ProfilePath%\extensions\{FCAB6FDD-5585-425b-95C1-5ED856F3FD08}.xpi
ProfilePath: C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default
- Undetermined - %ProfilePath%\extensions\fdm_ffext@freedownloadmanager.org
- TVU Web Player - %ProfilePath%\extensions\firefox@tvunetworks.com
- Undetermined - %ProfilePath%\extensions\staged-xpis
- FlashGot - %ProfilePath%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
- PDF Download - %ProfilePath%\extensions\{37E4D8EA-8BDA-4831-8EA1-89053939A250}
- Yahoo Toolbar - %ProfilePath%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
- Megaupload Toolbar - %ProfilePath%\extensions\{991A772A-BA13-4c1d-A9EF-F897F31DEC7D}
- DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
- DownThemAll - %ProfilePath%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
AppDir: C:\Program Files\Mozilla Firefox
- Hide My IP - %AppDir%\extensions\staff@hide-my-ip.com
- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Softonic English Toolbar - %AppDir%\extensions\{930f1200-f5f1-4870-bac6-e233ec8e7023}
- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Undetermined - %AppDir%\extensions\support@daemon-tools.cc
==== Firefox Plugins ======================
Profilepath: C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default
63EE2015B877A2E472CC59E05291AA39 - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMSS.dll - McAfee Security Scanner +
C36444D7301A8C881FC7296B092609C7 - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll - Google Update
C36444D7301A8C881FC7296B092609C7 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll - Google Update
5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin
F7E72D3A281F922BACEC1A71A826D4C2 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll - Shockwave Flash
D8EBF6A12964A58C10914DA54E175538 - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.2
D8EBF6A12964A58C10914DA54E175538 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.2
6E9CE4DC2EAA92855480C9281D3AFFF5 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.2
6E9CE4DC2EAA92855480C9281D3AFFF5 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.2
29F9D1A7D3D63FD2D10CE06901475888 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.2
29F9D1A7D3D63FD2D10CE06901475888 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.2
CF758AC229C1F082F179B3F7D14EF78B - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.2
CF758AC229C1F082F179B3F7D14EF78B - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.2
629F9B5B99B80679520623655E31B5D1 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.2
629F9B5B99B80679520623655E31B5D1 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.2
65CE2E25E04D7C750BF8B30B2D34DCD7 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.2
65CE2E25E04D7C750BF8B30B2D34DCD7 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.2
2F7480A40151EB2E483CF6524EDBA3F7 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.2
2F7480A40151EB2E483CF6524EDBA3F7 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll - QuickTime Plug-in 7.7.2
C04FCB7EEBEB5097B30468828F20FB9E - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U9
C7794A997CEC29173A4401F3AE16C51F - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
711A2E6A55EC7BFD59B5F649D58B704B - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll - Silverlight Plug-In
61FAF4A10CD6A2A691A86FB9C5EDB3F7 - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll - Pando Web Plugin
4B76EFB51EC0900B6459BA0F588CE8A1 - C:\Program Files\Veetle\plugins\npVeetle.dll - Veetle TV Core
A1B2B09240361031D1D794D57FC7359C - C:\Program Files\Veetle\Player\npvlc.dll - Veetle TV Player
3D3AF7420B5B01F591163BB3CEA89877 - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
67FC9D52CE19778DD64DBB4F373D9038 - C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll - Ask Toolbar Plugin Stub
8E9A08E2092B3E1ADFF3C46BC1A5124B - C:\Program Files\TVUPlayer\npTVUAx.dll - TVU Web Player for FireFox
689B2614DE4057F7C2E1D340D279928D - C:\Program Files\Mozilla Firefox\plugins\npdeploytk.dll - Java Deployment Toolkit 6.0.160.1
3509063A268A4197CF8E713BD22B0978 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery
4C23E74EF7F99D8B07C9AA7DC087E200 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll - RealJukebox NS Plugin
29B060079A9129553E3FA75EDB8243BB - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit)
3D84A7E0CD7A1FC93EAB9F2D50E5BD9C - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll - RealPlayer Version Plugin
AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation
28000D7EEB2FD95A36E1A7539F599C3B - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM
5D41BCD19A3D90E4EBB58A6BFB79E4F7 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library
8B6884E3E1E5F8ABA5FA0C6A2B13181D - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM
73F8CD6B33887EAFA6BEEEAD93101868 - C:\Program Files\Mozilla Firefox\plugins\npkimi.dll - Imikimi.com Plugin
99F97C9FE748C37528C338A423577FCB - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin
C9C865EB0212DC5F28B934EF377E6459 - C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll - Yahoo activeX Plug-in Bridge
C289CF2DE3E7116FC21FCD0E683A485F - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll - DivX Player Netscape Plugin
C289CF2DE3E7116FC21FCD0E683A485F - C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll - DivX Player Netscape Plugin
6AB651E1CDF4F62DEE4AB61F4CEA3691 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll - DivX® Web Player
6AB651E1CDF4F62DEE4AB61F4CEA3691 - C:\Program Files\Mozilla Firefox\plugins\npdivx32.dll - DivX® Web Player
108D9340A386974336D049A41DB6D2B1 - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll - DivX® Content Upload Plugin
9A6101F29E2E9D41B99CBCC8F106E8FE - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL - 2007 Microsoft Office system
A795A7F26131D0B10F6EE75C4DE3D320 - C:\Program Files\Adobe\Reader 8.0\Reader\browser\nppdf32.dll - Adobe Acrobat
A795A7F26131D0B10F6EE75C4DE3D320 - C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll - Adobe Acrobat
4356F21FB6D547F22BFBC91164A597A6 - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll - RealNetworks Rhapsody Player Engine
21A55BABD31DA624449F06A591AE73ED - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrlui.dll - Microsoft (R) Silverlight
==== Deleted Firefox Extensions ======================
C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} deleted
C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} deleted
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bopakagnckmlgajfccecajhnimjiiedh - No path found[]
dhkplhfnhceodhffomolpfigojocbpcb - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonChrome.crx[]
dlnembnfbcpjnepmfjmngjenhhajpdfd - C:\Program Files\Web Assistant\source.crx[]
egnimkioipookhfihpljiedpgjffibpa - C:\Program Files (x86)\MyBrowserCash\MBC_chrome.crx[]
jifflliplgeajjdhmkcfnngfpgbjonjg - C:\Program Files\Perion\NewTab\newTab.crx[]
kdidombaedgpfiiedeimiebkmbilgmlc - C:\Program Files\DefaultTab\DefaultTab.crx[]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[09.10.2013 11:59]
DefaultTab - LocalService.NT AUTHORITY\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Videos Downloader - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\afnpjphnldlhnfgfkjcmpffbfieojdbo
YTO - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bdokagampppgbnjfdlkfpphniapiiifn
Sothink Flash Downloader for Chrome - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\biceobciobbhhkplgocbaigojbnepcoi
Babylon Translator - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
AllTuubeNooAds - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\eaojjjlcgbijkobckeokakahdacfbpfn
Deals Plugin - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fickfgcleonkfojnjddoccbkaliaobcf
Vimeo\u2122 Download Videos - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\geeljcibkkackafmeepgadbfgmpjmdeg
SERVER DOWN FOR MAINTENANCE - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gipagccjgllldagledholndpobccanod
New tab for Chrome\u2122 - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
DefaultTab - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Show media files - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\khbkckdkhakengfjmejmiabaakdlhaab
MultiPartTube - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lafgflilldkcacihcmgjpmadpabgkooe
Downloader - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp
Skype Click to Call - Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
==== Chrome Fix ======================
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_log.incredibar-search.com_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_log.incredibar-search.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_mystart.incredibar.com_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_mystart.incredibar.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.incredibar.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.incredibar-search.com_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.incredibar-search.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.babylon.com_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_www.babylon.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_b.scorecardresearch.com_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_b.scorecardresearch.com_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg deleted successfully
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kdidombaedgpfiiedeimiebkmbilgmlc_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kdidombaedgpfiiedeimiebkmbilgmlc_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\eaojjjlcgbijkobckeokakahdacfbpfn deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eaojjjlcgbijkobckeokakahdacfbpfn_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eaojjjlcgbijkobckeokakahdacfbpfn_0.localstorage-journal deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fickfgcleonkfojnjddoccbkaliaobcf deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fickfgcleonkfojnjddoccbkaliaobcf_0.localstorage deleted successfully
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fickfgcleonkfojnjddoccbkaliaobcf_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.mysearchresults.com/?c=3513&t=01"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC"
{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Unknown Url="Not_Found"
{33524C00-63FB-43DB-A6BF-0A4E14B24649} BasicScan Url="http://www.basicscan.com/?prt=BscscnPB&keywords={searchTerms}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
{DA4BB562-0F6F-489D-96FB-9CFF15967118} Live Search Url="http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC"
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3017FB3E-9A77-4396-88C5-0EC9548FB42F} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3017FB3E-9A77-4396-88C5-0EC9548FB42F} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{91435A04-ED7F-F528-55B0-A1B32D234BE5} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{91435A04-ED7F-F528-55B0-A1B32D234BE5} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FF7C3CF0-4B15-11D1-ABED-709549C10000} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF7C3CF0-4B15-11D1-ABED-709549C10000} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{3017FB3E-9A77-4396-88C5-0EC9548FB42F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3017FB3E-9A77-4396-88C5-0EC9548FB42F} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{91435A04-ED7F-F528-55B0-A1B32D234BE5} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{91435A04-ED7F-F528-55B0-A1B32D234BE5} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{FF7C3CF0-4B15-11D1-ABED-709549C10000} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FF7C3CF0-4B15-11D1-ABED-709549C10000} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_USERS\S-1-5-21-1085031214-1343024091-839522115-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{930f1200-f5f1-4870-bac6-e233ec8e7023} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0329E7D6-6F54-462D-93F6-F5C3118BADF2} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ce18769b-c7fa-42d2-860d-17c4662c70ad} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052} deleted successfully
HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{8E9E3331-D360-4f87-8803-52DE43566502} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{8E9E3331-D360-4f87-8803-52DE43566502} deleted successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7244E4C9-4DBC-4322-A1C9-059EA9A7C63F} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7251C788-FB74-7A9D-2B4F-9D60E64420EE} deleted successfully
HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\egnimkioipookhfihpljiedpgjffibpa deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Deals Plugin Extension deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoogleVideoPlayer deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F16247B8-CD07-40C4-8C96-FC2568G29E8F}}_is1 deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_English Toolbar deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WNLT deleted successfully
==== Empty IE Cache ======================
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\yuser1\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\Srdjan\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Cache emptied successfully
C:\Documents and Settings\yuser1\Local Settings\Application Data\Mozilla\Firefox\Profiles\78a867m5.default\Cache emptied successfully
C:\Documents and Settings\yuser1\Application Data\Mozilla\Firefox\Profiles\78a867m5.default\extensions\{991A772A-BA13-4c1d-A9EF-F897F31DEC7D}\cache emptied successfully
==== Empty Chrome Cache ======================
C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=5105 folders=972 376639461 bytes)
==== Empty Temp Folders ======================
C:\Documents and Settings\Administrator\Local Settings\temp emptied successfully
C:\Documents and Settings\Administrator.SRDJAN-2651065A\Local Settings\temp emptied successfully
C:\Documents and Settings\Default User\Local Settings\temp emptied successfully
C:\Documents and Settings\Default User.WINDOWS\Local Settings\temp emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temp emptied successfully
C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\temp emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temp emptied successfully
C:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\temp emptied successfully
C:\Documents and Settings\Srdjan\Local Settings\temp will be emptied at reboot
C:\Documents and Settings\yuser1\Local Settings\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Srdjan\LOCALS~1\Temp successfully emptied
==== Deleting Files / Folders ======================
"C:\WINDOWS\System32\dmwu.exesearch" not found
"C:\WINDOWS\system32\ImHttpComm.dllsearch" not found
"C:\WINDOWS\system32\dmwu.exesearch" not found
"C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Documents and Settings\Srdjan\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Program Files\Bench" not found
==== EOF on sub 05.04.2014 at 13:56:13.09 ======================
restartovao se na kraj i kad se podigo windows izbacio je:
Can not find script file "C:\Documents and settings\Srdjan\Local Settings\Application Data\Deals Plugin\repair.js
sad cu i drugi dio
Dopuna: 05 Apr 2014 14:13
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by Srdjan (administrator) on SRDJAN-2651065A on 05-04-2014 14:10:18
Running from C:\Documents and Settings\Srdjan\Desktop
Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\BBSvc.exe
(Hagel Technologies Ltd.) C:\Program Files\DU Meter\DUMeterSvc.exe
() C:\WINDOWS\system32\PnkBstrA.exe
() C:\WINDOWS\system32\PnkBstrB.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users.WINDOWS\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
() C:\Program Files\Telenor Internet\BackgroundService\ServiceManager.exe
() C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe
(Microsoft Corporation) C:\WINDOWS\system32\WgaTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(RealNetworks, Inc.) C:\Program Files\Common Files\Real\Update_OB\realsched.exe
(Nokia) C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
(Nokia.) C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
(Nokia Mobile Phones Ltd.) C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
(Nuance Communications, Inc.) C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
(Cyberlink Corp.) C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(NewSoft Technology Corporation) C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
() C:\Program Files\T-Mobile Internet Manager\UIExec.exe
(Apple Inc.) C:\Program Files\QuickTime\QTTask.exe
() C:\Program Files\Telenor Internet\BackgroundService\ModemListener.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Time Information Services Ltd.) C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
() C:\Program Files\Hide My IP 2008\SecureSrv.exe
(Nokia Corporation) C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
() C:\Program Files\MCShield\MCShieldRTM.exe
(Hagel Technologies Ltd.) C:\Program Files\DU Meter\DUMeter.exe
() C:\Program Files\MCShield\MCShieldTray.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
() C:\Program Files\WinAlarm\WinAlarm.exe
(ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\USB-N10 WLAN Card Utilities\Wireless.exe
(Google Inc.) C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.exe
(Google Inc.) C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16380416 2007-07-06] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TkBellExe] - C:\Program Files\Common Files\Real\Update_OB\realsched.exe [185896 2008-12-26] (RealNetworks, Inc.)
HKLM\...\Run: [PCSuiteTrayApplication] - C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe [167936 2005-03-22] (Nokia)
HKLM\...\Run: [DataLayer] - C:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe [1106944 2005-03-31] (Nokia Mobile Phones Ltd.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-04-03] (CANON INC.)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [1603152 2007-04-03] (CANON INC.)
HKLM\...\Run: [SSBkgdUpdate] - C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM\...\Run: [OpwareSE4] - C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [13529088 2008-05-03] (NVIDIA Corporation)
HKLM\...\Run: [nwiz] - nwiz.exe /install
HKLM\...\Run: [WinSys2] - C:\WINDOWS\system32\winsys2.exe [208896 2008-01-18] ()
HKLM\...\Run: [NvMediaCenter] - C:\WINDOWS\system32\NvMcTray.dll [86016 2008-05-03] (NVIDIA Corporation)
HKLM\...\Run: [RemoteControl] - C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe [32768 2003-11-01] (Cyberlink Corp.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [Smart Start UP] - C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe [104528 2006-12-19] (NewSoft Technology Corporation)
HKLM\...\Run: [Malwarebytes Anti-Malware (reboot)] - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [1047208 2011-08-31] (Malwarebytes Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [NeroCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [Aimersoft Helper Compact.exe] - C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [1666560 2012-02-20] (AimerSoft)
HKLM\...\Run: [UnlockerAssistant] - C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [UIExec] - C:\Program Files\T-Mobile Internet Manager\UIExec.exe [136328 2010-03-02] ()
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59240 2012-02-20] (Apple Inc.)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-04-18] (Apple Inc.)
HKLM\...\Run: [Telenor_Montenegro Imola ModemListener] - C:\Program Files\Telenor Internet\BackgroundService\ModemListener.exe [109120 2012-03-14] ()
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-03-06] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [BService] - C:\Program Files\Bench\BService\bservice.exe
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [PcSync] - C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [847872 2005-04-20] (Time Information Services Ltd.)
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [AlcoholAutomount] - C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [203928 2009-04-24] (Alcohol Soft Development Team)
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [DU Meter] - C:\Program Files\DU Meter\DUMeter.exe [2931744 2010-08-22] (Hagel Technologies Ltd.)
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [MCShield] - C:\Program Files\MCShield\MCShieldRTM.exe [262144 2011-03-26] ()
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [MCShieldTray] - C:\Program Files\MCShield\MCShieldTray.exe [73728 2010-11-04] ()
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [Updater21806.exe] - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Updater21806\Updater21806.exe /extensionid=21806 /extensionname='Deals Plugin Extension' /chromeid=bbhgoadfgiandmaieopaphefbhcdpfaf /stayidle /delay=300
HKU\S-1-5-21-1085031214-1343024091-839522115-1003\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18705664 2013-01-08] (Skype Technologies S.A.)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
ShortcutTarget: Adobe Reader Synchronizer.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Internet Bilo Gdje.lnk
ShortcutTarget: Internet Bilo Gdje.lnk -> C:\Program Files\Internet Bilo Gdje\Internet Bilo Gdje\Internet Bilo Gdje.exe (Promonte GSM)
Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
ShortcutTarget: Adobe Reader Speed Launch.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
ShortcutTarget: Adobe Reader Synchronizer.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()
Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\ASUS USB-N10 WLAN Control Center.lnk
ShortcutTarget: ASUS USB-N10 WLAN Control Center.lnk -> C:\Program Files\ASUS\USB-N10 WLAN Card Utilities\Center.exe (ASUSTeK COMPUTER INC.)
Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Startup\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\Srdjan\Start Menu\Programs\Startup\Shortcut to WinAlarm.lnk
ShortcutTarget: Shortcut to WinAlarm.lnk -> C:\Program Files\WinAlarm\WinAlarm.exe ()
Startup: C:\Documents and Settings\Srdjan\Start Menu\Programs\Startup\Yahoo! Widgets.lnk
ShortcutTarget: Yahoo! Widgets.lnk -> C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe (Yahoo! Inc.)
Startup: C:\Documents and Settings\yuser1\Start Menu\Programs\Startup\OpenOffice.org 2.2.lnk
ShortcutTarget: OpenOffice.org 2.2.lnk -> C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKCU - SrchHook Class - {F4F10C1D-87C7-404A-B4B3-000000000000} - C:\Program Files\DAP\SBSearch.dll (SpeedBit Ltd.)
URLSearchHook: HKCU - mipony-plugin Toolbar - {90d46c30-9f25-4104-aea9-35c3f84477ff} - C:\Program Files\mipony-plugin\prxtbmip0.dll (Conduit Ltd.)
SearchScopes: HKCU - {33524C00-63FB-43DB-A6BF-0A4E14B24649} URL = basicscan.com/?prt=BscscnPB&keywords={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: FGCatchUrl - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll (www.flashget.com)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live pomagač za prijavljivanje - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: mipony-plugin Toolbar - {90d46c30-9f25-4104-aea9-35c3f84477ff} - C:\Program Files\mipony-plugin\prxtbmip0.dll (Conduit Ltd.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\Program Files\DAP\dapieloader.dll (SpeedBit Ltd.)
Toolbar: HKLM - mipony-plugin Toolbar - {90d46c30-9f25-4104-aea9-35c3f84477ff} - C:\Program Files\mipony-plugin\prxtbmip0.dll (Conduit Ltd.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - mipony-plugin Toolbar - {90D46C30-9F25-4104-AEA9-35C3F84477FF} - C:\Program Files\mipony-plugin\prxtbmip0.dll (Conduit Ltd.)
DPF: {17492023-C23A-453E-A040-C7C580BBF700} go.microsoft.com/fwlink/?linkid=39204
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll
DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} dl.tvunetworks.com/TVUAx.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
Handler: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\WINDOWS\system32\securenet.dll [151552] ()
Winsock: Catalog9 02 C:\WINDOWS\system32\securenet.dll [151552] ()
Winsock: Catalog9 03 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 04 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Winsock: Catalog9 10 C:\WINDOWS\system32\securenet.dll [151552] ()
Winsock: Catalog9 25 C:\Program Files\Avira\AntiVir Desktop\avsda.dll [257608] (Avira Operations GmbH & Co. KG)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF NetworkProxy: "backup.ftp", "174.142.104.57:3128"
FF NetworkProxy: "backup.ftp_port", 43
FF NetworkProxy: "backup.gopher", "174.142.104.57:3128"
FF NetworkProxy: "backup.gopher_port", 43
FF NetworkProxy: "backup.socks", "174.142.104.57:3128"
FF NetworkProxy: "backup.socks_port", 43
FF NetworkProxy: "backup.ssl", "174.142.104.57:3128"
FF NetworkProxy: "backup.ssl_port", 43
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks_version", 4
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Content Upload Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @live.heroesandgenerals.com/npretox - C:\Program Files\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=1.0.3.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.0 - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 - C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll (Yahoo! Inc.)
FF Plugin HKCU: @real.com/RhapsodyPlayerEngine - C:\Documents and Settings\Srdjan\Application Data\nprhapengine.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: @yahoo.com/BrowserPlus,version=2.4.21 - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Yahoo!\BrowserPlus\2.4.21\Plugins\npybrowserplus_2.4.21.dll (Yahoo! Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPAskSBr.dll (Ask.com)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeploytk.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdivx32.dll (DivX,Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npkimi.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npyaxmpb.dll (Yahoo! Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\zwangie127.xml
FF Extension: Flash Video Downloader - Full HD Download - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\artur.dubovoy@gmail.com [2014-04-01]
FF Extension: TVU Web Player - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\firefox@tvunetworks.com [2010-05-22]
FF Extension: RapidShare DownloadHelper - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\rsDownloadHelper@yevgenyandrov.net [2010-05-22]
FF Extension: vShare Plugin - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\vshare@toolbar [2010-08-29]
FF Extension: IE Tab - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9} [2013-05-08]
FF Extension: DownloadHelper - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-01]
FF Extension: Torbutton - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca} [2010-05-21]
FF Extension: User Agent Switcher - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1} [2012-11-29]
FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-12-13]
FF Extension: Password Exporter - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2013-02-12]
FF Extension: Fast Video Download (with SearchMenu) - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{c50ca3c4-5656-43c2-a061-13e717f73fc8}.xpi [2012-12-13]
FF Extension: Sothink Web Video Downloader for Firefox - C:\Documents and Settings\Srdjan\Application Data\Mozilla\Firefox\Profiles\0vat2lnb.default\Extensions\{FCAB6FDD-5585-425b-95C1-5ED856F3FD08}.xpi [2012-12-13]
FF Extension: Hide My IP - C:\Program Files\Mozilla Firefox\extensions\staff@hide-my-ip.com [2013-03-08]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-11-20]
FF Extension: Softonic English Toolbar - C:\Program Files\Mozilla Firefox\extensions\{930f1200-f5f1-4870-bac6-e233ec8e7023} [2013-03-08]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-11-20]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Program Files\Real\RealPlayer\browserrecord
FF Extension: RealPlayer Browser Record Plugin - C:\Program Files\Real\RealPlayer\browserrecord [2008-12-26]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile Internet Manager\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile Internet Manager\addon [2012-09-17]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKCU\...\Firefox\Extensions: [{F17C1572-C9EC-4e5c-A542-D05CBB5C5A08}] - C:\Program Files\DAP\DAPFireFox
FF Extension: Download Accelerator Plus (DAP) extension - C:\Program Files\DAP\DAPFireFox [2010-04-24]
FF HKCU\...\Firefox\Extensions: [support@easy-hide-ip.com] - C:\Program Files\Easy-Hide-IP\ff-extension
FF Extension: No Name - C:\Program Files\Easy-Hide-IP\ff-extension [2010-05-26]
Chrome:
=======
CHR Extension: (Google Docs) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-04]
CHR Extension: (Google Drive) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-04]
CHR Extension: (YouTube) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-17]
CHR Extension: (Google Search) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-17]
CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2013-11-20]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-17]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
CHR StartMenuInternet: Google Chrome - C:\Documents and Settings\Srdjan\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
========================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-03-06] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-03-06] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-03-06] (Avira Operations GmbH & Co. KG)
R2 DUMeterSvc; C:\Program Files\DU Meter\DUMeterSvc.exe [1411616 2010-08-19] (Hagel Technologies Ltd.)
S2 gupdate1c9ccd72fb9a3e0; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-05-04] (Google Inc.)
S3 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [97432 2007-04-13] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [235696 2014-01-16] (McAfee, Inc.)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [75064 2011-11-23] ()
R2 PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [214520 2012-11-26] ()
R3 SecureSrv; C:\Program Files\Hide My IP 2008\SecureSrv.exe [110880 2008-09-05] ()
R2 Skype C2C Service; C:\Documents and Settings\All Users.WINDOWS\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
R2 Telenor_Montenegro Imola Modem Device Helper; C:\Program Files\Telenor Internet\BackgroundService\ServiceManager.exe [53312 2012-03-14] ()
R2 UI Assistant Service; C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe [245384 2010-03-02] ()
S2 JavaQuickStarterService; "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
S2 NVSvc; %SystemRoot%\system32\nvsvc32.exe [X]
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S2 VideoAcceleratorService; C:\PROGRA~1\SPEEDB~2\VideoAcceleratorService.exe -start -scm [X]
==================== Drivers (Whitelisted) ====================
R2 AegisP; C:\WINDOWS\System32\DRIVERS\AegisP.sys [21361 2014-02-17] (Cisco Systems, Inc.)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2010-04-26] ()
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [90400 2014-02-22] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [135648 2014-02-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2014-02-22] (Avira Operations GmbH & Co. KG)
R3 bbcap; C:\WINDOWS\System32\DRIVERS\bbcap.sys [4096 2009-11-08] (Windows (R) Codename Longhorn DDK provider)
S3 BTCAMDRV; C:\WINDOWS\System32\DRIVERS\BTCamDrv.sys [219264 2006-11-01] (Windows (R) 2000 DDK provider)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [16384 2004-07-09] (Microsoft Corporation)
S3 cpuz134; C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
R3 DUMeterDrv; C:\Program Files\DU Meter\DUM_XP32.SYS [16424 2010-08-19] (Hagel Technologies Ltd.)
R2 EAPPkt; C:\WINDOWS\System32\DRIVERS\EAPPkt.sys [38144 2011-08-01] (Realtek)
S3 hamachi; C:\WINDOWS\System32\DRIVERS\hamachi.sys [25280 2010-05-09] (LogMeIn, Inc.)
R0 imagedrv; C:\WINDOWS\System32\Drivers\imagedrv.sys [5504 2004-03-03] (Ahead Software AG)
R0 imagesrv; C:\WINDOWS\System32\DRIVERS\imagesrv.sys [125184 2004-03-03] (Ahead Software AG)
S3 jrdusbser; C:\WINDOWS\System32\DRIVERS\jrdusbser.sys [106112 2011-06-20] (TCT International Mobile Ltd)
S3 leafnets; C:\WINDOWS\System32\DRIVERS\leafnets.sys [55296 2007-05-03] (Leaf Networks)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2010-04-26] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10112 2004-07-09] (Microsoft Corporation)
R2 NetProbe; C:\WINDOWS\System32\DRIVERS\netprobe.sys [5365 2009-03-24] ()
S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2008-04-14] (Microsoft Corporation)
S3 Nokia USB Generic; C:\WINDOWS\System32\drivers\nmwcdc.sys [6300 2005-02-15] (Nokia)
S3 Nokia USB Modem; C:\WINDOWS\System32\drivers\nmwcdcm.sys [9021 2005-02-15] (Nokia)
S3 Nokia USB Phone Parent; C:\WINDOWS\System32\drivers\nmwcd.sys [140619 2005-02-17] (Nokia)
R2 PCASp50; C:\WINDOWS\System32\Drivers\PCASp50.sys [27072 2011-08-01] (Printing Communications Assoc., Inc. (PCAUSA))
R1 prodrv06; C:\WINDOWS\System32\drivers\prodrv06.sys [53920 2004-08-09] (Protection Technology)
R0 prohlp02; C:\WINDOWS\System32\drivers\prohlp02.sys [114016 2004-08-09] (Protection Technology)
S3 qcusbser; C:\WINDOWS\System32\DRIVERS\cmusbser.sys [97408 2007-10-16] (Mobile Connector)
R0 sfhlp01; C:\WINDOWS\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [717296 2011-12-06] ()
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2014-02-22] (Avira GmbH)
S3 ASFWHide; \??\C:\DOCUME~1\Srdjan\LOCALS~1\Temp\ASFWHide [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS [X]
S4 IntelIde; No ImagePath
S3 NTACCESS; \??\E:\NTACCESS.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 SetupNTGLM7X; \??\E:\NTGLM7X.sys [X]
S3 StarOpen; No ImagePath
S3 WPRO_40_1123; system32\drivers\WPRO_40_1123.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-05 14:10 - 2014-04-05 14:10 - 00035284 _____ () C:\Documents and Settings\Srdjan\Desktop\FRST.txt
2014-04-05 14:09 - 2014-04-05 14:10 - 01145856 _____ () C:\Documents and Settings\Srdjan\Desktop\FRST_1.exe.dap
2014-04-05 14:08 - 2014-04-05 14:10 - 00000000 ____D () C:\FRST
2014-04-05 14:07 - 2014-04-05 14:07 - 01145856 _____ (Farbar) C:\Documents and Settings\Srdjan\Desktop\FRST.exe
2014-04-05 14:07 - 2014-04-05 14:07 - 00002721 _____ () C:\ADS12.tmp
2014-04-05 14:07 - 2014-04-05 14:07 - 00001065 _____ () C:\ZAU16.tmp
2014-04-05 14:07 - 2014-04-05 14:07 - 00000442 _____ () C:\ZAF19.tmp
2014-04-05 14:07 - 2014-04-05 14:07 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\Speedbit
2014-04-05 13:53 - 2014-02-13 23:59 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-04-05 13:25 - 2014-04-05 13:56 - 00154980 _____ () C:\zoek-results.log
2014-04-05 13:12 - 2014-04-05 13:48 - 00000000 ____D () C:\zoek_backup
2014-04-05 13:12 - 2014-03-08 11:05 - 01414742 _____ () C:\Documents and Settings\Srdjan\Desktop\zoek.scr
2014-04-05 13:12 - 2014-03-08 11:05 - 01414742 _____ () C:\Documents and Settings\Srdjan\Desktop\zoek.pif
2014-04-05 13:12 - 2014-03-08 11:05 - 01414742 _____ () C:\Documents and Settings\Srdjan\Desktop\zoek.com
2014-04-04 14:59 - 2014-04-04 14:59 - 00169207 _____ () C:\ComboFix.txt
2014-04-04 14:17 - 2014-04-04 14:17 - 00000000 _RSHD () C:\cmdcons
2014-04-04 14:17 - 2012-10-07 00:14 - 00000345 _____ () C:\Boot.bak
2014-04-04 14:17 - 2004-08-03 23:00 - 00260272 __RSH () C:\cmldr
2014-04-04 14:13 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2014-04-04 14:13 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2014-04-04 14:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2014-04-04 14:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2014-04-04 14:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2014-04-04 14:13 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2014-04-04 14:13 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2014-04-04 14:13 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2014-04-04 14:13 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2014-04-04 14:12 - 2014-04-04 14:59 - 00000000 ____D () C:\Qoobox
2014-04-04 14:09 - 2014-04-04 14:11 - 05193944 ____R (Swearware) C:\Documents and Settings\Srdjan\Desktop\ComboFix.exe
2014-04-04 14:08 - 2014-04-04 14:09 - 05193944 _____ () C:\Documents and Settings\Srdjan\Desktop\ComboFix.exe.dap
2014-04-04 13:20 - 2014-04-04 13:20 - 00036121 _____ () C:\Documents and Settings\Srdjan\Desktop\dds.txt
2014-04-04 13:20 - 2014-04-04 13:20 - 00018408 _____ () C:\Documents and Settings\Srdjan\Desktop\attach.txt
2014-04-04 13:17 - 2014-04-04 13:18 - 00688992 ____R (Swearware) C:\Documents and Settings\Srdjan\Desktop\dds.scr
2014-03-23 20:29 - 2014-03-23 20:39 - 00000000 ____D () C:\Documents and Settings\Srdjan\Desktop\france songs
2014-03-11 19:16 - 2014-03-19 21:02 - 00000000 ____D () C:\Documents and Settings\Srdjan\Desktop\UPR
2014-03-11 19:05 - 2014-03-11 19:05 - 00033138 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_1_Zadatak_2.xlsx
2014-03-11 19:05 - 2014-03-11 19:05 - 00029738 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_1_Zadatak_1.xlsx
2014-03-11 18:57 - 2014-03-11 18:57 - 00043788 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_2_Zadatak1.xlsx
2014-03-11 18:57 - 2014-03-11 18:57 - 00036738 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_2_Zadatak_2.xlsx
2014-03-11 18:53 - 2014-03-11 18:53 - 00099470 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_3_Zadatak2.xlsx
2014-03-06 19:47 - 2014-03-06 20:48 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\DeAelExpREss
==================== One Month Modified Files and Folders =======
2014-04-05 14:10 - 2014-04-05 14:10 - 00035284 _____ () C:\Documents and Settings\Srdjan\Desktop\FRST.txt
2014-04-05 14:10 - 2014-04-05 14:09 - 01145856 _____ () C:\Documents and Settings\Srdjan\Desktop\FRST_1.exe.dap
2014-04-05 14:10 - 2014-04-05 14:08 - 00000000 ____D () C:\FRST
2014-04-05 14:07 - 2014-04-05 14:07 - 01145856 _____ (Farbar) C:\Documents and Settings\Srdjan\Desktop\FRST.exe
2014-04-05 14:07 - 2014-04-05 14:07 - 00002721 _____ () C:\ADS12.tmp
2014-04-05 14:07 - 2014-04-05 14:07 - 00001065 _____ () C:\ZAU16.tmp
2014-04-05 14:07 - 2014-04-05 14:07 - 00000442 _____ () C:\ZAF19.tmp
2014-04-05 14:07 - 2014-04-05 14:07 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\Speedbit
2014-04-05 13:58 - 2011-07-26 21:43 - 00000000 ____D () C:\Documents and Settings\Srdjan\Application Data\MCShield
2014-04-05 13:58 - 2009-10-09 11:22 - 00000000 ____D () C:\Documents and Settings\Srdjan\Application Data\Skype
2014-04-05 13:58 - 2009-01-23 01:06 - 00000104 _____ () C:\WINDOWS\system32\nvapps.xml
2014-04-05 13:58 - 2009-01-20 23:06 - 00845156 _____ () C:\WINDOWS\system32\SecureSrv.log
2014-04-05 13:56 - 2014-04-05 13:25 - 00154980 _____ () C:\zoek-results.log
2014-04-05 13:56 - 2009-07-01 01:21 - 00000882 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-05 13:56 - 2008-12-20 09:31 - 01326745 _____ () C:\WINDOWS\WindowsUpdate.log
2014-04-05 13:56 - 2004-08-04 03:07 - 00002228 _____ () C:\WINDOWS\system32\wpa.dbl
2014-04-05 13:55 - 2009-11-08 20:29 - 00000031 _____ () C:\WINDOWS\system32\bbcap.err
2014-04-05 13:55 - 2008-12-20 09:37 - 00000278 ___SH () C:\Documents and Settings\Srdjan\ntuser.ini
2014-04-05 13:55 - 2008-12-20 09:36 - 00032620 _____ () C:\WINDOWS\SchedLgU.Txt
2014-04-05 13:55 - 2008-12-20 09:36 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-04-05 13:55 - 2008-12-20 01:23 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-04-05 13:55 - 2008-12-20 01:23 - 00000048 _____ () C:\WINDOWS\wiaservc.log
2014-04-05 13:48 - 2014-04-05 13:12 - 00000000 ____D () C:\zoek_backup
2014-04-05 13:45 - 2013-05-17 03:09 - 00000000 ____D () C:\Documents and Settings\Srdjan\Desktop\SRDJAN
2014-04-05 13:45 - 2008-12-20 09:37 - 00000000 ____D () C:\Documents and Settings\Srdjan
2014-04-05 13:44 - 2008-04-21 21:23 - 00000000 ____D () C:\Program Files\Yahoo!
2014-04-05 13:24 - 2009-07-01 01:21 - 00000886 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-04-05 13:23 - 2010-02-04 14:50 - 00001016 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1343024091-839522115-1003UA.job
2014-04-04 14:59 - 2014-04-04 14:59 - 00169207 _____ () C:\ComboFix.txt
2014-04-04 14:59 - 2014-04-04 14:12 - 00000000 ____D () C:\Qoobox
2014-04-04 14:47 - 2004-08-04 03:07 - 00000284 _____ () C:\WINDOWS\system.ini
2014-04-04 14:46 - 2008-12-20 01:18 - 00262144 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2014-04-04 14:46 - 2008-12-20 01:18 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.bak
2014-04-04 14:46 - 2008-12-20 01:17 - 44826624 _____ () C:\WINDOWS\system32\config\software.bak
2014-04-04 14:46 - 2008-12-20 01:17 - 08912896 _____ () C:\WINDOWS\system32\config\system.bak
2014-04-04 14:46 - 2008-12-20 01:17 - 00524288 _____ () C:\WINDOWS\system32\config\default.bak
2014-04-04 14:44 - 2011-07-27 20:42 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-04-04 14:43 - 2011-07-26 23:29 - 00000000 ____D () C:\WINDOWS\ERDNT
2014-04-04 14:26 - 2007-10-25 17:40 - 00000000 ____D () C:\WINDOWS\system32\Restore
2014-04-04 14:17 - 2014-04-04 14:17 - 00000000 _RSHD () C:\cmdcons
2014-04-04 14:17 - 2007-10-25 19:25 - 00000461 __RSH () C:\boot.ini
2014-04-04 14:11 - 2014-04-04 14:09 - 05193944 ____R (Swearware) C:\Documents and Settings\Srdjan\Desktop\ComboFix.exe
2014-04-04 14:09 - 2014-04-04 14:08 - 05193944 _____ () C:\Documents and Settings\Srdjan\Desktop\ComboFix.exe.dap
2014-04-04 13:26 - 2013-04-24 01:31 - 00001108 __RSH () C:\Documents and Settings\Srdjan\ntuser.pol
2014-04-04 13:20 - 2014-04-04 13:20 - 00036121 _____ () C:\Documents and Settings\Srdjan\Desktop\dds.txt
2014-04-04 13:20 - 2014-04-04 13:20 - 00018408 _____ () C:\Documents and Settings\Srdjan\Desktop\attach.txt
2014-04-04 13:18 - 2014-04-04 13:17 - 00688992 ____R (Swearware) C:\Documents and Settings\Srdjan\Desktop\dds.scr
2014-04-04 13:11 - 2011-11-20 15:51 - 00683978 _____ () C:\WINDOWS\setupapi.log
2014-04-03 15:23 - 2010-02-04 14:50 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1343024091-839522115-1003Core.job
2014-04-02 12:43 - 2013-03-08 15:04 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-04-01 20:42 - 2010-04-24 02:05 - 00000000 ____D () C:\Documents and Settings\Srdjan\Application Data\vlc
2014-03-30 11:00 - 2008-12-20 01:19 - 00605412 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-03-27 23:52 - 2008-12-26 08:07 - 00000284 _____ () C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2014-03-23 20:39 - 2014-03-23 20:29 - 00000000 ____D () C:\Documents and Settings\Srdjan\Desktop\france songs
2014-03-23 20:28 - 2008-12-20 09:28 - 00094815 _____ () C:\WINDOWS\wmsetup.log
2014-03-22 22:23 - 2008-09-13 17:32 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2014-03-22 22:23 - 2007-10-25 17:39 - 00000000 ____D () C:\WINDOWS\Registration
2014-03-22 21:01 - 2012-11-29 17:17 - 00000000 ____D () C:\Documents and Settings\Srdjan\.3gpplayer
2014-03-19 21:02 - 2014-03-11 19:16 - 00000000 ____D () C:\Documents and Settings\Srdjan\Desktop\UPR
2014-03-12 02:35 - 2008-12-26 10:12 - 00000000 ____D () C:\Documents and Settings\Srdjan\Local Settings\Application Data\Paint.NET
2014-03-11 20:05 - 2014-02-03 20:16 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\Accelesys
2014-03-11 19:05 - 2014-03-11 19:05 - 00033138 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_1_Zadatak_2.xlsx
2014-03-11 19:05 - 2014-03-11 19:05 - 00029738 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_1_Zadatak_1.xlsx
2014-03-11 18:57 - 2014-03-11 18:57 - 00043788 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_2_Zadatak1.xlsx
2014-03-11 18:57 - 2014-03-11 18:57 - 00036738 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_2_Zadatak_2.xlsx
2014-03-11 18:53 - 2014-03-11 18:53 - 00099470 _____ () C:\Documents and Settings\Srdjan\Desktop\Modul_3_Zadatak2.xlsx
2014-03-09 20:09 - 2008-12-20 09:37 - 00116736 _____ () C:\Documents and Settings\Srdjan\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-08 11:05 - 2014-04-05 13:12 - 01414742 _____ () C:\Documents and Settings\Srdjan\Desktop\zoek.scr
2014-03-08 11:05 - 2014-04-05 13:12 - 01414742 _____ () C:\Documents and Settings\Srdjan\Desktop\zoek.pif
2014-03-08 11:05 - 2014-04-05 13:12 - 01414742 _____ () C:\Documents and Settings\Srdjan\Desktop\zoek.com
2014-03-06 20:48 - 2014-03-06 19:47 - 00000000 ____D () C:\Documents and Settings\All Users.WINDOWS\Application Data\DeAelExpREss
Files to move or delete:
====================
C:\Documents and Settings\yuser1\USERDATA.DAT
Some content of TEMP:
====================
C:\Documents and Settings\Srdjan\Local Settings\Temp\avgnt.exe
==================== Bamital & volsnap Check =================
C:\WINDOWS\explorer.exe => MD5 is legit
C:\WINDOWS\system32\winlogon.exe => MD5 is legit
C:\WINDOWS\system32\svchost.exe => MD5 is legit
C:\WINDOWS\system32\services.exe => MD5 is legit
C:\WINDOWS\system32\User32.dll => MD5 is legit
C:\WINDOWS\system32\userinit.exe => MD5 is legit
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\volsnap.sys => MD5 is legit
==================== End Of Log ============================
Dopuna: 05 Apr 2014 14:14
mycity.rs/must-login.png
Dopuna: 07 Apr 2014 13:40
Jesam ja nesto propustio pa se ceka ili ste zauzeti?
|
Kada preuzimanje programa bude završeno:
Preuzmi 
) sa 
dugme i 
Kopiraj sadrzaj tog loga u poruku.
) sa ove adrese na 
